Graillon-FREE-2[.]8[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

Graillon-FREE-2.8.zip
Size

29.5MB
MD5

78523cf4ef2cf5072d9bf9ee778cc5ae
SHA1

26ef6cee3fab33b8cc78f69582f2aa6d97c23b3a
SHA256

9c3dd40b4539a812baabc3b8e1cec9ae45a39ec8d799c1bd6e53d9d64a2366f0
SHA512

fa74a08ca0314bb4ab7a2383f37a6c2425aeef15fd01790698e130d129bc55ef7a65341d52338445da6c709ddfa3ddb8231d917338dc8fd62f1483e0cf6ce9ec
SSDEEP

786432:otrrFG6p7wip1Pl6txW/CyRU/JT9heTgxmyYgpapjDLiRM:ahJbd6tg6yS/JTvYgUpj3iRM

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack005/$PLUGINSDIR/System.dll
unpack005/$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/x64/Auburn Sounds Graillon 2.aaxplugin

Files

Graillon-FREE-2.8.zip
.zip
Graillon-FREE-2.8/Graillon 2 User's Guide.pdf
.pdf
Graillon-FREE-2.8/Graillon Datasheet.pdf
.pdf
Graillon-FREE-2.8/Linux/Linux-64b-LV2-FREE/Auburn Sounds Graillon 2.lv2/AuburnSoundsGraillon2.so
.elf linux x64
Graillon-FREE-2.8/Linux/Linux-64b-LV2-FREE/Auburn Sounds Graillon 2.lv2/manifest.ttl
Graillon-FREE-2.8/Linux/Linux-64b-VST2-FREE/Auburn Sounds Graillon 2.so
.elf linux x64
Graillon-FREE-2.8/Linux/Linux-64b-VST3-FREE/Auburn Sounds Graillon 2.vst3/Contents/x86_64-linux/Auburn Sounds Graillon 2.so
.elf linux x64
Graillon-FREE-2.8/Mac/Graillon-2-FREE-2.8.0.pkg
.pkg macos
Graillon-FREE-2.8/Windows/Graillon-2-FREE-2.8.0.exe
.exe windows:4 windows x86 arch:x86

f4639a0b3116c2cfc71144b88a929cfd

Code Sign

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

66:87:f8:2e:4b:cb:e4:ba:51:80:2d:65:75:90:dc:7d
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

30-09-2022 05:34

Not After

29-09-2025 05:34

Subject

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,C=FR,1.2.840.113549.1.9.1=#0c18636f6e746163744061756275726e736f756e64732e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

02-11-2023 08:32

Not After

30-10-2034 08:32

Subject

CN=Certum Timestamp 2023,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31-05-2021 06:43

Not After

17-09-2029 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a5:2c:01:dd:09:1c:1d:92:91:8d:17:fd:c9:c7:a9:a9:b9:bb:7c:9e:b4:0a:40:d9:bf:b3:b0:10:1f:b9:4a:6a
Signer

Actual PE Digest

a5:2c:01:dd:09:1c:1d:92:91:8d:17:fd:c9:c7:a9:a9:b9:bb:7c:9e:b4:0a:40:d9:bf:b3:b0:10:1f:b9:4a:6a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumValueW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegOpenKeyExW
RegCreateKeyExW

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW
ShellExecuteExW

ole32

CoCreateInstance
OleUninitialize
OleInitialize
IIDFromString
CoTaskMemFree

comctl32

ImageList_Destroy
ord17
ImageList_AddMasked
ImageList_Create

user32

MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
CreatePopupMenu
AppendMenuW
TrackPopupMenu
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
IsWindowEnabled
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CharPrevW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
CharNextA
wsprintfA
DispatchMessageW
CreateWindowExW
PeekMessageW
GetSystemMetrics

gdi32

GetDeviceCaps
SetBkColor
SelectObject
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor

kernel32

lstrcmpiA
CreateFileW
GetTempFileNameW
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
WriteFile
CopyFileW
ExitProcess
GetCurrentProcess
GetModuleFileNameW
GetFileSize
GetTickCount
Sleep
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
MulDiv
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
SetEnvironmentVariableW

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

509a34b3a68a773e0afb4259e68f9f82

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError

user32

wsprintfW

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 662B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-header.bmp
$PROGRAMFILES/Common Files/VST3/Auburn Sounds Graillon 2.vst3
.dll windows:6 windows x86 arch:x86

a77bec72f4bd8a707897c4bea5dfa552

Code Sign

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

66:87:f8:2e:4b:cb:e4:ba:51:80:2d:65:75:90:dc:7d
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

30-09-2022 05:34

Not After

29-09-2025 05:34

Subject

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,C=FR,1.2.840.113549.1.9.1=#0c18636f6e746163744061756275726e736f756e64732e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

02-11-2023 08:32

Not After

30-10-2034 08:32

Subject

CN=Certum Timestamp 2023,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31-05-2021 06:43

Not After

17-09-2029 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2e:ea:00:0a:43:2d:a1:9b:56:08:06:98:27:74:8d:53:b1:55:4d:f3:73:7d:8e:f5:9c:59:56:1a:ad:3d:d1:7f
Signer

Actual PE Digest

2e:ea:00:0a:43:2d:a1:9b:56:08:06:98:27:74:8d:53:b1:55:4d:f3:73:7d:8e:f5:9c:59:56:1a:ad:3d:d1:7f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

GetRegionData
GetClipRgn
DeleteObject
SetDIBitsToDevice
CreateRectRgn

user32

GetWindowLongA
DefWindowProcA
DestroyWindow
UnregisterClassW
GetClientRect
GetWindowLongW
GetParent
SetWindowPos
DefWindowProcW
GetKeyState
InvalidateRect
TrackMouseEvent
GetWindowRect
GetAncestor
SendMessageW
GetUpdateRgn
BeginPaint
EndPaint
GetCapture
SetCapture
ReleaseCapture
ShowWindow
CreateWindowExW
GetMessageW
TranslateMessage
RegisterClassW
DispatchMessageW
SetFocus
SetTimer
GetDesktopWindow
SetWindowLongA
LoadCursorW

kernel32

LCMapStringW
CompareStringW
DecodePointer
GetFileSizeEx
GetConsoleCP
ReadConsoleW
GetConsoleMode
HeapReAlloc
HeapFree
HeapAlloc
ExitProcess
SetStdHandle
SetFilePointerEx
GetFileType
ExitThread
CreateThread
LoadLibraryExW
TlsFree
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
OutputDebugStringA
GetProcAddress
LoadLibraryA
GetModuleHandleA
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleHandleW
GetModuleFileNameA
FreeLibrary
ResumeThread
WaitForSingleObject
CloseHandle
GetSystemInfo
CreateSemaphoreA
GetCurrentThreadId
TryEnterCriticalSection
ReleaseSemaphore
GetCurrentProcessId
CreateFileW
ReadFile
GetLastError
WriteFile
GetModuleFileNameW
FindNextFileW
FindClose
FlushFileBuffers
LockFileEx
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
FormatMessageW
LocalFree
SetLastError
SetEnvironmentVariableW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
TerminateProcess
lstrlenW
ExpandEnvironmentStringsW
GetCurrentProcess
VirtualAlloc
VirtualFree
RaiseException
VerSetConditionMask
VerifyVersionInfoW
GetExitCodeThread
Sleep
SwitchToThread
GetCurrentThread
SuspendThread
GetThreadContext
FreeLibraryAndExitThread
GetModuleHandleExW
TerminateThread
InitializeCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
IsDebuggerPresent
RtlCaptureContext
GetEnvironmentVariableA
OpenThread
SetEndOfFile
GlobalMemoryStatusEx
CreateEventW
SetEvent
TlsGetValue
TlsAlloc
EncodePointer
InterlockedFlushSList
GetCPInfo
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetProcessHeap
GetStringTypeW
HeapSize
RtlUnwind
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
WriteConsoleW

shell32

ShellExecuteA

advapi32

RegQueryInfoKeyW
RegFlushKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegEnumValueW
RegEnumKeyExW

ws2_32

WSAGetLastError
WSAStartup
WSACleanup
getprotobyname
ntohs
getservbyname
WSAIoctl
setsockopt
recvfrom
recv
sendto
send
getsockname
getpeername
shutdown
accept
listen
connect
bind
getsockopt
ioctlsocket
closesocket
socket
inet_ntoa
inet_addr
gethostbyaddr
htonl
gethostbyname
ntohl
getprotobynumber
getservbyport

Exports

Exports

ExitDll
GetPluginFactory
InitDll
bundleEntry
bundleExit

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.minfo
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Add Sub Quint.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct A major.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct A minor.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct A# major.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct A# minor.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct B major.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct B minor.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct C major.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct C minor.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct C# major.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct C# minor.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct D major.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct D minor.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct D# major.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct D# minor.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct E major.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct E minor.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct F major.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct F minor.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct F# major.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct F# minor.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct G major.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct G minor.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct G# major.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Correct G# minor.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Default.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Only in Full version.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Robot Correct.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Simple Octaver.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Tuner Doubler.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/Factory Presets/Graillon 2/Auburn Sounds Graillon 2 Factory Presets/Younger Speech.tfx
$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Graillon 2.aaxplugin/Contents/x64/Auburn Sounds Graillon 2.aaxplugin
.dll windows:6 windows x64 arch:x64

cb7b3468268afe70d44fada8481ad3df

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

gdi32

GetRegionData
GetClipRgn
DeleteObject
SetDIBitsToDevice
CreateRectRgn

user32

GetWindowLongPtrA
DefWindowProcA
DestroyWindow
UnregisterClassW
GetClientRect
GetWindowLongW
GetParent
SetWindowPos
GetKeyState
InvalidateRect
GetUpdateRgn
BeginPaint
GetAsyncKeyState
TrackMouseEvent
GetCapture
ReleaseCapture
GetWindowRect
GetAncestor
SendMessageW
LoadCursorW
ShowWindow
CreateWindowExW
DefWindowProcW
EndPaint
SetCapture
GetMessageW
TranslateMessage
RegisterClassW
DispatchMessageW
SetFocus
SetTimer
GetDesktopWindow
SetWindowLongPtrA

kernel32

LCMapStringW
CompareStringW
GetFileSizeEx
GetConsoleCP
ReadConsoleW
GetConsoleMode
HeapReAlloc
HeapFree
HeapAlloc
ExitProcess
SetStdHandle
SetFilePointerEx
GetFileType
ExitThread
CreateThread
RtlPcToFileHeader
LoadLibraryExW
TlsFree
TlsSetValue
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringA
GetProcAddress
LoadLibraryA
GetModuleHandleA
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleHandleW
GetModuleFileNameA
FreeLibrary
ResumeThread
WaitForSingleObject
CloseHandle
GetSystemInfo
CreateSemaphoreA
GetCurrentThreadId
TryEnterCriticalSection
ReleaseSemaphore
GetCurrentProcessId
CreateFileW
ReadFile
GetLastError
WriteFile
GetModuleFileNameW
FindNextFileW
FindClose
FlushFileBuffers
LockFileEx
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
FormatMessageW
LocalFree
SetLastError
SetEnvironmentVariableW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
TerminateProcess
lstrlenW
ExpandEnvironmentStringsW
GetCurrentProcess
VirtualAlloc
VirtualFree
RaiseException
VerSetConditionMask
VerifyVersionInfoW
GetExitCodeThread
Sleep
SwitchToThread
GetCurrentThread
SuspendThread
GetThreadContext
FreeLibraryAndExitThread
GetModuleHandleExW
TerminateThread
InitializeCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
IsDebuggerPresent
RtlCaptureContext
GetEnvironmentVariableA
OpenThread
SetEndOfFile
GlobalMemoryStatusEx
CreateEventW
SetEvent
TlsGetValue
TlsAlloc
EncodePointer
InterlockedFlushSList
GetCPInfo
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetProcessHeap
GetStringTypeW
HeapSize
WriteConsoleW
RtlUnwindEx
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
InitializeSListHead
GetSystemTimeAsFileTime
RtlUnwind

shell32

ShellExecuteA

advapi32

RegQueryInfoKeyW
RegFlushKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegEnumValueW
RegEnumKeyExW

ws2_32

WSAGetLastError
WSAStartup
WSACleanup
getprotobynumber
ntohs
getservbyname
getservbyport
ntohl
WSAIoctl
setsockopt
recvfrom
recv
sendto
send
getsockname
getpeername
shutdown
accept
listen
connect
bind
getsockopt
ioctlsocket
closesocket
socket
inet_ntoa
inet_addr
gethostbyaddr
htonl
getprotobyname
gethostbyname

Exports

Exports

ACFCanUnloadNow
ACFGetClassFactory
ACFGetSDKVersion
ACFRegisterComponent
ACFRegisterPlugin
ACFShutdown
ACFStartup
DplugEnumerateTFX

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 94KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.minfo
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAMFILES64/Common Files/VST3/Auburn Sounds Graillon 2-64.vst3
.dll windows:6 windows x64 arch:x64

ba30273e0a866c0eb32f4bf83a9a7089

Code Sign

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

66:87:f8:2e:4b:cb:e4:ba:51:80:2d:65:75:90:dc:7d
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

30-09-2022 05:34

Not After

29-09-2025 05:34

Subject

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,C=FR,1.2.840.113549.1.9.1=#0c18636f6e746163744061756275726e736f756e64732e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

02-11-2023 08:32

Not After

30-10-2034 08:32

Subject

CN=Certum Timestamp 2023,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31-05-2021 06:43

Not After

17-09-2029 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a4:a7:be:78:d2:26:c0:17:e6:a1:b1:45:f5:ba:b3:00:39:24:77:cf:95:28:ea:1f:32:ff:09:25:8b:fc:29:39
Signer

Actual PE Digest

a4:a7:be:78:d2:26:c0:17:e6:a1:b1:45:f5:ba:b3:00:39:24:77:cf:95:28:ea:1f:32:ff:09:25:8b:fc:29:39

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

gdi32

GetRegionData
GetClipRgn
DeleteObject
SetDIBitsToDevice
CreateRectRgn

user32

GetWindowLongPtrA
DefWindowProcA
DestroyWindow
UnregisterClassW
GetClientRect
GetWindowLongW
GetParent
SetWindowPos
GetKeyState
InvalidateRect
GetUpdateRgn
BeginPaint
TrackMouseEvent
GetCapture
ReleaseCapture
GetWindowRect
GetAncestor
SendMessageW
LoadCursorW
ShowWindow
CreateWindowExW
DefWindowProcW
EndPaint
SetCapture
GetMessageW
TranslateMessage
RegisterClassW
DispatchMessageW
SetFocus
SetTimer
GetDesktopWindow
SetWindowLongPtrA

kernel32

LCMapStringW
CompareStringW
GetFileSizeEx
GetConsoleCP
ReadConsoleW
GetConsoleMode
HeapReAlloc
HeapFree
HeapAlloc
ExitProcess
SetStdHandle
SetFilePointerEx
GetFileType
ExitThread
CreateThread
RtlPcToFileHeader
LoadLibraryExW
TlsFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
OutputDebugStringA
GetProcAddress
LoadLibraryA
GetModuleHandleA
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleHandleW
GetModuleFileNameA
FreeLibrary
ResumeThread
WaitForSingleObject
CloseHandle
GetSystemInfo
CreateSemaphoreA
GetCurrentThreadId
TryEnterCriticalSection
ReleaseSemaphore
GetCurrentProcessId
CreateFileW
ReadFile
GetLastError
WriteFile
GetModuleFileNameW
FindNextFileW
FindClose
FlushFileBuffers
LockFileEx
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
FormatMessageW
LocalFree
SetLastError
SetEnvironmentVariableW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
TerminateProcess
lstrlenW
ExpandEnvironmentStringsW
GetCurrentProcess
VirtualAlloc
VirtualFree
RaiseException
VerSetConditionMask
VerifyVersionInfoW
GetExitCodeThread
Sleep
SwitchToThread
GetCurrentThread
SuspendThread
GetThreadContext
FreeLibraryAndExitThread
GetModuleHandleExW
TerminateThread
InitializeCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
IsDebuggerPresent
RtlCaptureContext
GetEnvironmentVariableA
OpenThread
SetEndOfFile
GlobalMemoryStatusEx
CreateEventW
SetEvent
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
InterlockedFlushSList
GetCPInfo
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetProcessHeap
GetStringTypeW
HeapSize
WriteConsoleW
RtlUnwindEx
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
InitializeSListHead
GetSystemTimeAsFileTime
RtlUnwind

shell32

ShellExecuteA

advapi32

RegQueryInfoKeyW
RegFlushKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegEnumValueW
RegEnumKeyExW

ws2_32

WSAGetLastError
WSAStartup
WSACleanup
getprotobyname
ntohs
getservbyname
getservbyport
ntohl
gethostbyname
WSAIoctl
setsockopt
recvfrom
recv
sendto
send
getsockname
getpeername
shutdown
accept
listen
connect
bind
getsockopt
ioctlsocket
closesocket
socket
inet_ntoa
inet_addr
gethostbyaddr
getprotobynumber
htonl

Exports

Exports

ExitDll
GetPluginFactory
InitDll
bundleEntry
bundleExit

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.minfo
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$_26_/Auburn Sounds Graillon 2-64.dll
.dll windows:6 windows x64 arch:x64

1b661812aaba9c615cf846beeb36d701

Code Sign

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

66:87:f8:2e:4b:cb:e4:ba:51:80:2d:65:75:90:dc:7d
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

30-09-2022 05:34

Not After

29-09-2025 05:34

Subject

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,C=FR,1.2.840.113549.1.9.1=#0c18636f6e746163744061756275726e736f756e64732e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

02-11-2023 08:32

Not After

30-10-2034 08:32

Subject

CN=Certum Timestamp 2023,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31-05-2021 06:43

Not After

17-09-2029 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

bb:c3:02:37:01:45:03:82:2a:ad:eb:77:9d:5a:5e:0f:19:00:7b:e9:66:3a:7f:3d:45:ab:1d:4f:04:7d:12:15
Signer

Actual PE Digest

bb:c3:02:37:01:45:03:82:2a:ad:eb:77:9d:5a:5e:0f:19:00:7b:e9:66:3a:7f:3d:45:ab:1d:4f:04:7d:12:15

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

gdi32

GetRegionData
GetClipRgn
DeleteObject
SetDIBitsToDevice
CreateRectRgn

user32

GetWindowLongPtrA
DefWindowProcA
DestroyWindow
UnregisterClassW
GetClientRect
GetWindowLongW
GetParent
SetWindowPos
GetKeyState
InvalidateRect
GetUpdateRgn
BeginPaint
TrackMouseEvent
GetCapture
ReleaseCapture
GetWindowRect
GetAncestor
SendMessageW
LoadCursorW
ShowWindow
CreateWindowExW
DefWindowProcW
EndPaint
SetCapture
GetMessageW
TranslateMessage
RegisterClassW
DispatchMessageW
SetFocus
SetTimer
GetDesktopWindow
SetWindowLongPtrA

kernel32

LCMapStringW
CompareStringW
GetFileSizeEx
GetConsoleCP
ReadConsoleW
GetConsoleMode
HeapReAlloc
HeapFree
HeapAlloc
ExitProcess
SetStdHandle
SetFilePointerEx
GetFileType
ExitThread
CreateThread
RtlPcToFileHeader
LoadLibraryExW
TlsFree
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
ReleaseSemaphore
CloseHandle
OutputDebugStringA
GetProcAddress
LoadLibraryA
GetModuleHandleA
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleHandleW
GetModuleFileNameA
FreeLibrary
ResumeThread
GetSystemInfo
CreateSemaphoreA
GetCurrentThreadId
TryEnterCriticalSection
GetCurrentProcessId
CreateFileW
ReadFile
GetLastError
WriteFile
GetModuleFileNameW
FindNextFileW
FindClose
FlushFileBuffers
LockFileEx
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
FormatMessageW
LocalFree
SetLastError
SetEnvironmentVariableW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
TerminateProcess
lstrlenW
ExpandEnvironmentStringsW
GetCurrentProcess
VirtualAlloc
VirtualFree
RaiseException
VerSetConditionMask
VerifyVersionInfoW
GetExitCodeThread
Sleep
SwitchToThread
GetCurrentThread
SuspendThread
GetThreadContext
FreeLibraryAndExitThread
GetModuleHandleExW
TerminateThread
InitializeCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
IsDebuggerPresent
RtlCaptureContext
GetEnvironmentVariableA
OpenThread
SetEndOfFile
GlobalMemoryStatusEx
CreateEventW
SetEvent
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
InterlockedFlushSList
GetCPInfo
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetProcessHeap
GetStringTypeW
HeapSize
WriteConsoleW
RtlUnwindEx
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
InitializeSListHead
GetSystemTimeAsFileTime
RtlUnwind

shell32

ShellExecuteA

advapi32

RegQueryInfoKeyW
RegFlushKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegEnumValueW
RegEnumKeyExW

ws2_32

WSAGetLastError
WSAStartup
WSACleanup
getprotobyname
ntohs
getservbyname
getservbyport
ntohl
gethostbyname
WSAIoctl
setsockopt
recvfrom
recv
sendto
send
getsockname
getpeername
shutdown
accept
listen
connect
bind
getsockopt
ioctlsocket
closesocket
socket
inet_ntoa
inet_addr
gethostbyaddr
getprotobynumber
htonl

Exports

Exports

VSTPluginMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 94KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.minfo
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$_27_/Auburn Sounds Graillon 2.dll
.dll windows:6 windows x86 arch:x86

b8180053ede83cb0af48f3280a68b60f

Code Sign

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

66:87:f8:2e:4b:cb:e4:ba:51:80:2d:65:75:90:dc:7d
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

30-09-2022 05:34

Not After

29-09-2025 05:34

Subject

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,C=FR,1.2.840.113549.1.9.1=#0c18636f6e746163744061756275726e736f756e64732e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

02-11-2023 08:32

Not After

30-10-2034 08:32

Subject

CN=Certum Timestamp 2023,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31-05-2021 06:43

Not After

17-09-2029 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0c:3a:66:21:4f:4f:36:a3:88:cd:71:ca:20:aa:32:1d:4e:46:5b:da:d5:0e:fe:4e:7d:cb:80:c9:02:5c:21:e2
Signer

Actual PE Digest

0c:3a:66:21:4f:4f:36:a3:88:cd:71:ca:20:aa:32:1d:4e:46:5b:da:d5:0e:fe:4e:7d:cb:80:c9:02:5c:21:e2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

GetRegionData
GetClipRgn
DeleteObject
SetDIBitsToDevice
CreateRectRgn

user32

GetWindowLongA
DefWindowProcA
DestroyWindow
UnregisterClassW
GetClientRect
GetWindowLongW
GetParent
SetWindowPos
DefWindowProcW
GetKeyState
InvalidateRect
TrackMouseEvent
GetWindowRect
GetAncestor
SendMessageW
GetUpdateRgn
BeginPaint
EndPaint
GetCapture
SetCapture
ReleaseCapture
ShowWindow
CreateWindowExW
GetMessageW
TranslateMessage
RegisterClassW
DispatchMessageW
SetFocus
SetTimer
GetDesktopWindow
SetWindowLongA
LoadCursorW

kernel32

LCMapStringW
CompareStringW
DecodePointer
GetFileSizeEx
GetConsoleCP
ReadConsoleW
GetConsoleMode
HeapReAlloc
HeapFree
HeapAlloc
ExitProcess
SetStdHandle
SetFilePointerEx
GetFileType
ExitThread
CreateThread
LoadLibraryExW
TlsFree
TlsSetValue
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
ReleaseSemaphore
CloseHandle
OutputDebugStringA
GetProcAddress
LoadLibraryA
GetModuleHandleA
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleHandleW
GetModuleFileNameA
FreeLibrary
ResumeThread
GetSystemInfo
CreateSemaphoreA
GetCurrentThreadId
TryEnterCriticalSection
GetCurrentProcessId
CreateFileW
ReadFile
GetLastError
WriteFile
GetModuleFileNameW
FindNextFileW
FindClose
FlushFileBuffers
LockFileEx
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
FormatMessageW
LocalFree
SetLastError
SetEnvironmentVariableW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
TerminateProcess
lstrlenW
ExpandEnvironmentStringsW
GetCurrentProcess
VirtualAlloc
VirtualFree
RaiseException
VerSetConditionMask
VerifyVersionInfoW
GetExitCodeThread
Sleep
SwitchToThread
GetCurrentThread
SuspendThread
GetThreadContext
FreeLibraryAndExitThread
GetModuleHandleExW
TerminateThread
InitializeCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
IsDebuggerPresent
RtlCaptureContext
GetEnvironmentVariableA
OpenThread
SetEndOfFile
GlobalMemoryStatusEx
CreateEventW
SetEvent
TlsGetValue
TlsAlloc
EncodePointer
InterlockedFlushSList
GetCPInfo
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetProcessHeap
GetStringTypeW
HeapSize
RtlUnwind
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
WriteConsoleW

shell32

ShellExecuteA

advapi32

RegQueryInfoKeyW
RegFlushKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegEnumValueW
RegEnumKeyExW

ws2_32

WSAGetLastError
WSAStartup
WSACleanup
getprotobyname
ntohs
getservbyname
WSAIoctl
setsockopt
recvfrom
recv
sendto
send
getsockname
getpeername
shutdown
accept
listen
connect
bind
getsockopt
ioctlsocket
closesocket
socket
inet_ntoa
inet_addr
gethostbyaddr
htonl
gethostbyname
ntohl
getprotobynumber
getservbyport

Exports

Exports

VSTPluginMain
main

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.minfo
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$_28_/$PROGRAMFILES/Auburn Sounds/Graillon 2/Uninstall.exe.nsis
$_28_/Graillon 2/Graillon 2_x64.dll
.dll windows:6 windows x64 arch:x64

cc340b7f89f422c9a743c73ee21ca3c3

Code Sign

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

66:87:f8:2e:4b:cb:e4:ba:51:80:2d:65:75:90:dc:7d
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

30-09-2022 05:34

Not After

29-09-2025 05:34

Subject

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,C=FR,1.2.840.113549.1.9.1=#0c18636f6e746163744061756275726e736f756e64732e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

02-11-2023 08:32

Not After

30-10-2034 08:32

Subject

CN=Certum Timestamp 2023,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31-05-2021 06:43

Not After

17-09-2029 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:b3:18:72:14:28:c5:41:46:df:4b:a8:fd:43:e9:9c:fe:cd:a7:6a:67:a6:77:76:ba:36:7c:56:ac:97:d2:5e
Signer

Actual PE Digest

54:b3:18:72:14:28:c5:41:46:df:4b:a8:fd:43:e9:9c:fe:cd:a7:6a:67:a6:77:76:ba:36:7c:56:ac:97:d2:5e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

gdi32

GetRegionData
GetClipRgn
DeleteObject
SetDIBitsToDevice
CreateRectRgn

user32

GetWindowLongPtrA
DefWindowProcA
DestroyWindow
UnregisterClassW
GetClientRect
GetWindowLongW
GetParent
SetWindowPos
GetKeyState
InvalidateRect
GetUpdateRgn
BeginPaint
TrackMouseEvent
GetCapture
ReleaseCapture
GetWindowRect
GetAncestor
SendMessageW
LoadCursorW
ShowWindow
CreateWindowExW
DefWindowProcW
EndPaint
SetCapture
GetMessageW
TranslateMessage
RegisterClassW
DispatchMessageW
SetFocus
SetTimer
GetDesktopWindow
SetWindowLongPtrA

kernel32

LCMapStringW
CompareStringW
GetFileSizeEx
GetConsoleCP
ReadConsoleW
GetConsoleMode
HeapReAlloc
HeapFree
HeapAlloc
ExitProcess
SetStdHandle
SetFilePointerEx
GetFileType
ExitThread
CreateThread
RtlPcToFileHeader
LoadLibraryExW
TlsFree
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringA
GetProcAddress
LoadLibraryA
GetModuleHandleA
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleHandleW
GetModuleFileNameA
FreeLibrary
ResumeThread
WaitForSingleObject
CloseHandle
GetSystemInfo
CreateSemaphoreA
GetCurrentThreadId
TryEnterCriticalSection
ReleaseSemaphore
GetCurrentProcessId
CreateFileW
ReadFile
GetLastError
WriteFile
GetModuleFileNameW
FindNextFileW
FindClose
FlushFileBuffers
LockFileEx
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
FormatMessageW
LocalFree
SetLastError
SetEnvironmentVariableW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
TerminateProcess
lstrlenW
ExpandEnvironmentStringsW
GetCurrentProcess
VirtualAlloc
VirtualFree
RaiseException
VerSetConditionMask
VerifyVersionInfoW
GetExitCodeThread
Sleep
SwitchToThread
GetCurrentThread
SuspendThread
GetThreadContext
FreeLibraryAndExitThread
GetModuleHandleExW
TerminateThread
InitializeCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
IsDebuggerPresent
RtlCaptureContext
GetEnvironmentVariableA
OpenThread
SetEndOfFile
GlobalMemoryStatusEx
CreateEventW
SetEvent
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
InterlockedFlushSList
GetCPInfo
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetProcessHeap
GetStringTypeW
HeapSize
WriteConsoleW
RtlUnwindEx
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
InitializeSListHead
GetSystemTimeAsFileTime
RtlUnwind

shell32

ShellExecuteA

advapi32

RegQueryInfoKeyW
RegFlushKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegEnumValueW
RegEnumKeyExW

ws2_32

WSAGetLastError
WSAStartup
WSACleanup
getprotobyname
ntohs
getservbyname
getservbyport
ntohl
gethostbyname
WSAIoctl
setsockopt
recvfrom
recv
sendto
send
getsockname
getpeername
shutdown
accept
listen
connect
bind
getsockopt
ioctlsocket
closesocket
socket
inet_ntoa
inet_addr
gethostbyaddr
getprotobynumber
htonl

Exports

Exports

CreatePlugInstance

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 94KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.minfo
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$_28_/Graillon 2/Plugin.nfo
Graillon-FREE-2.8/graillon-cheat-sheet.jpg
.jpg
Graillon-FREE-2.8/license.html
.html

Sharing

General

Malware Config

Signatures

Files

f4639a0b3116c2cfc71144b88a929cfd

Code Sign

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39Certificate

Extended Key Usages

Key Usages

66:87:f8:2e:4b:cb:e4:ba:51:80:2d:65:75:90:dc:7dCertificate

Extended Key Usages

Key Usages

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

a5:2c:01:dd:09:1c:1d:92:91:8d:17:fd:c9:c7:a9:a9:b9:bb:7c:9e:b4:0a:40:d9:bf:b3:b0:10:1f:b9:4a:6aSigner

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

Sections

.text Size: 26KB - Virtual size: 26KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 1KB - Virtual size: 170KB

.ndata Size: - Virtual size: 124KB

.rsrc Size: 19KB - Virtual size: 19KB

509a34b3a68a773e0afb4259e68f9f82

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 1024B - Virtual size: 867B

.data Size: 512B - Virtual size: 120B

.reloc Size: 1024B - Virtual size: 662B

a77bec72f4bd8a707897c4bea5dfa552

Code Sign

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39Certificate

Extended Key Usages

Key Usages

66:87:f8:2e:4b:cb:e4:ba:51:80:2d:65:75:90:dc:7dCertificate

Extended Key Usages

Key Usages

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

2e:ea:00:0a:43:2d:a1:9b:56:08:06:98:27:74:8d:53:b1:55:4d:f3:73:7d:8e:f5:9c:59:56:1a:ad:3d:d1:7fSigner

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

kernel32

shell32

advapi32

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

66:87:f8:2e:4b:cb:e4:ba:51:80:2d:65:75:90:dc:7d
Certificate

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

a5:2c:01:dd:09:1c:1d:92:91:8d:17:fd:c9:c7:a9:a9:b9:bb:7c:9e:b4:0a:40:d9:bf:b3:b0:10:1f:b9:4a:6a
Signer

.text
Size: 26KB - Virtual size: 26KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 1KB - Virtual size: 170KB

.ndata
Size: - Virtual size: 124KB

.rsrc
Size: 19KB - Virtual size: 19KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 1024B - Virtual size: 867B

.data
Size: 512B - Virtual size: 120B

.reloc
Size: 1024B - Virtual size: 662B

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

66:87:f8:2e:4b:cb:e4:ba:51:80:2d:65:75:90:dc:7d
Certificate

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

2e:ea:00:0a:43:2d:a1:9b:56:08:06:98:27:74:8d:53:b1:55:4d:f3:73:7d:8e:f5:9c:59:56:1a:ad:3d:d1:7f
Signer

.text
Size: 1.0MB - Virtual size: 1.0MB

.rdata
Size: 1.2MB - Virtual size: 1.2MB

.data
Size: 61KB - Virtual size: 64KB

.minfo
Size: 2KB - Virtual size: 1KB

.reloc
Size: 52KB - Virtual size: 52KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 1.3MB - Virtual size: 1.3MB

.data
Size: 94KB - Virtual size: 101KB

.pdata
Size: 32KB - Virtual size: 32KB

.minfo
Size: 3KB - Virtual size: 3KB

_RDATA
Size: 512B - Virtual size: 244B

.reloc
Size: 22KB - Virtual size: 21KB

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

66:87:f8:2e:4b:cb:e4:ba:51:80:2d:65:75:90:dc:7d
Certificate

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

a4:a7:be:78:d2:26:c0:17:e6:a1:b1:45:f5:ba:b3:00:39:24:77:cf:95:28:ea:1f:32:ff:09:25:8b:fc:29:39
Signer

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 1.3MB - Virtual size: 1.3MB

.data
Size: 97KB - Virtual size: 103KB

.pdata
Size: 33KB - Virtual size: 33KB

.minfo
Size: 3KB - Virtual size: 3KB

_RDATA
Size: 512B - Virtual size: 244B

.reloc
Size: 23KB - Virtual size: 22KB

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate