flstudio_11[.]1[.]exe

resource
unpack002/$PLUGINSDIR/ILUninstall.dll
unpack002/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/AccessControl.dll
unpack001/$PLUGINSDIR/ILInstallUtil.dll
unpack001/$PLUGINSDIR/System.dll

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/$0/uninstall.exe	nsis_installer_1
static1/unpack001/$0/uninstall.exe	nsis_installer_2

flstudio_11.1.exe

IMPHASH 099c0646ea7282d232219f8807883be0
SHA256 79d352413ec91e3c74925718fd3a7e8d6f234d62a2ceffb6a1e7c5b257ec48e9
MD5 ddaaa231e042bfe80f378e4e0d006e76
SHA1 709e3cc71aec905938a0c0dd64c82d10249c8962
SHA512 f64e24c77c88c53f8ef396f384a0d094149f2c1fc2e7c9c48d71da56646e2ba8b093375b2829c1b8e9e84d19a76fc4f0eba98db19f2b0da7dabcbfc265921a59
SSDEEP 6291456:8/5YjuChKJa7uE1/r1m6iu8tA3Q8KarvxabS+pWdK+Okau9MTB5ViZGdZD:8R2ByuuE1DPmC1Gv7FVnIZGdZD
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

67:73:cf:22:62:9c:c1:df:86:f7:98:c9:5e:0a:01:ea:ef:63:9f:98

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

4

Entry point

12860

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount CreateFileA GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess SetFileTime GetTempPathA GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetWindowsDirectoryA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$0/Artwork/Fonts/Cuprum.ttf

SHA256 75227c6375af8cc620a03d57f099642b928c24b9c9a7af5e5fe3ae3af7dade29
MD5 9ad892530d7032eb69809e7d54b35434
SHA1 403c1f19d70f039893021772fcc6e900427f9a8f
SHA512 e21c433fdf13bed73b946ab8503c244a954d5e9a5413ca72e9c9b4634ee0fdbe8f5338a9271665285064dfbfb5eacdb1a9b499f0e222157c49fdd2a5d15076b4
SSDEEP 3072:EZUcqsBzsvejlSF5bNavzfAD1MZsrAxoR61dxjfpcL8pRG/uOvIh5z0:G7BQLNwLocuR60L87Gm8I3z0
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$0/Artwork/Fonts/Cuprum/OFL.txt

SHA256 d173514a2b2977597045c3abf68d7f8c0107a6fcde3ca035ba926c686085c016
MD5 17abef37c4abc2a23d8e21a0ef26360c
SHA1 ca6090f1823e65206330b95a5452ce7c43fc99be
SHA512 c5366b5d620005608bb9cba0e63bf08df84318b998180fe0794f46f989b6792b95576032833a7f97526223ed0144b2f8e3eeddb360cc6b444b878ab53ade5d45
SSDEEP 96:/W+bHiilxwnEOWOKajy4vyviXQaGYBC23zCdZuKy0iQHZoG:Nzl7hqyvaQ1+3zCdyQHZV
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$0/Artwork/Fonts/Francois One/OFL.txt

SHA256 cdcd022ff38936694dfdb7d8d3fb4d21e64a73b258c13e2537be100bff1b9c0d
MD5 cee5cc2e4039fa91afc6a1f9636fba16
SHA1 ab407a0f039371e81c65ffb05da7ecf3388e15aa
SHA512 edfa6569d5533247926753dd3e27a79a148078f2f67c4bd47efb9e5bdb44b92dcc41cb2b27b6736a6a0adfb71fd4a4811dce7eeedf654985baa0b0f9e512e016
SSDEEP 96:McW+bHiilxwnEOWOKajy4vyviXQaGYBC23zCdZuKy0iQHZoG:/zl7hqyvaQ1+3zCdyQHZV
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$0/Artwork/Fonts/FrancoisOne.ttf

SHA256 8032be46b1ef4234ff9fd02fa6455a2ab07cf4d01e1271af8fa650daaaafe78c
MD5 1941b415d9fe5bd2ccc287054e6adf11
SHA1 0cc1da9b68bf6acdb13e7c28f49b8ad0ea49caa5
SHA512 de5367822eb0e029b853c3f61c3ce6c2755aef7c57e7e5df009c8383bb9f5a6e04738f406b0f4353493278b8150c32f70b84b00b6daed4b37f5fcd7f59ab41a5
SSDEEP 1536:7eQ3oFo8kyDiZX9XAQLztGwawQBA5L4IqX4YL71DrlI++mnLxkTDF6qAfPKd5G7:iGARRez8bBA5L4IurDifmeF6dPKds7
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$0/Artwork/Fonts/ILCursors.ttf

SHA256 a3b69ab165c5824bd07d49c540a0265ffa6ba4f46f9bf50d2cbf6f28976436ef
MD5 063b7aff9aa47408c770acb011f847d5
SHA1 1562796f91247fcb28f7af17a1dfc0f9064c3f34
SHA512 62211b2c23d1b74084be232b782528ea76e7ef224ca0aea32d19d91297cfa3da5de1401ae0f3d482e3c060f40475b27e6b83135a35b9a3d33afb53bd62567c4e
SSDEEP 192:U4NqjgTjYny6MI4Ijj80u5I8n2YbYbHztMi61iJVAuQnvi:POnyRq0I+YDzA1iJ2uQnv
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$0/Artwork/Fonts/ILGlyphs.ttf

SHA256 044d0d2f2fd79571178917957b8a3d50288c224be3bd765a2a2eff62a8258757
MD5 29312c6d65c06b4bef4e47b450635c91
SHA1 6434d7d7e0bce51d04e6d80a646200cad4b3d424
SHA512 19e2b52d1aa5023140eeb0c8b7ab0b0513acf7f53631f266432e1408d8bc758855522f7f298aa70e2d091588bf2f199537acc1501c018726510c7f5dae6bf7f2
MD5 SHA1 SHA512

NSIS installer

installer

$0/Artwork/Fonts/ILGlyphsEx.ttf

SHA256 404accc34d9c3fed760ae63a19c8b02e2538171b67224d1adff0936bca4556b9
MD5 b006a9399dcd59b1e3ead542bd1472dd
SHA1 0b86aabe7f91b5d54facd4f7526facb8be4312b1
SHA512 e8221d29a8e5982620af3ea4b816eb149bfbb7debfb528ed932fc7bc85702379f3bcdfac7aad08f27fe06be028c2d16a297af68c478cd0d368c33c5a9469b306
SSDEEP 1536:WWDDjgfwgVLn8YMxXS4oUvH4dNPdfN+izx:HDDjUwglSXSvUf4bdVDx
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$0/Artwork/Fonts/JosefinSans-SemiBold.ttf

SHA256 bce2ed51da316e20fc108befa1ba152850eca29cfc2b26f278a8d74957a677fb
MD5 c1901ea4707e050f5529559fa3b62776
SHA1 e2674d45e4a0ad8b1cc2d49d84c5e0f4c95cb316
SHA512 b4f5689ba69da0af2d1d19481db1cb39515fb5bfe420f16ac2a78db2933834424adf7e38d4395731dcb8cb0d20902e8648de83b23fc0409b51066c863e2644b5
SSDEEP 768:qKZgpDj7VQM7gJ/FCM2mfAlhyDf0qFh+eEnU7r4h5d5fPd:qb1j7VQWej2mf6EfTFsDnorO
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$0/Artwork/Fonts/OpenSans-CondLight.ttf

SHA256 d406b798f7c073d64e0b143accc363f5dbc9f5c735b3c8c1dd7d00500b81906a
MD5 78a0d7e644be8aa2110679f957a5b0db
SHA1 baa3da23049ced57b412d90dc139f0f3987d5f34
SHA512 52a00d658647c5fa5e62be59f3614ec2f558063c6f39022e25844086c9d8da46bb77fdeff53d154d9601ab69afb6f32192c52f3d18f61b55aacdeab29bd295d0
SSDEEP 6144:zYFAeOApjtqxxUyutgCNktQFvmnoxXTS4uHtb:zYFAeOAXQxU1qCNktA+SXfUtb
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$0/Artwork/Fonts/Open_Sans_Condensed/LICENSE.txt

SHA256 3ddf9be5c28fe27dad143a5dc76eea25222ad1dd68934a047064e56ed2fa40c5
MD5 d273d63619c9aeaf15cdaf76422c4f87
SHA1 47b573e3824cd5e02a1a3ae99e2735b49e0256e4
SHA512 4cc5a12bfe984c0a50bf7943e2d70a948d520ef423677c77629707aace3a95aa378d205de929105d644680679e70ef2449479b360ad44896b75bafed66613272
SSDEEP 192:qf9qG4QSAVOSbwF1wOFXuFJyQtxmG3ep/7rlzKfHbxc+Xq0rhlkT8SHfH2:kOu9b01DY/rGBt+dc+aclkT8SH+
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$0/Artwork/Fonts/PT Sans/OFL.txt

SHA256 434b3fd69aaa87c923171d924a9128524bfde7e266b55dcb6353f15f02198f74
MD5 245f2e551dbcc532995557f1094f03c5
SHA1 deef5f72c6736dbba8c448b09ce5b9601b22c49b
SHA512 39bfb5354b42f6369d83695a0512249ef3ae36d06142944a66a333aea1ddbc87d06979d03a1dedfba111ebe3158bf4dea2da5221dd6bcc1c5107a8c8eca58451
SSDEEP 96:yzkW+bHiilxwnEOWOKajy4vyviXQaGYBC23zCdZuKy0iQHZoG:kEzl7hqyvaQ1+3zCdyQHZV
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$0/Artwork/Fonts/PT_Sans-Narrow-Web-Regular.ttf

SHA256 4102edda03059163771869d258df54ac8563c408fa6e9ef75b2ddc85eabea6f4
MD5 4edbf04f2fcf729957312e9cc3fc6c28
SHA1 05accccba9c979dc904b81fd984e8936a38b737c
SHA512 23c5b5b7918abd4ecec234d47d3ece5be296a2ccc9ef06620eee03e8ac645a2aacc35404f761139d359fc4a1e9165cb41c0427446e978673d2cca7b3ca089e20
SSDEEP 12288:8m7qtWjlnYFe0jezl9MHPcgAh+z04mN2tNfN:8mBq8lglA41J
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$0/Artwork/Fonts/PT_Sans-Web-Regular.ttf

SHA256 9cc831490532009bae2b3ce0d39c62adfc889060beb421593bfd9d2396d0f10a
MD5 f2eadd43911fbf66f2bf5c8b32f69724
SHA1 5654d490b5ed8cfdf865eea9c59ba5ef15e5f9ce
SHA512 b81e2f592fb6e764cca3e4c6cebed8c7d4a3e4c0775e05a01bee9e135119616a5f22d4ba2405ae3d48cee19e55a77b7a43f9e906ad09a502c6501c0ef83058d4
SSDEEP 6144:8TpjCS0TRovNkSHmqr6/p2ZlgihJ+TNZPbZQjzksKLsnJpNPgU53n:spWTR02q6/wYihJCu0pLsnJ/JFn
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$0/Artwork/Fonts/Revalia-Regular.ttf

SHA256 42b2143d3a4da0ee27664d6c584f3aa6106e94be6ee8c24d6f14da47c8c9231d
MD5 d6d6c6438a27b35e026bfce0315ac7ee
SHA1 8a155369a38e19e969c4d6bbf75b050acdf1cd85
SHA512 ac21d210f7ebea191dae3ab583e546e95301ad74b6077146c5d6210d49eceb9af5dd1ff45b3d941f866a71efe0c6e8bfe0d0592663a5d852a646a15a2af8a5f4
SSDEEP 768:ijq8H7X6Fp3AMLpPvjnFwpganbpRynItVQMktkwGqpOZN4Kn7f112u25Ym1NMGHW:iO8H7X6R6pX7yIVQMKKjV8TOH
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$0/Artwork/Fonts/Revalia/OFL.txt

SHA256 01702c48915f9fb1d7f96e098038e2bdac750567b378f0bd930e6b36542e4882
MD5 c999789c47cbcdb6edf8d0437874611f
SHA1 1e0b80df9cf43ad8594f980c87cb6e4dc20a6c3d
SHA512 2b403b43e4d73d9c3336b248395a2fa4293a4aa773e1df453f5a0a16bb1c8f8740cd5beed0e7518b4500bbd9fd4b8746b799cce0b047be35940fa7d8f0127a58
SSDEEP 96:tW+bHiilxwnEOWOKajy4vyviXQaGYBC23zCdZuKy0iQHZoG:rzl7hqyvaQ1+3zCdyQHZV
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$0/Artwork/Fonts/RobotoCondensed-Light.ttf

SHA256 3c40aefc08e80613df878a81203eb0bcb567ada5d90a80c167e152f760f0d7e7
MD5 4b9ebdcd285ea9d3a9d1f5c342a7a3ee
SHA1 c3a9c88791fd1a972345561a07b2d929335c0135
SHA512 105d428f5e2a59fff79a7ec708ab0fccba7eb17af445b76425fbc768e2c8dd0b0ca2d63b451f3d5c2ec12ce403c34cc68d7274c9e6435366f0181a3623690732
SSDEEP 3072:CUmlb3dddPooJIIoooooogtVEAo7TcJb7GdobVAJ6z5kn61wMFfIb+lMLH:alblooJIIoooooogtSToA0/wMNIb+oH
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$0/Artwork/Fonts/RobotoCondensed-Regular.ttf

SHA256 67242e01b2e2d3d6d90e1591bedd9e0b661f7b1a565b0215c4441392a6dc80d4
MD5 17be143969552f90ec240264225623cf
SHA1 bf9eb390006c63c785de6f08785aa982bc1b34a7
SHA512 84c2bb816ecb6da1c489e1d0d594c61b30fe6f5da9e16b9106dd5faeeabd9045beebad6e794dcd0d10352e39fe37724c22717895a52028eed6fb1bdc6b27ec5c
SSDEEP 3072:12Umlb3dddPooJIIoooooogtVAMKFb+KDSz2WB3ANqkw4z0HgZx1EXP/kLIp:1ulblooJIIoooooogtGMByjqkjL0/kLc
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$0/Artwork/Fonts/Roboto_Condensed/LICENSE.txt

SHA256 3ddf9be5c28fe27dad143a5dc76eea25222ad1dd68934a047064e56ed2fa40c5
MD5 d273d63619c9aeaf15cdaf76422c4f87
SHA1 47b573e3824cd5e02a1a3ae99e2735b49e0256e4
SHA512 4cc5a12bfe984c0a50bf7943e2d70a948d520ef423677c77629707aace3a95aa378d205de929105d644680679e70ef2449479b360ad44896b75bafed66613272
SSDEEP 192:qf9qG4QSAVOSbwF1wOFXuFJyQtxmG3ep/7rlzKfHbxc+Xq0rhlkT8SHfH2:kOu9b01DY/rGBt+dc+aclkT8SH+
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$0/Artwork/Fonts/Share-Regular.ttf

SHA256 406d79e7b0c514ecf2819a08a465e89597890f8c73ff564f1160d599d80a3c27
MD5 9717d06d0d274188b57887a706ec6ba7
SHA1 705c1e6e738b5065a948f9607f2f5a6d2567d7b6
SHA512 273f774de519162ebf5ca85b56a306570f979621ec2246b84ce10d33c5003673ca601f757a3a705ef1f3bb3f5ae1afd8a33e3ef9cb8b78f1e906e3317c6aa58c
SSDEEP 1536:46xRhCH/BaWCMJC32Mf57+h95vnQa1xiLQ6dNC9YL75/uVp1eKitIKi/:46AH/BaWLJ7Mf57+hjnQqxiBC6LFqAKr
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$0/Artwork/Fonts/Share/OFL.txt

SHA256 ead5c5280d1c2a673f51d761a6a7eefc751e945d4e1e89de537c58b8422c72cf
MD5 766ad27b3ecd01e595125d77d127a878
SHA1 a8190d1b11d2a6856a8566053ab8efd51fd588ef
SHA512 4814042d7462ec38667c982009939aa15b7cab6f00edabce18bdd19afbc4986f49246bb4661bb3c72511b029443853eb65e1767ea9a354e085cb4388004370ec
SSDEEP 96:vQW+bHiilxwnEOWOKajy4vyviXQaGYBC23zCdZuKy0iQHZoG:vQzl7hqyvaQ1+3zCdyQHZV
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$0/Artwork/Fonts/Ubuntu-R.ttf

SHA256 ff6c85b5b809994e8f4a24027db9d6d64505001b0cb2fa7176ac3377e94a6e4f
MD5 1c5965c2b1dcdea439b54c3ac60cee38
SHA1 bd34d577a86d9caaff673409fd5a196c27831220
SHA512 e08d3be883fd18b828043bd11dc6132c2e6adc1a371ba62844a17411efb8ea5b41e7b091984a8285f943cb859f01ad29fb7cf9aa05b256d86db2b10baf1a59f1
SSDEEP 6144:CWBmUE1bvsScKFSO5p27yFG2a0LtqZwf0J0tXkzb:JBmJuKFnn27yFG2a0LtqZwMCOP
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$0/Artwork/Fonts/UbuntuCondensed-Regular.ttf

SHA256 335173652aa12d172b97d21aa7d1a31b039eebc00d333ea49d624aa0b2d82736
MD5 4e7b4e739f47805cfbd1f8100dc0e63e
SHA1 6a4fe88db62950327462d68779b317c970c9fe77
SHA512 b5b5c62e699b70a8fca0babee4129a318eba297cf6d2c5d9a48afcdc336b7d203ac46ab6489a57e6bbcb9cafac57e519ba1a2a9bdf4cb040ab33c7a58a27acf7
SSDEEP 6144:uu0L9TOs8ULHunjkWVnUtIejzX4Er8AXLmjy/Ti:uu0xTOlUbunjUt7zo2rW
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$0/DelZip190.dll

IMPHASH 380f2d17bd37c3067396a1e157a8ffc0
SHA256 03ce2fb312b5d2f13fd15a86cb928afc2272df39e507bdc329964f4475a67625
MD5 c69e3b01ec8872849d9cfe583b2e0500
SHA1 4b4421e962c41830364a9d409014d74bd5b4808d
SHA512 301b159355a42dbc681ad5a4df1d76c7c34b956ae36148b7f64ead4a11c2ee39cd7bde69dc4bed6ddce7516a60312f94055a3fbc2627cfdba22aedb270865b5a
SSDEEP 6144:iHDSUC4cTwKTbe94P4LrAI79Ja/ggR4O8uizA49DX+IBx:iHD5kIu6rAaa/ggKBA4tT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

ed:f7:38:64:83:af:aa:aa:8a:31:51:37:47:76:33:3f:a0:92:98:f0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

4

Entry point

4300

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

kernel32

CloseHandle CompareStringA CreateDirectoryA CreateFileA CreateFileMappingA DeleteCriticalSection DeleteFileA DosDateTimeToFileTime EnterCriticalSection ExitProcess FileTimeToDosDateTime FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindFirstFileA FindNextFileA FindResourceA FormatMessageA FreeLibrary GetACP GetCPInfo GetCurrentDirectoryA GetCurrentProcessId GetCurrentThreadId GetDriveTypeA GetEnvironmentStrings GetEnvironmentStringsW GetFileAttributesA GetFileTime GetFileType GetFullPathNameA GetLastError GetLocalTime GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetOEMCP GetProcAddress GetProcessHeap GetShortPathNameA GetStartupInfoA GetStdHandle GetStringTypeA GetSystemDefaultLangID GetSystemTime GetSystemTimeAsFileTime GetTempPathA GetTimeZoneInformation GetUserDefaultLCID GetVersion GetVersionExA GetVolumeInformationA HeapAlloc HeapFree InitializeCriticalSection InterlockedDecrement InterlockedIncrement IsDBCSLeadByteEx IsValidLocale LCMapStringA LeaveCriticalSection LoadLibraryA LocalFileTimeToFileTime LocalFree MapViewOfFile MoveFileA MultiByteToWideChar OpenFileMappingA OutputDebugStringA RaiseException ReadFile RemoveDirectoryA RtlUnwind SetConsoleCtrlHandler SetEndOfFile SetErrorMode SetFileAttributesA SetFilePointer SetFileTime SetHandleCount SetLastError SetThreadLocale Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue UnmapViewOfFile VirtualAlloc VirtualFree VirtualQuery WideCharToMultiByte WriteFile lstrlenA

shell32

SHChangeNotify SHFileOperationA

user32

CharLowerBuffA CharNextA CharToOemA EnumThreadWindows GetDesktopWindow LoadStringA MessageBoxA OemToCharA wsprintfA

Name

.text

Size

220KB

Virtual Size

224KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

69KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

$0/DelZip64.dll

IMPHASH 7dc0facef4ce538c1938af8c3e81ac0b
SHA256 4f53a02874ec1eb4e0b818434a63756bdbf479fdcaa515f04b290b568de99b07
MD5 64feddbfd54478222fc5cdd0271c052c
SHA1 f708e307e974d768542b9044db79a7e022ddf9ef
SHA512 e7ca231b234e9499db4158e806d739d368c9194d8d81b5e7f42517ad8c8b8fd1736bcb62e1013af20f79583abdb6bee8f3a5f9f2e7dc89edc527e35e28247c44
SSDEEP 6144:tXRkmrLHy81vFActb9JcpaSMTNXpv2fsTqLVgbr:1HfHbBc8S7Yr
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

d5:32:c1:7b:df:cf:7a:c8:46:79:b4:2b:e0:bc:31:23:01:f0:3c:e4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

6

Entry point

202268

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Russell\Documents\Visual Studio 2012\Projects\Project1\x64\Release\Delzip64.pdb

kernel32

FindFirstFileW SetFilePointer GetLastError FindClose CloseHandle OutputDebugStringW FormatMessageW LocalFree GetSystemTime WideCharToMultiByte MultiByteToWideChar InitializeCriticalSection LeaveCriticalSection GetModuleFileNameW EnterCriticalSection GetModuleFileNameA DeleteCriticalSection SetEndOfFile SetFileTime WriteFile ReadFile CreateFileW SetLastError GetFileTime GetFileAttributesW GetTimeZoneInformation DeleteFileW SetFileAttributesW GetFullPathNameW DosDateTimeToFileTime GetDriveTypeW LocalFileTimeToFileTime GetTempPathW MoveFileWithProgressW GetFileInformationByHandle FileTimeToDosDateTime GetSystemTimeAsFileTime SetErrorMode FileTimeToSystemTime FindNextFileW FileTimeToLocalFileTime GetVolumeInformationW CreateDirectoryW SetEnvironmentVariableA HeapSize WriteConsoleW HeapReAlloc LCMapStringEx FindFirstFileExW EncodePointer DecodePointer IsDebuggerPresent IsProcessorFeaturePresent GetCurrentProcessId GetFileAttributesExW GetCommandLineA GetCurrentThreadId HeapAlloc RtlPcToFileHeader RaiseException HeapFree GetFileType PeekNamedPipe GetCurrentDirectoryW GetModuleHandleW GetProcAddress GetStdHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess TerminateProcess GetStartupInfoW IsValidCodePage GetACP GetOEMCP GetCPInfo GetStringTypeW RtlUnwindEx ExitProcess GetModuleHandleExW GetProcessHeap InitializeCriticalSectionAndSpinCount InitOnceExecuteOnce QueryPerformanceCounter GetTickCount64 GetEnvironmentStringsW FreeEnvironmentStringsW Sleep SetStdHandle GetConsoleCP GetConsoleMode ReadConsoleW SetFilePointerEx LoadLibraryExW LoadLibraryW CompareStringEx FlushFileBuffers

user32

CharUpperBuffW CharLowerBuffA GetDesktopWindow MessageBoxW CharNextA CharNextW

shell32

SHChangeNotify SHFileOperationW

$0/DirectWaveCtEngine.dll

IMPHASH b4d109050cfd8ae9b366181224b9c2be
SHA256 2b0f0e4cebeface847ab96c35ba3372ac6c64a7a2f9cff67d2285192d59ae9ec
MD5 4f0aa21341867b381cc8fcd68e88ee65
SHA1 ff668512f96d02e2ce0673fcb646bac5c240efac
SHA512 8db8371243bc660da823b89cac29a2ba35bf13f85f2c87d995dbc9102a48c19aa882e772cc861b9ec70b3310478c0d7c7a9aa748e7b9c7d52e731c06a0168689
SSDEEP 49152:J9dXH+jnIEkrfG6ANH0aeVqigitW97d8CBNEPhUHGYB+FkTh1wpLVvh/vR/Vhjo2:J9dXHms+6ANUxg7IC7EPmmH3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

3a:bc:b1:9e:fd:35:ae:7a:c7:bc:ff:1c:61:9c:60:46:70:71:8e:11

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

5

Entry point

2011395

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

shlwapi

PathGetCharTypeW PathFileExistsW PathRemoveFileSpecW PathStripToRootW PathAppendW

shell32

SHGetSpecialFolderPathW

ole32

CoCreateInstance CoCreateGuid OleUninitialize OleInitialize CoInitialize CoUninitialize

comdlg32

CommDlgExtendedError GetOpenFileNameW

advapi32

RegisterEventSourceA ReportEventA DeregisterEventSource OpenProcessToken GetTokenInformation

user32

MessageBeep wsprintfW MessageBoxW RegisterClassW CreateWindowExW RegisterDeviceNotificationW DestroyWindow UnregisterDeviceNotification GetDesktopWindow GetUserObjectInformationW GetProcessWindowStation MessageBoxA CharUpperW DefWindowProcW CharUpperBuffW UnregisterClassW

oleaut32

VariantClear

kernel32

OutputDebugStringW GetTickCount LoadLibraryW GetProcAddress OutputDebugStringA SetErrorMode GetVersionExW GetModuleFileNameW GetLastError GetLogicalDrives GetCurrentDirectoryW GetDriveTypeW Sleep lstrcpyW CreateFileW GetTempFileNameW GetFileSize FindFirstFileW SetFilePointer SetEndOfFile WriteFile CopyFileW ReadFile GetTempPathW FindClose RemoveDirectoryW GetFileTime GetDiskFreeSpaceExW QueryDosDeviceW DeviceIoControl GetVolumeInformationW CreateDirectoryW lstrcmpW FindNextFileW EnterCriticalSection LeaveCriticalSection VirtualAlloc VirtualFree GetStdHandle CompareStringW GetUserDefaultLangID LockFileEx UnlockFileEx GetModuleHandleW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId QueryPerformanceCounter InitializeCriticalSection DeleteCriticalSection SetEvent WaitForSingleObject GetCurrentThread TlsAlloc TlsFree TlsSetValue TlsGetValue FreeLibrary SizeofResource LoadResource FindResourceA ExitProcess DeleteFileW GetFileAttributesExW LocalFree RaiseException InterlockedDecrement DuplicateHandle WriteConsoleW WriteConsoleA MultiByteToWideChar WideCharToMultiByte GetACP GetFileAttributesW IsWow64Process VirtualQuery GetComputerNameW GetSystemInfo GetUserDefaultLCID CreateEventA GetLogicalDriveStringsW FlushViewOfFile CloseHandle FormatMessageA GetVersion GetFileType LoadLibraryA GetVersionExA InterlockedIncrement InterlockedCompareExchange InterlockedExchange GetLocaleInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree HeapAlloc GetTimeFormatA GetDateFormatA GetSystemTimeAsFileTime GetTimeZoneInformation GetCommandLineA RtlUnwind SetStdHandle HeapReAlloc LCMapStringA LCMapStringW GetCPInfo GetStringTypeW CompareStringA SetLastError HeapSize GetModuleFileNameA GetOEMCP IsValidCodePage SetHandleCount GetStartupInfoA HeapCreate HeapDestroy GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount GetProcessHeap FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetModuleHandleA EnumSystemLocalesA IsValidLocale GetStringTypeA GetLocaleInfoW GetConsoleOutputCP SetEnvironmentVariableA CreateFileA GlobalMemoryStatus LockResource

$0/DirectWaveCtEngine_x64.dll

IMPHASH 410a3db4b254853309877ef50e47fbaf
SHA256 c9fe17544eb50751d6a69a838ec7f232034108fd868b1fa5b7961fbff38d5b81
MD5 f81ba34a674a104bc728896ccc169583
SHA1 00421c5e880eb55fe3d9a7ee29798af6a8e8a1b6
SHA512 b137a613b8d35509fbe6d3c6a1d29076ccdf30b81b3cee4bbb7acb4b3f49280bae377211ae9f49b6f5891f48ed6fea720abf62047dc3a51c15cae766cbc41112
SSDEEP 49152:1HZUe1KpaUFIvzpGFhdIFgD9YKr7Edr55h6O8aOWjkehmxapeOhuFilWTCz8fSxB:AtVsLq1RU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

3a:77:6c:5d:f8:e0:57:55:e9:95:c0:eb:84:1b:ee:3a:f2:31:af:ee

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

2

Major OS version

5

Entry point

2558528

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

shlwapi

PathStripToRootW PathGetCharTypeW PathFileExistsW PathAppendW PathRemoveFileSpecW

shell32

SHGetSpecialFolderPathW

ole32

CoCreateGuid CoCreateInstance OleUninitialize OleInitialize CoUninitialize CoInitialize

comdlg32

GetOpenFileNameW CommDlgExtendedError

advapi32

RegisterEventSourceW ReportEventW DeregisterEventSource OpenProcessToken GetTokenInformation

user32

MessageBoxW wsprintfW MessageBeep CharUpperW DefWindowProcW UnregisterClassW DestroyWindow UnregisterDeviceNotification GetDesktopWindow RegisterDeviceNotificationW CreateWindowExW RegisterClassW GetUserObjectInformationW GetProcessWindowStation CharUpperBuffW

kernel32

GetCurrentDirectoryW GetDriveTypeW Sleep lstrcpyW CreateFileW GetTempFileNameW GetFileSize FindFirstFileW SetFilePointer SetEndOfFile WriteFile CopyFileW ReadFile GetTempPathW FindClose RemoveDirectoryW GetFileTime GetDiskFreeSpaceExW QueryDosDeviceW DeviceIoControl GetVolumeInformationW CreateDirectoryW lstrcmpW FindNextFileW EnterCriticalSection LeaveCriticalSection GetStdHandle CompareStringW GetUserDefaultLangID LockFileEx UnlockFileEx GetModuleHandleW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId QueryPerformanceCounter InitializeCriticalSection DeleteCriticalSection SetEvent WaitForSingleObject GetCurrentThread TlsAlloc TlsFree FindResourceA ExitProcess DeleteFileW GetFileAttributesExW LocalFree RaiseException DuplicateHandle WriteConsoleW WriteConsoleA MultiByteToWideChar WideCharToMultiByte GetModuleFileNameW GetFileAttributesW GetComputerNameW GetSystemInfo GetUserDefaultLCID IsWow64Process GetLogicalDrives GetLogicalDriveStringsW FlushViewOfFile FormatMessageA GetVersion GetFileType GetLocaleInfoA HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapAlloc GetDateFormatA SizeofResource GetSystemTimeAsFileTime GetTimeZoneInformation FlsSetValue GetCommandLineA RtlUnwindEx RtlPcToFileHeader SetStdHandle DebugBreak HeapReAlloc LCMapStringA LCMapStringW GetCPInfo GetStringTypeW CompareStringA SetHandleCount GetStartupInfoA HeapSetInformation HeapCreate HeapDestroy GetConsoleCP GetConsoleMode FlushFileBuffers EncodePointer DecodePointer FlsGetValue FlsFree SetLastError FlsAlloc HeapSize GetModuleFileNameA GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSectionAndSpinCount GetProcessHeap FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW EnumSystemLocalesA IsValidLocale GetStringTypeA GetConsoleOutputCP GetLocaleInfoW SetEnvironmentVariableA CreateFileA GetLastError GetVersionExW SetErrorMode OutputDebugStringA GetProcAddress LoadLibraryW GetTickCount OutputDebugStringW FreeLibrary CreateEventA CloseHandle LoadResource GlobalMemoryStatus LockResource GetACP GetTimeFormatA

oleaut32

VariantClear

$0/Elastique.dll

IMPHASH 9da43338d315f17a9177bfc1443fe09a
SHA256 a58b461c5f399cc5b742e3bf44f2abe2804c00565dc2ad9019e12717ede7a9bc
MD5 26980aa18b58b27b6ba56bee6b8f02e9
SHA1 e064b05d6898c05e1f077f13943f560595018f7a
SHA512 f0e49114c5e71a5e31d123ecf00c2a51d042d1ac45bb6b627c915e9791d30071815f477f1e6c92ca7699305e62f41da8c88bd87a198c352931131c91ca12dd4b
SSDEEP 24576:zuDi0sQTTHMpD20LkrzzuKd/aUdWzdS24dQt3PVNivg+m9s:zuieB0Lkv3o3PVNp+m9s
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

f3:ea:09:08:39:38:98:68:c6:2c:f6:0b:0e:87:98:87:41:7d:6c:97

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

1

Major OS version

5

Entry point

1088382

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\ImageLine\fred\SDKs\zplane\vc\Release\elastique.pdb

$0/ILMinihostBridge32.exe

IMPHASH 53de097fed7e1f1c14291e2d6e06294d
SHA256 04c1c64351fb8114e9bebff597c7074932dc27d03c640f98d742cf4bfc0d159c
MD5 7e3e8f2ea58ce1f42d7b5c595700379e
SHA1 12b7055e4ea26a46b19f702dcb76c9e2e7723b58
SHA512 35d7c1b975e8c3435ea69c5c024cd60319a77d23e67701619dfbc9e99a750d9fe058e52608057327077f956b680edc4a25f6d23e3769e8c33826384fe3d9c1c6
SSDEEP 24576:jJfNSplcxPVFx1fF7GRP01tZxI9v81nSosp0qiplM3TO6DfWZ:FNSjcx91Y10XOEEzOpMTJDfWZ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

c8:19:5a:e8:6c:3e:29:76:10:30:c5:22:af:77:61:24:78:3d:98:3b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

5

Entry point

747818

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\image-line\cplusplus\ILClasses\trunk\extras\BridgedAudioPluginInstance\Builds\Win\Release\InterprocessPluginScan.pdb

kernel32

FindClose GetFileAttributesW GetFileAttributesExW CreateFileW GetCurrentDirectoryW SetCurrentDirectoryW FindNextFileW FindFirstFileW GetLastError WriteFile OutputDebugStringW GetLocaleInfoW LoadLibraryW CreateMutexW FormatMessageW FlushFileBuffers MapViewOfFile GetModuleFileNameW GetTempPathW GlobalUnlock GlobalSize GlobalLock GetCommandLineW GlobalAlloc CreateEventA CreateFileMappingA CreateProcessA lstrcmpiA IsBadWritePtr VirtualProtect AddVectoredExceptionHandler SetErrorMode GetCurrentProcessId SetLastError CompareStringA CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA GetTickCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStringTypeW GetStringTypeA IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID LCMapStringW LCMapStringA InitializeCriticalSectionAndSpinCount GetConsoleMode GetConsoleCP IsValidCodePage GetOEMCP GetACP GetCPInfo MultiByteToWideChar SetStdHandle SetHandleCount HeapSize VirtualAlloc VirtualFree HeapCreate TlsFree TlsSetValue TlsAlloc TlsGetValue GetModuleFileNameA GetStdHandle GetStartupInfoA GetCommandLineA SetUnhandledExceptionFilter UnhandledExceptionFilter CreateThread ExitThread WideCharToMultiByte InterlockedDecrement InterlockedIncrement GetSystemTimeAsFileTime GetTimeZoneInformation GetModuleHandleW GetFileType HeapReAlloc HeapAlloc HeapFree RtlUnwind RaiseException ReadFile TerminateProcess ReleaseMutex FreeLibrary IsDebuggerPresent ExitProcess SetThreadAffinityMask GetCurrentThreadId TerminateThread LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection QueryPerformanceCounter QueryPerformanceFrequency GetModuleHandleA GetVersionExW UnmapViewOfFile SetFilePointer FindResourceW LoadResource LockResource SizeofResource SetEvent WaitForSingleObject CreateEventW GetCurrentThread GetThreadPriority GetCurrentProcess GetPriorityClass SetThreadPriority SetPriorityClass ResetEvent CloseHandle Sleep LoadLibraryA GetProcAddress SetEnvironmentVariableA CompareStringW

user32

EnumWindows GetMessageTime ReleaseDC GetDC SetWindowTextW GetAncestor GetAsyncKeyState GetMessageExtraInfo GetParent EnableMenuItem SetCursorPos MessageBeep IsWindow GetWindowTextW OpenClipboard DestroyCursor SetCursor LoadCursorW CreateIconIndirect GetWindowInfo IsChild WindowFromPoint GetMessagePos GetCursorPos SetClipboardData PostMessageW DestroyIcon GetClipboardData SendMessageTimeoutW GetSystemMetrics GetForegroundWindow SendInput SystemParametersInfoW EnumDisplayMonitors EndPaint BeginPaint GetUpdateRgn MapVirtualKeyW GetActiveWindow PeekMessageW GetMessageW GetWindowRect MoveWindow SetWindowLongW DestroyWindow UnregisterClassW RegisterClassExW CreateWindowExW GetDesktopWindow GetWindowLongW DestroyCaret InvalidateRect ReleaseCapture GetCapture SetCapture TrackMouseEvent DefWindowProcW GetFocus SetFocus TranslateMessage DispatchMessageW GetWindowThreadProcessId AttachThreadInput GetWindow SetWindowPos SendMessageW EmptyClipboard CallWindowProcW GetSystemMenu ShowWindow GetWindowPlacement SetCaretPos ShowCaret CreateCaret SetForegroundWindow RedrawWindow SetLayeredWindowAttributes CloseClipboard

gdi32

GetKerningPairsW GetGlyphOutlineW GetGlyphIndicesW SetMapperFlags SetMapMode CreateFontIndirectW SelectObject GetTextMetricsW DeleteObject CreateCompatibleDC DeleteDC CreateRectRgn CreateDIBSection CreateBitmap RestoreDC StretchDIBits SaveDC ExcludeClipRect GetRegionData CombineRgn GetOutlineTextMetricsW CreateRectRgnIndirect

advapi32

RegQueryValueExW RegCreateKeyExW RegOpenKeyExW RegCloseKey

shell32

ExtractAssociatedIconW SHGetSpecialFolderPathW

ole32

RevokeDragDrop OleInitialize OleUninitialize PropVariantClear CoCreateInstance CoTaskMemFree RegisterDragDrop

winmm

midiOutUnprepareHeader midiOutLongMsg midiOutGetDevCapsW midiInGetNumDevs midiInGetDevCapsW midiInUnprepareHeader midiInPrepareHeader midiInAddBuffer midiOutPrepareHeader midiOutShortMsg midiOutOpen midiInStart midiInStop midiInReset midiOutClose midiInClose midiInOpen timeGetTime timeBeginPeriod midiOutGetNumDevs

imm32

ImmReleaseContext ImmGetContext ImmGetCompositionStringW ImmSetCandidateWindow ImmNotifyIME

imagehlp

MapAndLoad UnMapAndLoad ImageDirectoryEntryToData

rpcrt4

UuidCreate

$0/ILMinihostBridge64.exe

IMPHASH 05d6b994e76428587e77442fe444b0f8
SHA256 305d88f08355250eb2c3db78213264ce5b6ef69b3990710d04ae1dea72a5919b
MD5 4226dc45950473419e8f3ef1503d27b3
SHA1 9e7de1cc2a8d8066dca588672a43bf79abbd863b
SHA512 55c3972f77f565c8d93f1ab1fc6c1a1097851e90be6eab48494c58a85c14020f78f71b495f8deb1d5e99b4c9c4409d524ff50b265346bc2da5067f830a7a2762
SSDEEP 24576:777Pbvc6pEyjLZ1J1BHutiTvFHdQ0PIMayFr7+3+hNkDT7N+dBKJe3/0:zjbhZwiDbhKyF/+uUDT1JI/0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

67:28:79:9b:0f:c6:df:81:84:b0:09:1b:90:51:d5:42:c2:8c:80:ed

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

2

Major OS version

5

Entry point

981136

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d:\image-line\cplusplus\ILClasses\trunk\extras\BridgedAudioPluginInstance\Builds\Win\Release\InterprocessPluginScan.pdb

kernel32

GetFileAttributesW GetFileAttributesExW CreateFileW GetCurrentDirectoryW SetCurrentDirectoryW FindNextFileW FindFirstFileW GetLastError WriteFile OutputDebugStringW GetLocaleInfoW LoadLibraryW CreateMutexW FormatMessageW FlushFileBuffers MapViewOfFile GetModuleFileNameW GetTempPathW GlobalUnlock GlobalSize GlobalLock GetCommandLineW GlobalAlloc CreateEventA CreateFileMappingA CreateProcessA lstrcmpiA IsBadWritePtr VirtualProtect AddVectoredExceptionHandler SetErrorMode GetCurrentProcessId SetLastError SetEnvironmentVariableA CompareStringW CompareStringA WriteConsoleW GetConsoleOutputCP WriteConsoleA GetTickCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStringTypeW GetStringTypeA IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID LCMapStringW LCMapStringA InitializeCriticalSectionAndSpinCount GetConsoleMode GetConsoleCP IsValidCodePage GetOEMCP GetACP GetCPInfo MultiByteToWideChar SetStdHandle SetHandleCount HeapSize HeapCreate HeapSetInformation FlsAlloc FlsFree FlsSetValue FlsGetValue DecodePointer EncodePointer GetModuleFileNameA GetStdHandle GetStartupInfoA GetCommandLineA RtlVirtualUnwind RtlCaptureContext SetUnhandledExceptionFilter UnhandledExceptionFilter CreateThread ExitThread WideCharToMultiByte GetSystemTimeAsFileTime GetTimeZoneInformation GetModuleHandleW GetFileType HeapReAlloc HeapAlloc HeapFree RtlUnwindEx RtlLookupFunctionEntry RtlPcToFileHeader RaiseException ReadFile FindClose TerminateProcess FreeLibrary ReleaseMutex ExitProcess GetModuleHandleA IsDebuggerPresent SetThreadAffinityMask GetCurrentThreadId TerminateThread LeaveCriticalSection EnterCriticalSection GetProcAddress DeleteCriticalSection InitializeCriticalSection QueryPerformanceCounter QueryPerformanceFrequency GetVersionExW UnmapViewOfFile SetFilePointer FindResourceW LoadResource LockResource SizeofResource SetEvent WaitForSingleObject CreateEventW GetCurrentThread GetThreadPriority GetCurrentProcess GetPriorityClass SetThreadPriority SetPriorityClass ResetEvent CloseHandle Sleep LoadLibraryA CreateFileA

user32

SetWindowTextW GetAncestor GetAsyncKeyState GetMessageExtraInfo GetParent EnableMenuItem SetCursorPos MessageBeep CloseClipboard GetClipboardData OpenClipboard DestroyCursor GetDC LoadCursorW CreateIconIndirect GetWindowInfo IsChild WindowFromPoint GetMessagePos GetCursorPos SetClipboardData EmptyClipboard DestroyIcon GetSystemMetrics GetForegroundWindow SendMessageW GetMessageTime SendInput SystemParametersInfoW EnumDisplayMonitors EndPaint BeginPaint GetUpdateRgn MapVirtualKeyW GetActiveWindow TrackMouseEvent SetCapture GetCapture ReleaseCapture EnumWindows GetWindowTextW SendMessageTimeoutW PostMessageW CallWindowProcW IsWindow GetWindowRect MoveWindow SetWindowLongPtrW SetCaretPos GetWindowPlacement ShowWindow GetSystemMenu DestroyCaret InvalidateRect DestroyWindow UnregisterClassW RegisterClassExW CreateWindowExW GetDesktopWindow GetWindowLongPtrW DefWindowProcW PeekMessageW GetMessageW GetFocus SetFocus TranslateMessage DispatchMessageW GetWindowThreadProcessId AttachThreadInput GetWindow ReleaseDC SetWindowPos ShowCaret CreateCaret SetForegroundWindow RedrawWindow SetLayeredWindowAttributes SetWindowLongW GetWindowLongW SetCursor

gdi32

GetTextMetricsW GetKerningPairsW GetGlyphOutlineW GetGlyphIndicesW SetMapperFlags SetMapMode CreateFontIndirectW GetOutlineTextMetricsW DeleteObject CreateCompatibleDC DeleteDC CreateDIBSection CreateBitmap RestoreDC StretchDIBits SaveDC ExcludeClipRect GetRegionData CombineRgn CreateRectRgnIndirect CreateRectRgn SelectObject

advapi32

RegQueryValueExW RegCreateKeyExW RegOpenKeyExW RegCloseKey

shell32

ExtractAssociatedIconW SHGetSpecialFolderPathW

ole32

RevokeDragDrop OleInitialize OleUninitialize PropVariantClear CoCreateInstance CoTaskMemFree RegisterDragDrop

winmm

midiOutUnprepareHeader midiOutLongMsg midiOutGetDevCapsW midiInGetNumDevs midiInGetDevCapsW midiInUnprepareHeader midiInPrepareHeader midiInAddBuffer midiOutPrepareHeader midiOutShortMsg midiOutOpen midiInStart midiInStop midiInReset midiOutClose midiInClose midiInOpen timeGetTime timeBeginPeriod midiOutGetNumDevs

imm32

ImmReleaseContext ImmGetContext ImmGetCompositionStringW ImmSetCandidateWindow ImmNotifyIME

imagehlp

MapAndLoad UnMapAndLoad ImageDirectoryEntryToData

rpcrt4

UuidCreate

Name

.text

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

60KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

81KB

Virtual Size

81KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

25B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

38KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$0/ILPluginScanner32.exe

IMPHASH ddfa87726fa162fcc5605b7fb9f0dc82
SHA256 8bda879bbd06e239ef0063731a3246896c95d269aee5d5bd0dd4050b5b260704
MD5 16adf1344d2d2aae4d87b17e9957c5b3
SHA1 e2b58ba0e2b3632a1b36989fbd17bd195d9fda09
SHA512 5ca370e5688f93de93bcb1346d804b55d9933ce2e42b53b6005277b0f3b9e3e6d323bf872d97138830bdb1515cf05bc0fd772ca8dc09d3d9bf894f9c42d996cb
SSDEEP 24576:IeowHAgPCvLMe2T1693ZiOsOWU2x8X6EcxI/ioMGkLqSTq0xoRf:Ieo2AgPCvBTPi9x4MGkLqST/iRf
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

d3:3f:b0:f5:b7:82:cf:55:bd:95:c0:4a:ba:c1:e3:53:7e:b8:7d:c4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

5

Entry point

763053

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\image-line\cplusplus\ILClasses\trunk\extras\IPCPluginScanner_Demo\Builds\VisualStudio2008\Release\InterprocessPluginScan.pdb

kernel32

SetFilePointer GetVersionExW QueryPerformanceFrequency QueryPerformanceCounter DeleteCriticalSection TerminateThread GetCurrentThreadId SetThreadAffinityMask IsDebuggerPresent ReleaseMutex ReadFile FindClose GetFileAttributesW GetFileAttributesExW CreateFileW GetCurrentDirectoryW SetCurrentDirectoryW FindNextFileW FindFirstFileW WriteFile OutputDebugStringW GetLocaleInfoW LoadLibraryW CreateMutexW GetDriveTypeW FormatMessageW CreateDirectoryW FlushFileBuffers GetVolumeInformationW GetModuleFileNameW GetLogicalDriveStringsW GetTempPathW GlobalUnlock GlobalSize GlobalLock GetCommandLineW GlobalAlloc CompareStringW FindResourceW CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA GetTickCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStringTypeW GetStringTypeA IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetDateFormatA GetTimeFormatA InitializeCriticalSectionAndSpinCount GetConsoleMode GetConsoleCP SetStdHandle SetHandleCount HeapSize LCMapStringW MultiByteToWideChar LCMapStringA IsValidCodePage GetOEMCP GetACP GetCPInfo GetModuleFileNameA GetStdHandle VirtualAlloc VirtualFree HeapCreate TlsFree TlsSetValue TlsAlloc TlsGetValue GetStartupInfoA GetCommandLineA CreateThread ExitThread WideCharToMultiByte InterlockedDecrement InterlockedIncrement GetSystemTimeAsFileTime GetTimeZoneInformation GetModuleHandleW GetFileType RaiseException SetUnhandledExceptionFilter UnhandledExceptionFilter HeapAlloc HeapReAlloc HeapFree RtlUnwind SetEvent CreateEventW SetPriorityClass FreeLibrary GetLastError SetLastError TerminateProcess OpenProcess GetCurrentProcessId SetErrorMode AddVectoredExceptionHandler ExitProcess CreateFileMappingA InitializeCriticalSection MapViewOfFile EnterCriticalSection Sleep LeaveCriticalSection UnmapViewOfFile VirtualProtect IsBadWritePtr GetModuleHandleA lstrcmpiA LoadLibraryA GetProcAddress GetCurrentProcess GetCurrentThread SetThreadPriority WaitForSingleObject CloseHandle LoadResource SizeofResource LockResource SetEnvironmentVariableA CompareStringA

user32

TranslateMessage SetFocus GetFocus GetMessageW PeekMessageW PostMessageW SendMessageTimeoutW GetWindowTextW EnumWindows GetMessageTime ReleaseDC GetDC SetWindowTextW GetAncestor RegisterClassExW GetMessageExtraInfo GetParent DispatchMessageW MessageBoxW SetCursorPos MessageBeep CloseClipboard GetClipboardData OpenClipboard DestroyCursor SetCursor LoadCursorW GetIconInfo CreateIconIndirect AttachThreadInput IsChild WindowFromPoint GetMessagePos GetCursorPos SetClipboardData EmptyClipboard EnableMenuItem GetWindowThreadProcessId DestroyIcon GetSystemMetrics GetForegroundWindow SendInput GetClientRect SystemParametersInfoW CreateWindowExW GetDesktopWindow GetWindowLongW DefWindowProcW GetWindow SetWindowPos SendMessageW CallWindowProcW IsWindow GetActiveWindow MapVirtualKeyW GetUpdateRgn BeginPaint EndPaint EnumDisplayMonitors GetWindowRect MoveWindow SetWindowLongW DestroyWindow GetWindowInfo UnregisterClassW TrackMouseEvent SetCapture GetCapture ReleaseCapture InvalidateRect DestroyCaret GetSystemMenu ShowWindow GetWindowPlacement SetCaretPos ShowCaret CreateCaret SetForegroundWindow RedrawWindow SetLayeredWindowAttributes GetAsyncKeyState

gdi32

GetKerningPairsW GetGlyphOutlineW GetGlyphIndicesW SetMapperFlags SetMapMode CreateFontIndirectW SelectObject GetTextMetricsW DeleteObject CreateCompatibleDC DeleteDC CreateRectRgn GetPixel CreateDIBSection GetObjectW CreateBitmap RestoreDC StretchDIBits SaveDC ExcludeClipRect GetRegionData CombineRgn GetOutlineTextMetricsW CreateRectRgnIndirect

comdlg32

GetOpenFileNameW GetSaveFileNameW

advapi32

RegQueryValueExW RegCreateKeyExW RegOpenKeyExW RegCloseKey

shell32

SHGetSpecialFolderPathW ExtractAssociatedIconW SHGetMalloc SHGetPathFromIDListW SHBrowseForFolderW ShellExecuteW

ole32

RevokeDragDrop DoDragDrop CoTaskMemAlloc OleInitialize OleUninitialize RegisterDragDrop

imagehlp

MapAndLoad ImageRvaToVa UnMapAndLoad ImageDirectoryEntryToData

shlwapi

PathStripToRootW

winmm

timeBeginPeriod timeGetTime

imm32

ImmReleaseContext ImmGetContext ImmGetCompositionStringW ImmSetCandidateWindow ImmNotifyIME

$0/ILPluginScanner64.exe

IMPHASH a53b15766d9800d72604c8389f287db0
SHA256 0ecdf93da82cbd2a4684befbc018277a6dde5319d2a7eca16e6a67d0d2afb3ed
MD5 3f0b471ea570890e7b8503a58b5f3d42
SHA1 fa0bbf0260ea77ff9f7b47eb9ce53062631f16a2
SHA512 a6396eb304d7342c3db4902ee5b6bd79da9635c339ad98b01145911bc95b5da29f3e00b5ba687125e16b88d5085d0da5ccfacda386915554dd42c1e8ebc34cc6
SSDEEP 24576:Hce4XVZXVSZu3E82KFwOQCB7V6gpRFS4tTNYIhTiR4NpfodKRKVu:A3GqwnWV6gwIYIhT30S
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

15:57:1b:40:fd:64:14:c6:64:f6:da:1a:40:43:f4:1d:9d:39:98:d9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

2

Major OS version

5

Entry point

1001676

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d:\image-line\cplusplus\ILClasses\trunk\extras\IPCPluginScanner_Demo\Builds\VisualStudio2008\Release\InterprocessPluginScan.pdb

kernel32

GetVersionExW QueryPerformanceFrequency QueryPerformanceCounter DeleteCriticalSection TerminateThread GetCurrentThreadId SetThreadAffinityMask IsDebuggerPresent ReleaseMutex FindClose ReadFile GetFileAttributesW GetFileAttributesExW CreateFileW GetCurrentDirectoryW SetCurrentDirectoryW FindNextFileW FindFirstFileW WriteFile OutputDebugStringW GetLocaleInfoW LoadLibraryW CreateMutexW GetDriveTypeW FormatMessageW CreateDirectoryW FlushFileBuffers GetVolumeInformationW GetModuleFileNameW GetLogicalDriveStringsW GetTempPathW GlobalUnlock GlobalSize GlobalLock GetCommandLineW GlobalAlloc SetEnvironmentVariableA CompareStringW CompareStringA CreateFileA GetConsoleOutputCP WriteConsoleA GetTickCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStringTypeW GetStringTypeA IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetTimeFormatA GetDateFormatA InitializeCriticalSectionAndSpinCount GetConsoleMode GetConsoleCP SetStdHandle SetHandleCount HeapSize LCMapStringW MultiByteToWideChar LCMapStringA IsValidCodePage GetOEMCP GetACP GetCPInfo GetModuleFileNameA GetStdHandle HeapCreate HeapSetInformation FlsAlloc FlsFree FlsSetValue FlsGetValue DecodePointer EncodePointer GetStartupInfoA GetCommandLineA CreateThread ExitThread WideCharToMultiByte GetSystemTimeAsFileTime GetTimeZoneInformation GetModuleHandleW GetFileType RtlPcToFileHeader RaiseException RtlCaptureContext RtlVirtualUnwind SetUnhandledExceptionFilter UnhandledExceptionFilter HeapAlloc HeapReAlloc HeapFree RtlUnwindEx RtlLookupFunctionEntry SetFilePointer FindResourceW SetEvent CreateEventW SetPriorityClass FreeLibrary GetLastError SetLastError LockResource TerminateProcess OpenProcess GetCurrentProcessId SetErrorMode AddVectoredExceptionHandler ExitProcess CreateFileMappingA InitializeCriticalSection MapViewOfFile EnterCriticalSection Sleep LeaveCriticalSection UnmapViewOfFile VirtualProtect IsBadWritePtr GetModuleHandleA lstrcmpiA LoadLibraryA GetProcAddress GetCurrentProcess GetCurrentThread SetThreadPriority WaitForSingleObject CloseHandle LoadResource SizeofResource WriteConsoleW

user32

GetFocus GetMessageW PeekMessageW PostMessageW SendMessageTimeoutW GetWindowTextW EnumWindows GetMessageTime ReleaseDC GetDC SetWindowTextW GetAncestor GetAsyncKeyState GetMessageExtraInfo GetParent DestroyWindow MessageBoxW SetFocus MessageBeep CloseClipboard GetClipboardData OpenClipboard DestroyCursor SetCursor LoadCursorW GetIconInfo CreateIconIndirect GetWindowInfo IsChild WindowFromPoint DispatchMessageW GetCursorPos SetClipboardData EmptyClipboard DestroyIcon GetSystemMetrics SetCursorPos TranslateMessage GetForegroundWindow SendInput GetClientRect SystemParametersInfoW EnumDisplayMonitors EndPaint BeginPaint GetUpdateRgn UnregisterClassW RegisterClassExW CreateWindowExW GetDesktopWindow GetWindowLongPtrW DefWindowProcW GetWindowThreadProcessId ReleaseCapture GetCapture SetCapture TrackMouseEvent GetActiveWindow MapVirtualKeyW AttachThreadInput GetWindow SetWindowPos SendMessageW CallWindowProcW IsWindow GetWindowRect MoveWindow SetWindowLongPtrW GetMessagePos InvalidateRect DestroyCaret GetSystemMenu ShowWindow GetWindowPlacement SetCaretPos ShowCaret CreateCaret SetForegroundWindow RedrawWindow SetLayeredWindowAttributes SetWindowLongW GetWindowLongW EnableMenuItem

gdi32

GetPixel GetTextMetricsW GetKerningPairsW GetGlyphOutlineW GetGlyphIndicesW SetMapperFlags SetMapMode CreateFontIndirectW GetObjectW GetOutlineTextMetricsW DeleteObject CreateCompatibleDC DeleteDC CreateDIBSection CreateBitmap RestoreDC StretchDIBits SaveDC ExcludeClipRect GetRegionData CombineRgn CreateRectRgnIndirect CreateRectRgn SelectObject

comdlg32

GetSaveFileNameW GetOpenFileNameW

advapi32

RegQueryValueExW RegCreateKeyExW RegOpenKeyExW RegCloseKey

shell32

ShellExecuteW SHGetSpecialFolderPathW ExtractAssociatedIconW SHGetMalloc SHGetPathFromIDListW SHBrowseForFolderW

ole32

RevokeDragDrop DoDragDrop CoTaskMemAlloc OleInitialize OleUninitialize RegisterDragDrop

imagehlp

MapAndLoad ImageRvaToVa UnMapAndLoad ImageDirectoryEntryToData

shlwapi

PathStripToRootW

winmm

timeBeginPeriod timeGetTime

imm32

ImmReleaseContext ImmGetContext ImmGetCompositionStringW ImmSetCandidateWindow ImmNotifyIME

Name

.text

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

59KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

84KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

25B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$0/ILRemoteServer.dll

IMPHASH e7b3d7f6818a523b3c0f082bdb50ae0a
SHA256 8ef3a1530a935b24cf69dff484e241e480ca6e459fac88c7d283c584d288c7eb
MD5 da40d736faed03ea7ae84b2a1daf37af
SHA1 c11ef307dcfda44ecac431dd5cb93a4d22f608fa
SHA512 e254095683f5a81e7d87f1b61994b2409061b58c32d72a89242f2fd759ff733419b381edbd2f870d6447c73a9abb31054ea3767c172e99d72699cb6e5cc0de0a
SSDEEP 1536:f3jVbJe0rUCyVFS52UBfwmbGOG3/Yf1vw413LGpOxxfvkUQdrEj4dz5zo7bE:fpbngCyVF+2Iz1rjNIrEj4N507o
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

1d:a3:14:e7:59:f8:ea:fa:a0:c0:be:89:80:29:32:f0:5d:e8:b9:c7

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

1

Major OS version

5

Entry point

33681

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

iphlpapi

GetAdaptersInfo

ws2_32

htonl sendto bind setsockopt htons inet_addr recvfrom closesocket WSAStartup WSACleanup socket

user32

SendInput

kernel32

WriteConsoleW SetEndOfFile GetStringTypeW LCMapStringW HeapReAlloc FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle CreateFileW InitializeCriticalSection EnterCriticalSection LeaveCriticalSection Sleep CreateThread GetTickCount GetCurrentProcessId GetCurrentThreadId DeleteCriticalSection HeapAlloc GetProcessHeap HeapFree GetSystemTimeAsFileTime GetLastError DecodePointer EncodePointer GetCommandLineA RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy GetProcAddress GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer SetHandleCount GetFileType GetStartupInfoW MultiByteToWideChar ReadFile CloseHandle GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryW HeapSize

$0/ILRemoteServer_x64.dll

IMPHASH 4b724f61892b7c96e8b81e8f508ac6f4
SHA256 c8a22211abdb08b697875144e867975a5a2daebf12f8d469f94382ee639e5589
MD5 d4ce776eaf93fa9335e709428ae0d6d2
SHA1 680f851d0c467c8d7f9705737c1e1c1eda508a5a
SHA512 00ec8c971bc76227ba8442adaf2e4a1814e074ab0c57cf71498792219ffe2c3942089b05456044dd019e81cdc6d5023839638f5e7e53083582f60abb328da747
SSDEEP 3072:teT/XpaJtxm/DESwYUkTXKpSwx1xqHPxE+4uNhTkICMOiG7Jp:tgXpa7/QTXGxSvxEWT+MHG77
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

4f:e0:ec:d6:97:e4:58:0a:0c:7b:b2:39:fe:8b:92:1d:20:0b:bb:8e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

6

Entry point

39748

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

iphlpapi

GetAdaptersInfo

ws2_32

htonl sendto bind setsockopt htons inet_addr recvfrom closesocket WSAStartup WSACleanup socket

user32

SendInput

kernel32

WriteConsoleW SetEndOfFile GetStringTypeW GetConsoleCP FlushFileBuffers SetStdHandle CreateFileW LCMapStringW InitializeCriticalSection EnterCriticalSection LeaveCriticalSection Sleep CreateThread GetTickCount GetCurrentProcessId GetCurrentThreadId DeleteCriticalSection HeapAlloc GetProcessHeap HeapFree GetSystemTimeAsFileTime GetLastError IsDebuggerPresent IsProcessorFeaturePresent EncodePointer DecodePointer ReadFile GetCommandLineA RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetProcAddress ExitProcess GetModuleHandleExW MultiByteToWideChar GetStdHandle WriteFile GetModuleFileNameW HeapSize SetFilePointer SetFilePointerEx GetConsoleMode ReadConsoleW GetFileType CloseHandle GetModuleFileNameA QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW WideCharToMultiByte IsValidCodePage GetACP GetOEMCP GetCPInfo LoadLibraryExW OutputDebugStringW LoadLibraryW HeapReAlloc

$0/LAMEenc.dll

IMPHASH 654022cc5ae5c599dd653bf802a4d5ce
SHA256 48243c0e143bd58dda514e16e298c9fd675b4f15f04d2d42da56d47f4c0e082b
MD5 d3557f632104c266e8e33762b28f2b43
SHA1 47e8f9f63e1b90760ab5735deff36e9bb6a3b901
SHA512 4767683f83a52a6e3323be2d28c9272d3e90ed62e82ab77fb690fb8035b14bbdfae303d32ba08fd6ddc036a6b94a928e0df49850335417d9ce98a852dda5b3f5
SSDEEP 6144:/whyN97NHjQJQqO2DzFZqTIUVcXpuv4dmaSj+u4AO+OYCi:IC7NHjQJQP2nrHUVL4QaSUxYCi
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

a7:5f:68:c3:91:5d:b5:1e:9f:c8:c7:69:63:f6:cf:21:51:bb:ec:a4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

4

Entry point

172026

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\programs\sdks\lame\lame-3.98.4\output\lame_enc.pdb

kernel32

GetModuleFileNameA GetPrivateProfileIntA OutputDebugStringA GetLastError HeapFree HeapAlloc GetCurrentThreadId GetCommandLineA GetVersionExA GetProcessHeap EnterCriticalSection LeaveCriticalSection GetProcAddress GetModuleHandleA ExitProcess HeapReAlloc MultiByteToWideChar ReadFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetFilePointer HeapDestroy HeapCreate VirtualFree DeleteCriticalSection VirtualAlloc CloseHandle WriteFile GetStdHandle SetHandleCount GetFileType GetStartupInfoA WideCharToMultiByte GetConsoleCP GetConsoleMode RtlUnwind TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement Sleep FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FlushFileBuffers LoadLibraryA InitializeCriticalSection HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA RaiseException GetLocaleInfoA GetStringTypeA GetStringTypeW SetEndOfFile

user32

MessageBoxA

$0/LAMEenc_x64.dll

IMPHASH e7e522730f5345ac0f43c286facfd3c7
SHA256 9e1efc5399893c908a42b008895c98688cc1f98276adc289a42b09406b887b11
MD5 272345b99f797829f312e70ec9811ea0
SHA1 08431e000a1042a6c07f9a57ec1dd934f8741ffa
SHA512 aa5f2286d79fd19f6bd9d244275383dfd2c168cd8349bf931f42a3b323975b91450fbce7dd7fc5c624977db0978b69694951eb0ef35b85a9a1be5c10d017e54b
SSDEEP 12288:WLdScp+JLBSaKazgiTsZn8H2Pkaw54MdKSK3InjBRBn/ucwb99wS60nyet3SJ:WLaQ3InjBRBn/3wb9X60nyet3W
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

4a:20:d3:3e:c0:a3:a9:2a:a8:38:bb:98:cb:44:88:47:65:24:a2:36

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

4

Entry point

225296

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\ImageLine\3rdparty\SDKs\lame\lame-3.98.4\output\lame_enc_x64.pdb

kernel32

GetModuleFileNameA GetPrivateProfileIntA OutputDebugStringA GetLastError HeapFree HeapAlloc GetCurrentThreadId FlsSetValue GetCommandLineA GetVersionExA GetProcessHeap EnterCriticalSection LeaveCriticalSection GetProcAddress GetModuleHandleA ExitProcess HeapReAlloc WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlCaptureContext RtlUnwindEx RtlVirtualUnwind RtlLookupFunctionEntry MultiByteToWideChar ReadFile HeapSetInformation HeapCreate HeapDestroy GetStdHandle SetFilePointer SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection CloseHandle FlsGetValue TlsFree FlsFree SetLastError TlsSetValue FlsAlloc Sleep FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FlushFileBuffers LoadLibraryA InitializeCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA LCMapStringW HeapSize WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA GetLocaleInfoA GetStringTypeA GetStringTypeW SetEndOfFile RaiseException

user32

MessageBoxA

$0/QuickFontCache.dll

IMPHASH f0c0b3cb700b46916e94b31a7296d235
SHA256 7553266e432b22fe1a8812c3c271a91020e779fd9795d83ad3f44e1a3f6aae6b
MD5 91d564248961c04026876fd7ba92bf3b
SHA1 964901aa980954b1eace3bb56708996105e361ec
SHA512 b44f4360bd98ed23ddb49de6fd86cef3e426ea16fed756b8778e3d25fb96f20b751e216cdda721574613d23d4273ec4da0aafc882fbccc0851316696ff34b447
SSDEEP 12288:o1yOfDnqHc8scfX7E66FWECcESA6o2Xms:tSLq88scfQ66mH+XF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

f2:51:5a:f8:ad:3f:7d:f0:e1:98:4d:71:58:59:a0:57:1c:0b:b5:0f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

5

Entry point

452224

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen GetErrorInfo SysFreeString SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopy VariantClear VariantInit

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey RegQueryValueExW RegOpenKeyExW RegFlushKey RegCloseKey

user32

MessageBoxA CharNextW LoadStringW SystemParametersInfoW MessageBoxW LoadStringW GetSystemMetrics CharUpperW

kernel32

Sleep VirtualFree VirtualAlloc lstrlenW lstrcpynW VirtualQuery QueryPerformanceCounter GetTickCount GetSystemInfo GetVersion CompareStringW IsValidLocale SetThreadLocale GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW WideCharToMultiByte MultiByteToWideChar GetACP LoadLibraryExW GetStartupInfoW GetProcAddress GetModuleHandleW GetModuleFileNameW GetCommandLineW FreeLibrary GetLastError UnhandledExceptionFilter RtlUnwind RaiseException ExitProcess GetCurrentThreadId DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection FindFirstFileW FindClose WriteFile GetStdHandle CloseHandle GetProcAddress RaiseException LoadLibraryA GetLastError TlsSetValue TlsGetValue TlsFree TlsAlloc LocalFree LocalAlloc FreeLibrary WriteFile WideCharToMultiByte WaitForSingleObject VirtualQueryEx VirtualQuery VirtualFree SwitchToThread SetLastError SetFilePointer SetEvent SetErrorMode SetEndOfFile SetDllDirectoryW ResetEvent ReadFile QueryPerformanceFrequency LocalFree LoadLibraryW LeaveCriticalSection IsValidLocale InitializeCriticalSection GetVersionExW GetTickCount GetThreadLocale GetStdHandle GetProcAddress GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetLocalTime GetLastError GetFullPathNameW GetFileAttributesW GetDiskFreeSpaceW GetDateFormatW GetCurrentThreadId GetCurrentProcess GetCPInfoExW GetCPInfo GetACP InterlockedExchangeAdd InterlockedCompareExchange FreeLibrary FormatMessageW FindFirstFileW FindClose EnumSystemLocalesW EnumCalendarInfoW EnterCriticalSection DeleteCriticalSection CreateFileW CreateEventW CompareStringW CloseHandle Sleep

ole32

CoUninitialize CoInitialize

shell32

SHGetFolderPathA

freetype

FT_Set_Pixel_Sizes FT_Get_Kerning FT_Render_Glyph FT_Load_Glyph FT_Get_Char_Index FT_Select_Charmap FT_Done_Face FT_New_Face FT_New_Memory_Face FT_Done_FreeType FT_Init_FreeType

Name

.text

Size

430KB

Virtual Size

429KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

24KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

512B

Virtual Size

340B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

119B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

38KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

$0/QuickFontCache_x64.dll

IMPHASH eed1ed74766f93ecd9d73fb288280590
SHA256 10ac0de701948aab188205dbdbe534dfcb04d663ce96415e86237f4fc197e7f9
MD5 423608a4394b8aff0ff40973d2a63916
SHA1 c645bf3a54ecda5bfd7336deaaa7bd06520a28df
SHA512 2706b04c4d4135e0dfb773a57d86181d7975dcd4bde3ce7e5adac2df42456b9fecce9c46a616c57a3ce460931b274fbfa707a2c16973eb0a86a9a5f98e45506a
SSDEEP 6144:l//E15CrHnEuyvYDwGw8zrlQRHX6qSB4MYTYzoFu+N5N3yWc1cvDFFJhl:xcUrHEjv8w8P2HWB4SuND30Kl
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

9b:69:96:12:a3:e6:fc:6d:d7:c2:0f:35:48:fe:1f:90:48:b9:05:b5

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

2

Major OS version

5

Entry point

666976

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen GetErrorInfo SysFreeString SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopy VariantClear VariantInit

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey RegQueryValueExW RegOpenKeyExW RegFlushKey RegCloseKey

user32

MessageBoxA CharNextW LoadStringW SystemParametersInfoW MessageBoxW LoadStringW GetSystemMetrics CharUpperW

kernel32

Sleep VirtualFree VirtualAlloc HeapFree HeapAlloc GetProcessHeap lstrlenW lstrcpynW VirtualQuery QueryPerformanceCounter GetTickCount GetSystemInfo GetVersion CompareStringW IsValidLocale SetThreadLocale GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW WideCharToMultiByte MultiByteToWideChar GetACP LoadLibraryExW GetStartupInfoW GetProcAddress GetModuleHandleW GetModuleFileNameW GetCommandLineW FreeLibrary GetLastError UnhandledExceptionFilter RtlUnwindEx RtlUnwind RaiseException ExitProcess GetCurrentThreadId DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection FindFirstFileW FindClose WriteFile GetStdHandle CloseHandle GetProcAddress RaiseException LoadLibraryA GetLastError TlsSetValue TlsGetValue TlsFree TlsAlloc LocalFree LocalAlloc FreeLibrary WriteFile WideCharToMultiByte WaitForSingleObject VirtualQueryEx VirtualQuery VirtualFree SwitchToThread SetLastError SetFilePointer SetEvent SetErrorMode SetEndOfFile SetDllDirectoryW ResetEvent ReadFile LocalFree LoadLibraryW LeaveCriticalSection IsValidLocale InitializeCriticalSection GetVersionExW GetTickCount GetThreadLocale GetStdHandle GetProcAddress GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetLocalTime GetLastError GetFullPathNameW GetFileAttributesW GetDiskFreeSpaceW GetDateFormatW GetCurrentThreadId GetCurrentProcess GetCPInfoExW GetCPInfo GetACP FreeLibrary FormatMessageW FindFirstFileW FindClose EnumSystemLocalesW EnumCalendarInfoW EnterCriticalSection DeleteCriticalSection CreateFileW CreateEventW CompareStringW CloseHandle Sleep

ole32

CoUninitialize CoInitialize

shell32

SHGetFolderPathA

freetype_x64

FT_Set_Pixel_Sizes FT_Get_Kerning FT_Render_Glyph FT_Load_Glyph FT_Get_Char_Index FT_Select_Charmap FT_Done_Face FT_New_Face FT_New_Memory_Face FT_Done_FreeType FT_Init_FreeType

Name

.text

Size

647KB

Virtual Size

647KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

56KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

44KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

512B

Virtual Size

448B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

123B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

29KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.pdata

Size

33KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

$0/REX Shared Library.dll

IMPHASH 8325134a805e75d948ccc2006d92681e
SHA256 cb24a3b0821d97f48e2e8543d1228a15540dcc4dfc39aea368c61e0173c2a739
MD5 fa3ff0578968f0a72ee64689d7c5af86
SHA1 dfefeb6232a107a3c1213488d0be9063e406f98a
SHA512 be2025d0da00d21157bc58e4508d0e31451d65e725b3a83dd2b41e53041d8915b8eeb57c24bb677b2fc8e443d8500ed06d28bfa66db07d2a7d1bb2ab1ea73ae1
SSDEEP 3072:9Dz5WBCy55McTgcbXfmv/gdaoW/bljlw6//xOnTnmAg0FuTwhYnA8Doz3y89E:Vlhebfm3sIp1wnTmAOk6oa
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

32:d4:83:02:0c:b8:a1:4e:d8:81:4a:f4:0e:a8:0a:d2:39:ef:3d:16

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

5

Entry point

116112

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

winmm

timeGetTime

kernel32

GetCPInfo FlushFileBuffers DisableThreadLibraryCalls GetLastError MultiByteToWideChar WideCharToMultiByte GetACP CreateMutexW CloseHandle WaitForSingleObject ReleaseMutex Sleep GetCurrentProcess InterlockedExchange QueryPerformanceCounter CreateFileA WriteConsoleW GetConsoleOutputCP InterlockedIncrement InterlockedDecrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLocaleInfoA RtlUnwind RaiseException TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree GetModuleHandleW GetProcAddress ExitProcess GetCurrentThreadId GetCommandLineA LCMapStringA LCMapStringW GetStringTypeW HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetModuleHandleA WriteFile GetStdHandle GetModuleFileNameA HeapSize HeapCreate HeapDestroy VirtualFree VirtualAlloc HeapReAlloc GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSectionAndSpinCount SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA

$0/REX Shared Library_x64.dll

IMPHASH abd823488a02e1464603eeadd6ca5b86
SHA256 65165918e5f4775a8b35574e7530181cf687d4390cc5232bf6c7ebf6d45ed9ec
MD5 4256c17d206257f12517a028e617113d
SHA1 be74dc09f1505db498914792c3d512b693b71b15
SHA512 fc7b5296ab903405630bb9fe2f8586a7785b71c39e715e48611c4a07fafaa64ec8c2f55a813e53d091a64cdb55cab70dae83a8b44d58863fcb02ede0bb3af53b
SSDEEP 6144:t9oCvZDZm+2VYnrzzc3y8eVdquNwoXejGJPoppuu+ToUukVgb:t9oqZ4YY3y86JNwgPo7KoUukCb
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

c5:bf:9a:a8:75:a6:da:e6:22:94:bf:95:d8:2d:f5:64:73:8b:30:4b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

2

Major OS version

5

Entry point

130424

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

winmm

timeGetTime

kernel32

GetCPInfo FlushFileBuffers DisableThreadLibraryCalls GetLastError MultiByteToWideChar WideCharToMultiByte GetACP CreateMutexW CloseHandle WaitForSingleObject ReleaseMutex Sleep GetCurrentProcess QueryPerformanceCounter CreateFileA WriteConsoleW GetConsoleOutputCP InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLocaleInfoA RtlLookupFunctionEntry RtlUnwindEx RaiseException RtlPcToFileHeader TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext HeapFree GetModuleHandleW GetProcAddress ExitProcess GetCurrentThreadId FlsSetValue GetCommandLineA LCMapStringA LCMapStringW GetStringTypeW EncodePointer DecodePointer FlsGetValue FlsFree SetLastError FlsAlloc HeapAlloc WriteFile GetStdHandle GetModuleFileNameA HeapSize HeapSetInformation HeapCreate HeapDestroy GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSectionAndSpinCount SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA

$0/Reverb.dll

IMPHASH bd65ec4c173739c6ea5c9bffb160ec15
SHA256 a2d552c6cf8f4021d512e122d69620057a10b9aff9260af884e995c2420d936e
MD5 c888bfbe07a15f80b4d1f82dac54c2ee
SHA1 a8838eae4c9c8bb0fd196c2767f5e2299e5743e2
SHA512 d6901a3e23b36f6ec981eb68b27de3fbe8867b083b21b380c32114311c51ed033559a60ba8c3f156961d630a604b7a9a761f3793290237047c07ac55e95397ce
SSDEEP 768:+Jb7GIzLkBstqosbnrGgsfNCae2gEdG4vKNIt1thkcv16U+ah:+YSQnrTsfje7MGFAtxs2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

3b:1a:05:80:04:78:2b:55:f8:ae:8e:a4:05:e1:7f:35:de:d3:e6:5e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

4

Entry point

9757

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$0/Reverb_x64.dll

IMPHASH 8b91309cfba9a6d437f29bb3fbe6069d
SHA256 584538cf3a60892ba541ea64e43713a64ef14ccd5bd0e714e5dd01d791ec0fc7
MD5 7215083e069bca06cb0a7fa34b3b69f4
SHA1 e7db05da2350dcb748f23abcd5f1f391ad023410
SHA512 5d166df6fe6a82b0a6bbdc8d8c618c69fd4755c49c73ccb2d6c2ca84438c0ddcc64d322581a3b451cd35cbbd14dcb4ac10571dbe959884b9d72dcdf142707b24
SSDEEP 1536:5zNcHRVtF7MFKo8csrCqe6iZOKxoRnftCdp9LQN:5aHRVT7MFKo8csGL6iZOKxWfMdTLO
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

2b:ef:fd:00:03:13:96:43:71:fa:2d:f6:3e:8d:24:d4:d6:2c:42:89

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

4

Entry point

11200

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

$0/SG.dll

IMPHASH adfd1f074d1ad27cac50b1735a70221b
SHA256 7ca55c8369cc0107593b09ffe94ca8af247d4c4ec0c719795f62968d4a1b1d3a
MD5 1b3c15f1763b7ba6806586a4d1cb6055
SHA1 429f9e098e771dd68865b430d71ede3c5d8d2ea6
SHA512 ea3c40406366ccfd90126e1fe42b08c3c744d97c75937f609a5ca51d129b6eddf7288ded524f429eeec5df7b29ecc0ecf11b4e457eed94a2a9097cd46dbd0fa7
SSDEEP 49152:hQqgwX3LvzAndlDkWsYeKG+XMsn7tReTu8rO0OpB:SqgCvzAndlDk+GCnBLv
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

f0:50:e6:c5:7e:c4:f7:78:30:ca:40:45:f5:f2:a1:a2:9b:39:95:ad

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

5

Entry point

1821828

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen GetErrorInfo GetActiveObject SysFreeString SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopy VariantClear VariantInit

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey RegSetValueExW RegQueryValueExW RegOpenKeyExW RegFlushKey RegCreateKeyExW RegCloseKey

user32

MessageBoxA CharNextW LoadStringW SetClassLongW GetClassLongW SetWindowLongW GetWindowLongW CreateWindowExW WindowFromPoint WaitMessage ValidateRect UpdateWindow UnregisterClassW UnionRect UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenu SystemParametersInfoW ShowWindow ShowScrollBar ShowOwnedPopups ShowCursor ShowCaret SetWindowRgn SetWindowsHookExW SetWindowTextW SetWindowPos SetWindowPlacement SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRect SetPropW SetParent SetMenuItemInfoW SetMenu SetForegroundWindow SetFocus SetCursorPos SetCursor SetClipboardData SetCapture SetActiveWindow SendMessageA SendMessageW ScrollWindowEx ScrollWindow ScreenToClient RemovePropW RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageW RegisterClipboardFormatW RegisterClassW RedrawWindow PtInRect PostQuitMessage PostMessageW PeekMessageA PeekMessageW OpenClipboard OffsetRect MsgWaitForMultipleObjectsEx MsgWaitForMultipleObjects MessageBoxW MessageBeep MapWindowPoints MapVirtualKeyW LockWindowUpdate LoadStringW LoadKeyboardLayoutW LoadIconW LoadCursorW LoadBitmapW KillTimer IsZoomed IsWindowVisible IsWindowUnicode IsWindowEnabled IsWindow IsIconic IsDialogMessageA IsDialogMessageW IsClipboardFormatAvailable IsChild InvalidateRect IntersectRect InsertMenuItemW InsertMenuW InflateRect HideCaret GetWindowThreadProcessId GetWindowTextW GetWindowRect GetWindowPlacement GetWindowDC GetTopWindow GetSystemMetrics GetSystemMenu GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropW GetParent GetWindow GetMessageTime GetMessagePos GetMessageExtraInfo GetMenuStringW GetMenuState GetMenuItemInfoW GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutNameW GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextW GetIconInfo GetForegroundWindow GetFocus GetDlgItem GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClipboardFormatNameW GetClipboardData GetClipCursor GetClientRect GetClassInfoW GetCapture GetActiveWindow FrameRect FindWindowExW FindWindowW FillRect EnumWindows EnumThreadWindows EnumClipboardFormats EnumChildWindows EndPaint EnableWindow EnableScrollBar EnableMenuItem EmptyClipboard DrawTextExW DrawTextA DrawTextW DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawFocusRect DrawEdge DispatchMessageA DispatchMessageW DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcW DefMDIChildProcW DefFrameProcW CreatePopupMenu CreateMenu CreateIcon CloseClipboard ClientToScreen CheckMenuItem CharUpperBuffW CharUpperW CharToOemBuffW CharNextW CharLowerBuffW CharLowerW CallWindowProcW CallNextHookEx BeginPaint AttachThreadInput AdjustWindowRectEx ActivateKeyboardLayout EnumDisplayMonitors GetMonitorInfoW MonitorFromPoint MonitorFromRect MonitorFromWindow

kernel32

Sleep VirtualFree VirtualAlloc lstrlenW lstrcpynW VirtualQuery QueryPerformanceCounter GetTickCount GetSystemInfo GetVersion CompareStringW IsValidLocale SetThreadLocale GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW WideCharToMultiByte MultiByteToWideChar GetConsoleOutputCP GetConsoleCP GetACP LoadLibraryExW GetStartupInfoW GetProcAddress GetModuleHandleW GetModuleFileNameW GetCommandLineW FreeLibrary GetLastError UnhandledExceptionFilter RtlUnwind RaiseException ExitProcess ExitThread SwitchToThread GetCurrentThreadId CreateThread DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection FindFirstFileW FindClose WriteFile SetFilePointer SetEndOfFile ReadFile GetFileType GetFileSize CreateFileW GetStdHandle CloseHandle GetProcAddress RaiseException LoadLibraryA GetLastError TlsSetValue TlsGetValue TlsFree TlsAlloc LocalFree LocalAlloc FreeLibrary lstrcmpiW WriteFile WideCharToMultiByte WaitForSingleObject WaitForMultipleObjectsEx VirtualQueryEx VirtualQuery VirtualFree VirtualAlloc UnmapViewOfFile SwitchToThread SuspendThread Sleep SizeofResource SetThreadPriority SetThreadLocale SetLastError SetFilePointer SetFileAttributesW SetEvent SetErrorMode SetEndOfFile SetDllDirectoryW ResumeThread ResetEvent RemoveDirectoryW ReadFile QueryDosDeviceW OutputDebugStringW MultiByteToWideChar MulDiv MoveFileW MapViewOfFile LockResource LocalFree LoadResource LoadLibraryW LeaveCriticalSection IsValidLocale InitializeCriticalSection GlobalUnlock GlobalSize GlobalLock GlobalFree GlobalFindAtomW GlobalDeleteAtom GlobalAlloc GlobalAddAtomW GetVolumeInformationW GetVersionExW GetVersion GetUserDefaultLCID GetTickCount GetThreadPriority GetThreadLocale GetTempPathA GetSystemInfo GetStdHandle GetProcAddress GetModuleHandleW GetModuleFileNameA GetModuleFileNameW GetLogicalDriveStringsW GetLocaleInfoW GetLocalTime GetLastError GetFullPathNameW GetFileSize GetFileAttributesW GetExitCodeThread GetDriveTypeW GetDiskFreeSpaceW GetDateFormatW GetCurrentThreadId GetCurrentThread GetCurrentProcessId GetCurrentProcess GetComputerNameW GetCPInfoExW GetCPInfo GetACP FreeResource InterlockedExchangeAdd InterlockedExchange InterlockedCompareExchange FreeLibrary FormatMessageW FindResourceW FindNextFileW FindFirstFileW FindClose FileTimeToLocalFileTime FileTimeToDosDateTime EnumSystemLocalesW EnumCalendarInfoW EnterCriticalSection DuplicateHandle DeleteFileW DeleteCriticalSection CreateThread CreateFileMappingW CreateFileA CreateFileW CreateEventW CreateDirectoryW CompareStringW CloseHandle Sleep DeleteTimerQueueTimer CreateTimerQueueTimer GetProcAddress FreeLibrary

msimg32

AlphaBlend

gdi32

UnrealizeObject TextOutW StretchDIBits StretchBlt SetWindowOrgEx SetWinMetaFileBits SetViewportOrgEx SetTextColor SetStretchBltMode SetROP2 SetPixelV SetPixel SetMapMode SetEnhMetaFileBits SetDIBitsToDevice SetDIBits SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SelectPalette SelectObject SelectClipRgn SaveDC RoundRect RestoreDC ResizePalette Rectangle RectVisible RealizePalette Polyline Polygon PolyBezierTo PolyBezier PlayEnhMetaFile Pie PatBlt OffsetRgn MoveToEx MaskBlt LineTo LPtoDP IntersectClipRect GetWindowOrgEx GetWinMetaFileBits GetTextMetricsW GetTextExtentPointW GetTextExtentPoint32W GetSystemPaletteEntries GetStockObject GetRgnBox GetRegionData GetRandomRgn GetPixel GetPaletteEntries GetObjectW GetNearestPaletteIndex GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileDescriptionW GetEnhMetaFileBits GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetClipRgn GetClipBox GetBrushOrgEx GetBitmapBits GdiFlush FrameRgn ExtTextOutW ExtFloodFill ExcludeClipRect EnumFontFamiliesExW Ellipse DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreateRectRgnIndirect CreateRectRgn CreatePenIndirect CreatePalette CreateHalftonePalette CreateFontIndirectW CreateEnhMetaFileW CreateDIBitmap CreateDIBSection CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileW CloseEnhMetaFile Chord BitBlt ArcTo Arc AngleArc

version

VerQueryValueA VerQueryValueW GetFileVersionInfoSizeA GetFileVersionInfoSizeW GetFileVersionInfoA GetFileVersionInfoW

shfolder

SHGetFolderPathA

ole32

CoCreateGuid CreateStreamOnHGlobal CreateILockBytesOnHGlobal IsAccelerator ReleaseStgMedium OleDraw OleSetMenuDescriptor OleIsCurrentClipboard OleFlushClipboard OleGetClipboard OleSetClipboard DoDragDrop RevokeDragDrop RegisterDragDrop OleUninitialize OleInitialize StgCreateDocfileOnILockBytes CoTaskMemFree CoTaskMemAlloc ProgIDFromCLSID StringFromCLSID CoCreateInstance CoGetInterfaceAndReleaseStream CoMarshalInterThreadInterfaceInStream CoGetClassObject CoUninitialize CoInitialize IsEqualGUID

comctl32

InitializeFlatSB FlatSB_SetScrollProp FlatSB_SetScrollPos FlatSB_SetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollInfo _TrackMouseEvent ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_SetDragCursorImage ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_GetIcon ImageList_Remove ImageList_DrawEx ImageList_Replace ImageList_Draw ImageList_GetBkColor ImageList_SetBkColor ImageList_Add ImageList_SetImageCount ImageList_GetImageCount ImageList_Destroy ImageList_Create

shell32

SHGetFileInfoW SHFileOperationW ShellExecuteA Shell_NotifyIconW DragQueryPoint DragQueryFileA DragFinish DragAcceptFiles SHGetPathFromIDListW SHGetMalloc SHGetDesktopFolder ord18

msvcrt

memset memcpy

comdlg32

ChooseColorW GetSaveFileNameW GetOpenFileNameW

winmm

timeGetTime timeGetDevCaps timeEndPeriod timeBeginPeriod

msacm32

acmStreamUnprepareHeader acmStreamPrepareHeader acmStreamConvert acmStreamMessage acmStreamSize acmStreamClose acmStreamOpen acmFormatSuggest acmFormatChooseA acmDriverDetailsA acmDriverClose acmDriverOpen acmDriverEnum acmMetrics

Name

.text

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

49KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

31KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

84B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

130KB

Virtual Size

129KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

396KB

Virtual Size

396KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

$0/SG_x64.dll

IMPHASH 9239b0a79fe3a94ceb0aabb9c555655a
SHA256 b053e861ebd3261cbc1a9e7c01d8aa1f4125b2a7e263a59f43be378eaf8777d5
MD5 8d2db197d94df29d23abd829ec309d8e
SHA1 ea15dc2624c404a40a7f780e6240967c07e70280
SHA512 e1ec6c0ad25bfbc2d7817926f173db238d39ee174b87003963d80ae92790d51c7d0c78c1596789a64390360b78778e29c18025954cf2d12f0c62a130ff5a04f0
SSDEEP 49152:dqsbNznSTMgRCPlperj5fq9EWTSmwRp0Tu:qMNP3k3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

73:82:1f:ad:5b:7e:f1:06:68:75:23:1a:27:86:24:5f:1e:a0:2d:f2

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

2

Major OS version

5

Entry point

2701360

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen GetErrorInfo GetActiveObject SysFreeString SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopy VariantClear VariantInit

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey RegSetValueExW RegQueryValueExW RegOpenKeyExW RegFlushKey RegCreateKeyExW RegCloseKey

user32

MessageBoxA CharNextW LoadStringW SetClassLongPtrW GetClassLongPtrW SetWindowLongPtrW GetWindowLongPtrW CreateWindowExW WindowFromPoint WaitMessage ValidateRect UpdateWindow UnregisterClassW UnionRect UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenu SystemParametersInfoW ShowWindow ShowScrollBar ShowOwnedPopups ShowCursor ShowCaret SetWindowRgn SetWindowsHookExW SetWindowTextW SetWindowPos SetWindowPlacement SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRect SetPropW SetParent SetMenuItemInfoW SetMenu SetForegroundWindow SetFocus SetCursorPos SetCursor SetClipboardData SetCapture SetActiveWindow SendMessageA SendMessageW ScrollWindowEx ScrollWindow ScreenToClient RemovePropW RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageW RegisterClipboardFormatW RegisterClassW RedrawWindow PtInRect PostQuitMessage PostMessageW PeekMessageA PeekMessageW OpenClipboard OffsetRect MsgWaitForMultipleObjectsEx MsgWaitForMultipleObjects MessageBoxW MessageBeep MapWindowPoints MapVirtualKeyW LockWindowUpdate LoadStringW LoadKeyboardLayoutW LoadIconW LoadCursorW LoadBitmapW KillTimer IsZoomed IsWindowVisible IsWindowUnicode IsWindowEnabled IsWindow IsIconic IsDialogMessageA IsDialogMessageW IsClipboardFormatAvailable IsChild InvalidateRect IntersectRect InsertMenuItemW InsertMenuW InflateRect HideCaret GetWindowThreadProcessId GetWindowTextW GetWindowRect GetWindowPlacement GetWindowDC GetUpdateRect GetTopWindow GetSystemMetrics GetSystemMenu GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropW GetParent GetWindow GetMessageTime GetMessagePos GetMessageExtraInfo GetMenuStringW GetMenuState GetMenuItemInfoW GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutNameW GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextW GetIconInfo GetForegroundWindow GetFocus GetDlgItem GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClipboardFormatNameW GetClipboardData GetClipCursor GetClientRect GetClassInfoW GetCapture GetActiveWindow FrameRect FindWindowExW FindWindowW FillRect EnumWindows EnumThreadWindows EnumClipboardFormats EnumChildWindows EndPaint EnableWindow EnableScrollBar EnableMenuItem EmptyClipboard DrawTextExW DrawTextA DrawTextW DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawFocusRect DrawEdge DispatchMessageA DispatchMessageW DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcW DefMDIChildProcW DefFrameProcW CreatePopupMenu CreateMenu CreateIcon CloseClipboard ClientToScreen CheckMenuItem CharUpperBuffW CharUpperW CharToOemBuffW CharNextW CharLowerBuffW CharLowerW CallWindowProcW CallNextHookEx BeginPaint AttachThreadInput AdjustWindowRectEx ActivateKeyboardLayout EnumDisplayMonitors GetMonitorInfoW MonitorFromPoint MonitorFromRect MonitorFromWindow

kernel32

Sleep VirtualFree VirtualAlloc HeapFree HeapAlloc GetProcessHeap lstrlenW lstrcpynW VirtualQuery QueryPerformanceCounter GetTickCount GetSystemInfo GetVersion CompareStringW IsValidLocale SetThreadLocale GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW WideCharToMultiByte MultiByteToWideChar GetConsoleOutputCP GetConsoleCP GetACP LoadLibraryExW GetStartupInfoW GetProcAddress GetModuleHandleW GetModuleFileNameW GetCommandLineW FreeLibrary GetLastError UnhandledExceptionFilter RtlUnwindEx RtlUnwind RaiseException ExitProcess ExitThread SwitchToThread GetCurrentThreadId CreateThread DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection FindFirstFileW FindClose WriteFile SetFilePointer SetEndOfFile ReadFile GetFileType GetFileSize CreateFileW GetStdHandle CloseHandle GetProcAddress RaiseException LoadLibraryA GetLastError TlsSetValue TlsGetValue TlsFree TlsAlloc LocalFree LocalAlloc FreeLibrary lstrcmpiW WriteFile WideCharToMultiByte WaitForSingleObject WaitForMultipleObjectsEx VirtualQueryEx VirtualQuery VirtualFree VirtualAlloc UnmapViewOfFile SwitchToThread SuspendThread Sleep SizeofResource SetThreadPriority SetThreadLocale SetLastError SetFilePointer SetFileAttributesW SetEvent SetErrorMode SetEndOfFile SetDllDirectoryW ResumeThread ResetEvent RemoveDirectoryW ReadFile QueryDosDeviceW OutputDebugStringW MultiByteToWideChar MulDiv MoveFileW MapViewOfFile LockResource LocalFree LoadResource LoadLibraryW LeaveCriticalSection IsValidLocale InitializeCriticalSection GlobalUnlock GlobalSize GlobalLock GlobalFree GlobalFindAtomW GlobalDeleteAtom GlobalAlloc GlobalAddAtomW GetVolumeInformationW GetVersionExW GetVersion GetUserDefaultLCID GetTickCount GetThreadPriority GetThreadLocale GetTempPathA GetSystemInfo GetStdHandle GetProcAddress GetModuleHandleW GetModuleFileNameA GetModuleFileNameW GetLogicalDriveStringsW GetLocaleInfoW GetLocalTime GetLastError GetFullPathNameW GetFileSize GetFileAttributesW GetExitCodeThread GetDriveTypeW GetDiskFreeSpaceW GetDateFormatW GetCurrentThreadId GetCurrentThread GetCurrentProcessId GetCurrentProcess GetComputerNameW GetCPInfoExW GetCPInfo GetACP FreeResource FreeLibrary FormatMessageW FindResourceW FindNextFileW FindFirstFileW FindClose FileTimeToLocalFileTime FileTimeToDosDateTime EnumSystemLocalesW EnumCalendarInfoW EnterCriticalSection DuplicateHandle DeleteFileW DeleteCriticalSection CreateThread CreateFileMappingW CreateFileA CreateFileW CreateEventW CreateDirectoryW CompareStringW CloseHandle Sleep DeleteTimerQueueTimer CreateTimerQueueTimer GetProcAddress FreeLibrary LoadLibraryA

msimg32

AlphaBlend

gdi32

UnrealizeObject TextOutW StretchDIBits StretchBlt StartPage StartDocW SetWindowOrgEx SetWinMetaFileBits SetViewportOrgEx SetTextColor SetStretchBltMode SetROP2 SetPixelV SetPixel SetMapMode SetEnhMetaFileBits SetDIBitsToDevice SetDIBits SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SetAbortProc SelectPalette SelectObject SelectClipRgn SaveDC RoundRect RestoreDC ResizePalette Rectangle RectVisible RealizePalette Polyline Polygon PolyBezierTo PolyBezier PlayEnhMetaFile Pie PatBlt OffsetRgn MoveToEx MaskBlt LineTo LPtoDP IntersectClipRect GetWindowOrgEx GetWinMetaFileBits GetTextMetricsW GetTextExtentPointW GetTextExtentPoint32W GetSystemPaletteEntries GetStockObject GetRgnBox GetRegionData GetRandomRgn GetPixel GetPaletteEntries GetObjectW GetNearestPaletteIndex GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileDescriptionW GetEnhMetaFileBits GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetClipRgn GetClipBox GetBrushOrgEx GetBitmapBits GdiFlush FrameRgn ExtTextOutW ExtSelectClipRgn ExtFloodFill ExcludeClipRect EnumFontFamiliesExW EndPage EndDoc Ellipse DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreateRectRgnIndirect CreateRectRgn CreatePenIndirect CreatePalette CreateICW CreateHalftonePalette CreateFontIndirectW CreateEnhMetaFileW CreateDIBitmap CreateDIBSection CreateDCW CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileW CombineRgn CloseEnhMetaFile Chord BitBlt ArcTo Arc AngleArc

version

VerQueryValueA VerQueryValueW GetFileVersionInfoSizeA GetFileVersionInfoSizeW GetFileVersionInfoA GetFileVersionInfoW

shfolder

SHGetFolderPathA

ole32

CoCreateGuid CreateStreamOnHGlobal CreateILockBytesOnHGlobal IsAccelerator ReleaseStgMedium OleDraw OleSetMenuDescriptor OleIsCurrentClipboard OleFlushClipboard OleGetClipboard OleSetClipboard DoDragDrop RevokeDragDrop RegisterDragDrop OleUninitialize OleInitialize StgCreateDocfileOnILockBytes CoTaskMemFree CoTaskMemAlloc ProgIDFromCLSID StringFromCLSID CoCreateInstance CoGetInterfaceAndReleaseStream CoMarshalInterThreadInterfaceInStream CoGetClassObject CoUninitialize CoInitialize IsEqualGUID

comctl32

InitializeFlatSB FlatSB_SetScrollProp FlatSB_SetScrollPos FlatSB_SetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollInfo _TrackMouseEvent ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_SetDragCursorImage ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_GetIcon ImageList_Remove ImageList_DrawEx ImageList_Replace ImageList_Draw ImageList_GetBkColor ImageList_SetBkColor ImageList_Add ImageList_SetImageCount ImageList_GetImageCount ImageList_Destroy ImageList_Create

winspool.drv

OpenPrinterW EnumPrintersW DocumentPropertiesW ClosePrinter GetDefaultPrinterW

shell32

SHGetFileInfoW SHFileOperationW ShellExecuteA Shell_NotifyIconW DragQueryPoint DragQueryFileA DragFinish DragAcceptFiles SHGetPathFromIDListW SHGetMalloc SHGetDesktopFolder ord18

msvcrt

memset memcpy

comdlg32

ChooseColorW GetSaveFileNameW GetOpenFileNameW

winmm

timeGetTime timeGetDevCaps timeEndPeriod timeBeginPeriod

msacm32

acmStreamUnprepareHeader acmStreamPrepareHeader acmStreamConvert acmStreamMessage acmStreamSize acmStreamClose acmStreamOpen acmFormatSuggest acmFormatChooseA acmDriverDetailsA acmDriverClose acmDriverOpen acmDriverEnum acmMetrics

Name

.text

Size

2.6MB

Virtual Size

2.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

240KB

Virtual Size

239KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

52KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

94KB

Virtual Size

93KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.pdata

Size

133KB

Virtual Size

132KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

470KB

Virtual Size

470KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

$0/dsp_ipp.dll

IMPHASH 8b49e586d8b599a7a6e6c35b62d333e2
SHA256 6fbdbe8ea1464cac01972d1d9466f59bf0fed25c5e53b8bb3c4eeedb453dd698
MD5 b26ceb8ef7692b6d4b0354eda65c8ef2
SHA1 395237f9fd1d24149847a514e99b87e0b7bac33a
SHA512 22ab81a20c10e745dbeb724ce0d35cd8e785269bf1dd1da266172aab92871752525e46860c0d58762fc488af9b0e5c4d30e9f2633eba2022dfab269997e787a4
SSDEEP 196608:W+xbGiveK+LPnxdXQSNQkzkg8kOgeavPAgqSy2OOqEcfXGDcxASvYbROGmajky0l:WshUOmd6LoDzCN
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

c8:56:9a:5a:a4:c6:04:fc:ae:c2:4f:77:de:db:7c:96:97:a0:ad:86

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

6

Entry point

7108717

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CreateFileW GetStringTypeW FormatMessageA GetThreadLocale MulDiv RtlUnwind DecodePointer EncodePointer GetCurrentThreadId GetCommandLineA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree HeapAlloc RaiseException TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW SetLastError InterlockedDecrement GetProcAddress IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount CloseHandle WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode GetStdHandle GetModuleFileNameW Sleep ExitProcess SetHandleCount GetFileType GetStartupInfoW DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle FlushFileBuffers WriteConsoleW MultiByteToWideChar LoadLibraryW HeapReAlloc LCMapStringW LoadLibraryA

user32

GetDC ReleaseDC

gdi32

GetCurrentObject GetKerningPairsA GetGlyphOutlineW DeleteObject SelectObject CreateFontA

AggCreateInstance ippFree ippGetNumThreads ippInitCpu ippMalloc ippSetDenormAreZeros ippSetFlushToZero ippSetNumThreads ippiAddC_8u_AC4RSfs ippiAddC_8u_C3IRSfs ippiAddC_8u_C3RSfs ippiAddC_8u_C4IRSfs ippiAlphaCompC_8u_AC4R ippiAlphaCompC_8u_C3R ippiAlphaCompC_8u_C4R ippiAlphaComp_8u_AC4R ippiAlphaPremul_8u_AC4IR ippiAlphaPremul_8u_AC4R ippiColorToGray_8u_AC4C1R ippiColorToGray_8u_C3C1R ippiCopyConstBorder_8u_C3R ippiCopyConstBorder_8u_C4R ippiCopyReplicateBorder_8u_C3R ippiCopyReplicateBorder_8u_C4R ippiCopy_8u_AC4C3R ippiCopy_8u_C1C4R ippiCopy_8u_C3AC4R ippiCopy_8u_C3R ippiCopy_8u_C4R ippiCopy_8u_P3C3R ippiFilterBox_8u_C1IR ippiFilterBox_8u_C3IR ippiFilterBox_8u_C3R ippiFilterBox_8u_C4IR ippiFilterBox_8u_C4R ippiFilterGauss_8u_C4R ippiFilterRoundGetBufSize32f_8u_C1R ippiFilter_8u_C4R ippiFilter_Round32f_8u_C1R ippiMirror_8u_C3IR ippiMirror_8u_C4IR ippiMirror_8u_C4R ippiMulC_8u_AC4RSfs ippiMulC_8u_C1RSfs ippiMulC_8u_C3IRSfs ippiMulC_8u_C3RSfs ippiMulC_8u_C4IRSfs ippiMulC_8u_C4RSfs ippiRGBToGray_8u_AC4C1R ippiRemap_8u_C3R ippiRemap_8u_C4R ippiResizeCenter_8u_C3R ippiResizeCenter_8u_C4R ippiResizeGetBufSize ippiResizeSqrPixelGetBufSize ippiResizeSqrPixel_8u_C3R ippiResizeSqrPixel_8u_C4R ippiResize_8u_C3R ippiResize_8u_C4R ippiSet_8u_C3R ippiSet_8u_C4R ippiSubC_8u_C3IRSfs ippiSubC_8u_C4IRSfs ippiWarpAffineQuad_8u_C3R ippiWarpAffineQuad_8u_C4R ippiWarpAffine_8u_C3R ippiWarpAffine_8u_C4R ippiWarpBilinearQuad_8u_C3R ippiWarpBilinearQuad_8u_C4R ippiWarpPerspectiveQuad_8u_C3R ippiWarpPerspectiveQuad_8u_C4R ippsAbs_32f ippsAbs_32f_I ippsAbs_64f ippsAbs_64f_I ippsAddC_32f ippsAddC_32f_I ippsAddC_32fc ippsAddC_64f ippsAddC_64f_I ippsAddProductC_32f ippsAddProduct_32f ippsAddProduct_32fc ippsAddProduct_64f ippsAddProduct_64fc ippsAdd_32f ippsAdd_32f_I ippsAdd_64f ippsAdd_64f_I ippsAdd_64fc ippsAdd_64fc_I ippsAndC_32u_I ippsArctan_32f_I ippsAtan_32f_A11 ippsAtan_32f_A21 ippsAtan_32f_A24 ippsAtan_64f_A53 ippsAutoCorr_NormA_32f ippsCbrt_32f_A11 ippsCbrt_32f_A21 ippsCbrt_32f_A24 ippsConjCcs_32fc ippsConjCcs_32fc_I ippsConjCcs_64fc ippsConjCcs_64fc_I ippsConjFlip_32fc ippsConjFlip_64fc ippsConjPack_32fc ippsConjPack_32fc_I ippsConjPack_64fc ippsConjPack_64fc_I ippsConjPerm_32fc ippsConjPerm_32fc_I ippsConjPerm_64fc ippsConjPerm_64fc_I ippsConj_32fc ippsConj_32fc_I ippsConj_64fc ippsConj_64fc_I ippsConvBiased_32f ippsConvCyclic4x4_32f32fc ippsConvCyclic8x8_32f ippsConv_32f ippsConv_64f ippsConvert_16s32f ippsConvert_16s32f_Sfs ippsConvert_16s32s ippsConvert_16s64f_Sfs ippsConvert_24s32f ippsConvert_24s32s ippsConvert_32f16s_Sfs ippsConvert_32f24s_Sfs ippsConvert_32f32s_Sfs ippsConvert_32f64f ippsConvert_32f8u_Sfs ippsConvert_32s16s_Sfs ippsConvert_32s24s_Sfs ippsConvert_32s32f ippsConvert_32s32f_Sfs ippsConvert_32s64f ippsConvert_32s64f_Sfs ippsConvert_64f32f ippsConvert_64f32s_Sfs ippsCopy_16s ippsCopy_32f ippsCopy_32s ippsCopy_64f ippsCopy_64s ippsCopy_8u ippsCos_32f_A11 ippsCos_32f_A21 ippsCos_32f_A24 ippsCos_64f_A26 ippsCos_64f_A50 ippsCos_64f_A53 ippsCplxToReal_32fc ippsCplxToReal_64fc ippsCrossCorr_32f ippsDeinterleave_16s ippsDeinterleave_32f ippsDivCRev_32f_I ippsDiv_32f_A11 ippsDiv_32f_A21 ippsDiv_32f_A24 ippsDiv_64f_A53 ippsExp_32f64f ippsExp_32f_A11 ippsExp_32f_A21 ippsExp_32f_A24 ippsExp_32f_I ippsExp_64f_A50 ippsExp_64f_A53 ippsExpm1_32f_A11 ippsExpm1_32f_A21 ippsExpm1_32f_A24 ippsFFTFree_R_32f ippsFFTFree_R_64f ippsFFTFwd_RToCCS_32f ippsFFTFwd_RToCCS_32f_I ippsFFTFwd_RToCCS_64f ippsFFTFwd_RToCCS_64f_I ippsFFTFwd_RToPack_32f ippsFFTFwd_RToPack_32f_I ippsFFTFwd_RToPack_64f ippsFFTFwd_RToPack_64f_I ippsFFTFwd_RToPerm_32f ippsFFTFwd_RToPerm_32f_I ippsFFTFwd_RToPerm_64f ippsFFTFwd_RToPerm_64f_I ippsFFTGetBufSize_R_32f ippsFFTGetBufSize_R_64f ippsFFTGetSize_R_32f ippsFFTGetSize_R_64f ippsFFTInitAlloc_R_32f ippsFFTInitAlloc_R_64f ippsFFTInit_R_32f ippsFFTInit_R_64f ippsFFTInv_CCSToR_32f ippsFFTInv_CCSToR_32f_I ippsFFTInv_CCSToR_64f ippsFFTInv_CCSToR_64f_I ippsFFTInv_PackToR_32f ippsFFTInv_PackToR_32f_I ippsFFTInv_PackToR_64f ippsFFTInv_PackToR_64f_I ippsFFTInv_PermToR_32f ippsFFTInv_PermToR_32f_I ippsFFTInv_PermToR_64f ippsFFTInv_PermToR_64f_I ippsFIR64f_32f ippsFIR64f_32f_I ippsFIRFree64f_32f ippsFIRFree_32f ippsFIRGenBandpass_64f ippsFIRGenBandstop_64f ippsFIRGenHighpass_64f ippsFIRGenLowpass_64f ippsFIRInitAlloc64f_32f ippsFIRInitAlloc_32f ippsFIRMRInitAlloc64f_32f ippsFIRMRInitAlloc_32f ippsFIRSetDlyLine64f_32f ippsFIRSetDlyLine_32f ippsFIRSetTaps64f_32f ippsFIRSetTaps_32f ippsFIR_32f ippsFIR_32f_I ippsFilterMedian_32f_I ippsFlip_16u_I ippsFlip_32f ippsFlip_32f_I ippsFlip_32fc_I ippsFlip_64f_I ippsIIR64f_32f ippsIIR64f_32f_I ippsIIRFree64f_32f ippsIIRFree_32f ippsIIRFree_32fc ippsIIRGetDlyLine64f_32f ippsIIRGetDlyLine_32f ippsIIRGetDlyLine_32fc ippsIIRInitAlloc64f_BiQuad_32f ippsIIRInitAlloc_BiQuad_32f ippsIIRInitAlloc_BiQuad_32fc ippsIIRSetDlyLine64f_32f ippsIIRSetDlyLine_32f ippsIIRSetDlyLine_32fc ippsIIRSetTaps64f_32f ippsIIRSetTaps_32f ippsIIRSetTaps_32fc ippsIIR_32f ippsIIR_32f_I ippsIIR_32fc ippsIIR_32fc_I ippsImag_32fc ippsImag_64fc ippsInterleave_16s ippsInterleave_32f ippsInv_32f_A21 ippsInv_32f_A24 ippsLn_32f_A11 ippsLn_32f_A21 ippsLn_32f_A24 ippsLn_32f_I ippsLn_64f32f ippsLn_64f_A50 ippsLn_64f_A53 ippsLog10_32f_A11 ippsLog10_32f_A21 ippsLog10_32f_A24 ippsLog10_64f_A50 ippsLog10_64f_A53 ippsMagnitude_32fc ippsMagnitude_64fc ippsMaxAbs_16s ippsMaxAbs_32s ippsMax_16s ippsMax_32f ippsMax_32s ippsMax_64f ippsMinAbs_16s ippsMinAbs_32s ippsMinMax_16s ippsMinMax_16u ippsMinMax_32f ippsMinMax_32s ippsMinMax_32u ippsMinMax_64f ippsMinMax_8u ippsMin_16s ippsMin_32f ippsMin_32s ippsMin_64f ippsMove_16s ippsMove_32f ippsMove_32s ippsMove_64f ippsMove_64s ippsMove_8u ippsMulC_32f ippsMulC_32f_I ippsMulC_64f ippsMulC_64f_I ippsMulC_64fc ippsMulC_64fc_I ippsMulPack_32f ippsMulPack_32f_I ippsMulPack_64f ippsMulPack_64f_I ippsMul_32f ippsMul_32f32fc ippsMul_32f32fc_I ippsMul_32f_I ippsMul_32fc ippsMul_32fc_I ippsMul_64f ippsMul_64f_I ippsMul_64fc ippsMul_64fc_I ippsOrC_32u_I ippsPhase_32f ippsPhase_32fc ippsPhase_64f ippsPhase_64fc ippsPow_32f_A11 ippsPow_32f_A21 ippsPow_32f_A24 ippsPowerSpectr_32fc ippsPowerSpectr_64fc ippsPowx_32f_A11 ippsPowx_32f_A21 ippsPowx_32f_A24 ippsPowx_64f_A53 ippsRandGauss_Direct_32f ippsRandGauss_Direct_64f ippsRandUniform_Direct_32f ippsRandUniform_Direct_64f ippsRealToCplx_32f ippsRealToCplx_64f ippsReal_32fc ippsReal_64fc ippsRound_32f ippsRound_64f ippsSet_16s ippsSet_16sc ippsSet_32f ippsSet_32fc ippsSet_32s ippsSet_32sc ippsSet_64f ippsSet_64fc ippsSet_64s ippsSet_64sc ippsSet_8u ippsSinCos_32f_A11 ippsSinCos_32f_A21 ippsSinCos_32f_A24 ippsSinCos_64f_A26 ippsSinCos_64f_A50 ippsSinCos_64f_A53 ippsSin_32f_A11 ippsSin_32f_A21 ippsSin_32f_A24 ippsSin_64f_A26 ippsSin_64f_A50 ippsSin_64f_A53 ippsSqr_32f ippsSqr_32f_I ippsSqr_64f ippsSqr_64f_I ippsSqrt_32f ippsSqrt_32f_A11 ippsSqrt_32f_A21 ippsSqrt_32f_A24 ippsSqrt_32f_I ippsSqrt_64f ippsSqrt_64f_A50 ippsSqrt_64f_A53 ippsSqrt_64f_I ippsSubCRev_32f ippsSubCRev_32f_I ippsSubCRev_64f_I ippsSub_32f ippsSub_32f_I ippsSub_64f ippsSub_64f_I ippsSum_32f ippsSum_64f ippsSwapBytes_16u ippsSwapBytes_16u_I ippsSwapBytes_24u ippsSwapBytes_24u_I ippsSwapBytes_32u ippsSwapBytes_32u_I ippsTanh_32f_A11 ippsTanh_32f_A21 ippsTanh_32f_A24 ippsThreshold_GTAbs_32f ippsThreshold_GTAbs_32f_I ippsThreshold_GTVal_32f ippsThreshold_GTVal_32f_I ippsThreshold_GT_32f ippsThreshold_GT_32f_I ippsThreshold_GT_32s ippsThreshold_GT_32s_I ippsThreshold_GT_64f_I ippsThreshold_LTAbs_32f ippsThreshold_LTAbs_32f_I ippsThreshold_LTValGTVal_32f ippsThreshold_LTValGTVal_32f_I ippsThreshold_LTValGTVal_32s ippsThreshold_LTValGTVal_32s_I ippsThreshold_LTVal_32f ippsThreshold_LTVal_32f_I ippsThreshold_LTVal_64f ippsThreshold_LTVal_64f_I ippsThreshold_LT_32f ippsThreshold_LT_32f_I ippsThreshold_LT_32s ippsThreshold_LT_32s_I ippsThreshold_LT_64f_I ippsTone_Direct_32f ippsTone_Direct_32fc ippsTone_Direct_64f ippsTriangle_Direct_32f ippsTriangle_Direct_32fc ippsTrunc_32f ippsTrunc_64f ippsVectorRamp_32f ippsVectorRamp_64f ippsVectorSlope_32f ippsVectorSlope_32s ippsVectorSlope_64f ippsWinKaiser_32f_I ippsWinKaiser_64f_I ippsXorC_32u_I ippsZero_16s ippsZero_32f ippsZero_32s ippsZero_64f ippsZero_64s ippsZero_8u

Name

.text

Size

17.3MB

Virtual Size

17.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text1

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

IPPCODE

Size

3.6MB

Virtual Size

3.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.5MB

Virtual Size

3.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

188KB

Virtual Size

203KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

IPPDATA

Size

512B

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.trace

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

276KB

Virtual Size

275KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$0/dsp_ipp_x64.dll

IMPHASH 69b32ccd0020f4bad23e05ee674f1130
SHA256 e2e5424c151f66515bcde54873e926ef206d983dff719e0332ba85d13749f4d3
MD5 eb20a71666086f6d1ef34fbf29e8d21a
SHA1 4a11eb4e31136b306e7f73196db3e5e7b7cd9801
SHA512 f6a81531db29cab6e29932c48c10a423eee432affaff642a12f81f6b6f3a589941200682532cf950f7960645d9639cb4cc689a316f03b7d618015bcc28d374fa
SSDEEP 196608:TvbM1kSrSo8Dd6zokryuEV7FokvbEbbQ8Ia2XlVMQu5sQSykmJgLSGmABTD4A0PM:LIuojHNM6oY8U4
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

7a:ea:36:24:59:25:29:e0:cd:1d:f9:c3:30:a0:df:a2:bf:8b:09:1c

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

6

Entry point

6715536

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

GetStringTypeW HeapReAlloc CreateFileW LCMapStringW MulDiv FormatMessageA GetThreadLocale LoadLibraryA RtlLookupFunctionEntry RtlUnwindEx DecodePointer EncodePointer GetCurrentThreadId FlsSetValue GetCommandLineA EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext GetLastError HeapFree HeapAlloc RaiseException RtlPcToFileHeader FlsGetValue FlsFree SetLastError FlsAlloc InitializeCriticalSectionAndSpinCount CloseHandle WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode GetStdHandle GetModuleFileNameW Sleep GetProcAddress GetModuleHandleW ExitProcess SetHandleCount GetFileType GetStartupInfoW DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation GetVersion HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle FlushFileBuffers WriteConsoleW MultiByteToWideChar LoadLibraryW

user32

GetDC ReleaseDC

gdi32

GetCurrentObject GetKerningPairsA GetGlyphOutlineW DeleteObject SelectObject CreateFontA

AggCreateInstance ippFree ippGetNumThreads ippInitCpu ippMalloc ippSetDenormAreZeros ippSetFlushToZero ippSetNumThreads ippiAddC_8u_AC4RSfs ippiAddC_8u_C3IRSfs ippiAddC_8u_C3RSfs ippiAddC_8u_C4IRSfs ippiAlphaCompC_8u_AC4R ippiAlphaCompC_8u_C3R ippiAlphaCompC_8u_C4R ippiAlphaComp_8u_AC4R ippiAlphaPremul_8u_AC4IR ippiAlphaPremul_8u_AC4R ippiColorToGray_8u_AC4C1R ippiColorToGray_8u_C3C1R ippiCopyConstBorder_8u_C3R ippiCopyConstBorder_8u_C4R ippiCopyReplicateBorder_8u_C3R ippiCopyReplicateBorder_8u_C4R ippiCopy_8u_AC4C3R ippiCopy_8u_C1C4R ippiCopy_8u_C3AC4R ippiCopy_8u_C3R ippiCopy_8u_C4R ippiCopy_8u_P3C3R ippiFilterBox_8u_C1IR ippiFilterBox_8u_C3IR ippiFilterBox_8u_C3R ippiFilterBox_8u_C4IR ippiFilterBox_8u_C4R ippiFilterGauss_8u_C4R ippiFilterRoundGetBufSize32f_8u_C1R ippiFilter_8u_C4R ippiFilter_Round32f_8u_C1R ippiMirror_8u_C3IR ippiMirror_8u_C4IR ippiMirror_8u_C4R ippiMulC_8u_AC4RSfs ippiMulC_8u_C1RSfs ippiMulC_8u_C3IRSfs ippiMulC_8u_C3RSfs ippiMulC_8u_C4IRSfs ippiMulC_8u_C4RSfs ippiRGBToGray_8u_AC4C1R ippiRemap_8u_C3R ippiRemap_8u_C4R ippiResizeCenter_8u_C3R ippiResizeCenter_8u_C4R ippiResizeGetBufSize ippiResizeSqrPixelGetBufSize ippiResizeSqrPixel_8u_C3R ippiResizeSqrPixel_8u_C4R ippiResize_8u_C3R ippiResize_8u_C4R ippiSet_8u_C3R ippiSet_8u_C4R ippiSubC_8u_C3IRSfs ippiSubC_8u_C4IRSfs ippiWarpAffineQuad_8u_C3R ippiWarpAffineQuad_8u_C4R ippiWarpAffine_8u_C3R ippiWarpAffine_8u_C4R ippiWarpBilinearQuad_8u_C3R ippiWarpBilinearQuad_8u_C4R ippiWarpPerspectiveQuad_8u_C3R ippiWarpPerspectiveQuad_8u_C4R ippsAbs_32f ippsAbs_32f_I ippsAbs_64f ippsAbs_64f_I ippsAddC_32f ippsAddC_32f_I ippsAddC_32fc ippsAddC_64f ippsAddC_64f_I ippsAddProductC_32f ippsAddProduct_32f ippsAddProduct_32fc ippsAddProduct_64f ippsAddProduct_64fc ippsAdd_32f ippsAdd_32f_I ippsAdd_64f ippsAdd_64f_I ippsAdd_64fc ippsAdd_64fc_I ippsAndC_32u_I ippsArctan_32f_I ippsAtan_32f_A11 ippsAtan_32f_A21 ippsAtan_32f_A24 ippsAtan_64f_A53 ippsAutoCorr_NormA_32f ippsCbrt_32f_A11 ippsCbrt_32f_A21 ippsCbrt_32f_A24 ippsConjCcs_32fc ippsConjCcs_32fc_I ippsConjCcs_64fc ippsConjCcs_64fc_I ippsConjFlip_32fc ippsConjFlip_64fc ippsConjPack_32fc ippsConjPack_32fc_I ippsConjPack_64fc ippsConjPack_64fc_I ippsConjPerm_32fc ippsConjPerm_32fc_I ippsConjPerm_64fc ippsConjPerm_64fc_I ippsConj_32fc ippsConj_32fc_I ippsConj_64fc ippsConj_64fc_I ippsConvBiased_32f ippsConvCyclic4x4_32f32fc ippsConvCyclic8x8_32f ippsConv_32f ippsConv_64f ippsConvert_16s32f ippsConvert_16s32f_Sfs ippsConvert_16s32s ippsConvert_16s64f_Sfs ippsConvert_24s32f ippsConvert_24s32s ippsConvert_32f16s_Sfs ippsConvert_32f24s_Sfs ippsConvert_32f32s_Sfs ippsConvert_32f64f ippsConvert_32f8u_Sfs ippsConvert_32s16s_Sfs ippsConvert_32s24s_Sfs ippsConvert_32s32f ippsConvert_32s32f_Sfs ippsConvert_32s64f ippsConvert_32s64f_Sfs ippsConvert_64f32f ippsConvert_64f32s_Sfs ippsCopy_16s ippsCopy_32f ippsCopy_32s ippsCopy_64f ippsCopy_64s ippsCopy_8u ippsCos_32f_A11 ippsCos_32f_A21 ippsCos_32f_A24 ippsCos_64f_A26 ippsCos_64f_A50 ippsCos_64f_A53 ippsCplxToReal_32fc ippsCplxToReal_64fc ippsCrossCorr_32f ippsDeinterleave_16s ippsDeinterleave_32f ippsDivCRev_32f_I ippsDiv_32f_A11 ippsDiv_32f_A21 ippsDiv_32f_A24 ippsDiv_64f_A53 ippsExp_32f64f ippsExp_32f_A11 ippsExp_32f_A21 ippsExp_32f_A24 ippsExp_32f_I ippsExp_64f_A50 ippsExp_64f_A53 ippsExpm1_32f_A11 ippsExpm1_32f_A21 ippsExpm1_32f_A24 ippsFFTFree_R_32f ippsFFTFree_R_64f ippsFFTFwd_RToCCS_32f ippsFFTFwd_RToCCS_32f_I ippsFFTFwd_RToCCS_64f ippsFFTFwd_RToCCS_64f_I ippsFFTFwd_RToPack_32f ippsFFTFwd_RToPack_32f_I ippsFFTFwd_RToPack_64f ippsFFTFwd_RToPack_64f_I ippsFFTFwd_RToPerm_32f ippsFFTFwd_RToPerm_32f_I ippsFFTFwd_RToPerm_64f ippsFFTFwd_RToPerm_64f_I ippsFFTGetBufSize_R_32f ippsFFTGetBufSize_R_64f ippsFFTGetSize_R_32f ippsFFTGetSize_R_64f ippsFFTInitAlloc_R_32f ippsFFTInitAlloc_R_64f ippsFFTInit_R_32f ippsFFTInit_R_64f ippsFFTInv_CCSToR_32f ippsFFTInv_CCSToR_32f_I ippsFFTInv_CCSToR_64f ippsFFTInv_CCSToR_64f_I ippsFFTInv_PackToR_32f ippsFFTInv_PackToR_32f_I ippsFFTInv_PackToR_64f ippsFFTInv_PackToR_64f_I ippsFFTInv_PermToR_32f ippsFFTInv_PermToR_32f_I ippsFFTInv_PermToR_64f ippsFFTInv_PermToR_64f_I ippsFIR64f_32f ippsFIR64f_32f_I ippsFIRFree64f_32f ippsFIRFree_32f ippsFIRGenBandpass_64f ippsFIRGenBandstop_64f ippsFIRGenHighpass_64f ippsFIRGenLowpass_64f ippsFIRInitAlloc64f_32f ippsFIRInitAlloc_32f ippsFIRMRInitAlloc64f_32f ippsFIRMRInitAlloc_32f ippsFIRSetDlyLine64f_32f ippsFIRSetDlyLine_32f ippsFIRSetTaps64f_32f ippsFIRSetTaps_32f ippsFIR_32f ippsFIR_32f_I ippsFilterMedian_32f_I ippsFlip_16u_I ippsFlip_32f ippsFlip_32f_I ippsFlip_32fc_I ippsFlip_64f_I ippsIIR64f_32f ippsIIR64f_32f_I ippsIIRFree64f_32f ippsIIRFree_32f ippsIIRFree_32fc ippsIIRGetDlyLine64f_32f ippsIIRGetDlyLine_32f ippsIIRGetDlyLine_32fc ippsIIRInitAlloc64f_BiQuad_32f ippsIIRInitAlloc_BiQuad_32f ippsIIRInitAlloc_BiQuad_32fc ippsIIRSetDlyLine64f_32f ippsIIRSetDlyLine_32f ippsIIRSetDlyLine_32fc ippsIIRSetTaps64f_32f ippsIIRSetTaps_32f ippsIIRSetTaps_32fc ippsIIR_32f ippsIIR_32f_I ippsIIR_32fc ippsIIR_32fc_I ippsImag_32fc ippsImag_64fc ippsInterleave_16s ippsInterleave_32f ippsInv_32f_A21 ippsInv_32f_A24 ippsLn_32f_A11 ippsLn_32f_A21 ippsLn_32f_A24 ippsLn_32f_I ippsLn_64f32f ippsLn_64f_A50 ippsLn_64f_A53 ippsLog10_32f_A11 ippsLog10_32f_A21 ippsLog10_32f_A24 ippsLog10_64f_A50 ippsLog10_64f_A53 ippsMagnitude_32fc ippsMagnitude_64fc ippsMaxAbs_16s ippsMaxAbs_32s ippsMax_16s ippsMax_32f ippsMax_32s ippsMax_64f ippsMinAbs_16s ippsMinAbs_32s ippsMinMax_16s ippsMinMax_16u ippsMinMax_32f ippsMinMax_32s ippsMinMax_32u ippsMinMax_64f ippsMinMax_8u ippsMin_16s ippsMin_32f ippsMin_32s ippsMin_64f ippsMove_16s ippsMove_32f ippsMove_32s ippsMove_64f ippsMove_64s ippsMove_8u ippsMulC_32f ippsMulC_32f_I ippsMulC_64f ippsMulC_64f_I ippsMulC_64fc ippsMulC_64fc_I ippsMulPack_32f ippsMulPack_32f_I ippsMulPack_64f ippsMulPack_64f_I ippsMul_32f ippsMul_32f32fc ippsMul_32f32fc_I ippsMul_32f_I ippsMul_32fc ippsMul_32fc_I ippsMul_64f ippsMul_64f_I ippsMul_64fc ippsMul_64fc_I ippsOrC_32u_I ippsPhase_32f ippsPhase_32fc ippsPhase_64f ippsPhase_64fc ippsPow_32f_A11 ippsPow_32f_A21 ippsPow_32f_A24 ippsPowerSpectr_32fc ippsPowerSpectr_64fc ippsPowx_32f_A11 ippsPowx_32f_A21 ippsPowx_32f_A24 ippsPowx_64f_A53 ippsRandGauss_Direct_32f ippsRandGauss_Direct_64f ippsRandUniform_Direct_32f ippsRandUniform_Direct_64f ippsRealToCplx_32f ippsRealToCplx_64f ippsReal_32fc ippsReal_64fc ippsRound_32f ippsRound_64f ippsSet_16s ippsSet_16sc ippsSet_32f ippsSet_32fc ippsSet_32s ippsSet_32sc ippsSet_64f ippsSet_64fc ippsSet_64s ippsSet_64sc ippsSet_8u ippsSinCos_32f_A11 ippsSinCos_32f_A21 ippsSinCos_32f_A24 ippsSinCos_64f_A26 ippsSinCos_64f_A50 ippsSinCos_64f_A53 ippsSin_32f_A11 ippsSin_32f_A21 ippsSin_32f_A24 ippsSin_64f_A26 ippsSin_64f_A50 ippsSin_64f_A53 ippsSqr_32f ippsSqr_32f_I ippsSqr_64f ippsSqr_64f_I ippsSqrt_32f ippsSqrt_32f_A11 ippsSqrt_32f_A21 ippsSqrt_32f_A24 ippsSqrt_32f_I ippsSqrt_64f ippsSqrt_64f_A50 ippsSqrt_64f_A53 ippsSqrt_64f_I ippsSubCRev_32f ippsSubCRev_32f_I ippsSubCRev_64f_I ippsSub_32f ippsSub_32f_I ippsSub_64f ippsSub_64f_I ippsSum_32f ippsSum_64f ippsSwapBytes_16u ippsSwapBytes_16u_I ippsSwapBytes_24u ippsSwapBytes_24u_I ippsSwapBytes_32u ippsSwapBytes_32u_I ippsTanh_32f_A11 ippsTanh_32f_A21 ippsTanh_32f_A24 ippsThreshold_GTAbs_32f ippsThreshold_GTAbs_32f_I ippsThreshold_GTVal_32f ippsThreshold_GTVal_32f_I ippsThreshold_GT_32f ippsThreshold_GT_32f_I ippsThreshold_GT_32s ippsThreshold_GT_32s_I ippsThreshold_GT_64f_I ippsThreshold_LTAbs_32f ippsThreshold_LTAbs_32f_I ippsThreshold_LTValGTVal_32f ippsThreshold_LTValGTVal_32f_I ippsThreshold_LTValGTVal_32s ippsThreshold_LTValGTVal_32s_I ippsThreshold_LTVal_32f ippsThreshold_LTVal_32f_I ippsThreshold_LTVal_64f ippsThreshold_LTVal_64f_I ippsThreshold_LT_32f ippsThreshold_LT_32f_I ippsThreshold_LT_32s ippsThreshold_LT_32s_I ippsThreshold_LT_64f_I ippsTone_Direct_32f ippsTone_Direct_32fc ippsTone_Direct_64f ippsTriangle_Direct_32f ippsTriangle_Direct_32fc ippsTrunc_32f ippsTrunc_64f ippsVectorRamp_32f ippsVectorRamp_64f ippsVectorSlope_32f ippsVectorSlope_32s ippsVectorSlope_64f ippsWinKaiser_32f_I ippsWinKaiser_64f_I ippsXorC_32u_I ippsZero_16s ippsZero_32f ippsZero_32s ippsZero_64f ippsZero_64s ippsZero_8u

Name

.text

Size

20.1MB

Virtual Size

20.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

IPPCODE

Size

5.3MB

Virtual Size

5.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4.5MB

Virtual Size

4.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

487KB

Virtual Size

504KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

549KB

Virtual Size

548KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data1

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

IPPDATA

Size

73KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.trace

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

107KB

Virtual Size

106KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$0/elastique_x64.dll

IMPHASH a2a1619283853bc492d58190572a9da9
SHA256 c90e841fdaa318d848999599c731752f89fc113a86a878a18d5c1a789e96d47f
MD5 45ac4e06fed56dbcfbb3b511f0a81481
SHA1 2f9bf9ee9db14f43e0ea9328bc40aa2e65f6c3c9
SHA512 6a7a646f31cbb6fd80dd8b96a3c393c8a33b2a0a71c8c9f8ee281502d1eb2f2812cd9b29ee0f920132341b35e011c8cd1456a0e4ab14d6b4d9cb57bda4bffa2a
SSDEEP 12288:W84Hg65xpgluc6yncXBc3yUyucbCP+yFCzuK4NeWsDR+G1CoPhF7ntLn:W84g65xuluc6EcxcMCBCyK4NRsDA8J
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

f3:48:99:f3:af:2e:14:da:63:53:3b:55:b3:ef:ac:2f:47:1f:d0:5f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

2

Major OS version

5

Entry point

1063800

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\ImageLine\fred\SDKs\zplane\vc\x64\Release\elastique.pdb

Name

.text

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

RT_CODE

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

148KB

Virtual Size

147KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

28KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$0/freetype.dll

IMPHASH bcf0865ab946dc4c8e9f7b347fd3ec31
SHA256 9714ccfde17fe8e4e58bd9b804ab58b5cccb225ce2df4a067b940eadd061f3e2
MD5 ed8bcd04c273221e80210af88708f529
SHA1 a7c6080a07ac3c4f788f76664e18a99693f3a010
SHA512 5951cad93ae6836f0843354a1819de8a9fcded955513f829cf2d86418efbc4173bde9e1f248846da36f7a9525f06e37da66165dc4378512c1b17e7ddaf88e8ff
SSDEEP 12288:JPeorkXVV+wzdHLahHNC8uA7RyfEWmrT7:J/klsvHNC47tZz
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

e3:0d:bc:19:02:72:05:6c:6f:c6:01:ca:3f:ac:15:0c:28:eb:2b:c4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

4

Entry point

312342

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

FTC_CMapCache_Lookup FTC_CMapCache_New FTC_ImageCache_Lookup FTC_ImageCache_LookupScaler FTC_ImageCache_New FTC_Image_Cache_Lookup FTC_Image_Cache_New FTC_Manager_Done FTC_Manager_LookupFace FTC_Manager_LookupSize FTC_Manager_Lookup_Face FTC_Manager_Lookup_Size FTC_Manager_New FTC_Manager_RemoveFaceID FTC_Manager_Reset FTC_Node_Unref FTC_SBitCache_Lookup FTC_SBitCache_LookupScaler FTC_SBitCache_New FTC_SBit_Cache_Lookup FTC_SBit_Cache_New FT_Activate_Size FT_Add_Default_Modules FT_Add_Module FT_Alloc FT_Angle_Diff FT_Atan2 FT_Attach_File FT_Attach_Stream FT_Bitmap_Convert FT_Bitmap_Copy FT_Bitmap_Done FT_Bitmap_Embolden FT_Bitmap_New FT_CMap_Done FT_CMap_New FT_CeilFix FT_ClassicKern_Free FT_ClassicKern_Validate FT_Cos FT_DivFix FT_Done_Face FT_Done_FreeType FT_Done_Glyph FT_Done_GlyphSlot FT_Done_Library FT_Done_Memory FT_Done_Size FT_Face_CheckTrueTypePatents FT_Face_GetCharVariantIndex FT_Face_GetCharVariantIsDefault FT_Face_GetCharsOfVariant FT_Face_GetVariantSelectors FT_Face_GetVariantsOfChar FT_Face_SetUnpatentedHinting FT_FloorFix FT_Free FT_Get_Advance FT_Get_Advances FT_Get_CMap_Format FT_Get_CMap_Language_ID FT_Get_Char_Index FT_Get_Charmap_Index FT_Get_FSType_Flags FT_Get_First_Char FT_Get_Gasp FT_Get_Glyph FT_Get_Glyph_Name FT_Get_Kerning FT_Get_MM_Var FT_Get_Module FT_Get_Module_Interface FT_Get_Multi_Master FT_Get_Name_Index FT_Get_Next_Char FT_Get_PFR_Advance FT_Get_PFR_Kerning FT_Get_PFR_Metrics FT_Get_PS_Font_Info FT_Get_PS_Font_Private FT_Get_PS_Font_Value FT_Get_Postscript_Name FT_Get_Renderer FT_Get_Sfnt_Name FT_Get_Sfnt_Name_Count FT_Get_Sfnt_Table FT_Get_SubGlyph_Info FT_Get_Track_Kerning FT_Get_TrueType_Engine_Type FT_Get_WinFNT_Header FT_Get_X11_Font_Format FT_GlyphLoader_Add FT_GlyphLoader_CheckPoints FT_GlyphLoader_CheckSubGlyphs FT_GlyphLoader_CopyPoints FT_GlyphLoader_CreateExtra FT_GlyphLoader_Done FT_GlyphLoader_New FT_GlyphLoader_Prepare FT_GlyphLoader_Reset FT_GlyphLoader_Rewind FT_GlyphSlot_Embolden FT_GlyphSlot_Oblique FT_GlyphSlot_Own_Bitmap FT_Glyph_Copy FT_Glyph_Get_CBox FT_Glyph_Stroke FT_Glyph_StrokeBorder FT_Glyph_To_Bitmap FT_Glyph_Transform FT_Has_PS_Glyph_Names FT_Init_FreeType FT_Library_SetLcdFilter FT_Library_SetLcdFilterWeights FT_Library_Version FT_List_Add FT_List_Finalize FT_List_Find FT_List_Insert FT_List_Iterate FT_List_Remove FT_List_Up FT_Load_Char FT_Load_Glyph FT_Load_Sfnt_Table FT_Lookup_Renderer FT_Match_Size FT_Matrix_Invert FT_Matrix_Multiply FT_Matrix_Multiply_Scaled FT_MulDiv FT_MulDiv_No_Round FT_New_Face FT_New_GlyphSlot FT_New_Library FT_New_Memory FT_New_Memory_Face FT_New_Size FT_OpenType_Free FT_OpenType_Validate FT_Open_Face FT_Outline_Check FT_Outline_Copy FT_Outline_Decompose FT_Outline_Done FT_Outline_Done_Internal FT_Outline_Embolden FT_Outline_EmboldenXY FT_Outline_GetInsideBorder FT_Outline_GetOutsideBorder FT_Outline_Get_BBox FT_Outline_Get_Bitmap FT_Outline_Get_CBox FT_Outline_Get_Orientation FT_Outline_New FT_Outline_New_Internal FT_Outline_Render FT_Outline_Reverse FT_Outline_Transform FT_Outline_Translate FT_QAlloc FT_QRealloc FT_Raccess_Get_DataOffsets FT_Raccess_Get_HeaderInfo FT_Raccess_Guess FT_Realloc FT_Reference_Face FT_Reference_Library FT_Remove_Module FT_Render_Glyph FT_Render_Glyph_Internal FT_Request_Metrics FT_Request_Size FT_RoundFix FT_Select_Charmap FT_Select_Metrics FT_Select_Size FT_Set_Char_Size FT_Set_Charmap FT_Set_Debug_Hook FT_Set_MM_Blend_Coordinates FT_Set_MM_Design_Coordinates FT_Set_Pixel_Sizes FT_Set_Renderer FT_Set_Transform FT_Set_Var_Blend_Coordinates FT_Set_Var_Design_Coordinates FT_Sfnt_Table_Info FT_Sin FT_Sqrt32 FT_SqrtFixed FT_Stream_Close FT_Stream_EnterFrame FT_Stream_ExitFrame FT_Stream_ExtractFrame FT_Stream_Free FT_Stream_GetChar FT_Stream_GetULong FT_Stream_GetULongLE FT_Stream_GetUOffset FT_Stream_GetUShort FT_Stream_GetUShortLE FT_Stream_New FT_Stream_Open FT_Stream_OpenGzip FT_Stream_OpenLZW FT_Stream_OpenMemory FT_Stream_Pos FT_Stream_Read FT_Stream_ReadAt FT_Stream_ReadChar FT_Stream_ReadFields FT_Stream_ReadULong FT_Stream_ReadULongLE FT_Stream_ReadUOffset FT_Stream_ReadUShort FT_Stream_ReadUShortLE FT_Stream_ReleaseFrame FT_Stream_Seek FT_Stream_Skip FT_Stream_TryRead FT_Stroker_BeginSubPath FT_Stroker_ConicTo FT_Stroker_CubicTo FT_Stroker_Done FT_Stroker_EndSubPath FT_Stroker_Export FT_Stroker_ExportBorder FT_Stroker_GetBorderCounts FT_Stroker_GetCounts FT_Stroker_LineTo FT_Stroker_New FT_Stroker_ParseOutline FT_Stroker_Rewind FT_Stroker_Set FT_Tan FT_TrueTypeGX_Free FT_TrueTypeGX_Validate FT_Vector_From_Polar FT_Vector_Length FT_Vector_Polarize FT_Vector_Rotate FT_Vector_Transform FT_Vector_Transform_Scaled FT_Vector_Unit TT_New_Context TT_RunIns ft_corner_is_flat ft_corner_orientation ft_glyphslot_alloc_bitmap ft_glyphslot_free_bitmap ft_glyphslot_set_bitmap ft_highpow2 ft_mem_alloc ft_mem_dup ft_mem_free ft_mem_qalloc ft_mem_qrealloc ft_mem_realloc ft_mem_strcpyn ft_mem_strdup ft_module_get_service ft_service_list_lookup ft_stub_set_char_sizes ft_stub_set_pixel_sizes ft_synthesize_vertical_metrics ft_validator_error ft_validator_init ft_validator_run ftc_node_destroy

$0/freetype_x64.dll

IMPHASH c0ffb3280487bf8c3d98531f7c8d3c9b
SHA256 c5517a590efc5d821b746a2302a5a3a41ee7f6904dfa295a19eb8efe5887dde0
MD5 279910c25b62e17cbb911fc217a9e38a
SHA1 5ef25102506347cb8bbe44e0991372d02c9bb28e
SHA512 a2ed6d9b9504e38d3d1d32034d57e0e5d643c51dd713286c322ca6bf0eac4d01e7748955dd7055f0218919170e59e74b362e143210e1fd7f989b03e582a52dcf
SSDEEP 12288:iDNAtMwRRPlxk8s3t2MRbm2/jjffEWmj2PAI:iDNACwRfxkrjj/jjEZj2r
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

40:38:b6:c5:2e:bf:94:6d:8a:81:87:78:f4:87:dc:1d:d4:8a:e5:8d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

4

Entry point

360688

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

RtlUnwindEx HeapAlloc GetLastError HeapReAlloc HeapFree GetCurrentThreadId FlsSetValue GetCommandLineA GetVersionExA GetProcessHeap TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetProcAddress GetModuleHandleA ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapSetInformation HeapCreate HeapDestroy HeapSize CloseHandle EnterCriticalSection LeaveCriticalSection MultiByteToWideChar ReadFile SetFilePointer SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FlsGetValue TlsFree FlsFree SetLastError TlsSetValue FlsAlloc Sleep FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSection SetStdHandle FlushFileBuffers CreateFileA WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetEndOfFile

FTC_CMapCache_Lookup FTC_CMapCache_New FTC_ImageCache_Lookup FTC_ImageCache_LookupScaler FTC_ImageCache_New FTC_Image_Cache_Lookup FTC_Image_Cache_New FTC_Manager_Done FTC_Manager_LookupFace FTC_Manager_LookupSize FTC_Manager_Lookup_Face FTC_Manager_Lookup_Size FTC_Manager_New FTC_Manager_RemoveFaceID FTC_Manager_Reset FTC_Node_Unref FTC_SBitCache_Lookup FTC_SBitCache_LookupScaler FTC_SBitCache_New FTC_SBit_Cache_Lookup FTC_SBit_Cache_New FT_Activate_Size FT_Add_Default_Modules FT_Add_Module FT_Alloc FT_Angle_Diff FT_Atan2 FT_Attach_File FT_Attach_Stream FT_Bitmap_Convert FT_Bitmap_Copy FT_Bitmap_Done FT_Bitmap_Embolden FT_Bitmap_New FT_CMap_Done FT_CMap_New FT_CeilFix FT_ClassicKern_Free FT_ClassicKern_Validate FT_Cos FT_DivFix FT_Done_Face FT_Done_FreeType FT_Done_Glyph FT_Done_GlyphSlot FT_Done_Library FT_Done_Memory FT_Done_Size FT_Face_CheckTrueTypePatents FT_Face_GetCharVariantIndex FT_Face_GetCharVariantIsDefault FT_Face_GetCharsOfVariant FT_Face_GetVariantSelectors FT_Face_GetVariantsOfChar FT_Face_SetUnpatentedHinting FT_FloorFix FT_Free FT_Get_Advance FT_Get_Advances FT_Get_CMap_Format FT_Get_CMap_Language_ID FT_Get_Char_Index FT_Get_Charmap_Index FT_Get_FSType_Flags FT_Get_First_Char FT_Get_Gasp FT_Get_Glyph FT_Get_Glyph_Name FT_Get_Kerning FT_Get_MM_Var FT_Get_Module FT_Get_Module_Interface FT_Get_Multi_Master FT_Get_Name_Index FT_Get_Next_Char FT_Get_PFR_Advance FT_Get_PFR_Kerning FT_Get_PFR_Metrics FT_Get_PS_Font_Info FT_Get_PS_Font_Private FT_Get_PS_Font_Value FT_Get_Postscript_Name FT_Get_Renderer FT_Get_Sfnt_Name FT_Get_Sfnt_Name_Count FT_Get_Sfnt_Table FT_Get_SubGlyph_Info FT_Get_Track_Kerning FT_Get_TrueType_Engine_Type FT_Get_WinFNT_Header FT_Get_X11_Font_Format FT_GlyphLoader_Add FT_GlyphLoader_CheckPoints FT_GlyphLoader_CheckSubGlyphs FT_GlyphLoader_CopyPoints FT_GlyphLoader_CreateExtra FT_GlyphLoader_Done FT_GlyphLoader_New FT_GlyphLoader_Prepare FT_GlyphLoader_Reset FT_GlyphLoader_Rewind FT_GlyphSlot_Embolden FT_GlyphSlot_Oblique FT_GlyphSlot_Own_Bitmap FT_Glyph_Copy FT_Glyph_Get_CBox FT_Glyph_Stroke FT_Glyph_StrokeBorder FT_Glyph_To_Bitmap FT_Glyph_Transform FT_Has_PS_Glyph_Names FT_Init_FreeType FT_Library_SetLcdFilter FT_Library_SetLcdFilterWeights FT_Library_Version FT_List_Add FT_List_Finalize FT_List_Find FT_List_Insert FT_List_Iterate FT_List_Remove FT_List_Up FT_Load_Char FT_Load_Glyph FT_Load_Sfnt_Table FT_Lookup_Renderer FT_Match_Size FT_Matrix_Invert FT_Matrix_Multiply FT_Matrix_Multiply_Scaled FT_MulDiv FT_MulDiv_No_Round FT_MulFix FT_New_Face FT_New_GlyphSlot FT_New_Library FT_New_Memory FT_New_Memory_Face FT_New_Size FT_OpenType_Free FT_OpenType_Validate FT_Open_Face FT_Outline_Check FT_Outline_Copy FT_Outline_Decompose FT_Outline_Done FT_Outline_Done_Internal FT_Outline_Embolden FT_Outline_EmboldenXY FT_Outline_GetInsideBorder FT_Outline_GetOutsideBorder FT_Outline_Get_BBox FT_Outline_Get_Bitmap FT_Outline_Get_CBox FT_Outline_Get_Orientation FT_Outline_New FT_Outline_New_Internal FT_Outline_Render FT_Outline_Reverse FT_Outline_Transform FT_Outline_Translate FT_QAlloc FT_QRealloc FT_Raccess_Get_DataOffsets FT_Raccess_Get_HeaderInfo FT_Raccess_Guess FT_Realloc FT_Reference_Face FT_Reference_Library FT_Remove_Module FT_Render_Glyph FT_Render_Glyph_Internal FT_Request_Metrics FT_Request_Size FT_RoundFix FT_Select_Charmap FT_Select_Metrics FT_Select_Size FT_Set_Char_Size FT_Set_Charmap FT_Set_Debug_Hook FT_Set_MM_Blend_Coordinates FT_Set_MM_Design_Coordinates FT_Set_Pixel_Sizes FT_Set_Renderer FT_Set_Transform FT_Set_Var_Blend_Coordinates FT_Set_Var_Design_Coordinates FT_Sfnt_Table_Info FT_Sin FT_Sqrt32 FT_SqrtFixed FT_Stream_Close FT_Stream_EnterFrame FT_Stream_ExitFrame FT_Stream_ExtractFrame FT_Stream_Free FT_Stream_GetChar FT_Stream_GetULong FT_Stream_GetULongLE FT_Stream_GetUOffset FT_Stream_GetUShort FT_Stream_GetUShortLE FT_Stream_New FT_Stream_Open FT_Stream_OpenGzip FT_Stream_OpenLZW FT_Stream_OpenMemory FT_Stream_Pos FT_Stream_Read FT_Stream_ReadAt FT_Stream_ReadChar FT_Stream_ReadFields FT_Stream_ReadULong FT_Stream_ReadULongLE FT_Stream_ReadUOffset FT_Stream_ReadUShort FT_Stream_ReadUShortLE FT_Stream_ReleaseFrame FT_Stream_Seek FT_Stream_Skip FT_Stream_TryRead FT_Stroker_BeginSubPath FT_Stroker_ConicTo FT_Stroker_CubicTo FT_Stroker_Done FT_Stroker_EndSubPath FT_Stroker_Export FT_Stroker_ExportBorder FT_Stroker_GetBorderCounts FT_Stroker_GetCounts FT_Stroker_LineTo FT_Stroker_New FT_Stroker_ParseOutline FT_Stroker_Rewind FT_Stroker_Set FT_Tan FT_TrueTypeGX_Free FT_TrueTypeGX_Validate FT_Vector_From_Polar FT_Vector_Length FT_Vector_Polarize FT_Vector_Rotate FT_Vector_Transform FT_Vector_Transform_Scaled FT_Vector_Unit TT_New_Context TT_RunIns ft_corner_is_flat ft_corner_orientation ft_glyphslot_alloc_bitmap ft_glyphslot_free_bitmap ft_glyphslot_set_bitmap ft_highpow2 ft_mem_alloc ft_mem_dup ft_mem_free ft_mem_qalloc ft_mem_qrealloc ft_mem_realloc ft_mem_strcpyn ft_mem_strdup ft_module_get_service ft_service_list_lookup ft_stub_set_char_sizes ft_stub_set_pixel_sizes ft_synthesize_vertical_metrics ft_validator_error ft_validator_init ft_validator_run ftc_node_destroy

$0/oggio.dll

IMPHASH d9c287a15b4f325845ba12f6df6e05d7
SHA256 37d6167bbf9a1645edd7b0d729f6fa27f09cda4aee53a4d426bf3aab49030075
MD5 75658fe587d8dc8ff1919b8a07c5a440
SHA1 c13562e0702ab8869057aeac4a4ccd02fe1db82a
SHA512 4421e56b045a2e775e031c9c9d693fb05e34e8c4c3975989c2a8d8b08aad9e28b4adb8ddfac0f9d6d1fcd68bd3bedba0667c1ebad24d48b6cde2619409a8e645
SSDEEP 6144:k8Dpu6db3WynlKVpp1FFxiBQ6xhbT5GR0+tAOa3Jrm:k806db3WElKd1FFyxDqRtoy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

9e:18:f2:68:e6:c7:f7:d6:ed:4f:ce:a5:2a:2f:47:5a:49:f7:60:70

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

4

Entry point

142648

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$0/oggio_x64.dll

IMPHASH 0fdca9c1c366492184b19efeacd4d90f
SHA256 337f8f43a1852696997a7c0939ff987714db93a062dd70e25971ebd4936f0c29
MD5 b69933bcd4a3291fe2b91cbc16fd9d11
SHA1 3f31425129ccf8562475737a38d22c188a3ef390
SHA512 7381f1ce43e7b5c7eb6e45c244f7356efba4d557e43556cc41d53aeb9a2811b7e6401b43239be2016bd5224ca45b6e680e04505f8f18b9a373ce6077701f5d50
SSDEEP 6144:VHvE8kAdpvIoM1BlAFFPKiSPQrMiMlMlMpH8C9XE9u/P0OYZFZODGwNHEWR0e9lT:VsAdpgPiSPQrMiMlMlMpH8C9gC4F0ZFJ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

00:f8:23:f5:11:2d:6c:9d:2a:d4:83:a6:0b:c4:83:26:5a:bd:c9:15

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

4

Entry point

183152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

GetLastError HeapFree HeapAlloc GetSystemTimeAsFileTime HeapReAlloc GetCurrentThreadId FlsSetValue GetCommandLineA GetVersionExA GetProcessHeap GetProcAddress GetModuleHandleA ExitProcess HeapSetInformation HeapCreate HeapDestroy TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext WriteFile GetStdHandle GetModuleFileNameA FlsGetValue TlsFree FlsFree SetLastError TlsSetValue FlsAlloc CloseHandle RtlUnwindEx EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetConsoleCP GetConsoleMode SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection SetFilePointer HeapSize MultiByteToWideChar ReadFile Sleep FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA LCMapStringW RaiseException LoadLibraryA InitializeCriticalSection SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA GetStringTypeA GetStringTypeW GetLocaleInfoA SetEndOfFile

Name

.text

Size

262KB

Virtual Size

261KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

RT_CODE

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$0/steam_api.dll

IMPHASH 4b75e8f71ef7ec9d7921abd4eaff587d
SHA256 4c83d75fcaa6166be46f0bf3c0acdf6b5ffeadff673ab64a7cdeac8ff3f21ac1
MD5 11984db972855dd266fddde5f47c87ed
SHA1 8cc5d599fbc43c61b941214e00093a87ab558462
SHA512 7ad060b9e07f0e1717cc558b9fb66469ad8d2ee2692455d0b0b29493fd59614c9f8b648ee97a7292a9e1bb15fafcaff52e67b950254e84ceba3a2e308f3d3837
SSDEEP 1536:8j97bJaUtxuT7uZJePr8IuPPvXnU5GVBNFndEHbUREpzIgsFHgNa0i4ek:8jdlzsToJeQIuPXn2GVeelgjNaGl
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

bc:46:bb:cb:f4:d4:71:91:73:23:bc:54:91:88:8c:4c:f6:d0:a2:6d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Valve,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Valve,ST=Washington,C=US

Chains

Apr 21, 2014

Minor OS version

1

Major OS version

5

Entry point

27733

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\buildslave\steam_rel_client_win32\build\src\steam_api\Release\steam_api.pdb

kernel32

CloseHandle LoadLibraryExA LoadLibraryExW MultiByteToWideChar FreeLibrary GetCommandLineA CreateMutexA OpenProcess GetModuleFileNameA GetModuleHandleA OutputDebugStringA GetEnvironmentVariableA SetEnvironmentVariableA WaitForSingleObject ReleaseMutex GetExitCodeProcess GetProcAddress GetProcessHeap SetEndOfFile RaiseException RtlUnwind GetLastError HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW SetLastError InterlockedDecrement HeapCreate HeapDestroy ExitProcess IsProcessorFeaturePresent Sleep HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LoadLibraryW HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile CreateFileA LCMapStringW GetStringTypeW WriteConsoleW SetFilePointer CreateFileW

advapi32

RegQueryValueExA RegCloseKey RegOpenKeyExA

shell32

ShellExecuteA

$0/steam_api64.dll

IMPHASH 3f9d1359f700b8629ff9520a82d2190a
SHA256 d103ecc2a6f862daf08d7a47cb732697ba0512aba2f757336d48cbee32b19f5f
MD5 0e9eb69be2d5cb05f0e6bc0f586b6a7c
SHA1 899642a87e9e72224dfad57ba839a1e7b68ebfdd
SHA512 e16733eef074a85252dd44a8019b0e167e696df7cd5352ccec65dac826168c7d5774bc2085800526aa82918ba1e1fb2f1c48842521bd6fb286fb167dcec410cb
SSDEEP 3072:oQwNSMbmAVUhR/XkhDWiTOUchCmq9p8M3T67aU:uNbmYUHchFTO5h0D3Tw
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

9e:96:38:32:fb:75:6d:85:8f:32:ff:de:10:ab:6a:a2:cf:34:6a:b9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Valve,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Valve,ST=Washington,C=US

Chains

Apr 21, 2014

Minor OS version

2

Major OS version

5

Entry point

29920

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

c:\buildslave\steam_rel_client_win64\build\src\steam_api\win64\Release\steam_api64.pdb

kernel32

CloseHandle LoadLibraryExA LoadLibraryExW MultiByteToWideChar FreeLibrary GetCommandLineA CreateMutexA OpenProcess GetModuleFileNameA GetModuleHandleA OutputDebugStringA GetEnvironmentVariableA SetEnvironmentVariableA WaitForSingleObject ReleaseMutex GetExitCodeProcess GetProcAddress GetProcessHeap SetEndOfFile DecodePointer EncodePointer RaiseException RtlPcToFileHeader RtlLookupFunctionEntry RtlUnwindEx GetLastError HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection GetCurrentThreadId FlsSetValue WriteFile GetStdHandle GetModuleFileNameW FlsGetValue FlsFree SetLastError FlsAlloc HeapSetInformation GetVersion HeapCreate HeapDestroy GetModuleHandleW ExitProcess Sleep HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext TerminateProcess GetCurrentProcess SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LoadLibraryW HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile CreateFileA LCMapStringW GetStringTypeW WriteConsoleW SetFilePointer CreateFileW

advapi32

RegQueryValueExA RegCloseKey RegOpenKeyExA

shell32

ShellExecuteA

$0/uninstall.exe

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 120f12aa7f4bec390a59ad5854c48a8773f5e86ef14697bb51a42545eb99e713
MD5 c89607012e0631a09df1701ff51bac33
SHA1 b8b0d09595625d3f7fb1101dd26b8ba5728e0946
SHA512 de9b5d88a1ff27d2b4744111e2b3629c28697b0a98bf494c8b6b31da08518b141a68cd146d91768bdf7717bfc390008114631b35c32b6bd7281791d9e50c738a
SSDEEP 12288:xnzEFhXgXiWq27V370RPfOz2SMW5aTmDlih3wVoCyhmy/Wv3M:xnzE9X+FYRPfOzJvWl3wVoCyAL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

b9:4d:39:a3:a7:9c:d6:c1:7d:45:55:9a:4a:af:9b:bf:9c:8e:6a:5b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

4

Entry point

12538

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/ILUninstall.dll

IMPHASH e467a585796dc48fbb4492ddfcbde1aa
SHA256 d4fa95fdb8ac429e3247d1cda1292172d48cf6fef68b4abe8e5ad57bb35a7ae0
MD5 85a5151044ded33b0d4cf745bb22b40d
SHA1 e8846f05f989a5ac88150c1db4b2831341579d96
SHA512 52654ae8d159dfe3d248d42d0f9ebf2a53a3df740d1326d84b4418525c92e726eb518fd94ec2b75779d1b1c5da4cb265f11bd5c21eba1f809bc706a129efc400
SSDEEP 12288:uXgXiWq27V370RPfOz2SMW5aTmDlih3wVoCyhmy/Wv3M:+X+FYRPfOzJvWl3wVoCyAL
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

680292

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen GetErrorInfo SysFreeString SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopy VariantClear VariantInit

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey RegQueryValueExW RegOpenKeyExW RegFlushKey RegCloseKey

user32

MessageBoxA CharNextW LoadStringW SetClassLongW GetClassLongW SetWindowLongW GetWindowLongW CreateWindowExW WindowFromPoint WaitMessage UpdateWindow UnregisterClassW UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenu SystemParametersInfoW ShowWindow ShowScrollBar ShowOwnedPopups SetWindowsHookExW SetWindowTextW SetWindowPos SetWindowPlacement SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRect SetPropW SetParent SetMenuItemInfoW SetMenu SetForegroundWindow SetFocus SetCursor SetCapture SetActiveWindow SendMessageA SendMessageW ScrollWindow ScreenToClient RemovePropW RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageW RegisterClipboardFormatW RegisterClassW RedrawWindow PostQuitMessage PostMessageW PeekMessageA PeekMessageW OffsetRect MsgWaitForMultipleObjectsEx MsgWaitForMultipleObjects MessageBoxW MessageBeep MapWindowPoints MapVirtualKeyW LoadStringW LoadKeyboardLayoutW LoadIconW LoadCursorW LoadBitmapW KillTimer IsZoomed IsWindowVisible IsWindowUnicode IsWindowEnabled IsWindow IsIconic IsDialogMessageA IsDialogMessageW IsChild InvalidateRect InsertMenuItemW InsertMenuW GetWindowThreadProcessId GetWindowTextW GetWindowRect GetWindowPlacement GetWindowDC GetTopWindow GetSystemMetrics GetSystemMenu GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropW GetParent GetWindow GetMessagePos GetMessageExtraInfo GetMenuStringW GetMenuState GetMenuItemInfoW GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutNameW GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextW GetIconInfo GetForegroundWindow GetFocus GetDlgItem GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClientRect GetClassInfoW GetCapture GetActiveWindow FrameRect FindWindowExW FindWindowW FillRect EnumWindows EnumThreadWindows EnumChildWindows EndPaint EnableWindow EnableScrollBar EnableMenuItem DrawTextExW DrawTextW DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawFocusRect DrawEdge DispatchMessageA DispatchMessageW DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcW DefMDIChildProcW DefFrameProcW CreatePopupMenu CreateMenu CreateIcon ClientToScreen CheckMenuItem CharUpperW CharNextW CharLowerW CallWindowProcW CallNextHookEx BeginPaint AdjustWindowRectEx ActivateKeyboardLayout EnumDisplayMonitors GetMonitorInfoW MonitorFromPoint MonitorFromWindow

kernel32

Sleep VirtualFree VirtualAlloc lstrlenW lstrcpynW VirtualQuery QueryPerformanceCounter GetTickCount GetSystemInfo GetVersion CompareStringW IsValidLocale SetThreadLocale GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW WideCharToMultiByte MultiByteToWideChar GetACP LoadLibraryExW GetStartupInfoW GetProcAddress GetModuleHandleW GetModuleFileNameW GetCommandLineW FreeLibrary GetLastError UnhandledExceptionFilter RtlUnwind RaiseException ExitProcess ExitThread SwitchToThread GetCurrentThreadId CreateThread DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection FindFirstFileW FindClose WriteFile GetStdHandle CloseHandle GetProcAddress RaiseException LoadLibraryA GetLastError TlsSetValue TlsGetValue TlsFree TlsAlloc LocalFree LocalAlloc FreeLibrary lstrcpyA WriteFile WideCharToMultiByte WaitForSingleObject WaitForMultipleObjectsEx VirtualQueryEx VirtualQuery VirtualFree VirtualAlloc UnmapViewOfFile SwitchToThread SuspendThread Sleep SizeofResource SetThreadPriority SetThreadLocale SetLastError SetFilePointer SetFileAttributesW SetEvent SetErrorMode SetEndOfFile ResumeThread ResetEvent RemoveDirectoryW ReadFile QueryDosDeviceW MulDiv MapViewOfFile LockResource LocalFree LoadResource LoadLibraryW LeaveCriticalSection IsValidLocale InitializeCriticalSection GlobalFree GlobalFindAtomW GlobalDeleteAtom GlobalAddAtomW GetVolumeInformationW GetVersionExW GetVersion GetTickCount GetThreadPriority GetThreadLocale GetStdHandle GetProcAddress GetModuleHandleW GetModuleFileNameW GetLogicalDriveStringsW GetLocaleInfoW GetLocalTime GetLastError GetFullPathNameW GetFileSize GetFileAttributesW GetExitCodeThread GetDriveTypeW GetDiskFreeSpaceW GetDateFormatW GetCurrentThreadId GetCurrentThread GetCurrentProcessId GetCurrentProcess GetCPInfoExW GetCPInfo GetACP FreeResource InterlockedExchangeAdd InterlockedExchange InterlockedCompareExchange FreeLibrary FormatMessageW FindResourceW FindNextFileW FindFirstFileW FindClose FileTimeToLocalFileTime FileTimeToDosDateTime EnumSystemLocalesW EnumCalendarInfoW EnterCriticalSection DeleteFileW DeleteCriticalSection CreateThread CreateFileMappingW CreateFileW CreateEventW CompareStringW CloseHandle Sleep

msimg32

AlphaBlend

gdi32

UnrealizeObject StretchBlt SetWindowOrgEx SetViewportOrgEx SetTextColor SetStretchBltMode SetROP2 SetPixel SetDIBits SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SelectPalette SelectObject SaveDC RoundRect RestoreDC Rectangle RectVisible RealizePalette Polyline Polygon PolyBezierTo PolyBezier Pie PatBlt MoveToEx MaskBlt LineTo IntersectClipRect GetWindowOrgEx GetTextMetricsW GetTextExtentPointW GetTextExtentPoint32W GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetObjectW GetDeviceCaps GetDIBits GetDIBColorTable GetCurrentPositionEx GetClipBox GetBrushOrgEx GetBitmapBits FrameRgn ExtTextOutW ExtFloodFill ExcludeClipRect Ellipse DeleteObject DeleteDC CreateSolidBrush CreateRectRgn CreatePenIndirect CreatePalette CreateHalftonePalette CreateFontIndirectW CreateDIBitmap CreateDIBSection CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap Chord BitBlt ArcTo Arc AngleArc

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

ole32

OleUninitialize OleInitialize CoTaskMemFree CoTaskMemAlloc CoUninitialize CoInitialize

comctl32

InitializeFlatSB FlatSB_SetScrollProp FlatSB_SetScrollPos FlatSB_SetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollInfo _TrackMouseEvent ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_GetIcon ImageList_Remove ImageList_DrawEx ImageList_Draw ImageList_GetBkColor ImageList_SetBkColor ImageList_Add ImageList_SetImageCount ImageList_GetImageCount ImageList_Destroy ImageList_Create InitCommonControls

shell32

Shell_NotifyIconW

Name

.text

Size

655KB

Virtual Size

655KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

20KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

81B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

57KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

28KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

$PLUGINSDIR/InstallOptions.dll

IMPHASH b1cd0d78f652ce5fc63f0879371af012
SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
MD5 325b008aec81e5aaa57096f05d4212b5
SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryA GetCurrentDirectoryA MultiByteToWideChar GetPrivateProfileIntA GlobalLock GetModuleHandleA lstrcmpiA GetPrivateProfileStringA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalUnlock GlobalAlloc

user32

MapWindowPoints GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard PtInRect SetWindowRgn LoadIconA LoadImageA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA LoadCursorA SetCursor DrawTextA GetWindowLongA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA GetClientRect

gdi32

SetTextColor CreateCompatibleDC GetObjectA GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderA SHGetDesktopFolder SHGetPathFromIDListA ShellExecuteA

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 498d402163d5d4578d8e76a22c97ab927cf31bf16f7125938cf03cc200c7a290
MD5 d08f87bb8ff9f53b90b5a148d5d3ca58
SHA1 3474d4b9c8af736555224356e3ca0df5a52c0dc3
SHA512 325e5ec5e6e403c263bef4689ec27a4a1bdeed7e8bedea79979abc0e8a6e7118f7697733665d4921abea78e02abcec4a7407ef6a5c6000fb01fb4fc9d9c019af
SSDEEP 384:0Pjg8pscoYJMND08L4n7zqNY9CHTBW1KBAEpESC6+k8sC5BUfFs2eg:C3psco7LfBRpzfD8sC5BUfFs2eg
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

uninstall.fud

SHA256 f5accf9cefe62675b3f4fc1a6c51f7dbe410f3dc1bccc0374e9968b34381509f
MD5 71240cc71ec1714d5596e58d07ab9b25
SHA1 f32dca43bddc4e69fb5abc7c25d09410068f6209
SHA512 0fd35c2339180629e69b70231b86ab41c62a35769ee1bf4103cdab07a68b797e624864616cd85135b79c930e08a410bf84659af0832c37da46c28f8428405bb4
MD5 SHA1 SHA512

NSIS installer

installer

$0/wavpackdll.dll

IMPHASH e3b07025795389915e5f3b3cc31cd07a
SHA256 24e725003b2d011fd0a98545770c8aeb2d71c8ae0479e495f495d44a11be3333
MD5 99f5170914bd925119c060366e8cb800
SHA1 208282202b008d98e5d06e5aabf572a15003c41e
SHA512 b384867f1728e99c1d498093dcd1cae2ed13ae0b065abb53f710a4c2d8ff43102cbc427d6d7b1181d6430912a982604682501df91ee5d47cc0f5e7e9bc2911ef
SSDEEP 6144:mRCAUyHbkv3y5saiDnzi/nMdUX+qPjrAnVItFL:QCYnPiDnzi/nMdUXT3AnCh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

d6:ca:de:f7:75:b5:f7:b8:18:ef:aa:26:06:05:4b:de:5e:ec:ad:ea

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

4

Entry point

108691

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\ImageLine\3rdparty\SDKs\wavpack\src\release\wavpackdll.pdb

kernel32

GetLastError HeapFree HeapAlloc HeapReAlloc FileTimeToSystemTime FileTimeToLocalFileTime GetFileInformationByHandle PeekNamedPipe GetFileType EnterCriticalSection LeaveCriticalSection GetCurrentThreadId GetCommandLineA GetVersionExA GetProcessHeap GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleA GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError HeapDestroy HeapCreate VirtualFree DeleteCriticalSection VirtualAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapSize SetStdHandle SetHandleCount GetStartupInfoA MultiByteToWideChar ReadFile SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode CloseHandle RtlUnwind Sleep FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSection LoadLibraryA RaiseException GetTimeZoneInformation FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEndOfFile CompareStringA CompareStringW SetEnvironmentVariableA

$0/wavpackdll_x64.dll

IMPHASH dd20a5625b38c1a4466ef178afd2582d
SHA256 2071e832e9811180c32fad4eafe16ecdd511e930d0a2922fc220f1714514e7aa
MD5 5d49f1097e3c483c013ae6f959a12074
SHA1 5f0863283fd5b66f252f61a61e8e49d7a40b8238
SHA512 a55d20229e444e30b49fa834fcfffe660d983d56bf209baf021704b2a800c5a47aead0a0041131b198b3aa9d06dc976e31bee7919948c1aa7aed13df0d6cc8b6
SSDEEP 6144:JmB01dhuOF9fEbraF3mNxkkBAvXBgg6dBZOc56EUZ:JmB01dhLfEbrtNHw+gOB0Z
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

19:ac:30:ef:df:ae:12:a4:5f:d9:94:3c:c6:b5:22:0a:44:e4:fc:e6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

4

Entry point

132288

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\ImageLine\3rdparty\SDKs\wavpack\src\x64\release\wavpackdll.pdb

kernel32

GetLastError HeapFree HeapAlloc HeapReAlloc FileTimeToSystemTime FileTimeToLocalFileTime GetFileInformationByHandle PeekNamedPipe GetFileType EnterCriticalSection LeaveCriticalSection GetCurrentThreadId FlsSetValue GetCommandLineA GetVersionExA GetProcessHeap GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleHandleA GetProcAddress FlsGetValue TlsFree FlsFree SetLastError TlsSetValue FlsAlloc HeapSetInformation HeapCreate HeapDestroy ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapSize TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlCaptureContext RtlVirtualUnwind RtlLookupFunctionEntry RtlUnwindEx SetStdHandle SetHandleCount GetStartupInfoA DeleteCriticalSection MultiByteToWideChar ReadFile SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode CloseHandle Sleep FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA LoadLibraryA InitializeCriticalSection RaiseException GetTimeZoneInformation FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEndOfFile CompareStringA CompareStringW SetEnvironmentVariableA

$PLUGINSDIR/AccessControl.dll

IMPHASH ed83f419402bc3b83a08e3aaf8b5b5b7
SHA256 4209588362785b690d08d15cd982b8d1c62c348767ca19114234b21d5df74ddc
MD5 055f4f9260e07fc83f71877cbb7f4fad
SHA1 a245131af1a182de99bd74af9ff1fab17977a72f
SHA512 a8e82dc4435ed938f090f43df953ddad9b0075f16218c09890c996299420162d64b1dbfbf613af37769ae796717eec78204dc786b757e8b1d13d423d4ee82e26
SSDEEP 192:8SEWBGgiJM4LN+xq56XdNcNz/NWdlJmlyOcROQ:8SEPgii9KTzyt
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ILInstallUtil.dll

IMPHASH f54089062a794946c82cd9c08d60bc3d
SHA256 32b674a0de4577544e138b7675110a6f09a99dd576a8b847af6a8e5976002325
MD5 e396b4dba8c838b9eec93e8ef428e73e
SHA1 f4c17acabd53262ce1576e1a59a4f8dc264ef077
SHA512 cab82519fe54f37d33e5254ba6abe3cf1533580535a27faf5f8c9caf832269564067e9355a99e33d8cc218c19f20fa17e439aa49ea21058435f933fe246bac1d
SSDEEP 6144:9S9ZlvuAVyPczPlWo+AiL9RujmwyJYi8q8V1NjQ:98ZlvvVqcz9WpuyJgfV1ZQ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

309976

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopy VariantClear VariantInit

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey RegSetValueExW RegQueryValueExW RegOpenKeyExW RegFlushKey RegDeleteValueW RegCreateKeyExW RegCloseKey

user32

MessageBoxA CharNextW LoadStringW wvsprintfA MessageBoxW LoadStringW GetSystemMetrics CharUpperW

kernel32

Sleep VirtualFree VirtualAlloc lstrlenW lstrcpynW VirtualQuery QueryPerformanceCounter GetTickCount GetSystemInfo GetVersion CompareStringW IsValidLocale SetThreadLocale GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW WideCharToMultiByte MultiByteToWideChar GetACP LoadLibraryExW GetStartupInfoW GetProcAddress GetModuleHandleW GetModuleFileNameW GetCommandLineW FreeLibrary GetLastError UnhandledExceptionFilter RtlUnwind RaiseException ExitProcess GetCurrentThreadId DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection FindFirstFileW FindClose WriteFile GetStdHandle CloseHandle GetProcAddress RaiseException LoadLibraryA GetLastError TlsSetValue TlsGetValue TlsFree TlsAlloc LocalFree LocalAlloc FreeLibrary lstrcpynA lstrcpyA WriteFile WideCharToMultiByte WaitForSingleObject VirtualQueryEx VirtualQuery VirtualFree SwitchToThread SetLastError SetFilePointer SetEvent SetEndOfFile ResetEvent ReadFile LocalFree LeaveCriticalSection IsValidLocale GlobalFree GlobalAlloc GetVersionExW GetThreadLocale GetStdHandle GetProcAddress GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetLocalTime GetLastError GetFullPathNameW GetFileAttributesW GetDiskFreeSpaceW GetDateFormatW GetCurrentThreadId GetCurrentProcess GetCPInfoExW GetCPInfo GetACP InterlockedExchangeAdd InterlockedCompareExchange FreeLibrary FormatMessageW FindNextFileW FindFirstFileW FindClose FileTimeToLocalFileTime FileTimeToDosDateTime EnumSystemLocalesW EnumCalendarInfoW EnterCriticalSection CreateFileW CreateEventW CopyFileW CompareStringW CloseHandle Sleep

version

VerQueryValueA VerQueryValueW GetFileVersionInfoSizeA GetFileVersionInfoA

Name

.text

Size

293KB

Virtual Size

293KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

20KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

512B

Virtual Size

340B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

1024B

Virtual Size

518B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

25KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

$PLUGINSDIR/System.dll

IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
MD5 c17103ae9072a06da581dec998343fc1
SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$_3_/Downloads/Drumaxx.txt

SHA256 bd5191480052be6d72a47a9b71ee3779d49fa3e1a73db70808e4c778bf3cf6ce
MD5 bf2b61fc5c88b62aadc11a947a2c6033
SHA1 d157f9e1d7edfa37820ae5ed5ca0fe240bba4b0b
SHA512 7954d622bb8a75b792825c3a8e9fee113b09c321d94ddd199164525168055949f56bfa453a86df1a2b7d3cd0f35d00ff815216c4e5d0f9cca267d03ae91d6dfc
SSDEEP 96:JEIPgD9+iDgRpzzjXRnR6ORIRfKT21mMQ3E2TbGgIIIyi7tArKGWDS3BzgZ:JT49mR6+sF4E2TB/1iReFm
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_3_/Downloads/FL Mobile Samples.txt

SHA256 49774e3c5f396fd4bc608043c633b2a2f73e23725335354d7c6e167bd2143960
MD5 44086661859ce45053f76878eef2c664
SHA1 f580b3f1eeb61136b02c71a35c2568eb5b582b73
SHA512 b6ab328d90aff7b8b7c422c0d92314e1ba3ca7f8b65709f6b249c5d5896fbd1e7eeb0201d42f895be45c2d70f8572297acae9c46c3f2345c356aa9456981c837
SSDEEP 3072:uvqtgjOB03yHy3oVWr4lm7M56YpEgR7+4tTa:uvqtgjOB03yHy3oVWr4lm7M56H
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_3_/Downloads/Harmor.txt

SHA256 17e447974c63be4fb53d52af87b2e78bbe14ed28be7cea37d4be966136828db1
MD5 3927b06e341ee85339e9e1a077c6e38f
SHA1 89534151a58d9e0f4ab81114e7f97c3d6b9c5fb8
SHA512 ea0c2ec6cc30c5d1b3eae3ec30eae5b9f7b185fefe5e6b67ef13484fe71a51eb4afd4f11a54214ee599664d041199fa6a5ad7996994a7a054a460ae1a17cb604
SSDEEP 192:c15M/WmOPjJMJlCwNBQGUaIZwITh04wtiUlwfIsSn:c15M/W5PjJMJlCwjQG/IZwIF04wtim5n
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_3_/Downloads/Legacy.txt

SHA256 2328f42dd3e338247137d39e411cbc943a4ae6d80d87224eff9b006c5261ad50
MD5 d6dece5ccbc5759b0f96baa7a6b1b198
SHA1 5605c3797ce35c5c4b896421bd7202c9e03eed9a
SHA512 b986461511252874f51c721ff6e689bc6f8ad9db8e2f53d9057c0d70c37589ab900385a2d502bd6ed46c58677984dc90cf3e39df44f590f13024fcdc57bb653f
MD5 SHA1 SHA512

NSIS installer

installer

$_3_/Downloads/Loops.txt

SHA256 c872d12507cf9033bc212888c1c171e763899c5face3d9dfbe1780376bd9d564
MD5 fc6b8c12b551a20930c516ae50806f2c
SHA1 2d96cb83e71a407200b2fae7440b261ce43f5523
SHA512 e271d7cb50a7370f6e67aa405f2537eedab85a9cc99253016e84695e0ca62018ffdeaf6117d5f9a27593c83f7cc698d92413e6bd07a5bb34ca9fd962fe188fcd
SSDEEP 49152:QNmo8Zj6iqKWC7QcCewGuKBA/ulUjizIpWn8Na7rEDuyIUkwVBSqZ03n8h80Ztkm:QNmo8Zj6iqKWC7QcLwGuKBA/ulUjizIr
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_3_/Downloads/Synthmaker.txt

SHA256 fb350e574617dc75c5abf82540af41202b19cf4d4134ddf7c304c3863295e649
MD5 995828d0905251d3349fa19fcf13472b
SHA1 ae3788a37f2d935941c342dd6d389312e94b6856
SHA512 23c456dbc89815d6d235fe5db06adb3946ab029a1c825826687604ad5ea44e5d28f04c0e155451cf774cca3718f0c3e75e01e44e7526da8478e5182be4c9d975
SSDEEP 96:1vEIpB3g5fBXU9qLamj0VlW5xzST/B4DUYsKBrccyXhYRQzQZskhE8hpXrFWYB6H:1v1QzSNrZRYEYXQ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_3_/Downloads/bassdrum.txt

SHA256 766a3c6715a84050357cdd835be9f371c98d618cf3cf6ada4597923507caff6b
MD5 e3804f12711c1fb9ac5d1e90bb2bfe00
SHA1 72ee0c835eb136f3093eac3d5b42d0d721b22b8c
SHA512 d80a8a6fa7d03c24dbf81b3bbbce59821e7e865711786b5da1b365790090135b3f81b30a91d2531a28220b5480c858bf4eeb3686437af8af28098278ecbcd43d
MD5 SHA1 SHA512

NSIS installer

installer

$_3_/Downloads/directwave.txt

SHA256 44a9c18b7b938bc3b245ee690913c2819f8664ebc5cd9b5252e66ab005dbe9f8
MD5 635dff0f0742da7faa3a68b708acd19a
SHA1 ce49fb5e074ab0380ba6efb695d6c91534ec18ff
SHA512 96c4290ca7cd6897a3cfa03e24c6ef0e7d1e89f7af8ef9631c85e07bcfb913b5809f828fac4d068fcc53eac6046999e09bdc61b980b6e46bdfdae743fde9324b
SSDEEP 1536:1iSp2XsRoRthlXw0BphY0lUDDp4ap4ap20pIqpY6pNxpIqpx9p6wp8GpmMp7zpff:1iSpBRoRXlg2phY/DDp4ap4ap20pIqpp
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_3_/Downloads/fpc.txt

SHA256 27e87fa2d7735a38d5914e730e0ed770776f0d29966d43c1a98ae8c0a19192f0
MD5 548c7b1ed53f3eb25d58e911eeabefcc
SHA1 8663c0707d52f8c9e4af6d19dcb388358ad8a21d
SHA512 1b3c07f8788806aeb7d7abd58b06a33d09c8b9b33c7d47f50909930f2bfbe82539fe05e6f828fdfea0c0d32a7b6f28c91619477f680fe2088d5087a4bb79a81a
SSDEEP 96:0iyEqI498w1/rjWVs8ph2cyDc0Rj8cIjeVzjtN4qqKUY31oMf:0iqfxRj8XatNYKLoS
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_3_/Downloads/gms.txt

SHA256 6ebd36a4f4a08564115f7262967b18bb0b171e2aa891ba79396f1ef80deccdec
MD5 e03ae17e4c09d8b3c6c9875c1a2cb609
SHA1 a3b8f56323cb4f77ded8ef6cd8c76ea9351e5ad8
SHA512 f53dd206d0867e2752bcdb93f293883469cf5b6fcb883ef1aa97ead88ad27209ea686c98dbbfc4a98c03b7fc762d819a04593f4177e51cb3ea461be92c4457a4
MD5 SHA1 SHA512

NSIS installer

installer

$_3_/Downloads/morphine.txt

SHA256 8d244bb2ffd9822852cb292a3707633914bfb75ccf2570ba188b96e668c20085
MD5 a6f27ba7c7536dbbecc57d7195c0a393
SHA1 6409bb39d7382071d1aaf8d7e078d822c5ad37bd
SHA512 fee2e705d68a4c0d5288388106326a4b5730a50288f8c014ae42f16186d1526d2ab365ba444173a21d1e13bc29b4add88a88904149da6b2bfc800a6a577dc927
SSDEEP 192:XJ6gCRDFWK16dRf0W6YFyHgyUs+ohhOTVdu5S:XJ6gCRrvHgy/3h2XuY
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_3_/Downloads/ogun.txt

SHA256 c1e6dcab7a5dfb0e1b057225d211e733c95c5930f6f7b37edaab60fff872f16a
MD5 7a4c39aa0b2de0ca6ff741e2033816af
SHA1 e9f437cb869f690325bc821ada7ccc646ed1ffad
SHA512 d885188ca7e15ea99c232e1a5e2cc8557021612324f8a78e1f88c446a40cb251da6cad00bda37f8a13d0d6c9c8ae2d9cdccd89e74265567e2b28a54a72e7e61b
SSDEEP 48:E/EIlDKZXUcSrBbSc1LiUaUjKa/b5/YAxSeMZ1awku8BlEvFZtfyU:cEIlmNCBbSc1LiUaUem5/jSeYcYtfyU
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_3_/Downloads/poizone.txt

SHA256 13f0529966f22552c4542c89b2e7b64ed210b41af3ca689a6de9e1d659fd138d
MD5 96dda856e2a00a4c3d5cecc23856178e
SHA1 c78268e1ae88ec6d583269d00ef4ca0b166b0ddd
SHA512 8d648932d960ed971ecc2bd41e4d282a11e28aedd1b7120d0f9583607814f23c39bde375d5839fc9afccdd5cc2f44cceae968ce25307ed480196da174b03c951
SSDEEP 192:ht0fFciaXSpXX8dNv3CP2+h2Rpl62UZsKlX0cdIDLZ9ZK89X+17Ix7GqepM2D3z4:h3g8dptHrgPWX23G90fBC8ZRc
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_3_/Downloads/sakura.txt

SHA256 eb33765b3545867678154a94c7f490189ca9e00ca6e2e666ceba64c3c66ba395
MD5 c03e3149800b5c45e39c08f4c416b7fc
SHA1 23d92816016f0bca87eaf32832f227329b3d315a
SHA512 6d63a7d3deb15511d04705ea540d374ca5e6daa551a32417486415adcb3afc43e8d38d885adc8a2e47e70b77a5b3904c5e07e46d26f5b58fad4ebdf13a62c844
SSDEEP 192:ai0vybBN2w2kTcM+sVZERXoj0WyqqplFivMZWTANfTMZivYF+++E0o2uGJW7B8m5:a2x9+l/GU4JgVzb8KSZAo+HAnsnUgVXs
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_3_/Downloads/sawer.txt

SHA256 f4b5db52571765599c2af4c5159bd3d76d14b5d0fb26354019e288a43d7b8cc9
MD5 a8fb1f0f6add2ea1c839602a60a131c1
SHA1 0301739ffc08435d472127da91168c5c837a457d
SHA512 e65274efd22a818d5f63b489a3f34d05a8922398ac7e4fb7e9411b665733bd2f6466ad0fb2db7169ed3e185008f0768f46039b8653dc91c1446caa49a5a91aa8
SSDEEP 96:BpEIp2w/IsfwafDvTES8WXM8me4Teroqr0OrVzWVJjeNyySa2zbOfsBWrNKf/F2r:r1RJVYzQ3uhkMDkLrZL1WjuWf2uBjE
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_3_/Downloads/toxic biohazard.txt

SHA256 9cc83e3e7922604501851777aca88d9527844549333b12fb5e7d445a7c5f6c71
MD5 de16b8a94f798771945b3a44e17a88ce
SHA1 891d9f1e0d1c7a9bb39dda914bbd05257b131c47
SHA512 3b1c74a8cc1029ce6e0ecc817ead10ed3d3f6f68f2c771736af8431677a1afe458ff766aad04b663ba2603d6434e6c09bf3ed5b7821675ef93d457a2c529169d
SSDEEP 384:330YFoHU/1QSxMle4LE8jn/LWtNcpj0vBwd3dznVKwUi6R:33jFoJjn/LWnIjMwd3ZnmR
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_3_/FLDownload.dll

IMPHASH bc71e7ac8396ad8e276994ea9b43c0bd
SHA256 79eb3bedfa9064c1c002c3e701115bc46f424b591537f73dbece6b00aedb5101
MD5 cf44ff02e758cc9fc98a9fbc32167f24
SHA1 f18ada2776e77d143872276d6b7fe75e1a0ac9d8
SHA512 d77f231295646378c0e18e5d2994b088f8866c49f9a6b652ec81e2e39463d93654aebbcb9f7cc9a6d6429716aa5e53b061a91d2e655aa2259b0ba95545927abf
SSDEEP 49152:4yVZjvSScxDuvf1Vmu7CDjdmFT6aaYM5R:9SSUDuH1Eu70xmMYq
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

df:da:b2:0c:bc:74:66:d7:fa:6d:1a:ac:30:ed:7c:9d:3e:87:3e:93

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

1

Major OS version

5

Entry point

1273848

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

version

GetFileVersionInfoSizeW VerQueryValueA GetFileVersionInfoW

kernel32

TerminateProcess ReadFile GetModuleFileNameW CreateFileW SetThreadPriority FlushFileBuffers GetTempPathW GetLastError GetCurrentDirectoryW GetProcAddress MoveFileW EnterCriticalSection FindClose CreateEventW RemoveDirectoryW GetModuleHandleA IsDebuggerPresent FindNextFileW GetFileAttributesExW QueryPerformanceFrequency DeleteCriticalSection GetCurrentThreadId SetThreadAffinityMask CloseHandle DeleteFileW GlobalSize GlobalLock GlobalAlloc GlobalUnlock LoadLibraryA GetUserDefaultLangID DecodePointer EncodePointer GetFileAttributesW IsProcessorFeaturePresent LeaveCriticalSection GetVersionExW FormatMessageW CopyFileW HeapAlloc HeapReAlloc RtlUnwind InterlockedIncrement InterlockedDecrement MultiByteToWideChar GetACP CreateThread ExitThread LoadLibraryExW GetTimeZoneInformation WideCharToMultiByte GetSystemTimeAsFileTime GetCommandLineA InitializeCriticalSectionAndSpinCount GetConsoleMode ReadConsoleW SetFilePointerEx GetStdHandle GetFileType GetStartupInfoW RaiseException GetModuleHandleExW AreFileApisANSI HeapSize GetProcessHeap IsValidCodePage GetOEMCP GetCPInfo GetStringTypeW SetLastError IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW UnhandledExceptionFilter SetUnhandledExceptionFilter TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetModuleFileNameA GetCurrentProcessId GetEnvironmentStringsW HeapFree FreeEnvironmentStringsW Sleep GetLocaleInfoW TerminateThread LoadLibraryW InitializeCriticalSection WriteFile SetFileTime GetCurrentThread OutputDebugStringW SetEvent WaitForSingleObject CreateDirectoryW QueryPerformanceCounter GetCurrentProcess FreeLibrary SetEndOfFile SetFilePointer FindFirstFileW ExitProcess GetConsoleCP SetStdHandle SetEnvironmentVariableA WriteConsoleW

user32

IsChild GetMessageExtraInfo SetCapture SetForegroundWindow GetParent TrackMouseEvent LoadCursorW GetWindowRect GetSystemMenu MapVirtualKeyW GetUpdateRgn CloseClipboard EnumDisplayMonitors SetCursor EndPaint GetWindowInfo WindowFromPoint ShowCaret BeginPaint CreateIconIndirect GetDC GetCapture GetForegroundWindow PeekMessageA PostQuitMessage FindWindowA GetWindowPlacement GetAsyncKeyState InvalidateRect SetCursorPos GetAncestor GetClipboardData SystemParametersInfoW ReleaseDC EnableMenuItem EmptyClipboard SetWindowLongW RedrawWindow DestroyCursor DestroyCaret GetDesktopWindow SetWindowPos GetCursorPos SetLayeredWindowAttributes ShowWindow GetActiveWindow CreateCaret OpenClipboard MessageBoxW ReleaseCapture GetSystemMetrics SetCaretPos SendMessageW SetClipboardData SetWindowTextW DestroyIcon GetMessageTime GetMessagePos DestroyWindow GetMessageW UnregisterClassW PostMessageW GetFocus SetFocus TranslateMessage RegisterClassExW GetWindowLongW PeekMessageW CreateWindowExW DefWindowProcW DispatchMessageW AttachThreadInput GetWindowThreadProcessId MessageBeep

gdi32

CreateRectRgn StretchDIBits SaveDC RestoreDC CreateRectRgnIndirect GetRegionData CreateBitmap ExcludeClipRect CreateDIBSection GetTextMetricsW GetGlyphOutlineW GetGlyphIndicesW GetKerningPairsW SetMapperFlags GetOutlineTextMetricsW SetMapMode CreateCompatibleDC SelectObject DeleteObject CreateFontIndirectW CombineRgn DeleteDC

advapi32

RegQueryValueExA RegSetValueExW RegCloseKey RegOpenKeyExW RegDeleteKeyW RegQueryValueExW RegCreateKeyExW RegOpenKeyExA

shell32

ExtractAssociatedIconW ShellExecuteW ShellExecuteA SHGetSpecialFolderPathW

ole32

DoDragDrop RevokeDragDrop OleUninitialize OleInitialize RegisterDragDrop CoTaskMemAlloc

wininet

InternetOpenW HttpSendRequestExW InternetCrackUrlW FtpOpenFileW InternetReadFile InternetConnectW InternetWriteFile InternetSetOptionW HttpQueryInfoW HttpOpenRequestW InternetSetFilePointer HttpEndRequestW InternetCloseHandle

winmm

timeBeginPeriod timeGetTime

imm32

ImmGetContext ImmReleaseContext ImmGetCompositionStringW ImmSetCandidateWindow ImmNotifyIME

Name

.text

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

388KB

Virtual Size

387KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

26KB

Virtual Size

101KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

284KB

Virtual Size

284KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

103KB

Virtual Size

103KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$_3_/Fonts/CL-Font1-Regular.ttf

SHA256 57492f31f1ce7259910dfd9d5ba07e678760c507e788a311a2e0d0b05a1525b2
MD5 71095a732ff6a31ed229e74e9a2069fd
SHA1 8a5bdd4796596a6be56513e021deb3f1adc3ad18
SHA512 c4784cec030b532fec3fc32707a28ec1c62a8e5a10e3094ce798704a0baa73b7d9cb7c3426b5731f11c9d5e611a3e9edcca97a4bc6f36ef0964fb7b8cfc53ecb
SSDEEP 768:Q21vXP6phSENQJzjz65ah26luU6EzBzUdX:b1qphSpz65aQ6luUq
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_3_/Fonts/CL-Font2-Regular.ttf

SHA256 a16d8a926b82d5391cb041f928ac8a1597fc713e9bbb65e09f923b4990b58b22
MD5 caf6ce847a7441c579e0ce2e47a11fd3
SHA1 2b14bfd6ece67b71793768875776c191c2fb54ce
SHA512 56b6f301cf09f07331a594b72cec162cd4e85559e80844478584e001c09f30201448e4f8ca5fc9fa59061b968ddc40d0b53a73da00a5525db49d398273818044
SSDEEP 3072:37AuzTLyWbVz4xEdcw4ML5tB0iY2E8H7O1j7gUO2Rc98q:r/p54x24MDB0y2RG
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_3_/Fonts/OFL.txt

SHA256 4de8b3f9675df2a341b04ae94732edbe943c379cb85a8ae5c33638ba08184a9e
MD5 50763bab9cf5470e16879153d862f988
SHA1 02fca5941d1cae7bb4f3c7c8916b538e738eef79
SHA512 1a25c97b540671a82b7c9ab2136f2a1ae56259911a73453199ee03006aa660a5a3aed2e4feae92d5be3c71bcec8d685d57e32c4cb857eb7739f1a433117783a7
SSDEEP 96:PUW+bHiilxwnEOWOKajy4vyviXQaGYBC23zCdZuKy0iQHZoG:P0zl7hqyvaQ1+3zCdyQHZV
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_3_/ILDownloadManager.exe

IMPHASH ab42ec410cb0c02dc3caec550f53b4f5
SHA256 c76d28df4462548cc72d031988c3d6462321dbde6822faadf4bdcf46de47c298
MD5 a5e7420e0faa985a79453060cab03908
SHA1 0f0399cd501ccc81daf176390b7403a3f0436c04
SHA512 76bfd4d233920e22a16f2bfbe58bbb97705bf72270b4629428eae0917dbdefd36eaf0192e098b8ff7f8abf0a0e323742730f176c60f9024b1ac81effabb879ee
SSDEEP 24576:LSmWS5R/Dp8hrcuK9feMPl2drPkrIrFxrilynwdX0cjfeKTsydYQ+z:+mWSTV85cuKfVPl2Vmosywl9TsydYQ+z
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

21:00:ad:da:90:ea:46:c7:5f:55:11:25:eb:65:2a:71:6e:47:5b:1d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

1

Major OS version

5

Entry point

1270651

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

version

VerQueryValueA GetFileVersionInfoSizeW GetFileVersionInfoW

kernel32

TerminateProcess ReadFile GetModuleFileNameW CreateFileW SetThreadPriority FlushFileBuffers GetTempPathW GetLastError GetCurrentDirectoryW GetProcAddress MoveFileW EnterCriticalSection FindClose CreateEventW RemoveDirectoryW GetModuleHandleA IsDebuggerPresent FindNextFileW GetFileAttributesExW QueryPerformanceFrequency DeleteCriticalSection GetCurrentThreadId SetThreadAffinityMask ReleaseMutex CloseHandle DeleteFileW GetVolumeInformationW GetCommandLineW GlobalSize GlobalLock GlobalAlloc GlobalUnlock LoadLibraryA GetUserDefaultLangID FreeEnvironmentStringsW GetEnvironmentStringsW GetCurrentProcessId GetFileAttributesW Sleep GetModuleHandleW TlsFree TlsSetValue TlsGetValue TlsAlloc SetUnhandledExceptionFilter UnhandledExceptionFilter LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale SetLastError GetStringTypeW GetCPInfo GetOEMCP IsValidCodePage GetProcessHeap HeapSize AreFileApisANSI GetModuleHandleExW RaiseException GetStartupInfoW GetFileType GetStdHandle SetFilePointerEx ReadConsoleW GetConsoleMode InitializeCriticalSectionAndSpinCount GetCommandLineA GetSystemTimeAsFileTime WideCharToMultiByte GetTimeZoneInformation LoadLibraryExW ExitThread CreateThread GetACP MultiByteToWideChar InterlockedDecrement InterlockedIncrement RtlUnwind HeapReAlloc HeapAlloc HeapFree DecodePointer EncodePointer IsProcessorFeaturePresent LeaveCriticalSection GetVersionExW FormatMessageW GetModuleFileNameA CopyFileW GetLocaleInfoW TerminateThread LoadLibraryW InitializeCriticalSection WriteFile GetCurrentThread OutputDebugStringW SetEvent WaitForSingleObject CreateDirectoryW QueryPerformanceCounter GetLogicalDriveStringsW GetCurrentProcess FreeLibrary SetEndOfFile GetDriveTypeW WriteConsoleW SetFilePointer FindFirstFileW CreateMutexW ExitProcess GetConsoleCP SetStdHandle SetEnvironmentVariableA

user32

LoadCursorW TrackMouseEvent GetParent SetForegroundWindow SetCapture GetMessageExtraInfo IsChild GetWindowRect GetSystemMenu MapVirtualKeyW GetAsyncKeyState GetWindowPlacement GetForegroundWindow GetCapture GetWindowThreadProcessId AttachThreadInput DispatchMessageW DefWindowProcW CreateWindowExW SendMessageTimeoutW GetUpdateRgn CloseClipboard EnumDisplayMonitors SetCursor EndPaint PeekMessageW GetWindowTextW GetWindowLongW RegisterClassExW TranslateMessage EnumWindows SetFocus GetFocus PostMessageW UnregisterClassW GetMessageW DestroyWindow GetMessagePos GetMessageTime DestroyIcon SetWindowTextW SetClipboardData SendMessageW SetCaretPos GetSystemMetrics ReleaseCapture MessageBoxW OpenClipboard CreateCaret GetActiveWindow ShowWindow SetLayeredWindowAttributes GetCursorPos SetWindowPos GetDesktopWindow GetDC DestroyCaret DestroyCursor RedrawWindow SetWindowLongW EmptyClipboard EnableMenuItem ReleaseDC SystemParametersInfoW GetClipboardData GetAncestor SetCursorPos GetWindowInfo MessageBeep WindowFromPoint ShowCaret BeginPaint CreateIconIndirect GetIconInfo InvalidateRect

gdi32

SetMapperFlags GetKerningPairsW GetGlyphIndicesW CombineRgn GetOutlineTextMetricsW GetRegionData CreateBitmap ExcludeClipRect CreateDIBSection SetMapMode SelectObject CreateCompatibleDC DeleteObject CreateFontIndirectW DeleteDC GetTextMetricsW RestoreDC GetPixel CreateRectRgn GetObjectW StretchDIBits CreateRectRgnIndirect GetGlyphOutlineW SaveDC

comdlg32

GetOpenFileNameW GetSaveFileNameW

advapi32

RegQueryValueExA RegSetValueExW RegCloseKey RegOpenKeyExW RegDeleteKeyW RegQueryValueExW RegCreateKeyExW RegOpenKeyExA

shell32

SHGetSpecialFolderPathW ShellExecuteW ExtractAssociatedIconW SHGetPathFromIDListW SHGetMalloc SHBrowseForFolderW

ole32

RegisterDragDrop CoTaskMemAlloc DoDragDrop RevokeDragDrop OleUninitialize OleInitialize

shlwapi

PathStripToRootW

winmm

timeBeginPeriod timeGetTime

imm32

ImmGetContext ImmGetCompositionStringW ImmSetCandidateWindow ImmNotifyIME ImmReleaseContext

Name

.text

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

397KB

Virtual Size

396KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

27KB

Virtual Size

102KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

280KB

Virtual Size

279KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

101KB

Virtual Size

101KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$_3_/Stub/FLDownload.dll

IMPHASH 9696f656d9dd7905533227242d722c02
SHA256 2a3ea3aeaff0b90b1738f6755cea623130e4e58c4b016d6a474c66695b701c38
MD5 1452d165eab673df198c3440b0f56246
SHA1 13f76efd485b04a8acc22abc26da1e4690255ce5
SHA512 cad366284c1c2fbe80f10416bde03d4a234ffa8f9ef14b57a6eda729042739269e51bf12e0516de723ddefb17383f6a5816ae0316cd3f7b5ba154ad0f5cf47ac
SSDEEP 12288:yhGlrudV69VcarqS7+A7cC6wqpX8gf2TZa:yMaa9VcarqS7+sAX8pTo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

4a:09:13:a6:5b:7d:37:f6:6f:88:19:c0:e2:46:55:2f:04:5f:52:a0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

4

Entry point

362680

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen GetErrorInfo SysFreeString SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopy VariantClear VariantInit

advapi32

RegQueryValueExA RegOpenKeyExA RegCloseKey RegQueryValueExA RegOpenKeyExA RegFlushKey RegCloseKey

user32

GetKeyboardType DestroyWindow LoadStringA MessageBoxA CharNextA CreateWindowExA WindowFromPoint WaitMessage UpdateWindow UnregisterClassA UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenu SystemParametersInfoA ShowWindow ShowScrollBar ShowOwnedPopups SetWindowsHookExA SetWindowPos SetWindowPlacement SetWindowLongW SetWindowLongA SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRect SetPropA SetParent SetMenuItemInfoA SetMenu SetForegroundWindow SetFocus SetCursor SetClassLongA SetCapture SetActiveWindow SendMessageW SendMessageA ScrollWindow ScreenToClient RemovePropA RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageA RegisterClipboardFormatA RegisterClassA RedrawWindow PtInRect PostQuitMessage PostMessageA PeekMessageW PeekMessageA OffsetRect OemToCharA MessageBoxA MapWindowPoints MapVirtualKeyA LockWindowUpdate LoadStringA LoadKeyboardLayoutA LoadIconA LoadCursorA LoadBitmapA KillTimer IsZoomed IsWindowVisible IsWindowUnicode IsWindowEnabled IsWindow IsRectEmpty IsIconic IsDialogMessageW IsDialogMessageA IsChild InvalidateRect IntersectRect InsertMenuItemA InsertMenuA InflateRect GetWindowThreadProcessId GetWindowTextA GetWindowRect GetWindowPlacement GetWindowLongW GetWindowLongA GetWindowDC GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropA GetParent GetWindow GetMessagePos GetMenuStringA GetMenuState GetMenuItemInfoA GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutNameA GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextA GetIconInfo GetForegroundWindow GetFocus GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClientRect GetClassLongA GetClassInfoA GetCapture GetActiveWindow FrameRect FindWindowA FillRect EqualRect EnumWindows EnumThreadWindows EnumChildWindows EndPaint EnableWindow EnableScrollBar EnableMenuItem DrawTextA DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawEdge DispatchMessageW DispatchMessageA DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcA DefMDIChildProcA DefFrameProcA CreatePopupMenu CreateMenu CreateIcon ClientToScreen CheckMenuItem CallWindowProcA CallNextHookEx BeginPaint CharNextA CharLowerA CharToOemA AdjustWindowRectEx ActivateKeyboardLayout

kernel32

GetACP Sleep VirtualFree VirtualAlloc GetCurrentThreadId InterlockedDecrement InterlockedIncrement VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrlenA lstrcpynA LoadLibraryExA GetThreadLocale GetStartupInfoA GetProcAddress GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetCommandLineA FreeLibrary FindFirstFileA FindClose ExitProcess CompareStringA WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle TlsSetValue TlsGetValue TlsFree TlsAlloc LocalFree LocalAlloc lstrcpyA WriteFile WaitForSingleObject VirtualQuery VirtualAlloc SizeofResource SetThreadLocale SetFilePointer SetEvent SetErrorMode SetEndOfFile ResetEvent ReadFile MultiByteToWideChar MulDiv LockResource LoadResource LoadLibraryA LeaveCriticalSection InitializeCriticalSection GlobalFindAtomA GlobalDeleteAtom GlobalAddAtomA GetVersionExA GetVersion GetTickCount GetThreadLocale GetStdHandle GetProcAddress GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetLocalTime GetLastError GetFullPathNameA GetFileAttributesA GetDiskFreeSpaceA GetDateFormatA GetCurrentThreadId GetCurrentProcessId GetCPInfo FreeResource InterlockedExchange FreeLibrary FormatMessageA FindResourceA EnumCalendarInfoA EnterCriticalSection DeleteCriticalSection CreateThread CreateFileA CreateEventA CompareStringA CloseHandle Sleep

gdi32

UnrealizeObject StretchBlt SetWindowOrgEx SetViewportOrgEx SetTextColor SetStretchBltMode SetROP2 SetPixel SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SelectPalette SelectObject SaveDC RestoreDC RectVisible RealizePalette PatBlt MoveToEx MaskBlt LineTo IntersectClipRect GetWindowOrgEx GetTextMetricsA GetTextExtentPoint32A GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetObjectA GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetClipBox GetBrushOrgEx GetBitmapBits ExcludeClipRect DeleteObject DeleteDC CreateSolidBrush CreatePenIndirect CreatePalette CreateHalftonePalette CreateFontIndirectA CreateDIBitmap CreateDIBSection CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap BitBlt

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA

ole32

CoUninitialize CoInitialize

comctl32

_TrackMouseEvent ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_DragShowNolock ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_Remove ImageList_DrawEx ImageList_Draw ImageList_GetBkColor ImageList_SetBkColor ImageList_Add ImageList_GetImageCount ImageList_Destroy ImageList_Create

winmm

timeGetDevCaps timeEndPeriod timeBeginPeriod

Name

.text

Size

345KB

Virtual Size

345KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

14KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

77B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

$_3_/Update/Updater.exe

IMPHASH 8b1c863312f6977ce0e438376ff3a4d7
SHA256 ec6beb5b3a142ce2aa219cc3b7556c69d13389a3f1cc4582bf6ff915b62f6635
MD5 899a0e5ad7f9bb816a49ad8722309d63
SHA1 53605907568452a0c0b80d2feac7eef3f325920d
SHA512 05c85850a2e39f36c43b4d38632b184ecf4cffea2a966735c2951c8cc3e5563498aba574a0e6282f7cd836b2bb069811d42cc1f8bb25ac1c0886abaf90972abf
SSDEEP 12288:Va9zNU8kRagBIHGRRYP7vt8khukmPboYO6dwkaNTuof93a:VaBNRk8tmRRYek0ZPboYxdwkaNTuh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

2d:e1:6b:e9:dd:fc:f3:5e:2f:3b:ef:1d:30:ac:97:1e:b8:8c:4a:5c

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

4

Entry point

73614

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentDirectoryW SetFilePointer SetEvent GetFileAttributesW GetFileAttributesExW ReadFile GetModuleFileNameW CreateFileW WriteFile CloseHandle CreateEventW FlushFileBuffers GetTempPathW IsDebuggerPresent GetProcAddress ExitProcess DeleteCriticalSection GetCurrentProcess TerminateThread GetCurrentThreadId EnterCriticalSection SetThreadAffinityMask ReleaseMutex WaitForSingleObject CreateMutexW LeaveCriticalSection Sleep SetThreadPriority InitializeCriticalSection GetModuleHandleW GlobalLock GetCurrentProcessId GlobalAlloc GlobalSize GlobalUnlock QueryPerformanceFrequency QueryPerformanceCounter GetVersionExW IsProcessorFeaturePresent OutputDebugStringW GetTickCount GetCommandLineA HeapFree GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoA HeapReAlloc MultiByteToWideChar WideCharToMultiByte ExitThread CreateThread GetTimeZoneInformation GetSystemTimeAsFileTime UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType HeapDestroy HeapCreate VirtualFree VirtualAlloc LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode LoadLibraryA RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA CompareStringA CompareStringW SetEnvironmentVariableA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA GetLastError CreateDirectoryW GetCurrentThread GetModuleHandleA

user32

ReleaseDC CreateIconIndirect DestroyIcon DestroyCursor SetParent GetKeyState EndPaint LoadCursorW GetUpdateRgn ShowWindow SetCursorPos SetWindowTextW CreateCursor SetWindowLongW InvalidateRect SystemParametersInfoW CallWindowProcW WindowFromPoint TrackMouseEvent GetParent EnumDisplayMonitors GetForegroundWindow SetCapture GetSystemMetrics GetCursorPos MoveWindow GetMessageTime PostMessageW SetCursor GetActiveWindow SetWindowPos GetCapture IsChild GetDC GetWindowInfo GetDesktopWindow SetForegroundWindow GetMessagePos EnableMenuItem OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData MessageBeep DispatchMessageW DestroyWindow GetFocus SendMessageTimeoutW GetWindowLongW AttachThreadInput GetWindowThreadProcessId MapVirtualKeyW GetSystemMenu GetWindowPlacement GetWindowTextW GetMessageW SetFocus CreateWindowExW PeekMessageW EnumWindows DefWindowProcW UnregisterClassW BeginPaint TranslateMessage GetWindowRect SendMessageW ReleaseCapture RegisterClassExW

msvfw32

DrawDibDraw DrawDibOpen

winmm

timeBeginPeriod

opengl32

wglGetProcAddress wglDeleteContext wglMakeCurrent wglShareLists wglGetCurrentContext glViewport wglCreateContext

gdi32

DeleteObject ExcludeClipRect GetTextMetricsW GetGlyphIndicesW CreateFontIndirectW GetOutlineTextMetricsW EnumFontFamiliesExW GetGlyphOutlineW SetMapperFlags GetKerningPairsW CreateHalftonePalette SaveDC SetMapMode SwapBuffers SelectObject CreateCompatibleBitmap RealizePalette GetPixelFormat CreateRectRgnIndirect SetPixel RestoreDC SetStretchBltMode SetPixelFormat SelectPalette StretchDIBits CreateRectRgn DeleteDC CreateBitmap DescribePixelFormat CreateDIBSection GetRegionData ChoosePixelFormat GetDeviceCaps CombineRgn CreateCompatibleDC

advapi32

RegCloseKey RegOpenKeyExW

shell32

ExtractAssociatedIconW Shell_NotifyIconW SHGetSpecialFolderPathW ShellExecuteW

ole32

OleInitialize OleUninitialize RevokeDragDrop RegisterDragDrop

$_4_/Downloads/Drumaxx.txt

SHA256 bd5191480052be6d72a47a9b71ee3779d49fa3e1a73db70808e4c778bf3cf6ce
MD5 bf2b61fc5c88b62aadc11a947a2c6033
SHA1 d157f9e1d7edfa37820ae5ed5ca0fe240bba4b0b
SHA512 7954d622bb8a75b792825c3a8e9fee113b09c321d94ddd199164525168055949f56bfa453a86df1a2b7d3cd0f35d00ff815216c4e5d0f9cca267d03ae91d6dfc
SSDEEP 96:JEIPgD9+iDgRpzzjXRnR6ORIRfKT21mMQ3E2TbGgIIIyi7tArKGWDS3BzgZ:JT49mR6+sF4E2TB/1iReFm
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_4_/Downloads/FL Mobile Samples.txt

SHA256 49774e3c5f396fd4bc608043c633b2a2f73e23725335354d7c6e167bd2143960
MD5 44086661859ce45053f76878eef2c664
SHA1 f580b3f1eeb61136b02c71a35c2568eb5b582b73
SHA512 b6ab328d90aff7b8b7c422c0d92314e1ba3ca7f8b65709f6b249c5d5896fbd1e7eeb0201d42f895be45c2d70f8572297acae9c46c3f2345c356aa9456981c837
SSDEEP 3072:uvqtgjOB03yHy3oVWr4lm7M56YpEgR7+4tTa:uvqtgjOB03yHy3oVWr4lm7M56H
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_4_/Downloads/Harmor.txt

SHA256 17e447974c63be4fb53d52af87b2e78bbe14ed28be7cea37d4be966136828db1
MD5 3927b06e341ee85339e9e1a077c6e38f
SHA1 89534151a58d9e0f4ab81114e7f97c3d6b9c5fb8
SHA512 ea0c2ec6cc30c5d1b3eae3ec30eae5b9f7b185fefe5e6b67ef13484fe71a51eb4afd4f11a54214ee599664d041199fa6a5ad7996994a7a054a460ae1a17cb604
SSDEEP 192:c15M/WmOPjJMJlCwNBQGUaIZwITh04wtiUlwfIsSn:c15M/W5PjJMJlCwjQG/IZwIF04wtim5n
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_4_/Downloads/Legacy.txt

SHA256 2328f42dd3e338247137d39e411cbc943a4ae6d80d87224eff9b006c5261ad50
MD5 d6dece5ccbc5759b0f96baa7a6b1b198
SHA1 5605c3797ce35c5c4b896421bd7202c9e03eed9a
SHA512 b986461511252874f51c721ff6e689bc6f8ad9db8e2f53d9057c0d70c37589ab900385a2d502bd6ed46c58677984dc90cf3e39df44f590f13024fcdc57bb653f
MD5 SHA1 SHA512

NSIS installer

installer

$_4_/Downloads/Loops.txt

SHA256 c872d12507cf9033bc212888c1c171e763899c5face3d9dfbe1780376bd9d564
MD5 fc6b8c12b551a20930c516ae50806f2c
SHA1 2d96cb83e71a407200b2fae7440b261ce43f5523
SHA512 e271d7cb50a7370f6e67aa405f2537eedab85a9cc99253016e84695e0ca62018ffdeaf6117d5f9a27593c83f7cc698d92413e6bd07a5bb34ca9fd962fe188fcd
SSDEEP 49152:QNmo8Zj6iqKWC7QcCewGuKBA/ulUjizIpWn8Na7rEDuyIUkwVBSqZ03n8h80Ztkm:QNmo8Zj6iqKWC7QcLwGuKBA/ulUjizIr
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_4_/Downloads/Synthmaker.txt

SHA256 fb350e574617dc75c5abf82540af41202b19cf4d4134ddf7c304c3863295e649
MD5 995828d0905251d3349fa19fcf13472b
SHA1 ae3788a37f2d935941c342dd6d389312e94b6856
SHA512 23c456dbc89815d6d235fe5db06adb3946ab029a1c825826687604ad5ea44e5d28f04c0e155451cf774cca3718f0c3e75e01e44e7526da8478e5182be4c9d975
SSDEEP 96:1vEIpB3g5fBXU9qLamj0VlW5xzST/B4DUYsKBrccyXhYRQzQZskhE8hpXrFWYB6H:1v1QzSNrZRYEYXQ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_4_/Downloads/bassdrum.txt

SHA256 766a3c6715a84050357cdd835be9f371c98d618cf3cf6ada4597923507caff6b
MD5 e3804f12711c1fb9ac5d1e90bb2bfe00
SHA1 72ee0c835eb136f3093eac3d5b42d0d721b22b8c
SHA512 d80a8a6fa7d03c24dbf81b3bbbce59821e7e865711786b5da1b365790090135b3f81b30a91d2531a28220b5480c858bf4eeb3686437af8af28098278ecbcd43d
MD5 SHA1 SHA512

NSIS installer

installer

$_4_/Downloads/directwave.txt

SHA256 44a9c18b7b938bc3b245ee690913c2819f8664ebc5cd9b5252e66ab005dbe9f8
MD5 635dff0f0742da7faa3a68b708acd19a
SHA1 ce49fb5e074ab0380ba6efb695d6c91534ec18ff
SHA512 96c4290ca7cd6897a3cfa03e24c6ef0e7d1e89f7af8ef9631c85e07bcfb913b5809f828fac4d068fcc53eac6046999e09bdc61b980b6e46bdfdae743fde9324b
SSDEEP 1536:1iSp2XsRoRthlXw0BphY0lUDDp4ap4ap20pIqpY6pNxpIqpx9p6wp8GpmMp7zpff:1iSpBRoRXlg2phY/DDp4ap4ap20pIqpp
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_4_/Downloads/fpc.txt

SHA256 27e87fa2d7735a38d5914e730e0ed770776f0d29966d43c1a98ae8c0a19192f0
MD5 548c7b1ed53f3eb25d58e911eeabefcc
SHA1 8663c0707d52f8c9e4af6d19dcb388358ad8a21d
SHA512 1b3c07f8788806aeb7d7abd58b06a33d09c8b9b33c7d47f50909930f2bfbe82539fe05e6f828fdfea0c0d32a7b6f28c91619477f680fe2088d5087a4bb79a81a
SSDEEP 96:0iyEqI498w1/rjWVs8ph2cyDc0Rj8cIjeVzjtN4qqKUY31oMf:0iqfxRj8XatNYKLoS
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_4_/Downloads/gms.txt

SHA256 6ebd36a4f4a08564115f7262967b18bb0b171e2aa891ba79396f1ef80deccdec
MD5 e03ae17e4c09d8b3c6c9875c1a2cb609
SHA1 a3b8f56323cb4f77ded8ef6cd8c76ea9351e5ad8
SHA512 f53dd206d0867e2752bcdb93f293883469cf5b6fcb883ef1aa97ead88ad27209ea686c98dbbfc4a98c03b7fc762d819a04593f4177e51cb3ea461be92c4457a4
MD5 SHA1 SHA512

NSIS installer

installer

$_4_/Downloads/morphine.txt

SHA256 8d244bb2ffd9822852cb292a3707633914bfb75ccf2570ba188b96e668c20085
MD5 a6f27ba7c7536dbbecc57d7195c0a393
SHA1 6409bb39d7382071d1aaf8d7e078d822c5ad37bd
SHA512 fee2e705d68a4c0d5288388106326a4b5730a50288f8c014ae42f16186d1526d2ab365ba444173a21d1e13bc29b4add88a88904149da6b2bfc800a6a577dc927
SSDEEP 192:XJ6gCRDFWK16dRf0W6YFyHgyUs+ohhOTVdu5S:XJ6gCRrvHgy/3h2XuY
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_4_/Downloads/ogun.txt

SHA256 c1e6dcab7a5dfb0e1b057225d211e733c95c5930f6f7b37edaab60fff872f16a
MD5 7a4c39aa0b2de0ca6ff741e2033816af
SHA1 e9f437cb869f690325bc821ada7ccc646ed1ffad
SHA512 d885188ca7e15ea99c232e1a5e2cc8557021612324f8a78e1f88c446a40cb251da6cad00bda37f8a13d0d6c9c8ae2d9cdccd89e74265567e2b28a54a72e7e61b
SSDEEP 48:E/EIlDKZXUcSrBbSc1LiUaUjKa/b5/YAxSeMZ1awku8BlEvFZtfyU:cEIlmNCBbSc1LiUaUem5/jSeYcYtfyU
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_4_/Downloads/poizone.txt

SHA256 13f0529966f22552c4542c89b2e7b64ed210b41af3ca689a6de9e1d659fd138d
MD5 96dda856e2a00a4c3d5cecc23856178e
SHA1 c78268e1ae88ec6d583269d00ef4ca0b166b0ddd
SHA512 8d648932d960ed971ecc2bd41e4d282a11e28aedd1b7120d0f9583607814f23c39bde375d5839fc9afccdd5cc2f44cceae968ce25307ed480196da174b03c951
SSDEEP 192:ht0fFciaXSpXX8dNv3CP2+h2Rpl62UZsKlX0cdIDLZ9ZK89X+17Ix7GqepM2D3z4:h3g8dptHrgPWX23G90fBC8ZRc
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_4_/Downloads/sakura.txt

SHA256 eb33765b3545867678154a94c7f490189ca9e00ca6e2e666ceba64c3c66ba395
MD5 c03e3149800b5c45e39c08f4c416b7fc
SHA1 23d92816016f0bca87eaf32832f227329b3d315a
SHA512 6d63a7d3deb15511d04705ea540d374ca5e6daa551a32417486415adcb3afc43e8d38d885adc8a2e47e70b77a5b3904c5e07e46d26f5b58fad4ebdf13a62c844
SSDEEP 192:ai0vybBN2w2kTcM+sVZERXoj0WyqqplFivMZWTANfTMZivYF+++E0o2uGJW7B8m5:a2x9+l/GU4JgVzb8KSZAo+HAnsnUgVXs
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_4_/Downloads/sawer.txt

SHA256 f4b5db52571765599c2af4c5159bd3d76d14b5d0fb26354019e288a43d7b8cc9
MD5 a8fb1f0f6add2ea1c839602a60a131c1
SHA1 0301739ffc08435d472127da91168c5c837a457d
SHA512 e65274efd22a818d5f63b489a3f34d05a8922398ac7e4fb7e9411b665733bd2f6466ad0fb2db7169ed3e185008f0768f46039b8653dc91c1446caa49a5a91aa8
SSDEEP 96:BpEIp2w/IsfwafDvTES8WXM8me4Teroqr0OrVzWVJjeNyySa2zbOfsBWrNKf/F2r:r1RJVYzQ3uhkMDkLrZL1WjuWf2uBjE
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_4_/Downloads/toxic biohazard.txt

SHA256 9cc83e3e7922604501851777aca88d9527844549333b12fb5e7d445a7c5f6c71
MD5 de16b8a94f798771945b3a44e17a88ce
SHA1 891d9f1e0d1c7a9bb39dda914bbd05257b131c47
SHA512 3b1c74a8cc1029ce6e0ecc817ead10ed3d3f6f68f2c771736af8431677a1afe458ff766aad04b663ba2603d6434e6c09bf3ed5b7821675ef93d457a2c529169d
SSDEEP 384:330YFoHU/1QSxMle4LE8jn/LWtNcpj0vBwd3dznVKwUi6R:33jFoJjn/LWnIjMwd3ZnmR
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_4_/FLDownload.dll

IMPHASH bc71e7ac8396ad8e276994ea9b43c0bd
SHA256 79eb3bedfa9064c1c002c3e701115bc46f424b591537f73dbece6b00aedb5101
MD5 cf44ff02e758cc9fc98a9fbc32167f24
SHA1 f18ada2776e77d143872276d6b7fe75e1a0ac9d8
SHA512 d77f231295646378c0e18e5d2994b088f8866c49f9a6b652ec81e2e39463d93654aebbcb9f7cc9a6d6429716aa5e53b061a91d2e655aa2259b0ba95545927abf
SSDEEP 49152:4yVZjvSScxDuvf1Vmu7CDjdmFT6aaYM5R:9SSUDuH1Eu70xmMYq
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

df:da:b2:0c:bc:74:66:d7:fa:6d:1a:ac:30:ed:7c:9d:3e:87:3e:93

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

1

Major OS version

5

Entry point

1273848

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

version

GetFileVersionInfoSizeW VerQueryValueA GetFileVersionInfoW

kernel32

TerminateProcess ReadFile GetModuleFileNameW CreateFileW SetThreadPriority FlushFileBuffers GetTempPathW GetLastError GetCurrentDirectoryW GetProcAddress MoveFileW EnterCriticalSection FindClose CreateEventW RemoveDirectoryW GetModuleHandleA IsDebuggerPresent FindNextFileW GetFileAttributesExW QueryPerformanceFrequency DeleteCriticalSection GetCurrentThreadId SetThreadAffinityMask CloseHandle DeleteFileW GlobalSize GlobalLock GlobalAlloc GlobalUnlock LoadLibraryA GetUserDefaultLangID DecodePointer EncodePointer GetFileAttributesW IsProcessorFeaturePresent LeaveCriticalSection GetVersionExW FormatMessageW CopyFileW HeapAlloc HeapReAlloc RtlUnwind InterlockedIncrement InterlockedDecrement MultiByteToWideChar GetACP CreateThread ExitThread LoadLibraryExW GetTimeZoneInformation WideCharToMultiByte GetSystemTimeAsFileTime GetCommandLineA InitializeCriticalSectionAndSpinCount GetConsoleMode ReadConsoleW SetFilePointerEx GetStdHandle GetFileType GetStartupInfoW RaiseException GetModuleHandleExW AreFileApisANSI HeapSize GetProcessHeap IsValidCodePage GetOEMCP GetCPInfo GetStringTypeW SetLastError IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW UnhandledExceptionFilter SetUnhandledExceptionFilter TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetModuleFileNameA GetCurrentProcessId GetEnvironmentStringsW HeapFree FreeEnvironmentStringsW Sleep GetLocaleInfoW TerminateThread LoadLibraryW InitializeCriticalSection WriteFile SetFileTime GetCurrentThread OutputDebugStringW SetEvent WaitForSingleObject CreateDirectoryW QueryPerformanceCounter GetCurrentProcess FreeLibrary SetEndOfFile SetFilePointer FindFirstFileW ExitProcess GetConsoleCP SetStdHandle SetEnvironmentVariableA WriteConsoleW

user32

IsChild GetMessageExtraInfo SetCapture SetForegroundWindow GetParent TrackMouseEvent LoadCursorW GetWindowRect GetSystemMenu MapVirtualKeyW GetUpdateRgn CloseClipboard EnumDisplayMonitors SetCursor EndPaint GetWindowInfo WindowFromPoint ShowCaret BeginPaint CreateIconIndirect GetDC GetCapture GetForegroundWindow PeekMessageA PostQuitMessage FindWindowA GetWindowPlacement GetAsyncKeyState InvalidateRect SetCursorPos GetAncestor GetClipboardData SystemParametersInfoW ReleaseDC EnableMenuItem EmptyClipboard SetWindowLongW RedrawWindow DestroyCursor DestroyCaret GetDesktopWindow SetWindowPos GetCursorPos SetLayeredWindowAttributes ShowWindow GetActiveWindow CreateCaret OpenClipboard MessageBoxW ReleaseCapture GetSystemMetrics SetCaretPos SendMessageW SetClipboardData SetWindowTextW DestroyIcon GetMessageTime GetMessagePos DestroyWindow GetMessageW UnregisterClassW PostMessageW GetFocus SetFocus TranslateMessage RegisterClassExW GetWindowLongW PeekMessageW CreateWindowExW DefWindowProcW DispatchMessageW AttachThreadInput GetWindowThreadProcessId MessageBeep

gdi32

CreateRectRgn StretchDIBits SaveDC RestoreDC CreateRectRgnIndirect GetRegionData CreateBitmap ExcludeClipRect CreateDIBSection GetTextMetricsW GetGlyphOutlineW GetGlyphIndicesW GetKerningPairsW SetMapperFlags GetOutlineTextMetricsW SetMapMode CreateCompatibleDC SelectObject DeleteObject CreateFontIndirectW CombineRgn DeleteDC

advapi32

RegQueryValueExA RegSetValueExW RegCloseKey RegOpenKeyExW RegDeleteKeyW RegQueryValueExW RegCreateKeyExW RegOpenKeyExA

shell32

ExtractAssociatedIconW ShellExecuteW ShellExecuteA SHGetSpecialFolderPathW

ole32

DoDragDrop RevokeDragDrop OleUninitialize OleInitialize RegisterDragDrop CoTaskMemAlloc

wininet

InternetOpenW HttpSendRequestExW InternetCrackUrlW FtpOpenFileW InternetReadFile InternetConnectW InternetWriteFile InternetSetOptionW HttpQueryInfoW HttpOpenRequestW InternetSetFilePointer HttpEndRequestW InternetCloseHandle

winmm

timeBeginPeriod timeGetTime

imm32

ImmGetContext ImmReleaseContext ImmGetCompositionStringW ImmSetCandidateWindow ImmNotifyIME

Name

.text

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

388KB

Virtual Size

387KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

26KB

Virtual Size

101KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

284KB

Virtual Size

284KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

103KB

Virtual Size

103KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$_4_/Fonts/CL-Font1-Regular.ttf

SHA256 57492f31f1ce7259910dfd9d5ba07e678760c507e788a311a2e0d0b05a1525b2
MD5 71095a732ff6a31ed229e74e9a2069fd
SHA1 8a5bdd4796596a6be56513e021deb3f1adc3ad18
SHA512 c4784cec030b532fec3fc32707a28ec1c62a8e5a10e3094ce798704a0baa73b7d9cb7c3426b5731f11c9d5e611a3e9edcca97a4bc6f36ef0964fb7b8cfc53ecb
SSDEEP 768:Q21vXP6phSENQJzjz65ah26luU6EzBzUdX:b1qphSpz65aQ6luUq
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_4_/Fonts/CL-Font2-Regular.ttf

SHA256 a16d8a926b82d5391cb041f928ac8a1597fc713e9bbb65e09f923b4990b58b22
MD5 caf6ce847a7441c579e0ce2e47a11fd3
SHA1 2b14bfd6ece67b71793768875776c191c2fb54ce
SHA512 56b6f301cf09f07331a594b72cec162cd4e85559e80844478584e001c09f30201448e4f8ca5fc9fa59061b968ddc40d0b53a73da00a5525db49d398273818044
SSDEEP 3072:37AuzTLyWbVz4xEdcw4ML5tB0iY2E8H7O1j7gUO2Rc98q:r/p54x24MDB0y2RG
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_4_/Fonts/OFL.txt

SHA256 4de8b3f9675df2a341b04ae94732edbe943c379cb85a8ae5c33638ba08184a9e
MD5 50763bab9cf5470e16879153d862f988
SHA1 02fca5941d1cae7bb4f3c7c8916b538e738eef79
SHA512 1a25c97b540671a82b7c9ab2136f2a1ae56259911a73453199ee03006aa660a5a3aed2e4feae92d5be3c71bcec8d685d57e32c4cb857eb7739f1a433117783a7
SSDEEP 96:PUW+bHiilxwnEOWOKajy4vyviXQaGYBC23zCdZuKy0iQHZoG:P0zl7hqyvaQ1+3zCdyQHZV
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$_4_/ILDownloadManager.exe

IMPHASH ab42ec410cb0c02dc3caec550f53b4f5
SHA256 c76d28df4462548cc72d031988c3d6462321dbde6822faadf4bdcf46de47c298
MD5 a5e7420e0faa985a79453060cab03908
SHA1 0f0399cd501ccc81daf176390b7403a3f0436c04
SHA512 76bfd4d233920e22a16f2bfbe58bbb97705bf72270b4629428eae0917dbdefd36eaf0192e098b8ff7f8abf0a0e323742730f176c60f9024b1ac81effabb879ee
SSDEEP 24576:LSmWS5R/Dp8hrcuK9feMPl2drPkrIrFxrilynwdX0cjfeKTsydYQ+z:+mWSTV85cuKfVPl2Vmosywl9TsydYQ+z
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

21:00:ad:da:90:ea:46:c7:5f:55:11:25:eb:65:2a:71:6e:47:5b:1d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

1

Major OS version

5

Entry point

1270651

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

version

VerQueryValueA GetFileVersionInfoSizeW GetFileVersionInfoW

kernel32

TerminateProcess ReadFile GetModuleFileNameW CreateFileW SetThreadPriority FlushFileBuffers GetTempPathW GetLastError GetCurrentDirectoryW GetProcAddress MoveFileW EnterCriticalSection FindClose CreateEventW RemoveDirectoryW GetModuleHandleA IsDebuggerPresent FindNextFileW GetFileAttributesExW QueryPerformanceFrequency DeleteCriticalSection GetCurrentThreadId SetThreadAffinityMask ReleaseMutex CloseHandle DeleteFileW GetVolumeInformationW GetCommandLineW GlobalSize GlobalLock GlobalAlloc GlobalUnlock LoadLibraryA GetUserDefaultLangID FreeEnvironmentStringsW GetEnvironmentStringsW GetCurrentProcessId GetFileAttributesW Sleep GetModuleHandleW TlsFree TlsSetValue TlsGetValue TlsAlloc SetUnhandledExceptionFilter UnhandledExceptionFilter LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale SetLastError GetStringTypeW GetCPInfo GetOEMCP IsValidCodePage GetProcessHeap HeapSize AreFileApisANSI GetModuleHandleExW RaiseException GetStartupInfoW GetFileType GetStdHandle SetFilePointerEx ReadConsoleW GetConsoleMode InitializeCriticalSectionAndSpinCount GetCommandLineA GetSystemTimeAsFileTime WideCharToMultiByte GetTimeZoneInformation LoadLibraryExW ExitThread CreateThread GetACP MultiByteToWideChar InterlockedDecrement InterlockedIncrement RtlUnwind HeapReAlloc HeapAlloc HeapFree DecodePointer EncodePointer IsProcessorFeaturePresent LeaveCriticalSection GetVersionExW FormatMessageW GetModuleFileNameA CopyFileW GetLocaleInfoW TerminateThread LoadLibraryW InitializeCriticalSection WriteFile GetCurrentThread OutputDebugStringW SetEvent WaitForSingleObject CreateDirectoryW QueryPerformanceCounter GetLogicalDriveStringsW GetCurrentProcess FreeLibrary SetEndOfFile GetDriveTypeW WriteConsoleW SetFilePointer FindFirstFileW CreateMutexW ExitProcess GetConsoleCP SetStdHandle SetEnvironmentVariableA

user32

LoadCursorW TrackMouseEvent GetParent SetForegroundWindow SetCapture GetMessageExtraInfo IsChild GetWindowRect GetSystemMenu MapVirtualKeyW GetAsyncKeyState GetWindowPlacement GetForegroundWindow GetCapture GetWindowThreadProcessId AttachThreadInput DispatchMessageW DefWindowProcW CreateWindowExW SendMessageTimeoutW GetUpdateRgn CloseClipboard EnumDisplayMonitors SetCursor EndPaint PeekMessageW GetWindowTextW GetWindowLongW RegisterClassExW TranslateMessage EnumWindows SetFocus GetFocus PostMessageW UnregisterClassW GetMessageW DestroyWindow GetMessagePos GetMessageTime DestroyIcon SetWindowTextW SetClipboardData SendMessageW SetCaretPos GetSystemMetrics ReleaseCapture MessageBoxW OpenClipboard CreateCaret GetActiveWindow ShowWindow SetLayeredWindowAttributes GetCursorPos SetWindowPos GetDesktopWindow GetDC DestroyCaret DestroyCursor RedrawWindow SetWindowLongW EmptyClipboard EnableMenuItem ReleaseDC SystemParametersInfoW GetClipboardData GetAncestor SetCursorPos GetWindowInfo MessageBeep WindowFromPoint ShowCaret BeginPaint CreateIconIndirect GetIconInfo InvalidateRect

gdi32

SetMapperFlags GetKerningPairsW GetGlyphIndicesW CombineRgn GetOutlineTextMetricsW GetRegionData CreateBitmap ExcludeClipRect CreateDIBSection SetMapMode SelectObject CreateCompatibleDC DeleteObject CreateFontIndirectW DeleteDC GetTextMetricsW RestoreDC GetPixel CreateRectRgn GetObjectW StretchDIBits CreateRectRgnIndirect GetGlyphOutlineW SaveDC

comdlg32

GetOpenFileNameW GetSaveFileNameW

advapi32

RegQueryValueExA RegSetValueExW RegCloseKey RegOpenKeyExW RegDeleteKeyW RegQueryValueExW RegCreateKeyExW RegOpenKeyExA

shell32

SHGetSpecialFolderPathW ShellExecuteW ExtractAssociatedIconW SHGetPathFromIDListW SHGetMalloc SHBrowseForFolderW

ole32

RegisterDragDrop CoTaskMemAlloc DoDragDrop RevokeDragDrop OleUninitialize OleInitialize

shlwapi

PathStripToRootW

winmm

timeBeginPeriod timeGetTime

imm32

ImmGetContext ImmGetCompositionStringW ImmSetCandidateWindow ImmNotifyIME ImmReleaseContext

Name

.text

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

397KB

Virtual Size

396KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

27KB

Virtual Size

102KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

280KB

Virtual Size

279KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

101KB

Virtual Size

101KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$_4_/Stub/FLDownload.dll

IMPHASH 9696f656d9dd7905533227242d722c02
SHA256 2a3ea3aeaff0b90b1738f6755cea623130e4e58c4b016d6a474c66695b701c38
MD5 1452d165eab673df198c3440b0f56246
SHA1 13f76efd485b04a8acc22abc26da1e4690255ce5
SHA512 cad366284c1c2fbe80f10416bde03d4a234ffa8f9ef14b57a6eda729042739269e51bf12e0516de723ddefb17383f6a5816ae0316cd3f7b5ba154ad0f5cf47ac
SSDEEP 12288:yhGlrudV69VcarqS7+A7cC6wqpX8gf2TZa:yMaa9VcarqS7+sAX8pTo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

4a:09:13:a6:5b:7d:37:f6:6f:88:19:c0:e2:46:55:2f:04:5f:52:a0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

4

Entry point

362680

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen GetErrorInfo SysFreeString SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopy VariantClear VariantInit

advapi32

RegQueryValueExA RegOpenKeyExA RegCloseKey RegQueryValueExA RegOpenKeyExA RegFlushKey RegCloseKey

user32

GetKeyboardType DestroyWindow LoadStringA MessageBoxA CharNextA CreateWindowExA WindowFromPoint WaitMessage UpdateWindow UnregisterClassA UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenu SystemParametersInfoA ShowWindow ShowScrollBar ShowOwnedPopups SetWindowsHookExA SetWindowPos SetWindowPlacement SetWindowLongW SetWindowLongA SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRect SetPropA SetParent SetMenuItemInfoA SetMenu SetForegroundWindow SetFocus SetCursor SetClassLongA SetCapture SetActiveWindow SendMessageW SendMessageA ScrollWindow ScreenToClient RemovePropA RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageA RegisterClipboardFormatA RegisterClassA RedrawWindow PtInRect PostQuitMessage PostMessageA PeekMessageW PeekMessageA OffsetRect OemToCharA MessageBoxA MapWindowPoints MapVirtualKeyA LockWindowUpdate LoadStringA LoadKeyboardLayoutA LoadIconA LoadCursorA LoadBitmapA KillTimer IsZoomed IsWindowVisible IsWindowUnicode IsWindowEnabled IsWindow IsRectEmpty IsIconic IsDialogMessageW IsDialogMessageA IsChild InvalidateRect IntersectRect InsertMenuItemA InsertMenuA InflateRect GetWindowThreadProcessId GetWindowTextA GetWindowRect GetWindowPlacement GetWindowLongW GetWindowLongA GetWindowDC GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropA GetParent GetWindow GetMessagePos GetMenuStringA GetMenuState GetMenuItemInfoA GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutNameA GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextA GetIconInfo GetForegroundWindow GetFocus GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClientRect GetClassLongA GetClassInfoA GetCapture GetActiveWindow FrameRect FindWindowA FillRect EqualRect EnumWindows EnumThreadWindows EnumChildWindows EndPaint EnableWindow EnableScrollBar EnableMenuItem DrawTextA DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawEdge DispatchMessageW DispatchMessageA DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcA DefMDIChildProcA DefFrameProcA CreatePopupMenu CreateMenu CreateIcon ClientToScreen CheckMenuItem CallWindowProcA CallNextHookEx BeginPaint CharNextA CharLowerA CharToOemA AdjustWindowRectEx ActivateKeyboardLayout

kernel32

GetACP Sleep VirtualFree VirtualAlloc GetCurrentThreadId InterlockedDecrement InterlockedIncrement VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrlenA lstrcpynA LoadLibraryExA GetThreadLocale GetStartupInfoA GetProcAddress GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetCommandLineA FreeLibrary FindFirstFileA FindClose ExitProcess CompareStringA WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle TlsSetValue TlsGetValue TlsFree TlsAlloc LocalFree LocalAlloc lstrcpyA WriteFile WaitForSingleObject VirtualQuery VirtualAlloc SizeofResource SetThreadLocale SetFilePointer SetEvent SetErrorMode SetEndOfFile ResetEvent ReadFile MultiByteToWideChar MulDiv LockResource LoadResource LoadLibraryA LeaveCriticalSection InitializeCriticalSection GlobalFindAtomA GlobalDeleteAtom GlobalAddAtomA GetVersionExA GetVersion GetTickCount GetThreadLocale GetStdHandle GetProcAddress GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetLocalTime GetLastError GetFullPathNameA GetFileAttributesA GetDiskFreeSpaceA GetDateFormatA GetCurrentThreadId GetCurrentProcessId GetCPInfo FreeResource InterlockedExchange FreeLibrary FormatMessageA FindResourceA EnumCalendarInfoA EnterCriticalSection DeleteCriticalSection CreateThread CreateFileA CreateEventA CompareStringA CloseHandle Sleep

gdi32

UnrealizeObject StretchBlt SetWindowOrgEx SetViewportOrgEx SetTextColor SetStretchBltMode SetROP2 SetPixel SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SelectPalette SelectObject SaveDC RestoreDC RectVisible RealizePalette PatBlt MoveToEx MaskBlt LineTo IntersectClipRect GetWindowOrgEx GetTextMetricsA GetTextExtentPoint32A GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetObjectA GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetClipBox GetBrushOrgEx GetBitmapBits ExcludeClipRect DeleteObject DeleteDC CreateSolidBrush CreatePenIndirect CreatePalette CreateHalftonePalette CreateFontIndirectA CreateDIBitmap CreateDIBSection CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap BitBlt

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA

ole32

CoUninitialize CoInitialize

comctl32

_TrackMouseEvent ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_DragShowNolock ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_Remove ImageList_DrawEx ImageList_Draw ImageList_GetBkColor ImageList_SetBkColor ImageList_Add ImageList_GetImageCount ImageList_Destroy ImageList_Create

winmm

timeGetDevCaps timeEndPeriod timeBeginPeriod

Name

.text

Size

345KB

Virtual Size

345KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

14KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

77B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

$_4_/Update/Updater.exe

IMPHASH 8b1c863312f6977ce0e438376ff3a4d7
SHA256 ec6beb5b3a142ce2aa219cc3b7556c69d13389a3f1cc4582bf6ff915b62f6635
MD5 899a0e5ad7f9bb816a49ad8722309d63
SHA1 53605907568452a0c0b80d2feac7eef3f325920d
SHA512 05c85850a2e39f36c43b4d38632b184ecf4cffea2a966735c2951c8cc3e5563498aba574a0e6282f7cd836b2bb069811d42cc1f8bb25ac1c0886abaf90972abf
SSDEEP 12288:Va9zNU8kRagBIHGRRYP7vt8khukmPboYO6dwkaNTuof93a:VaBNRk8tmRRYek0ZPboYxdwkaNTuh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

2d:e1:6b:e9:dd:fc:f3:5e:2f:3b:ef:1d:30:ac:97:1e:b8:8c:4a:5c

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Chains

Feb 23, 2024

Minor OS version

0

Major OS version

4

Entry point

73614

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentDirectoryW SetFilePointer SetEvent GetFileAttributesW GetFileAttributesExW ReadFile GetModuleFileNameW CreateFileW WriteFile CloseHandle CreateEventW FlushFileBuffers GetTempPathW IsDebuggerPresent GetProcAddress ExitProcess DeleteCriticalSection GetCurrentProcess TerminateThread GetCurrentThreadId EnterCriticalSection SetThreadAffinityMask ReleaseMutex WaitForSingleObject CreateMutexW LeaveCriticalSection Sleep SetThreadPriority InitializeCriticalSection GetModuleHandleW GlobalLock GetCurrentProcessId GlobalAlloc GlobalSize GlobalUnlock QueryPerformanceFrequency QueryPerformanceCounter GetVersionExW IsProcessorFeaturePresent OutputDebugStringW GetTickCount GetCommandLineA HeapFree GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoA HeapReAlloc MultiByteToWideChar WideCharToMultiByte ExitThread CreateThread GetTimeZoneInformation GetSystemTimeAsFileTime UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType HeapDestroy HeapCreate VirtualFree VirtualAlloc LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode LoadLibraryA RtlUnwind GetStringTypeA GetStringTypeW GetLocaleInfoA CompareStringA CompareStringW SetEnvironmentVariableA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA GetLastError CreateDirectoryW GetCurrentThread GetModuleHandleA

user32

ReleaseDC CreateIconIndirect DestroyIcon DestroyCursor SetParent GetKeyState EndPaint LoadCursorW GetUpdateRgn ShowWindow SetCursorPos SetWindowTextW CreateCursor SetWindowLongW InvalidateRect SystemParametersInfoW CallWindowProcW WindowFromPoint TrackMouseEvent GetParent EnumDisplayMonitors GetForegroundWindow SetCapture GetSystemMetrics GetCursorPos MoveWindow GetMessageTime PostMessageW SetCursor GetActiveWindow SetWindowPos GetCapture IsChild GetDC GetWindowInfo GetDesktopWindow SetForegroundWindow GetMessagePos EnableMenuItem OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData MessageBeep DispatchMessageW DestroyWindow GetFocus SendMessageTimeoutW GetWindowLongW AttachThreadInput GetWindowThreadProcessId MapVirtualKeyW GetSystemMenu GetWindowPlacement GetWindowTextW GetMessageW SetFocus CreateWindowExW PeekMessageW EnumWindows DefWindowProcW UnregisterClassW BeginPaint TranslateMessage GetWindowRect SendMessageW ReleaseCapture RegisterClassExW

msvfw32

DrawDibDraw DrawDibOpen

winmm

timeBeginPeriod

opengl32

wglGetProcAddress wglDeleteContext wglMakeCurrent wglShareLists wglGetCurrentContext glViewport wglCreateContext

gdi32

DeleteObject ExcludeClipRect GetTextMetricsW GetGlyphIndicesW CreateFontIndirectW GetOutlineTextMetricsW EnumFontFamiliesExW GetGlyphOutlineW SetMapperFlags GetKerningPairsW CreateHalftonePalette SaveDC SetMapMode SwapBuffers SelectObject CreateCompatibleBitmap RealizePalette GetPixelFormat CreateRectRgnIndirect SetPixel RestoreDC SetStretchBltMode SetPixelFormat SelectPalette StretchDIBits CreateRectRgn DeleteDC CreateBitmap DescribePixelFormat CreateDIBSection GetRegionData ChoosePixelFormat GetDeviceCaps CombineRgn CreateCompatibleDC

advapi32

RegCloseKey RegOpenKeyExW

shell32

ExtractAssociatedIconW Shell_NotifyIconW SHGetSpecialFolderPathW ShellExecuteW

ole32

OleInitialize OleUninitialize RevokeDragDrop RegisterDragDrop

Artwork/Fonts/Cuprum/Cuprum.ttf

SHA256 75227c6375af8cc620a03d57f099642b928c24b9c9a7af5e5fe3ae3af7dade29
MD5 9ad892530d7032eb69809e7d54b35434
SHA1 403c1f19d70f039893021772fcc6e900427f9a8f
SHA512 e21c433fdf13bed73b946ab8503c244a954d5e9a5413ca72e9c9b4634ee0fdbe8f5338a9271665285064dfbfb5eacdb1a9b499f0e222157c49fdd2a5d15076b4
SSDEEP 3072:EZUcqsBzsvejlSF5bNavzfAD1MZsrAxoR61dxjfpcL8pRG/uOvIh5z0:G7BQLNwLocuR60L87Gm8I3z0
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Artwork/Fonts/Cuprum/OFL.txt

SHA256 d173514a2b2977597045c3abf68d7f8c0107a6fcde3ca035ba926c686085c016
MD5 17abef37c4abc2a23d8e21a0ef26360c
SHA1 ca6090f1823e65206330b95a5452ce7c43fc99be
SHA512 c5366b5d620005608bb9cba0e63bf08df84318b998180fe0794f46f989b6792b95576032833a7f97526223ed0144b2f8e3eeddb360cc6b444b878ab53ade5d45
SSDEEP 96:/W+bHiilxwnEOWOKajy4vyviXQaGYBC23zCdZuKy0iQHZoG:Nzl7hqyvaQ1+3zCdyQHZV
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Artwork/Fonts/Francois One/FrancoisOne.ttf

SHA256 8032be46b1ef4234ff9fd02fa6455a2ab07cf4d01e1271af8fa650daaaafe78c
MD5 1941b415d9fe5bd2ccc287054e6adf11
SHA1 0cc1da9b68bf6acdb13e7c28f49b8ad0ea49caa5
SHA512 de5367822eb0e029b853c3f61c3ce6c2755aef7c57e7e5df009c8383bb9f5a6e04738f406b0f4353493278b8150c32f70b84b00b6daed4b37f5fcd7f59ab41a5
SSDEEP 1536:7eQ3oFo8kyDiZX9XAQLztGwawQBA5L4IqX4YL71DrlI++mnLxkTDF6qAfPKd5G7:iGARRez8bBA5L4IurDifmeF6dPKds7
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Artwork/Fonts/Francois One/OFL.txt

SHA256 cdcd022ff38936694dfdb7d8d3fb4d21e64a73b258c13e2537be100bff1b9c0d
MD5 cee5cc2e4039fa91afc6a1f9636fba16
SHA1 ab407a0f039371e81c65ffb05da7ecf3388e15aa
SHA512 edfa6569d5533247926753dd3e27a79a148078f2f67c4bd47efb9e5bdb44b92dcc41cb2b27b6736a6a0adfb71fd4a4811dce7eeedf654985baa0b0f9e512e016
SSDEEP 96:McW+bHiilxwnEOWOKajy4vyviXQaGYBC23zCdZuKy0iQHZoG:/zl7hqyvaQ1+3zCdyQHZV
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Sharing

General

Malware Config

Signatures

File Explorer

flstudio_11.1.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

$0/Artwork/Fonts/Cuprum.ttf

$0/Artwork/Fonts/Cuprum/OFL.txt

$0/Artwork/Fonts/Francois One/OFL.txt

$0/Artwork/Fonts/FrancoisOne.ttf

$0/Artwork/Fonts/ILCursors.ttf

$0/Artwork/Fonts/ILGlyphs.ttf

$0/Artwork/Fonts/ILGlyphsEx.ttf

$0/Artwork/Fonts/JosefinSans-SemiBold.ttf

$0/Artwork/Fonts/OpenSans-CondLight.ttf

$0/Artwork/Fonts/Open_Sans_Condensed/LICENSE.txt

$0/Artwork/Fonts/PT Sans/OFL.txt

$0/Artwork/Fonts/PT_Sans-Narrow-Web-Regular.ttf

$0/Artwork/Fonts/PT_Sans-Web-Regular.ttf

$0/Artwork/Fonts/Revalia-Regular.ttf

$0/Artwork/Fonts/Revalia/OFL.txt

$0/Artwork/Fonts/RobotoCondensed-Light.ttf

$0/Artwork/Fonts/RobotoCondensed-Regular.ttf

$0/Artwork/Fonts/Roboto_Condensed/LICENSE.txt

$0/Artwork/Fonts/Share-Regular.ttf

$0/Artwork/Fonts/Share/OFL.txt

$0/Artwork/Fonts/Ubuntu-R.ttf

$0/Artwork/Fonts/UbuntuCondensed-Regular.ttf

$0/DelZip190.dll

PE Signature issue

kernel32

shell32

user32

generic

$0/DelZip64.dll

PE Signature issue

kernel32

user32

shell32

generic

$0/DirectWaveCtEngine.dll

PE Signature issue

version

shlwapi

shell32

ole32

comdlg32

advapi32

user32

oleaut32

kernel32

generic

$0/DirectWaveCtEngine_x64.dll

PE Signature issue

version

shlwapi

shell32

ole32

comdlg32

advapi32

user32

kernel32

oleaut32

generic

$0/Elastique.dll

PE Signature issue

ws2_32

kernel32

generic

$0/ILMinihostBridge32.exe