General

Malware Config

Signatures

Files

• Graillon-FREE-2.8.zip

  .zip
• Graillon-FREE-2.8/Graillon 2 User's Guide.pdf

  .pdf
• Graillon-FREE-2.8/Graillon Datasheet.pdf

  .pdf
• Graillon-FREE-2.8/Linux/Linux-64b-LV2-FREE/Auburn Sounds Graillon 2.lv2/AuburnSoundsGraillon2.so

  .elf linux x64
• Graillon-FREE-2.8/Linux/Linux-64b-LV2-FREE/Auburn Sounds Graillon 2.lv2/manifest.ttl
• Graillon-FREE-2.8/Linux/Linux-64b-VST2-FREE/Auburn Sounds Graillon 2.so

  .elf linux x64
• Graillon-FREE-2.8/Linux/Linux-64b-VST3-FREE/Auburn Sounds Graillon 2.vst3/Contents/x86_64-linux/Auburn Sounds Graillon 2.so

  .elf linux x64
• Graillon-FREE-2.8/Mac/Graillon-2-FREE-2.8.0.pkg

  .pkg macos
• Graillon-FREE-2.8/Windows/Graillon-2-FREE-2.8.0.exe

  .exe windows:4 windows x86 arch:x86

  f4639a0b3116c2cfc71144b88a929cfd

  
  

  Code Sign

  99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

  Certificate

  Issuer

  CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Not Before

  19-05-2021 05:32

  Not After

  18-05-2036 05:32

  Subject

  CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  66:87:f8:2e:4b:cb:e4:ba:51:80:2d:65:75:90:dc:7d

  Certificate

  Issuer

  CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Not Before

  30-09-2022 05:34

  Not After

  29-09-2025 05:34

  Subject

  CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,C=FR,1.2.840.113549.1.9.1=#0c18636f6e746163744061756275726e736f756e64732e636f6d

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31

  Certificate

  Issuer

  CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Not Before

  02-11-2023 08:32

  Not After

  30-10-2034 08:32

  Subject

  CN=Certum Timestamp 2023,O=Asseco Data Systems S.A.,C=PL

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

  Certificate

  Issuer

  CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Not Before

  19-05-2021 05:32

  Not After

  18-05-2036 05:32

  Subject

  CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

  Certificate

  Issuer

  CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Not Before

  31-05-2021 06:43

  Not After

  17-09-2029 06:43

  Subject

  CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  a5:2c:01:dd:09:1c:1d:92:91:8d:17:fd:c9:c7:a9:a9:b9:bb:7c:9e:b4:0a:40:d9:bf:b3:b0:10:1f:b9:4a:6a

  Signer

  Actual PE Digest

  a5:2c:01:dd:09:1c:1d:92:91:8d:17:fd:c9:c7:a9:a9:b9:bb:7c:9e:b4:0a:40:d9:bf:b3:b0:10:1f:b9:4a:6a

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  advapi32

  RegEnumValueW

  RegEnumKeyW

  RegQueryValueExW

  RegSetValueExW

  RegCloseKey

  RegDeleteValueW

  RegDeleteKeyW

  AdjustTokenPrivileges

  LookupPrivilegeValueW

  OpenProcessToken

  RegOpenKeyExW

  RegCreateKeyExW

  shell32

  SHGetPathFromIDListW

  SHBrowseForFolderW

  SHGetFileInfoW

  SHFileOperationW

  ShellExecuteExW

  ole32

  CoCreateInstance

  OleUninitialize

  OleInitialize

  IIDFromString

  CoTaskMemFree

  comctl32

  ImageList_Destroy

  ord17

  ImageList_AddMasked

  ImageList_Create

  user32

  MessageBoxIndirectW

  GetDlgItemTextW

  SetDlgItemTextW

  CreatePopupMenu

  AppendMenuW

  TrackPopupMenu

  OpenClipboard

  EmptyClipboard

  SetClipboardData

  CloseClipboard

  IsWindowVisible

  CallWindowProcW

  GetMessagePos

  CheckDlgButton

  LoadCursorW

  SetCursor

  GetSysColor

  SetWindowPos

  GetWindowLongW

  IsWindowEnabled

  SetClassLongW

  GetSystemMenu

  EnableMenuItem

  GetWindowRect

  ScreenToClient

  EndDialog

  RegisterClassW

  SystemParametersInfoW

  CharPrevW

  GetClassInfoW

  DialogBoxParamW

  CharNextW

  ExitWindowsEx

  DestroyWindow

  CreateDialogParamW

  SetTimer

  SetWindowTextW

  PostQuitMessage

  SetForegroundWindow

  ShowWindow

  wsprintfW

  SendMessageTimeoutW

  FindWindowExW

  IsWindow

  GetDlgItem

  SetWindowLongW

  LoadImageW

  GetDC

  ReleaseDC

  EnableWindow

  InvalidateRect

  SendMessageW

  DefWindowProcW

  BeginPaint

  GetClientRect

  FillRect

  DrawTextW

  EndPaint

  CharNextA

  wsprintfA

  DispatchMessageW

  CreateWindowExW

  PeekMessageW

  GetSystemMetrics

  gdi32

  GetDeviceCaps

  SetBkColor

  SelectObject

  DeleteObject

  CreateBrushIndirect

  CreateFontIndirectW

  SetBkMode

  SetTextColor

  kernel32

  lstrcmpiA

  CreateFileW

  GetTempFileNameW

  RemoveDirectoryW

  CreateProcessW

  CreateDirectoryW

  GetLastError

  CreateThread

  GlobalLock

  GlobalUnlock

  GetDiskFreeSpaceW

  WideCharToMultiByte

  lstrcpynW

  lstrlenW

  SetErrorMode

  GetVersionExW

  GetCommandLineW

  GetTempPathW

  GetWindowsDirectoryW

  WriteFile

  CopyFileW

  ExitProcess

  GetCurrentProcess

  GetModuleFileNameW

  GetFileSize

  GetTickCount

  Sleep

  SetFileAttributesW

  GetFileAttributesW

  SetCurrentDirectoryW

  MoveFileW

  GetFullPathNameW

  GetShortPathNameW

  SearchPathW

  CompareFileTime

  SetFileTime

  CloseHandle

  lstrcmpiW

  lstrcmpW

  ExpandEnvironmentStringsW

  GlobalFree

  GlobalAlloc

  GetModuleHandleW

  LoadLibraryExW

  FreeLibrary

  WritePrivateProfileStringW

  GetPrivateProfileStringW

  lstrlenA

  MultiByteToWideChar

  ReadFile

  SetFilePointer

  FindClose

  FindNextFileW

  FindFirstFileW

  DeleteFileW

  MulDiv

  lstrcpyA

  MoveFileExW

  lstrcatW

  GetSystemDirectoryW

  GetProcAddress

  GetModuleHandleA

  GetExitCodeProcess

  WaitForSingleObject

  SetEnvironmentVariableW

  Sections

  .text

  Size: 26KB - Virtual size: 26KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 170KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .ndata

  Size: - Virtual size: 124KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 19KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/System.dll

  .dll windows:4 windows x86 arch:x86

  509a34b3a68a773e0afb4259e68f9f82

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  GlobalAlloc

  GlobalFree

  GlobalSize

  lstrcpynW

  lstrcpyW

  GetProcAddress

  WideCharToMultiByte

  VirtualFree

  FreeLibrary

  lstrlenW

  LoadLibraryW

  GetModuleHandleW

  MultiByteToWideChar

  VirtualAlloc

  VirtualProtect

  GetLastError

  user32

  wsprintfW

  ole32

  StringFromGUID2

  CLSIDFromString

  Exports

  Exports

  Alloc

  Call

  Copy

  Free

  Get

  Int64Op

  Store

  StrAlloc

  Sections

  .text

  Size: 8KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1024B - Virtual size: 867B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 120B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 1024B - Virtual size: 662B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/modern-header.bmp
• $PROGRAMFILES/Common Files/VST3/Auburn Sounds Graillon 2.vst3

  .dll windows:6 windows x86 arch:x86

  a77bec72f4bd8a707897c4bea5dfa552

  
  

  Code Sign

  99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

  Certificate

  Issuer

  CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Not Before

  19-05-2021 05:32

  Not After

  18-05-2036 05:32

  Subject

  CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  66:87:f8:2e:4b:cb:e4:ba:51:80:2d:65:75:90:dc:7d

  Certificate

  Issuer

  CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Not Before

  30-09-2022 05:34

  Not After

  29-09-2025 05:34

  Subject

  CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,C=FR,1.2.840.113549.1.9.1=#0c18636f6e746163744061756275726e736f756e64732e636f6d

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31

  Certificate

  Issuer

  CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Not Before

  02-11-2023 08:32

  Not After

  30-10-2034 08:32

  Subject

  CN=Certum Timestamp 2023,O=Asseco Data Systems S.A.,C=PL

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

  Certificate

  Issuer

  CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Not Before

  19-05-2021 05:32

  Not After

  18-05-2036 05:32

  Subject

  CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

  Certificate

  Issuer

  CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Not Before

  31-05-2021 06:43

  Not After

  17-09-2029 06:43

  Subject

  CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  2e:ea:00:0a:43:2d:a1:9b:56:08:06:98:27:74:8d:53:b1:55:4d:f3:73:7d:8e:f5:9c:59:56:1a:ad:3d:d1:7f

  Signer

  Actual PE Digest

  2e:ea:00:0a:43:2d:a1:9b:56:08:06:98:27:74:8d:53:b1:55:4d:f3:73:7d:8e:f5:9c:59:56:1a:ad:3d:d1:7f

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  gdi32

  GetRegionData

  GetClipRgn

  DeleteObject

  SetDIBitsToDevice

  CreateRectRgn

  user32

  GetWindowLongA

  DefWindowProcA

  DestroyWindow

  UnregisterClassW

  GetClientRect

  GetWindowLongW

  GetParent

  SetWindowPos

  DefWindowProcW

  GetKeyState

  InvalidateRect

  TrackMouseEvent

  GetWindowRect

  GetAncestor

  SendMessageW

  GetUpdateRgn

  BeginPaint

  EndPaint

  GetCapture

  SetCapture

  ReleaseCapture

  ShowWindow

  CreateWindowExW

  GetMessageW

  TranslateMessage

  RegisterClassW

  DispatchMessageW

  SetFocus

  SetTimer

  GetDesktopWindow

  SetWindowLongA

  LoadCursorW

  kernel32

  LCMapStringW

  CompareStringW

  DecodePointer

  GetFileSizeEx

  GetConsoleCP

  ReadConsoleW

  GetConsoleMode

  HeapReAlloc

  HeapFree

  HeapAlloc

  ExitProcess

  SetStdHandle

  SetFilePointerEx

  GetFileType

  ExitThread

  CreateThread

  LoadLibraryExW

  TlsFree

  TlsSetValue

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  OutputDebugStringA

  GetProcAddress

  LoadLibraryA

  GetModuleHandleA

  QueryPerformanceFrequency

  QueryPerformanceCounter

  GetModuleHandleW

  GetModuleFileNameA

  FreeLibrary

  ResumeThread

  WaitForSingleObject

  CloseHandle

  GetSystemInfo

  CreateSemaphoreA

  GetCurrentThreadId

  TryEnterCriticalSection

  ReleaseSemaphore

  GetCurrentProcessId

  CreateFileW

  ReadFile

  GetLastError

  WriteFile

  GetModuleFileNameW

  FindNextFileW

  FindClose

  FlushFileBuffers

  LockFileEx

  GetTimeZoneInformation

  SystemTimeToTzSpecificLocalTime

  TzSpecificLocalTimeToSystemTime

  FormatMessageW

  LocalFree

  SetLastError

  SetEnvironmentVariableW

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetStdHandle

  TerminateProcess

  lstrlenW

  ExpandEnvironmentStringsW

  GetCurrentProcess

  VirtualAlloc

  VirtualFree

  RaiseException

  VerSetConditionMask

  VerifyVersionInfoW

  GetExitCodeThread

  Sleep

  SwitchToThread

  GetCurrentThread

  SuspendThread

  GetThreadContext

  FreeLibraryAndExitThread

  GetModuleHandleExW

  TerminateThread

  InitializeCriticalSection

  WideCharToMultiByte

  MultiByteToWideChar

  GetCommandLineW

  IsDebuggerPresent

  RtlCaptureContext

  GetEnvironmentVariableA

  OpenThread

  SetEndOfFile

  GlobalMemoryStatusEx

  CreateEventW

  SetEvent

  TlsGetValue

  TlsAlloc

  EncodePointer

  InterlockedFlushSList

  GetCPInfo

  FindFirstFileExW

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCommandLineA

  GetProcessHeap

  GetStringTypeW

  HeapSize

  RtlUnwind

  IsProcessorFeaturePresent

  GetStartupInfoW

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  InitializeSListHead

  GetSystemTimeAsFileTime

  WriteConsoleW

  shell32

  ShellExecuteA

  advapi32

  RegQueryInfoKeyW

  RegFlushKey

  RegCreateKeyExW

  RegDeleteKeyW

  RegDeleteValueW

  RegOpenKeyW

  RegSetValueExW

  RegOpenKeyExW

  RegQueryValueExW

  RegCloseKey

  RegEnumValueW

  RegEnumKeyExW

  ws2_32

  WSAGetLastError

  WSAStartup

  WSACleanup

  getprotobyname

  ntohs

  getservbyname

  WSAIoctl

  setsockopt

  recvfrom

  recv

  sendto

  send

  getsockname

  getpeername

  shutdown

  accept

  listen

  connect

  bind

  getsockopt

  ioctlsocket

  closesocket

  socket

  inet_ntoa

  inet_addr

  gethostbyaddr

  htonl

  gethostbyname

  ntohl

  getprotobynumber

  getservbyport

  Exports

  Exports

  ExitDll

  GetPluginFactory

  InitDll

  bundleEntry

  bundleExit

  Sections

  .text

  Size: 1.0MB - Virtual size: 1.0MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1.2MB - Virtual size: 1.2MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 61KB - Virtual size: 64KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .minfo

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 52KB - Virtual size: 52KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Add Sub Quint.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct A major.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct A minor.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct A# major.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct A# minor.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct B major.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct B minor.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct C major.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct C minor.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct C# major.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct C# minor.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct D major.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct D minor.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct D# major.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct D# minor.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct E major.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct E minor.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct F major.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct F minor.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct F# major.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct F# minor.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct G major.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct G minor.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct G# major.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct G# minor.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Default.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Only in Full version.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Robot Correct.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Simple Octaver.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Tuner Doubler.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Younger Speech.tfx
• $PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/x64/Auburn Sounds Graillon 2.aaxplugin

  .dll windows:6 windows x64 arch:x64

  cb7b3468268afe70d44fada8481ad3df

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  Imports

  gdi32

  GetRegionData

  GetClipRgn

  DeleteObject

  SetDIBitsToDevice

  CreateRectRgn

  user32

  GetWindowLongPtrA

  DefWindowProcA

  DestroyWindow

  UnregisterClassW

  GetClientRect

  GetWindowLongW

  GetParent

  SetWindowPos

  GetKeyState

  InvalidateRect

  GetUpdateRgn

  BeginPaint

  GetAsyncKeyState

  TrackMouseEvent

  GetCapture

  ReleaseCapture

  GetWindowRect

  GetAncestor

  SendMessageW

  LoadCursorW

  ShowWindow

  CreateWindowExW

  DefWindowProcW

  EndPaint

  SetCapture

  GetMessageW

  TranslateMessage

  RegisterClassW

  DispatchMessageW

  SetFocus

  SetTimer

  GetDesktopWindow

  SetWindowLongPtrA

  kernel32

  LCMapStringW

  CompareStringW

  GetFileSizeEx

  GetConsoleCP

  ReadConsoleW

  GetConsoleMode

  HeapReAlloc

  HeapFree

  HeapAlloc

  ExitProcess

  SetStdHandle

  SetFilePointerEx

  GetFileType

  ExitThread

  CreateThread

  RtlPcToFileHeader

  LoadLibraryExW

  TlsFree

  TlsSetValue

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  OutputDebugStringA

  GetProcAddress

  LoadLibraryA

  GetModuleHandleA

  QueryPerformanceFrequency

  QueryPerformanceCounter

  GetModuleHandleW

  GetModuleFileNameA

  FreeLibrary

  ResumeThread

  WaitForSingleObject

  CloseHandle

  GetSystemInfo

  CreateSemaphoreA

  GetCurrentThreadId

  TryEnterCriticalSection

  ReleaseSemaphore

  GetCurrentProcessId

  CreateFileW

  ReadFile

  GetLastError

  WriteFile

  GetModuleFileNameW

  FindNextFileW

  FindClose

  FlushFileBuffers

  LockFileEx

  GetTimeZoneInformation

  SystemTimeToTzSpecificLocalTime

  TzSpecificLocalTimeToSystemTime

  FormatMessageW

  LocalFree

  SetLastError

  SetEnvironmentVariableW

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetStdHandle

  TerminateProcess

  lstrlenW

  ExpandEnvironmentStringsW

  GetCurrentProcess

  VirtualAlloc

  VirtualFree

  RaiseException

  VerSetConditionMask

  VerifyVersionInfoW

  GetExitCodeThread

  Sleep

  SwitchToThread

  GetCurrentThread

  SuspendThread

  GetThreadContext

  FreeLibraryAndExitThread

  GetModuleHandleExW

  TerminateThread

  InitializeCriticalSection

  WideCharToMultiByte

  MultiByteToWideChar

  GetCommandLineW

  IsDebuggerPresent

  RtlCaptureContext

  GetEnvironmentVariableA

  OpenThread

  SetEndOfFile

  GlobalMemoryStatusEx

  CreateEventW

  SetEvent

  TlsGetValue

  TlsAlloc

  EncodePointer

  InterlockedFlushSList

  GetCPInfo

  FindFirstFileExW

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCommandLineA

  GetProcessHeap

  GetStringTypeW

  HeapSize

  WriteConsoleW

  RtlUnwindEx

  IsProcessorFeaturePresent

  GetStartupInfoW

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  RtlVirtualUnwind

  RtlLookupFunctionEntry

  InitializeSListHead

  GetSystemTimeAsFileTime

  RtlUnwind

  shell32

  ShellExecuteA

  advapi32

  RegQueryInfoKeyW

  RegFlushKey

  RegCreateKeyExW

  RegDeleteKeyW

  RegDeleteValueW

  RegOpenKeyW

  RegSetValueExW

  RegOpenKeyExW

  RegQueryValueExW

  RegCloseKey

  RegEnumValueW

  RegEnumKeyExW

  ws2_32

  WSAGetLastError

  WSAStartup

  WSACleanup

  getprotobynumber

  ntohs

  getservbyname

  getservbyport

  ntohl

  WSAIoctl

  setsockopt

  recvfrom

  recv

  sendto

  send

  getsockname

  getpeername

  shutdown

  accept

  listen

  connect

  bind

  getsockopt

  ioctlsocket

  closesocket

  socket

  inet_ntoa

  inet_addr

  gethostbyaddr

  htonl

  getprotobyname

  gethostbyname

  Exports

  Exports

  ACFCanUnloadNow

  ACFGetClassFactory

  ACFGetSDKVersion

  ACFRegisterComponent

  ACFRegisterPlugin

  ACFShutdown

  ACFStartup

  DplugEnumerateTFX

  Sections

  .text

  Size: 1.1MB - Virtual size: 1.1MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1.3MB - Virtual size: 1.3MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 94KB - Virtual size: 101KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 32KB - Virtual size: 32KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .minfo

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  _RDATA

  Size: 512B - Virtual size: 244B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 22KB - Virtual size: 21KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PROGRAMFILES64/Common Files/VST3/Auburn Sounds Graillon 2-64.vst3

  .dll windows:6 windows x64 arch:x64

  ba30273e0a866c0eb32f4bf83a9a7089

  
  

  Code Sign

  99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

  Certificate

  Issuer

  CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Not Before

  19-05-2021 05:32

  Not After

  18-05-2036 05:32

  Subject

  CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  66:87:f8:2e:4b:cb:e4:ba:51:80:2d:65:75:90:dc:7d

  Certificate

  Issuer

  CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Not Before

  30-09-2022 05:34

  Not After

  29-09-2025 05:34

  Subject

  CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,C=FR,1.2.840.113549.1.9.1=#0c18636f6e746163744061756275726e736f756e64732e636f6d

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31

  Certificate

  Issuer

  CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Not Before

  02-11-2023 08:32

  Not After

  30-10-2034 08:32

  Subject

  CN=Certum Timestamp 2023,O=Asseco Data Systems S.A.,C=PL

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

  Certificate

  Issuer

  CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Not Before

  19-05-2021 05:32

  Not After

  18-05-2036 05:32

  Subject

  CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

  Certificate

  Issuer

  CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Not Before

  31-05-2021 06:43

  Not After

  17-09-2029 06:43

  Subject

  CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  a4:a7:be:78:d2:26:c0:17:e6:a1:b1:45:f5:ba:b3:00:39:24:77:cf:95:28:ea:1f:32:ff:09:25:8b:fc:29:39

  Signer

  Actual PE Digest

  a4:a7:be:78:d2:26:c0:17:e6:a1:b1:45:f5:ba:b3:00:39:24:77:cf:95:28:ea:1f:32:ff:09:25:8b:fc:29:39

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  Imports

  gdi32

  GetRegionData

  GetClipRgn

  DeleteObject

  SetDIBitsToDevice

  CreateRectRgn

  user32

  GetWindowLongPtrA

  DefWindowProcA

  DestroyWindow

  UnregisterClassW

  GetClientRect

  GetWindowLongW

  GetParent

  SetWindowPos

  GetKeyState

  InvalidateRect

  GetUpdateRgn

  BeginPaint

  TrackMouseEvent

  GetCapture

  ReleaseCapture

  GetWindowRect

  GetAncestor

  SendMessageW

  LoadCursorW

  ShowWindow

  CreateWindowExW

  DefWindowProcW

  EndPaint

  SetCapture

  GetMessageW

  TranslateMessage

  RegisterClassW

  DispatchMessageW

  SetFocus

  SetTimer

  GetDesktopWindow

  SetWindowLongPtrA

  kernel32

  LCMapStringW

  CompareStringW

  GetFileSizeEx

  GetConsoleCP

  ReadConsoleW

  GetConsoleMode

  HeapReAlloc

  HeapFree

  HeapAlloc

  ExitProcess

  SetStdHandle

  SetFilePointerEx

  GetFileType

  ExitThread

  CreateThread

  RtlPcToFileHeader

  LoadLibraryExW

  TlsFree

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  OutputDebugStringA

  GetProcAddress

  LoadLibraryA

  GetModuleHandleA

  QueryPerformanceFrequency

  QueryPerformanceCounter

  GetModuleHandleW

  GetModuleFileNameA

  FreeLibrary

  ResumeThread

  WaitForSingleObject

  CloseHandle

  GetSystemInfo

  CreateSemaphoreA

  GetCurrentThreadId

  TryEnterCriticalSection

  ReleaseSemaphore

  GetCurrentProcessId

  CreateFileW

  ReadFile

  GetLastError

  WriteFile

  GetModuleFileNameW

  FindNextFileW

  FindClose

  FlushFileBuffers

  LockFileEx

  GetTimeZoneInformation

  SystemTimeToTzSpecificLocalTime

  TzSpecificLocalTimeToSystemTime

  FormatMessageW

  LocalFree

  SetLastError

  SetEnvironmentVariableW

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetStdHandle

  TerminateProcess

  lstrlenW

  ExpandEnvironmentStringsW

  GetCurrentProcess

  VirtualAlloc

  VirtualFree

  RaiseException

  VerSetConditionMask

  VerifyVersionInfoW

  GetExitCodeThread

  Sleep

  SwitchToThread

  GetCurrentThread

  SuspendThread

  GetThreadContext

  FreeLibraryAndExitThread

  GetModuleHandleExW

  TerminateThread

  InitializeCriticalSection

  WideCharToMultiByte

  MultiByteToWideChar

  GetCommandLineW

  IsDebuggerPresent

  RtlCaptureContext

  GetEnvironmentVariableA

  OpenThread

  SetEndOfFile

  GlobalMemoryStatusEx

  CreateEventW

  SetEvent

  TlsSetValue

  TlsGetValue

  TlsAlloc

  EncodePointer

  InterlockedFlushSList

  GetCPInfo

  FindFirstFileExW

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCommandLineA

  GetProcessHeap

  GetStringTypeW

  HeapSize

  WriteConsoleW

  RtlUnwindEx

  IsProcessorFeaturePresent

  GetStartupInfoW

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  RtlVirtualUnwind

  RtlLookupFunctionEntry

  InitializeSListHead

  GetSystemTimeAsFileTime

  RtlUnwind

  shell32

  ShellExecuteA

  advapi32

  RegQueryInfoKeyW

  RegFlushKey

  RegCreateKeyExW

  RegDeleteKeyW

  RegDeleteValueW

  RegOpenKeyW

  RegSetValueExW

  RegOpenKeyExW

  RegQueryValueExW

  RegCloseKey

  RegEnumValueW

  RegEnumKeyExW

  ws2_32

  WSAGetLastError

  WSAStartup

  WSACleanup

  getprotobyname

  ntohs

  getservbyname

  getservbyport

  ntohl

  gethostbyname

  WSAIoctl

  setsockopt

  recvfrom

  recv

  sendto

  send

  getsockname

  getpeername

  shutdown

  accept

  listen

  connect

  bind

  getsockopt

  ioctlsocket

  closesocket

  socket

  inet_ntoa

  inet_addr

  gethostbyaddr

  getprotobynumber

  htonl

  Exports

  Exports

  ExitDll

  GetPluginFactory

  InitDll

  bundleEntry

  bundleExit

  Sections

  .text

  Size: 1.1MB - Virtual size: 1.1MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1.3MB - Virtual size: 1.3MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 97KB - Virtual size: 103KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 33KB - Virtual size: 33KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .minfo

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  _RDATA

  Size: 512B - Virtual size: 244B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 23KB - Virtual size: 22KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $_26_/Auburn Sounds Graillon 2-64.dll

  .dll windows:6 windows x64 arch:x64

  1b661812aaba9c615cf846beeb36d701

  
  

  Code Sign

  99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

  Certificate

  Issuer

  CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Not Before

  19-05-2021 05:32

  Not After

  18-05-2036 05:32

  Subject

  CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  66:87:f8:2e:4b:cb:e4:ba:51:80:2d:65:75:90:dc:7d

  Certificate

  Issuer

  CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Not Before

  30-09-2022 05:34

  Not After

  29-09-2025 05:34

  Subject

  CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,C=FR,1.2.840.113549.1.9.1=#0c18636f6e746163744061756275726e736f756e64732e636f6d

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31

  Certificate

  Issuer

  CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Not Before

  02-11-2023 08:32

  Not After

  30-10-2034 08:32

  Subject

  CN=Certum Timestamp 2023,O=Asseco Data Systems S.A.,C=PL

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

  Certificate

  Issuer

  CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Not Before

  19-05-2021 05:32

  Not After

  18-05-2036 05:32

  Subject

  CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

  Certificate

  Issuer

  CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Not Before

  31-05-2021 06:43

  Not After

  17-09-2029 06:43

  Subject

  CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  bb:c3:02:37:01:45:03:82:2a:ad:eb:77:9d:5a:5e:0f:19:00:7b:e9:66:3a:7f:3d:45:ab:1d:4f:04:7d:12:15

  Signer

  Actual PE Digest

  bb:c3:02:37:01:45:03:82:2a:ad:eb:77:9d:5a:5e:0f:19:00:7b:e9:66:3a:7f:3d:45:ab:1d:4f:04:7d:12:15

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  Imports

  gdi32

  GetRegionData

  GetClipRgn

  DeleteObject

  SetDIBitsToDevice

  CreateRectRgn

  user32

  GetWindowLongPtrA

  DefWindowProcA

  DestroyWindow

  UnregisterClassW

  GetClientRect

  GetWindowLongW

  GetParent

  SetWindowPos

  GetKeyState

  InvalidateRect

  GetUpdateRgn

  BeginPaint

  TrackMouseEvent

  GetCapture

  ReleaseCapture

  GetWindowRect

  GetAncestor

  SendMessageW

  LoadCursorW

  ShowWindow

  CreateWindowExW

  DefWindowProcW

  EndPaint

  SetCapture

  GetMessageW

  TranslateMessage

  RegisterClassW

  DispatchMessageW

  SetFocus

  SetTimer

  GetDesktopWindow

  SetWindowLongPtrA

  kernel32

  LCMapStringW

  CompareStringW

  GetFileSizeEx

  GetConsoleCP

  ReadConsoleW

  GetConsoleMode

  HeapReAlloc

  HeapFree

  HeapAlloc

  ExitProcess

  SetStdHandle

  SetFilePointerEx

  GetFileType

  ExitThread

  CreateThread

  RtlPcToFileHeader

  LoadLibraryExW

  TlsFree

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  WaitForSingleObject

  EnterCriticalSection

  LeaveCriticalSection

  ReleaseSemaphore

  CloseHandle

  OutputDebugStringA

  GetProcAddress

  LoadLibraryA

  GetModuleHandleA

  QueryPerformanceFrequency

  QueryPerformanceCounter

  GetModuleHandleW

  GetModuleFileNameA

  FreeLibrary

  ResumeThread

  GetSystemInfo

  CreateSemaphoreA

  GetCurrentThreadId

  TryEnterCriticalSection

  GetCurrentProcessId

  CreateFileW

  ReadFile

  GetLastError

  WriteFile

  GetModuleFileNameW

  FindNextFileW

  FindClose

  FlushFileBuffers

  LockFileEx

  GetTimeZoneInformation

  SystemTimeToTzSpecificLocalTime

  TzSpecificLocalTimeToSystemTime

  FormatMessageW

  LocalFree

  SetLastError

  SetEnvironmentVariableW

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetStdHandle

  TerminateProcess

  lstrlenW

  ExpandEnvironmentStringsW

  GetCurrentProcess

  VirtualAlloc

  VirtualFree

  RaiseException

  VerSetConditionMask

  VerifyVersionInfoW

  GetExitCodeThread

  Sleep

  SwitchToThread

  GetCurrentThread

  SuspendThread

  GetThreadContext

  FreeLibraryAndExitThread

  GetModuleHandleExW

  TerminateThread

  InitializeCriticalSection

  WideCharToMultiByte

  MultiByteToWideChar

  GetCommandLineW

  IsDebuggerPresent

  RtlCaptureContext

  GetEnvironmentVariableA

  OpenThread

  SetEndOfFile

  GlobalMemoryStatusEx

  CreateEventW

  SetEvent

  TlsSetValue

  TlsGetValue

  TlsAlloc

  EncodePointer

  InterlockedFlushSList

  GetCPInfo

  FindFirstFileExW

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCommandLineA

  GetProcessHeap

  GetStringTypeW

  HeapSize

  WriteConsoleW

  RtlUnwindEx

  IsProcessorFeaturePresent

  GetStartupInfoW

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  RtlVirtualUnwind

  RtlLookupFunctionEntry

  InitializeSListHead

  GetSystemTimeAsFileTime

  RtlUnwind

  shell32

  ShellExecuteA

  advapi32

  RegQueryInfoKeyW

  RegFlushKey

  RegCreateKeyExW

  RegDeleteKeyW

  RegDeleteValueW

  RegOpenKeyW

  RegSetValueExW

  RegOpenKeyExW

  RegQueryValueExW

  RegCloseKey

  RegEnumValueW

  RegEnumKeyExW

  ws2_32

  WSAGetLastError

  WSAStartup

  WSACleanup

  getprotobyname

  ntohs

  getservbyname

  getservbyport

  ntohl

  gethostbyname

  WSAIoctl

  setsockopt

  recvfrom

  recv

  sendto

  send

  getsockname

  getpeername

  shutdown

  accept

  listen

  connect

  bind

  getsockopt

  ioctlsocket

  closesocket

  socket

  inet_ntoa

  inet_addr

  gethostbyaddr

  getprotobynumber

  htonl

  Exports

  Exports

  VSTPluginMain

  Sections

  .text

  Size: 1.1MB - Virtual size: 1.1MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1.3MB - Virtual size: 1.3MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 94KB - Virtual size: 101KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 33KB - Virtual size: 32KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .minfo

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  _RDATA

  Size: 512B - Virtual size: 244B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 22KB - Virtual size: 22KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $_27_/Auburn Sounds Graillon 2.dll

  .dll windows:6 windows x86 arch:x86

  b8180053ede83cb0af48f3280a68b60f

  
  

  Code Sign

  99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

  Certificate

  Issuer

  CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Not Before

  19-05-2021 05:32

  Not After

  18-05-2036 05:32

  Subject

  CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  66:87:f8:2e:4b:cb:e4:ba:51:80:2d:65:75:90:dc:7d

  Certificate

  Issuer

  CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Not Before

  30-09-2022 05:34

  Not After

  29-09-2025 05:34

  Subject

  CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,C=FR,1.2.840.113549.1.9.1=#0c18636f6e746163744061756275726e736f756e64732e636f6d

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31

  Certificate

  Issuer

  CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Not Before

  02-11-2023 08:32

  Not After

  30-10-2034 08:32

  Subject

  CN=Certum Timestamp 2023,O=Asseco Data Systems S.A.,C=PL

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

  Certificate

  Issuer

  CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Not Before

  19-05-2021 05:32

  Not After

  18-05-2036 05:32

  Subject

  CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

  Certificate

  Issuer

  CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Not Before

  31-05-2021 06:43

  Not After

  17-09-2029 06:43

  Subject

  CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0c:3a:66:21:4f:4f:36:a3:88:cd:71:ca:20:aa:32:1d:4e:46:5b:da:d5:0e:fe:4e:7d:cb:80:c9:02:5c:21:e2

  Signer

  Actual PE Digest

  0c:3a:66:21:4f:4f:36:a3:88:cd:71:ca:20:aa:32:1d:4e:46:5b:da:d5:0e:fe:4e:7d:cb:80:c9:02:5c:21:e2

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  gdi32

  GetRegionData

  GetClipRgn

  DeleteObject

  SetDIBitsToDevice

  CreateRectRgn

  user32

  GetWindowLongA

  DefWindowProcA

  DestroyWindow

  UnregisterClassW

  GetClientRect

  GetWindowLongW

  GetParent

  SetWindowPos

  DefWindowProcW

  GetKeyState

  InvalidateRect

  TrackMouseEvent

  GetWindowRect

  GetAncestor

  SendMessageW

  GetUpdateRgn

  BeginPaint

  EndPaint

  GetCapture

  SetCapture

  ReleaseCapture

  ShowWindow

  CreateWindowExW

  GetMessageW

  TranslateMessage

  RegisterClassW

  DispatchMessageW

  SetFocus

  SetTimer

  GetDesktopWindow

  SetWindowLongA

  LoadCursorW

  kernel32

  LCMapStringW

  CompareStringW

  DecodePointer

  GetFileSizeEx

  GetConsoleCP

  ReadConsoleW

  GetConsoleMode

  HeapReAlloc

  HeapFree

  HeapAlloc

  ExitProcess

  SetStdHandle

  SetFilePointerEx

  GetFileType

  ExitThread

  CreateThread

  LoadLibraryExW

  TlsFree

  TlsSetValue

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  WaitForSingleObject

  EnterCriticalSection

  LeaveCriticalSection

  ReleaseSemaphore

  CloseHandle

  OutputDebugStringA

  GetProcAddress

  LoadLibraryA

  GetModuleHandleA

  QueryPerformanceFrequency

  QueryPerformanceCounter

  GetModuleHandleW

  GetModuleFileNameA

  FreeLibrary

  ResumeThread

  GetSystemInfo

  CreateSemaphoreA

  GetCurrentThreadId

  TryEnterCriticalSection

  GetCurrentProcessId

  CreateFileW

  ReadFile

  GetLastError

  WriteFile

  GetModuleFileNameW

  FindNextFileW

  FindClose

  FlushFileBuffers

  LockFileEx

  GetTimeZoneInformation

  SystemTimeToTzSpecificLocalTime

  TzSpecificLocalTimeToSystemTime

  FormatMessageW

  LocalFree

  SetLastError

  SetEnvironmentVariableW

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetStdHandle

  TerminateProcess

  lstrlenW

  ExpandEnvironmentStringsW

  GetCurrentProcess

  VirtualAlloc

  VirtualFree

  RaiseException

  VerSetConditionMask

  VerifyVersionInfoW

  GetExitCodeThread

  Sleep

  SwitchToThread

  GetCurrentThread

  SuspendThread

  GetThreadContext

  FreeLibraryAndExitThread

  GetModuleHandleExW

  TerminateThread

  InitializeCriticalSection

  WideCharToMultiByte

  MultiByteToWideChar

  GetCommandLineW

  IsDebuggerPresent

  RtlCaptureContext

  GetEnvironmentVariableA

  OpenThread

  SetEndOfFile

  GlobalMemoryStatusEx

  CreateEventW

  SetEvent

  TlsGetValue

  TlsAlloc

  EncodePointer

  InterlockedFlushSList

  GetCPInfo

  FindFirstFileExW

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCommandLineA

  GetProcessHeap

  GetStringTypeW

  HeapSize

  RtlUnwind

  IsProcessorFeaturePresent

  GetStartupInfoW

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  InitializeSListHead

  GetSystemTimeAsFileTime

  WriteConsoleW

  shell32

  ShellExecuteA

  advapi32

  RegQueryInfoKeyW

  RegFlushKey

  RegCreateKeyExW

  RegDeleteKeyW

  RegDeleteValueW

  RegOpenKeyW

  RegSetValueExW

  RegOpenKeyExW

  RegQueryValueExW

  RegCloseKey

  RegEnumValueW

  RegEnumKeyExW

  ws2_32

  WSAGetLastError

  WSAStartup

  WSACleanup

  getprotobyname

  ntohs

  getservbyname

  WSAIoctl

  setsockopt

  recvfrom

  recv

  sendto

  send

  getsockname

  getpeername

  shutdown

  accept

  listen

  connect

  bind

  getsockopt

  ioctlsocket

  closesocket

  socket

  inet_ntoa

  inet_addr

  gethostbyaddr

  htonl

  gethostbyname

  ntohl

  getprotobynumber

  getservbyport

  Exports

  Exports

  VSTPluginMain

  main

  Sections

  .text

  Size: 1.0MB - Virtual size: 1.0MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1.2MB - Virtual size: 1.2MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 60KB - Virtual size: 63KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .minfo

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 52KB - Virtual size: 51KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $_28_/$PROGRAMFILES/Auburn Sounds/Graillon 2/Uninstall.exe.nsis
• $_28_/Graillon 2/Graillon 2_x64.dll

  .dll windows:6 windows x64 arch:x64

  cc340b7f89f422c9a743c73ee21ca3c3

  
  

  Code Sign

  99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

  Certificate

  Issuer

  CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Not Before

  19-05-2021 05:32

  Not After

  18-05-2036 05:32

  Subject

  CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  66:87:f8:2e:4b:cb:e4:ba:51:80:2d:65:75:90:dc:7d

  Certificate

  Issuer

  CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Not Before

  30-09-2022 05:34

  Not After

  29-09-2025 05:34

  Subject

  CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,C=FR,1.2.840.113549.1.9.1=#0c18636f6e746163744061756275726e736f756e64732e636f6d

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31

  Certificate

  Issuer

  CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Not Before

  02-11-2023 08:32

  Not After

  30-10-2034 08:32

  Subject

  CN=Certum Timestamp 2023,O=Asseco Data Systems S.A.,C=PL

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

  Certificate

  Issuer

  CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Not Before

  19-05-2021 05:32

  Not After

  18-05-2036 05:32

  Subject

  CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

  Certificate

  Issuer

  CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Not Before

  31-05-2021 06:43

  Not After

  17-09-2029 06:43

  Subject

  CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  54:b3:18:72:14:28:c5:41:46:df:4b:a8:fd:43:e9:9c:fe:cd:a7:6a:67:a6:77:76:ba:36:7c:56:ac:97:d2:5e

  Signer

  Actual PE Digest

  54:b3:18:72:14:28:c5:41:46:df:4b:a8:fd:43:e9:9c:fe:cd:a7:6a:67:a6:77:76:ba:36:7c:56:ac:97:d2:5e

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  Imports

  gdi32

  GetRegionData

  GetClipRgn

  DeleteObject

  SetDIBitsToDevice

  CreateRectRgn

  user32

  GetWindowLongPtrA

  DefWindowProcA

  DestroyWindow

  UnregisterClassW

  GetClientRect

  GetWindowLongW

  GetParent

  SetWindowPos

  GetKeyState

  InvalidateRect

  GetUpdateRgn

  BeginPaint

  TrackMouseEvent

  GetCapture

  ReleaseCapture

  GetWindowRect

  GetAncestor

  SendMessageW

  LoadCursorW

  ShowWindow

  CreateWindowExW

  DefWindowProcW

  EndPaint

  SetCapture

  GetMessageW

  TranslateMessage

  RegisterClassW

  DispatchMessageW

  SetFocus

  SetTimer

  GetDesktopWindow

  SetWindowLongPtrA

  kernel32

  LCMapStringW

  CompareStringW

  GetFileSizeEx

  GetConsoleCP

  ReadConsoleW

  GetConsoleMode

  HeapReAlloc

  HeapFree

  HeapAlloc

  ExitProcess

  SetStdHandle

  SetFilePointerEx

  GetFileType

  ExitThread

  CreateThread

  RtlPcToFileHeader

  LoadLibraryExW

  TlsFree

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  OutputDebugStringA

  GetProcAddress

  LoadLibraryA

  GetModuleHandleA

  QueryPerformanceFrequency

  QueryPerformanceCounter

  GetModuleHandleW

  GetModuleFileNameA

  FreeLibrary

  ResumeThread

  WaitForSingleObject

  CloseHandle

  GetSystemInfo

  CreateSemaphoreA

  GetCurrentThreadId

  TryEnterCriticalSection

  ReleaseSemaphore

  GetCurrentProcessId

  CreateFileW

  ReadFile

  GetLastError

  WriteFile

  GetModuleFileNameW

  FindNextFileW

  FindClose

  FlushFileBuffers

  LockFileEx

  GetTimeZoneInformation

  SystemTimeToTzSpecificLocalTime

  TzSpecificLocalTimeToSystemTime

  FormatMessageW

  LocalFree

  SetLastError

  SetEnvironmentVariableW

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetStdHandle

  TerminateProcess

  lstrlenW

  ExpandEnvironmentStringsW

  GetCurrentProcess

  VirtualAlloc

  VirtualFree

  RaiseException

  VerSetConditionMask

  VerifyVersionInfoW

  GetExitCodeThread

  Sleep

  SwitchToThread

  GetCurrentThread

  SuspendThread

  GetThreadContext

  FreeLibraryAndExitThread

  GetModuleHandleExW

  TerminateThread

  InitializeCriticalSection

  WideCharToMultiByte

  MultiByteToWideChar

  GetCommandLineW

  IsDebuggerPresent

  RtlCaptureContext

  GetEnvironmentVariableA

  OpenThread

  SetEndOfFile

  GlobalMemoryStatusEx

  CreateEventW

  SetEvent

  TlsSetValue

  TlsGetValue

  TlsAlloc

  EncodePointer

  InterlockedFlushSList

  GetCPInfo

  FindFirstFileExW

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCommandLineA

  GetProcessHeap

  GetStringTypeW

  HeapSize

  WriteConsoleW

  RtlUnwindEx

  IsProcessorFeaturePresent

  GetStartupInfoW

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  RtlVirtualUnwind

  RtlLookupFunctionEntry

  InitializeSListHead

  GetSystemTimeAsFileTime

  RtlUnwind

  shell32

  ShellExecuteA

  advapi32

  RegQueryInfoKeyW

  RegFlushKey

  RegCreateKeyExW

  RegDeleteKeyW

  RegDeleteValueW

  RegOpenKeyW

  RegSetValueExW

  RegOpenKeyExW

  RegQueryValueExW

  RegCloseKey

  RegEnumValueW

  RegEnumKeyExW

  ws2_32

  WSAGetLastError

  WSAStartup

  WSACleanup

  getprotobyname

  ntohs

  getservbyname

  getservbyport

  ntohl

  gethostbyname

  WSAIoctl

  setsockopt

  recvfrom

  recv

  sendto

  send

  getsockname

  getpeername

  shutdown

  accept

  listen

  connect

  bind

  getsockopt

  ioctlsocket

  closesocket

  socket

  inet_ntoa

  inet_addr

  gethostbyaddr

  getprotobynumber

  htonl

  Exports

  Exports

  CreatePlugInstance

  Sections

  .text

  Size: 1.1MB - Virtual size: 1.1MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1.3MB - Virtual size: 1.3MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 94KB - Virtual size: 101KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 32KB - Virtual size: 32KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .minfo

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  _RDATA

  Size: 512B - Virtual size: 244B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 22KB - Virtual size: 21KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $_28_/Graillon 2/Plugin.nfo
• Graillon-FREE-2.8/graillon-cheat-sheet.jpg

  .jpg
• Graillon-FREE-2.8/license.html

  .html