acccheckui.exe

  • File Path: C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\AccChecker\acccheckui.exe
  • Description: UI Accessibility Checker

Hashes

Type Hash
MD5 6F76505258D5A526B9E57C762BC9B5C9
SHA1 2DDA90F87959971CC2C53A8F7F074672C1E8D8DC
SHA256 CB1352EF00F31D64F3A8FD2E0510E75911E8136C5BC2FB8512505B47F7ED3D50
SHA384 BF1E66B2D5CC019A2F4726D105C08C190FC3C64DE1A0480811F6EA963F5D1DDCF524AA0953AC2C34FF71D598991E6BF5
SHA512 A92379F3880D9EF5D5869CD7A960EB221D4502003346B8361B3AEC2E3B6DB2AEAD7E4515E36B42510DFA4DE63EA929E02B74D48DD0DFBAE008BC90029AAC8E31
SSDEEP 3072:uoG0eEey3LrG/HhLyIEWJYetCSZaPh6uEPl4iGo+XzDhPzpi4K/Q5:uo5933UBbEWJYetCqC
IMP F34D5F2D4577ED6D9CEEC516C1F5A744
PESHA1 4396F192B66F3101B105D85B620981EE05C06BAA
PE256 337CEDE7832E570973C8F145B27C20B47D38A8BDF894FFA00EA191E9344DB862

Runtime Data

Child Processes:

Fondue.exe

Open Handles:

Path Type
(R-D) C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\AccChecker\AccCheck.dll File
(R-D) C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\AccChecker\Microsoft.Diagnostics.Tracing.EventSource.dll File
(R-D) C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\AccChecker\UIAVerifications.dll File
(R-D) C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\AccChecker\VerificationRoutines.dll File
(R-D) C:\Windows\Fonts\StaticCache.dat File
(R-D) C:\Windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll File
(R-D) C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll File
(R-D) C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll File
(R-D) C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll File
(R-D) C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll File
(R-D) C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll File
(R-D) C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll File
(R-D) C:\Windows\System32\en-US\crypt32.dll.mui File
(R-D) C:\Windows\System32\en-US\KernelBase.dll.mui File
(R-D) C:\Windows\System32\en-US\winnlsres.dll.mui File
(RW-) C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\AccChecker File
(RW-) C:\Windows File
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.19041.488_none_89e6152f0b32762e File
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627 File
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.685_none_4299dbb28a92ae3e File
(RWD) C:\Windows\Fonts\segoeui.ttf File
...\Cor_SxSPublic_IPCBlock Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2 Section
\BaseNamedObjects\Cor_Private_IPCBlock_v4_8752 Section
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section
\Sessions\1\BaseNamedObjects\UrlZonesSM_user Section
\Sessions\1\BaseNamedObjects\windows_shell_global_counters Section
\Sessions\1\Windows\Theme1383959086 Section
\Windows\Theme2042523233 Section

Loaded Modules:

Path
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\AccChecker\acccheckui.exe
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002CF6D2CC57CAA65A6D80000000002CF
  • Thumbprint: 1A221B3B4FEF088B17BA6704FD088DF192D9E0EF
  • Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: AccCheckUI.EXE
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: Unknown

File Similarity (ssdeep match)

File Score
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\AccChecker\acccheckui.exe 88
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\AccChecker\acccheckui.exe 94
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\AccChecker\acccheckui.exe 88

MIT License. Copyright (c) 2020-2021 Strontic.