a8982034b8745ca1dc3b8816b16961bf4e996c911c6411bca8530d8aea7e0610
- SHA256 a8982034b8745ca1dc3b8816b16961bf4e996c911c6411bca8530d8aea7e0610
Overview
overview
10Static
static
10Gross Beat...up.exe
windows7-x64
10Gross Beat...up.exe
windows10-2004-x64
10$PLUGINSDI...sh.dll
windows7-x64
3$PLUGINSDI...sh.dll
windows10-2004-x64
3$PLUGINSDIR/Bass.dll
windows7-x64
3$PLUGINSDIR/Bass.dll
windows10-2004-x64
3$PLUGINSDI...on.dll
windows7-x64
3$PLUGINSDI...on.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...in.dll
windows7-x64
3$PLUGINSDI...in.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/bass.dll
windows7-x64
3$PLUGINSDIR/bass.dll
windows10-2004-x64
3$PLUGINSDI...ll.exe
windows7-x64
7$PLUGINSDI...ll.exe
windows10-2004-x64
7$PLUGINSDI...ol.dll
windows7-x64
3$PLUGINSDI...ol.dll
windows10-2004-x64
3$PLUGINSDI...il.dll
windows7-x64
3$PLUGINSDI...il.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3Elastique.dll
windows7-x64
3Elastique.dll
windows10-2004-x64
3LAMEenc.dll
windows7-x64
3LAMEenc.dll
windows10-2004-x64
3REX Shared...ry.dll
windows7-x64
3REX Shared...ry.dll
windows10-2004-x64
3Reverb.dll
windows7-x64
3Reverb.dll
windows10-2004-x64
3Behavioral task
behavioral1
Sample
Gross Beat 1.0.7/setup.exe
Resource
win7-20240705-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Gross Beat 1.0.7/setup.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/AdvSplash.dll
Resource
win7-20240704-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/AdvSplash.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
$PLUGINSDIR/Bass.dll
Resource
win7-20240704-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
$PLUGINSDIR/Bass.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral7
Sample
$PLUGINSDIR/GetVersion.dll
Resource
win7-20240704-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
$PLUGINSDIR/GetVersion.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240729-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral10
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral11
Sample
$PLUGINSDIR/NSIS_SkinCrafter_Plugin.dll
Resource
win7-20240705-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
$PLUGINSDIR/NSIS_SkinCrafter_Plugin.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral13
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240704-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral14
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral15
Sample
$PLUGINSDIR/bass.dll
Resource
win7-20240708-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral16
Sample
$PLUGINSDIR/bass.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral17
Sample
$PLUGINSDIR/shareddlls_install.exe
Resource
win7-20240704-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral18
Sample
$PLUGINSDIR/shareddlls_install.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral19
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win7-20240708-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral20
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral21
Sample
$PLUGINSDIR/ILInstallUtil.dll
Resource
win7-20240729-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral22
Sample
$PLUGINSDIR/ILInstallUtil.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral23
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240708-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral24
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral25
Sample
Elastique.dll
Resource
win7-20240705-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral26
Sample
Elastique.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral27
Sample
LAMEenc.dll
Resource
win7-20240704-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral28
Sample
LAMEenc.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral29
Sample
REX Shared Library.dll
Resource
win7-20240708-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral30
Sample
REX Shared Library.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral31
Sample
Reverb.dll
Resource
win7-20240704-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral32
Sample
Reverb.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
General
- Target a8982034b8745ca1dc3b8816b16961bf4e996c911c6411bca8530d8aea7e0610
- Size 11.7MB
- Sample240802-vm97nasdjm
- SHA256 a8982034b8745ca1dc3b8816b16961bf4e996c911c6411bca8530d8aea7e0610
- MD5 fcee864d82b56b74b5451326ac494218
- SHA1 109ea32c26c4bbc372bbd021995639b7a402b452
- SHA512 af42fda10217aa3e2db8fe824349af505b8e0421c187e34b2fb6c339cea7d09327f27f02af542eeb6e0040d90c406a5ad478f822ac72268930931f3f29720e8e
- SSDEEP 196608:6nF4jQEyooz249TLfYPLI+QteHD7D3yaRHbAFdWpP9aU1YAPpJ6:6SJ5V4FYPEeHjjHbAFQpnC
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- Detects Strela Stealer payload 1 IoCs
resource yara_rule static1/unpack002/$PLUGINSDIR/NSIS_SkinCrafter_Plugin.dll family_strela - Strela family
- Unsigned PE 25 IoCs
Checks for missing Authenticode signature.
resource unpack001/Gross Beat 1.0.7/setup.exe unpack002/$PLUGINSDIR/AdvSplash.dll unpack002/$PLUGINSDIR/Bass.dll unpack002/$PLUGINSDIR/GetVersion.dll unpack002/$PLUGINSDIR/InstallOptions.dll unpack002/$PLUGINSDIR/NSIS_SkinCrafter_Plugin.dll unpack002/$PLUGINSDIR/System.dll unpack002/$PLUGINSDIR/bass.dll unpack002/$PLUGINSDIR/shareddlls_install.exe unpack003/$PLUGINSDIR/AccessControl.dll unpack003/$PLUGINSDIR/ILInstallUtil.dll unpack003/$PLUGINSDIR/InstallOptions.dll unpack003/Elastique.dll unpack003/LAMEenc.dll unpack003/REX Shared Library.dll unpack003/Reverb.dll unpack003/SG.dll unpack003/Uninstall.exe unpack004/$PLUGINSDIR/ILUninstall.dll unpack004/$PLUGINSDIR/InstallOptions.dll unpack003/dsp_ipp.dll unpack003/oggio.dll unpack003/wavpackdll.dll unpack002/IL Gross Beat.dll unpack002/uninstall.exe - NSIS installer 8 IoCs
resource yara_rule static1/unpack001/Gross Beat 1.0.7/setup.exe nsis_installer_1 static1/unpack001/Gross Beat 1.0.7/setup.exe nsis_installer_2 static1/unpack002/$PLUGINSDIR/shareddlls_install.exe nsis_installer_1 static1/unpack002/$PLUGINSDIR/shareddlls_install.exe nsis_installer_2 static1/unpack003/Uninstall.exe nsis_installer_1 static1/unpack003/Uninstall.exe nsis_installer_2 static1/unpack002/uninstall.exe nsis_installer_1 static1/unpack002/uninstall.exe nsis_installer_2
File Explorer
-
a8982034b8745ca1dc3b8816b16961bf4e996c911c6411bca8530d8aea7e0610.zip 11.7MB
-
Gross Beat 1.0.7/setup.exe.exe 11.7MB
-
$PLUGINSDIR/AdvSplash.dll.dll 6KB
-
$PLUGINSDIR/Bass.dll.dll 101KB
-
$PLUGINSDIR/GetVersion.dll.dll 8KB
-
$PLUGINSDIR/InstallOptions.dll.dll 14KB
-
$PLUGINSDIR/NSIS_SkinCrafter_Plugin.dll.dll 5.8MB
-
$PLUGINSDIR/System.dll.dll 11KB
-
$PLUGINSDIR/bass.dll.dll 101KB
-
$PLUGINSDIR/dat_bgm.ogg4.0MB
-
$PLUGINSDIR/dat_skin.skf264KB
-
$PLUGINSDIR/ioSpecial.ini211B
-
$PLUGINSDIR/modern-wizard.bmp281KB
-
$PLUGINSDIR/shareddlls_install.exe.exe 2.8MB
-
$PLUGINSDIR/AccessControl.dll.dll 10KB
-
$PLUGINSDIR/ILInstallUtil.dll.dll 94KB
-
$PLUGINSDIR/InstallOptions.dll.dll 14KB
-
$PLUGINSDIR/ioA.ini200B
-
$PLUGINSDIR/ioSpecial.ini211B
-
$PLUGINSDIR/modern-wizard.bmp51KB
-
Elastique.dll.dll 612KB
-
LAMEenc.dll.dll 356KB
-
REX Shared Library.dll.dll 228KB
-
Reverb.dll.dll 72KB
-
SG.dll.dll 1.6MB
-
Uninstall.exe.exe 251KB
-
$PLUGINSDIR/ILUninstall.dll.dll 405KB
-
$PLUGINSDIR/InstallOptions.dll.dll 14KB
-
$PLUGINSDIR/ioSpecial.ini211B
-
$PLUGINSDIR/modern-wizard.bmp51KB
-
uninstall.fud253B
-
dsp_ipp.dll.dll 12.4MB
-
oggio.dll.dll 1.3MB
-
wavpackdll.dll.dll 216KB
-
$PLUGINSDIR/splash.bmp462KB
-
Artwork/About.png.png 136KB
-
Artwork/Back.bmp1.3MB
-
Artwork/Demo.bmp87KB
-
Artwork/TB Btn.bmp1KB
-
Artwork/TB PrevNextBtn.bmp1KB
-
Artwork/TB Small.bmp8KB
-
Artwork/TB WP.bmp12KB
-
Artwork/skin.ini896B
-
Data/Maps/Default.fnv80B
-
Data/Maps/Env filter - asymmetry.fnv104B
-
Data/Maps/Env filter - default.fnv104B
-
Data/Maps/Env filter - flat.fnv80B
-
Data/Maps/Env filter - small knee.fnv128B
-
Gross Beat.chm.chm 1.3MB
-
Gross Beat.chw10KB
-
IL Gross Beat.dll.dll 2.1MB
-
Presets/Default.fst6KB
-
Presets/Flanging.fst7KB
-
Presets/Momentary.fst34KB
-
Presets/Patterns.fst36KB
-
Presets/Pitch shifter.fst33KB
-
Presets/Stutter.fst11KB
-
Presets/Turntablist.fst28KB
-
uninstall.exe.exe 59KB
Gross Beat 1.0.7/setup.exe
- IMPHASH 7fa974366048f9c551ef45714595665e
- SHA256 b13ade9fa58f96d8f03e4e241455c1af226d6b654e2ad48a8ae7d3a61f7ad64d
- MD5 1287223e90507c1ac0bc0b60f1b039e9
- SHA1 7853f575349907eabb0dcd190fe746eb1c1c8d01
- SHA512 b90117cee136da27aefe612c73284a9977fe836ac364afc68d7bb78ca6828efd21b60b2c9ba866a6bcf0479db1c64eef6fe06b4ca0ccb0f2d8a3e3b333361d2e
- SSDEEP 196608:uRRS34smUEH4IXhxpMzHQCMFGfDQ5jSajl3clBg3j/cWnoCfrR1:uq/fRI9MzaGf0nl3cli3J/
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
12491
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA
user32
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Name
.text
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=155, id=1, productName=Unmarked objects,
count=17, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/AdvSplash.dll
- IMPHASH 741b6bafe355b63a372d737b30543a95
- SHA256 eb1ca2b3a6e564c32677d0cdc388e26b74ef686e071d7dbca44d0bfa10488feb
- MD5 13cc92f90a299f5b2b2f795d0d2e47dc
- SHA1 aa69ead8520876d232c6ed96021a4825e79f542f
- SHA512 ff4e6e6e7104568fc85ef3a3f0494a5c7822a4ceaf65c584ad534f08f9a472a8d86f0a62f1f86343c61e2540b2254714b7ea43e4b312ff13d8271ff069386fa3
- SSDEEP 96:6hNSXIcmYjkvTS6MnBNZ1BMjDfhkkEkkXstWpPwoS:JXIpzTSd1BSk/kJtWpP
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4448
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
lstrcpynA
GetVersion
lstrcpyA
lstrcatA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
user32
LoadCursorA
RegisterClassA
SetWindowPos
SetWindowLongA
SystemParametersInfoA
EndPaint
GetClientRect
BeginPaint
DefWindowProcA
DestroyWindow
LoadImageA
CreateWindowExA
IsWindow
GetMessageA
DispatchMessageA
UnregisterClassA
wsprintfA
PostMessageA
SetWindowRgn
EnumDisplaySettingsA
gdi32
CombineRgn
CreateRectRgn
GetDIBits
SelectObject
CreateCompatibleDC
GetObjectA
DeleteDC
BitBlt
DeleteObject
winmm
timeSetEvent
PlaySoundA
timeKillEvent
show
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
188B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=40, id=1, productName=Unmarked objects,
count=9, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=48, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/Bass.dll
- SHA256 14a38f56be50a3829eb1eda2a908da2de5913f81d5cb01d8b668593d0fc36594
- MD5 a8af308ff01b4477657955fbf0cc8408
- SHA1 0794c059f0326e4a71be8a3ee4ac17a657d90d88
- SHA512 9e221967db95d4b86bf311891193dfd1515806aa0d43198d3bc26a17d77f06f212ab9dba1ca8575f50d224380e8b109529faccf2f56daac834da83a83677a0fd
- SSDEEP 3072:kR+vccy3LIweO1vFCLPkG9dfSD0BXZXmpw69Qe:S+vccy3hF1vFCT99dTBX5mupe
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
311363
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
BASS_Apply3D
BASS_CDDoor
BASS_CDFree
BASS_CDGetID
BASS_CDGetTrackLength
BASS_CDGetTracks
BASS_CDInDrive
BASS_CDInit
BASS_CDPlay
BASS_ChannelBytes2Seconds
BASS_ChannelGet3DAttributes
BASS_ChannelGet3DPosition
BASS_ChannelGetAttributes
BASS_ChannelGetData
BASS_ChannelGetEAXMix
BASS_ChannelGetFlags
BASS_ChannelGetLevel
BASS_ChannelGetPosition
BASS_ChannelIsActive
BASS_ChannelIsSliding
BASS_ChannelPause
BASS_ChannelRemoveDSP
BASS_ChannelRemoveFX
BASS_ChannelRemoveLink
BASS_ChannelRemoveSync
BASS_ChannelResume
BASS_ChannelSeconds2Bytes
BASS_ChannelSet3DAttributes
BASS_ChannelSet3DPosition
BASS_ChannelSetAttributes
BASS_ChannelSetDSP
BASS_ChannelSetEAXMix
BASS_ChannelSetFX
BASS_ChannelSetLink
BASS_ChannelSetPosition
BASS_ChannelSetSync
BASS_ChannelSlideAttributes
BASS_ChannelStop
BASS_ErrorGetCode
BASS_FXGetParameters
BASS_FXSetParameters
BASS_Free
BASS_Get3DFactors
BASS_Get3DPosition
BASS_GetCPU
BASS_GetDSoundObject
BASS_GetDeviceDescription
BASS_GetEAXParameters
BASS_GetGlobalVolumes
BASS_GetInfo
BASS_GetVersion
BASS_GetVolume
BASS_Init
BASS_MusicFree
BASS_MusicGetChannelVol
BASS_MusicGetLength
BASS_MusicGetName
BASS_MusicLoad
BASS_MusicPlay
BASS_MusicPlayEx
BASS_MusicPreBuf
BASS_MusicSetAmplify
BASS_MusicSetChannelVol
BASS_MusicSetPanSep
BASS_MusicSetPositionScaler
BASS_Pause
BASS_RecordFree
BASS_RecordGetDeviceDescription
BASS_RecordGetInfo
BASS_RecordGetInput
BASS_RecordGetInputName
BASS_RecordInit
BASS_RecordSetInput
BASS_RecordStart
BASS_SampleCreate
BASS_SampleCreateDone
BASS_SampleFree
BASS_SampleGetInfo
BASS_SampleLoad
BASS_SamplePlay
BASS_SamplePlay3D
BASS_SamplePlay3DEx
BASS_SamplePlayEx
BASS_SampleSetInfo
BASS_SampleStop
BASS_Set3DAlgorithm
BASS_Set3DFactors
BASS_Set3DPosition
BASS_SetBufferLength
BASS_SetCLSID
BASS_SetEAXParameters
BASS_SetGlobalVolumes
BASS_SetLogCurves
BASS_SetNetConfig
BASS_SetVolume
BASS_Start
BASS_Stop
BASS_StreamCreate
BASS_StreamCreateFile
BASS_StreamCreateURL
BASS_StreamFree
BASS_StreamGetFilePosition
BASS_StreamGetLength
BASS_StreamGetTags
BASS_StreamPlay
BASS_StreamPreBuf
BASS_Update
_
Name
Size
96KB
Virtual Size
300KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
$PLUGINSDIR/GetVersion.dll
- IMPHASH fb1aa2bbc159c94cb45792330366bd5f
- SHA256 16dd6da98b7e53d374830cd4c644c01b112955f8487a285f34dc0353e9cfac15
- MD5 e013b625f5ae1e2f0b442cf39c0069df
- SHA1 9ec785b63279144c091366badda65278c4cdee20
- SHA512 306f7e674d119d129db48012c43f825bffabd078fac8518aea9d514b0787752a2e876bda2ad15df7332bfc8cfba38a0d1be17ee7c58a27e09678fce9aec58418
- SSDEEP 192:9r/9XGqK7s/AlHdJZBi46AQ5VuNxHA8/1:HXGqM93Bi46AQ5Vujg8/1
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
7247
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
lstrcmpiA
GetModuleHandleA
lstrcpynA
GlobalAlloc
GetProcAddress
GetSystemInfo
GetVersionExA
user32
GetSystemMetrics
wsprintfA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
WindowsName
WindowsPlatformArchitecture
WindowsPlatformId
WindowsServerName
WindowsServicePack
WindowsServicePackBuild
WindowsServicePackMajor
WindowsServicePackMinor
WindowsType
WindowsVersion
Name
.text
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
470B
Virtual Size
558B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
$PLUGINSDIR/InstallOptions.dll
- IMPHASH b1cd0d78f652ce5fc63f0879371af012
- SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
- MD5 325b008aec81e5aaa57096f05d4212b5
- SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
- SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
- SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10696
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc
user32
MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect
gdi32
SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject
shell32
SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
ole32
CoTaskMemFree
dialog
initDialog
show
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
152B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=72, id=1, productName=Unmarked objects,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=48, version=9044,
count=1, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/NSIS_SkinCrafter_Plugin.dll
- IMPHASH 8a595235c826f2ae0f0362f688723bd0
- SHA256 8b25cf3f7aa82fadccb2ce615ce0e40c5a8a3ea7bc51180a92173ee113a0ccfe
- MD5 028251654a4d65509aa8ccb5f2ee284a
- SHA1 4a4ad468a86df6b903002be4f8919017fea0c152
- SHA512 f252670bca0da9e8e2c519a6ef4ad6dd0c4e548aeb7566693a7d203e73e63345fc58683072020ef771d836429bed1d7b4fdf105aa3e62a969e9c8d39556e1d2d
- SSDEEP 98304:kj0Kg9frmFcqlMZ4vpHfOVlQnzW4Aogn/oXFdAaTZ8GcB7d0s:kjFA7t2RHfYlQZJgTamGcBis
- MD5 SHA1 SHA512 SSDEEP
-
Detects Strela Stealer payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
25310
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleFileNameA
SizeofResource
LockResource
LoadResource
FindResourceA
GlobalFree
lstrcpyA
MultiByteToWideChar
FreeLibrary
GetLastError
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
InterlockedDecrement
InterlockedIncrement
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
RtlUnwind
RaiseException
ExitProcess
GetFileAttributesA
GetCurrentThreadId
GetCommandLineA
GetVersionExA
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetCPInfo
HeapAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
SetUnhandledExceptionFilter
WriteFile
FlushFileBuffers
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
CloseHandle
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
HeapSize
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
SetStdHandle
ReadFile
GetLocaleInfoW
CreateFileA
SetEndOfFile
user32
MessageBoxA
destroy
skin
Name
.text
Size
60KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
14KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
5.7MB
Virtual Size
5.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
$PLUGINSDIR/System.dll
- IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10544
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect
user32
wsprintfA
ole32
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
784B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
100B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
520B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=14, version=7299,
count=19, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=42, version=8803,
count=4, id=48, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/bass.dll
- SHA256 14a38f56be50a3829eb1eda2a908da2de5913f81d5cb01d8b668593d0fc36594
- MD5 a8af308ff01b4477657955fbf0cc8408
- SHA1 0794c059f0326e4a71be8a3ee4ac17a657d90d88
- SHA512 9e221967db95d4b86bf311891193dfd1515806aa0d43198d3bc26a17d77f06f212ab9dba1ca8575f50d224380e8b109529faccf2f56daac834da83a83677a0fd
- SSDEEP 3072:kR+vccy3LIweO1vFCLPkG9dfSD0BXZXmpw69Qe:S+vccy3hF1vFCT99dTBX5mupe
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
311363
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
BASS_Apply3D
BASS_CDDoor
BASS_CDFree
BASS_CDGetID
BASS_CDGetTrackLength
BASS_CDGetTracks
BASS_CDInDrive
BASS_CDInit
BASS_CDPlay
BASS_ChannelBytes2Seconds
BASS_ChannelGet3DAttributes
BASS_ChannelGet3DPosition
BASS_ChannelGetAttributes
BASS_ChannelGetData
BASS_ChannelGetEAXMix
BASS_ChannelGetFlags
BASS_ChannelGetLevel
BASS_ChannelGetPosition
BASS_ChannelIsActive
BASS_ChannelIsSliding
BASS_ChannelPause
BASS_ChannelRemoveDSP
BASS_ChannelRemoveFX
BASS_ChannelRemoveLink
BASS_ChannelRemoveSync
BASS_ChannelResume
BASS_ChannelSeconds2Bytes
BASS_ChannelSet3DAttributes
BASS_ChannelSet3DPosition
BASS_ChannelSetAttributes
BASS_ChannelSetDSP
BASS_ChannelSetEAXMix
BASS_ChannelSetFX
BASS_ChannelSetLink
BASS_ChannelSetPosition
BASS_ChannelSetSync
BASS_ChannelSlideAttributes
BASS_ChannelStop
BASS_ErrorGetCode
BASS_FXGetParameters
BASS_FXSetParameters
BASS_Free
BASS_Get3DFactors
BASS_Get3DPosition
BASS_GetCPU
BASS_GetDSoundObject
BASS_GetDeviceDescription
BASS_GetEAXParameters
BASS_GetGlobalVolumes
BASS_GetInfo
BASS_GetVersion
BASS_GetVolume
BASS_Init
BASS_MusicFree
BASS_MusicGetChannelVol
BASS_MusicGetLength
BASS_MusicGetName
BASS_MusicLoad
BASS_MusicPlay
BASS_MusicPlayEx
BASS_MusicPreBuf
BASS_MusicSetAmplify
BASS_MusicSetChannelVol
BASS_MusicSetPanSep
BASS_MusicSetPositionScaler
BASS_Pause
BASS_RecordFree
BASS_RecordGetDeviceDescription
BASS_RecordGetInfo
BASS_RecordGetInput
BASS_RecordGetInputName
BASS_RecordInit
BASS_RecordSetInput
BASS_RecordStart
BASS_SampleCreate
BASS_SampleCreateDone
BASS_SampleFree
BASS_SampleGetInfo
BASS_SampleLoad
BASS_SamplePlay
BASS_SamplePlay3D
BASS_SamplePlay3DEx
BASS_SamplePlayEx
BASS_SampleSetInfo
BASS_SampleStop
BASS_Set3DAlgorithm
BASS_Set3DFactors
BASS_Set3DPosition
BASS_SetBufferLength
BASS_SetCLSID
BASS_SetEAXParameters
BASS_SetGlobalVolumes
BASS_SetLogCurves
BASS_SetNetConfig
BASS_SetVolume
BASS_Start
BASS_Stop
BASS_StreamCreate
BASS_StreamCreateFile
BASS_StreamCreateURL
BASS_StreamFree
BASS_StreamGetFilePosition
BASS_StreamGetLength
BASS_StreamGetTags
BASS_StreamPlay
BASS_StreamPreBuf
BASS_Update
_
Name
Size
96KB
Virtual Size
300KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
$PLUGINSDIR/dat_bgm.ogg
- SHA256 48f89748bc79f62b81b32e0d2be29f25220d1767a8e50f5eeb8e4395e80528eb
- MD5 2dddd5b3f5e69f9880be5c5043a001ee
- SHA1 5d0b6beb61ff9a8d4ecf49274559cca1c6c6c496
- SHA512 baa2d14208a6b627590c36457e5acec513803a4cb6029adee0fd396bf7cfcf3aa625a7afaa4cfe488436ead265172c434287a2f3e6075d06af41e4c282b1f3a0
- SSDEEP 98304:b6t8wSsgmUOhc/j6odYBz9qjkWgv5yBYwjZ:b6Rgmjc/jhdY1cjMxyPZ
- MD5 SHA1 SHA512 SSDEEP
$PLUGINSDIR/dat_skin.skf
- SHA256 bb1a83926f45a927237c8225aba4099c4219b06cbfd274f043330764a5c94887
- MD5 350143806cc10021082012a519506fc7
- SHA1 447d7c55ca0369143ccbe5b425e397e0f4564642
- SHA512 e1875ce34b120e4f0c36283d87c8d8678c1a2beef9fff5dfe2d79d447786098c623508003b4553e87fe5d178562e6beff71737fa426b28a1b66c07dd4635debe
- SSDEEP 6144:bvR4v5gGQh/ccccccccccccccccccccccEcccccccccccccccccccccc7:HW
- MD5 SHA1 SHA512 SSDEEP
$PLUGINSDIR/ioSpecial.ini
- SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
- MD5 e2d5070bc28db1ac745613689ff86067
- SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
- SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
- MD5 SHA1 SHA512
$PLUGINSDIR/modern-wizard.bmp
- SHA256 e6e229b300156b9e13ec858cb1e48a4180ed6441a254eba3a38cd4c3a805ce46
- MD5 f67262e04565c8667f70fa008b228e61
- SHA1 c3c4eabb4dfe629002ce6f82ae502262cd248b36
- SHA512 58026870a32e32d77966910dde8cba7a02909fea28432d8eab5ce1731d88399685388d69815bbb1c850df1f3877612acb384e18c6ecb2d915e9fe7fe3f39f2cb
- SSDEEP 6144:WXvnpXriCSJhMvfPtYfQf0cOkM34LrJ3i38v:W/4j6tN9OkMo3isv
- MD5 SHA1 SHA512 SSDEEP
$PLUGINSDIR/shareddlls_install.exe
- IMPHASH 099c0646ea7282d232219f8807883be0
- SHA256 599c63aa0d0496363c7c99217e6c3d941125907cc4ea4c7d5d73c9b54e3deaee
- MD5 4fe8ff7f02020ea655944db5541722f3
- SHA1 b5ff619c215529a4531337eef36167051cded658
- SHA512 f4802d00d46c59882a1e1d3b8c0a43fd2ba4b22819d5417ad81cf4522e796176a920f81a6753e8297d49b3b0e60f3e1c27e4fbff2a6cc100d01cd0a39a75b4e3
- SSDEEP 49152:lNXkhjpZr+L6hsoD/cSjvJafJc3eXIeGixJbsf4GQHwFjPfLtv+W3oZYKwL:lZ2XCGyk/cSrJafogfGiK6QFjXLfuYK6
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
12860
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA
user32
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Name
.text
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=155, id=1, productName=Unmarked objects,
count=17, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/AccessControl.dll
- IMPHASH ed83f419402bc3b83a08e3aaf8b5b5b7
- SHA256 4209588362785b690d08d15cd982b8d1c62c348767ca19114234b21d5df74ddc
- MD5 055f4f9260e07fc83f71877cbb7f4fad
- SHA1 a245131af1a182de99bd74af9ff1fab17977a72f
- SHA512 a8e82dc4435ed938f090f43df953ddad9b0075f16218c09890c996299420162d64b1dbfbf613af37769ae796717eec78204dc786b757e8b1d13d423d4ee82e26
- SSDEEP 192:8SEWBGgiJM4LN+xq56XdNcNz/NWdlJmlyOcROQ:8SEPgii9KTzyt
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
advapi32
ConvertStringSidToSidA
LookupAccountNameA
AdjustTokenPrivileges
LookupPrivilegeValueA
GetUserNameA
SetNamedSecurityInfoA
SetEntriesInAclA
BuildExplicitAccessWithNameA
GetNamedSecurityInfoA
OpenProcessToken
LookupAccountSidA
ConvertSidToStringSidA
GetSidSubAuthority
GetSidSubAuthorityCount
kernel32
lstrcmpiA
lstrcpyA
LocalAlloc
lstrlenA
LocalFree
GetLastError
GlobalFree
lstrcpynA
GlobalAlloc
GetFileAttributesA
CloseHandle
GetCurrentProcess
lstrcatA
user32
wsprintfA
ClearOnFile
ClearOnRegKey
DenyOnFile
DenyOnRegKey
DisableFileInheritance
DisableRegKeyInheritance
EnableFileInheritance
EnableRegKeyInheritance
GetCurrentUserName
GetFileGroup
GetFileOwner
GetRegKeyGroup
GetRegKeyOwner
GrantOnFile
GrantOnRegKey
IsUserTheAdministrator
RevokeOnFile
RevokeOnRegKey
SetFileGroup
SetFileOwner
SetOnFile
SetOnRegKey
SetRegKeyGroup
SetRegKeyOwner
SidToName
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
780B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=93, version=2067,
count=5, id=93, version=2179,
count=28, id=1, productName=Unmarked objects,
count=1, id=96, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=1, id=92, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=1, id=90, productName=VS2003 (.NET) SP1 build 6030, version=6030,
$PLUGINSDIR/ILInstallUtil.dll
- IMPHASH a6959eb69f73b43021eaad8f794a22a5
- SHA256 be44e27e8b1c78a2696451c8afa21412136bea12bc033ff9d0251922b4c97631
- MD5 e331583b908a92193e0be215611c7309
- SHA1 937106392134173fa3cd640c66ceea5152028e3a
- SHA512 35602924859dd83f23c728446b84e2c89fe4fa83a33842e50e96b7442ab16205ce634643185d13e086253e79685f0fbbb6c474c057b061f566ff763cbbc7d240
- SSDEEP 1536:1DwwWKYggvaz76xH1Jsc9t6bnWza3RYcJnFGlTxaJZuE/9:9wwWKY567C1ec6bnWza3JFGlTxaHn9
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
82788
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegFlushKey
RegCreateKeyExA
RegCloseKey
user32
GetKeyboardType
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
wvsprintfA
MessageBoxA
LoadStringA
GetSystemMetrics
CharNextA
CharToOemA
kernel32
GetACP
Sleep
VirtualFree
VirtualAlloc
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
lstrcpynA
lstrcpyA
WriteFile
WaitForSingleObject
VirtualQuery
SetEvent
ResetEvent
LeaveCriticalSection
InitializeCriticalSection
GlobalFree
GlobalAlloc
GetVersionExA
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLocalTime
GetLastError
GetFileAttributesA
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentThreadId
GetCPInfo
FreeLibrary
FormatMessageA
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumCalendarInfoA
EnterCriticalSection
DeleteCriticalSection
CreateEventA
CopyFileA
CompareStringA
CloseHandle
Sleep
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
AdjustInstDir
BackSlashToDoubleBackSlash
CheckFileVersionMinMax
CheckFileVersions
CheckVersion
DoFLUpdate
EnsurePath
FindFLPath
GetPathFromFilename
GetRootPath
GetUserForPermissions
MightBeRegistered
StoreILPath
SupportsSSE
VerifyFLPath
VerifyFLPathMajorVersion
Name
.text
Size
74KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
1024B
Virtual Size
892B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
18KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
$PLUGINSDIR/InstallOptions.dll
- IMPHASH b1cd0d78f652ce5fc63f0879371af012
- SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
- MD5 325b008aec81e5aaa57096f05d4212b5
- SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
- SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
- SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10696
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc
user32
MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect
gdi32
SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject
shell32
SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
ole32
CoTaskMemFree
dialog
initDialog
show
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
152B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=72, id=1, productName=Unmarked objects,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=48, version=9044,
count=1, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/ioA.ini
- SHA256 950ec1b6959ab99250373c997d51a34e1b8bb0d16c5cf564920f159954065ddd
- MD5 fce26d122996b91f8383e89e2f19e0e8
- SHA1 a16d8c3098179fcb72341bd02c0ce19c748b1f46
- SHA512 79541b85b46127c940416b1049470bc47f2a490ed8cda6cd7f11bcfa80e7d72d130e671362aa24852ce6782174a28ff5932524c4979f0dd35026e0289c9a3a53
- MD5 SHA1 SHA512
$PLUGINSDIR/ioSpecial.ini
- SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
- MD5 e2d5070bc28db1ac745613689ff86067
- SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
- SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
- MD5 SHA1 SHA512
$PLUGINSDIR/modern-wizard.bmp
- SHA256 a7b2f12e01cbea88d4f645f797f2ca6107d76ae13cd1be6dc532b759bfe0d925
- MD5 9e4cd80a60db6947642677bf31a10906
- SHA1 feedc432df18b13ffba2b7478347d885861701fa
- SHA512 a02ae76b7a5df03a149a0b9c9efd314b8646b829b930233d0cea8b619b21720b383f92be95838310e7f1c4183d256823a96e48866b65ac7d2141ed4254ae471a
- SSDEEP 384:0b5ZBhNII36iwq7VzVpaHsA2vxM+5GVTfoeydiszl:2XR360JzVpaHsAI75GRfovcs5
- MD5 SHA1 SHA512 SSDEEP
Elastique.dll
- IMPHASH 91ae1ec78af40e0a0ed6e4479e4daea6
- SHA256 905c2cfc6d340035c28f986a136f65efeb202d176a73ec5fbb3dc096eac52cf9
- MD5 41c785ad360e246dd075a8b44364ccd0
- SHA1 790d291e89cb6308b9fbb3ee325eca7ef0dbb086
- SHA512 49ad38c3f13d3cce47c489666385df59ce61e75f4d8ac891684a1ae04597177ad9c2c7d18e0ae5a591ecbe58da06ac43c87304e5ac2a3f26767a990d524efac7
- SSDEEP 6144:v/P2vBf4YcgYFGbR0y+fvv2/phKYhnfZvVqxzMmdE8g3QNmjsFACzKN/:f+BQYcjcUv2/6YhnfZYRMmdE8EAF
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
438936
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\Programs\Projects\Translations\zplane\elastique\vc\Release\elastique.pdb
kernel32
RtlUnwind
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetLastError
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
RaiseException
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
ExitProcess
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
MultiByteToWideChar
GetLocaleInfoA
InitializeCriticalSection
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA
Auftakt_CreateInstance
Auftakt_CreateInstance2
ElProDirect_CreateInstance
ElPro_CreateInstance
Metering_CreateInstance
SolPitchAn_CreateInstance
SolPitchAn_CreatePitchMarks
Name
.text
Size
476KB
Virtual Size
475KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
88KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data1
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
24KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=111, id=109, productName=VS2005 build 50727, version=50727,
count=124, id=125, productName=VS2005 build 50727, version=50727,
count=260, productName=Unmarked objects (old),
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=86, id=1, productName=Unmarked objects,
count=124, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
LAMEenc.dll
- IMPHASH 960669d9280ac2c4fe5b4f3cf1dbae70
- SHA256 38059e39a1835cc360c1c080a86a854ca6e203b9bbbeb73e6663be36a07a5c1e
- MD5 2fa01073991cb5cb74415154eb0caae3
- SHA1 8fa5271fcc9494579c485e3f2b04df7aeb583564
- SHA512 b7e66604016bcf2e3401058c0b7e951cac46e96d6b2bd14cb02c27ace9795a1e9cf7df956e87835854d78642d7a86dc42ad21568629d120407ac9bfb5311fab9
- SSDEEP 6144:PGOS3xd20PkjSKiowgn+OIUjws4eu5P4IIa6sh+gzAO+OYFyH:Ohd20PkjPijUOUj24Za6sHxYg
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
171299
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\programs\sdks\lame\lame-398-2\output\lame_enc.pdb
kernel32
GetPrivateProfileIntW
OutputDebugStringW
GetModuleFileNameW
GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleA
ExitProcess
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
MultiByteToWideChar
ReadFile
SetFilePointer
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
CloseHandle
WriteFile
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FlushFileBuffers
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
HeapSize
CreateFileA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
RaiseException
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetEndOfFile
user32
MessageBoxW
beCloseStream
beDeinitStream
beEncodeChunk
beEncodeChunkFloatS16NI
beFlushNoGap
beInitStream
beVersion
beWriteInfoTag
beWriteVBRHeader
lame_close
lame_encode_buffer_interleaved
lame_encode_flush
lame_get_in_samplerate
lame_get_num_channels
lame_get_num_samples
lame_get_out_samplerate
lame_get_scale
lame_get_scale_left
lame_get_scale_right
lame_init
lame_init_params
lame_mp3_tags_fid
lame_set_in_samplerate
lame_set_num_channels
lame_set_num_samples
lame_set_out_samplerate
lame_set_scale
lame_set_scale_left
lame_set_scale_right
Name
.text
Size
240KB
Virtual Size
238KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
92KB
Virtual Size
90KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
208KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=126, version=50327,
count=35, id=110, productName=VS2005 build 50727, version=50727,
count=46, id=125, productName=VS2005 build 50727, version=50727,
count=142, id=109, productName=VS2005 build 50727, version=50727,
count=5, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=92, id=1, productName=Unmarked objects,
count=29, id=113, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
REX Shared Library.dll
- IMPHASH 770e0fa719194a93077ef969cd4a4e83
- SHA256 7848629cb8293117055423c291bc14c3f0139e68293689c7852a9bbcea3f17f1
- MD5 2612524c9ebeffe1dbeeecaff2393269
- SHA1 00701ee499528abf6be0a1a28da01bc82946e0e0
- SHA512 7963ddf31171bc392cbab82e339810a459c8aed19ca983ce5512c77d67dbc979485f436e2b3eba3b8b483cd003f0c3692bd4e400f9455cad8bf14389a66672a7
- SSDEEP 3072:W1RF1vYoipgZ3RyBKXRXzBB8Tgi9Ag0Fu6OU+mlv2S/S1o5:EFl/b8T19AO6OzS
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
102235
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleFileNameA
DisableThreadLibraryCalls
InterlockedExchange
Sleep
QueryPerformanceCounter
RtlUnwind
RaiseException
IsBadReadPtr
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapAlloc
HeapFree
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
GetModuleHandleA
SetUnhandledExceptionFilter
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
VirtualAlloc
IsBadWritePtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
VirtualQuery
SetFilePointer
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
LoadLibraryA
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetStdHandle
FlushFileBuffers
CloseHandle
Close
Open
REXCreate
REXDelete
REXGetCreatorInfo
REXGetInfo
REXGetInfoFromBuffer
REXGetSliceInfo
REXRenderPreviewBatch
REXRenderSlice
REXSetOutputSampleRate
REXSetPreviewTempo
REXStartPreview
REXStopPreview
Name
.text
Size
144KB
Virtual Size
142KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
52KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
948B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=41, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=116, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=5, id=93, version=2179,
count=84, id=1, productName=Unmarked objects,
count=53, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, productName=Unmarked objects (old),
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Reverb.dll
- IMPHASH bd65ec4c173739c6ea5c9bffb160ec15
- SHA256 004dc2bd075fad0a11e7a9a739dfb6e269230a27277e2231ad36baffbd944edd
- MD5 cd85e0df208a3a9ef6816fa780fc37a4
- SHA1 242059b49f8a589f3d28df3a495d22bc018849cb
- SHA512 8a5dfd93067e1c0a9cf2ec964c73cad744d618dad53b2ee0c0b828d9c102dfae800fa08ef0c901a7a22422f18a84adfd48e289c778713108ea99d6dca6999177
- SSDEEP 768:SNVX34iCIGDJ+bmGYPfca5VqksJ1Qlo3QMxe47bVB59BNvt1t9gWD:YH4iu1zIjB1Qe3QseyhBjTt97
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14317
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
Process_Fruity_32FM_32FS
Process_UF_32FM_32FS
Name
.text
Size
48KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=19, id=125, productName=VS2005 build 50727, version=50727,
count=27, id=110, productName=VS2005 build 50727, version=50727,
count=86, id=109, productName=VS2005 build 50727, version=50727,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=75, id=1, productName=Unmarked objects,
count=3, productName=Unmarked objects (old),
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
SG.dll
- IMPHASH c5e8cff5b1fcfd18f631c1c27d2dbd5e
- SHA256 0a6e3d9663b43d14c9d9fc6aa7d055ee264d32463b46a6288fd546c7a2da0c81
- MD5 9c73db5c24b23b06b55cd3a546e99312
- SHA1 2acc5b9a28b8974b8839db3a76311d2fcf526692
- SHA512 d4470279623b11614446e31dc7ab4121a6cc2bdca7068adc469b22a55a6c3b7394dc8fa225a049cd801aabec2fdabcfce0a1190925d60963ea6f5de1cbf97494
- SSDEEP 24576:uQ1SkyWyX0Bx/PwHj0VnOc/F/SM7r2e2j1zzS9xfWx0HLeiAUWNSyBSQWXGKg:upXy9VOcdvUOzLexNSGdMGK
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1239948
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
GetErrorInfo
SysFreeString
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegFlushKey
RegCreateKeyExA
RegCloseKey
user32
GetKeyboardType
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
CreateWindowExA
WindowFromPoint
WindowFromDC
WaitMessage
ValidateRect
UpdateWindow
UnregisterClassA
UnionRect
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoA
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCursor
ShowCaret
SetWindowRgn
SetWindowsHookExA
SetWindowTextA
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetWindowLongA
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropA
SetParent
SetMenuItemInfoA
SetMenu
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardData
SetClassLongA
SetCapture
SetActiveWindow
SendMessageW
SendMessageA
ScrollWindowEx
ScrollWindow
ScreenToClient
RemovePropA
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageA
PeekMessageW
PeekMessageA
OpenClipboard
OffsetRect
OemToCharA
MsgWaitForMultipleObjects
MessageBoxA
MessageBeep
MapWindowPoints
MapVirtualKeyA
LockWindowUpdate
LoadStringA
LoadKeyboardLayoutA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageW
IsDialogMessageA
IsClipboardFormatAvailable
IsChild
InvalidateRect
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
HideCaret
GetWindowThreadProcessId
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropA
GetParent
GetWindow
GetMessagePos
GetMenuStringA
GetMenuState
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameA
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextA
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgItem
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardFormatNameA
GetClipboardData
GetClipCursor
GetClientRect
GetClassLongA
GetClassInfoA
GetCapture
GetActiveWindow
FrameRect
FindWindowA
FillRect
EqualRect
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CreatePopupMenu
CreateMenu
CreateIcon
CloseClipboard
ClientToScreen
CheckMenuItem
CallWindowProcA
CallNextHookEx
BeginPaint
AttachThreadInput
CharNextA
CharLowerBuffA
CharLowerA
CharUpperBuffA
CharToOemA
AdjustWindowRectEx
ActivateKeyboardLayout
kernel32
GetACP
Sleep
VirtualFree
VirtualAlloc
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringA
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
lstrcpyA
lstrcmpiA
WriteFile
WaitForSingleObject
VirtualQuery
VirtualAlloc
UnmapViewOfFile
SizeofResource
SetThreadLocale
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
ReadFile
OutputDebugStringA
MultiByteToWideChar
MulDiv
MapViewOfFile
LockResource
LoadResource
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GlobalUnlock
GlobalSize
GlobalLock
GlobalFree
GlobalFindAtomA
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetVersionExA
GetVersion
GetTickCount
GetThreadLocale
GetTempPathA
GetStdHandle
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameA
GetFileSize
GetFileAttributesA
GetExitCodeThread
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentThreadId
GetCurrentProcessId
GetCPInfo
FreeResource
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
FreeLibrary
FormatMessageA
FindResourceA
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumCalendarInfoA
EnterCriticalSection
DeleteFileA
DeleteCriticalSection
CreateThread
CreateFileMappingA
CreateFileA
CreateEventA
CreateDirectoryA
CompareStringA
CloseHandle
Sleep
DeleteTimerQueueTimer
CreateTimerQueueTimer
msimg32
AlphaBlend
gdi32
UnrealizeObject
TextOutA
StretchDIBits
StretchBlt
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixelV
SetPixel
SetMapMode
SetEnhMetaFileBits
SetDIBitsToDevice
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RestoreDC
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PlayEnhMetaFile
PatBlt
MoveToEx
MaskBlt
LineTo
LPtoDP
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsA
GetTextExtentPointA
GetTextExtentPoint32A
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectA
GetNearestPaletteIndex
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
GdiFlush
ExtTextOutA
ExcludeClipRect
EnumFontFamiliesExA
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateHalftonePalette
CreateFontIndirectA
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileA
BitBlt
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
ole32
CLSIDFromString
CoCreateGuid
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
ReleaseStgMedium
OleIsCurrentClipboard
OleFlushClipboard
OleGetClipboard
OleSetClipboard
DoDragDrop
RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
StgCreateDocfileOnILockBytes
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoCreateInstance
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoInitialize
IsEqualGUID
comctl32
_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_SetDragCursorImage
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
shell32
ShellExecuteA
SHGetFileInfoA
SHFileOperationA
DragQueryPoint
DragQueryFileA
DragFinish
DragAcceptFiles
SHGetPathFromIDListW
SHGetPathFromIDListA
SHGetMalloc
SHGetDesktopFolder
comdlg32
ChooseColorA
GetSaveFileNameA
GetOpenFileNameA
winmm
timeGetTime
timeGetDevCaps
timeEndPeriod
timeBeginPeriod
msacm32
acmStreamUnprepareHeader
acmStreamPrepareHeader
acmStreamConvert
acmStreamSize
acmStreamClose
acmStreamOpen
acmFormatSuggest
acmFormatChooseA
acmMetrics
CreatePlugInstance
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
28KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
84B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
73KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
312KB
Virtual Size
312KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Uninstall.exe
- IMPHASH 099c0646ea7282d232219f8807883be0
- SHA256 12e7045492b87a5d13e01d864a3c332ccf1ce60ba34331050df372694219b682
- MD5 fd2fdbd292e15656b3e571035c22cd26
- SHA1 3712c099a2679dbb6cd92c25fba4bc028f98f507
- SHA512 8c7a2adfdb447105cebf7b3e059df1bf873a46639cadca0d2050dfcf4e77931760441cb1c60ec3d1253c8f9a6f0e7c92c3d1aad2332f984cb0d7cf7cb00a7273
- SSDEEP 6144:Us+0N6/9/UdX1nEovWJikWdk8ThzebWz7:LYmeiF1zv
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
12860
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA
user32
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Name
.text
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=155, id=1, productName=Unmarked objects,
count=17, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/ILUninstall.dll
- IMPHASH d7908ee00d4ee887b3dac488dd2aa8fa
- SHA256 1720df5bf6d025e40c11032cd8f3d7f28cda87c0e28701e94b4142f54540f824
- MD5 a11d063ca9a520b882ebbe31e666fd5f
- SHA1 c8d319f9b036643f5a70824a7854006e19afdc1d
- SHA512 7a1f527a0e13d072d5a75d3df29bb05ad6a826c7c6c736fc6d85f301cc3c1b188d436cefa7d6a30c6bd7b4678969e6611cb2103133fe1a4a52eb19c0f8b79263
- SSDEEP 12288:WH7B6IU0nXXEELWMGeS9p20JXqwcWePMU:ekmXUAWMGe8pdqwcR
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
354144
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegFlushKey
RegCloseKey
user32
GetKeyboardType
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
CreateWindowExA
WindowFromPoint
WaitMessage
UpdateWindow
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoA
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExA
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetWindowLongA
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropA
SetParent
SetMenuItemInfoA
SetMenu
SetForegroundWindow
SetFocus
SetCursor
SetClassLongA
SetCapture
SetActiveWindow
SendMessageW
SendMessageA
ScrollWindow
ScreenToClient
RemovePropA
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageA
PeekMessageW
PeekMessageA
OffsetRect
OemToCharA
MessageBoxA
MapWindowPoints
MapVirtualKeyA
LoadStringA
LoadKeyboardLayoutA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageW
IsDialogMessageA
IsChild
InvalidateRect
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
GetWindowThreadProcessId
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropA
GetParent
GetWindow
GetMessagePos
GetMenuStringA
GetMenuState
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameA
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextA
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgItem
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClientRect
GetClassLongA
GetClassInfoA
GetCapture
GetActiveWindow
FrameRect
FindWindowExA
FindWindowA
FillRect
EqualRect
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
DrawTextA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawEdge
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CreatePopupMenu
CreateMenu
CreateIcon
ClientToScreen
CheckMenuItem
CallWindowProcA
CallNextHookEx
BeginPaint
CharNextA
CharLowerA
CharToOemA
AdjustWindowRectEx
ActivateKeyboardLayout
kernel32
GetACP
Sleep
VirtualFree
VirtualAlloc
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
CompareStringA
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
lstrcpyA
WriteFile
WaitForSingleObject
VirtualQuery
VirtualAlloc
SizeofResource
SetThreadLocale
SetFilePointer
SetFileAttributesA
SetEvent
SetErrorMode
SetEndOfFile
ResetEvent
RemoveDirectoryA
ReadFile
MulDiv
LockResource
LoadResource
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GlobalFree
GlobalFindAtomA
GlobalDeleteAtom
GlobalAddAtomA
GetVersionExA
GetVersion
GetTickCount
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameA
GetFileAttributesA
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentThreadId
GetCurrentProcessId
GetCPInfo
FreeResource
InterlockedExchange
FreeLibrary
FormatMessageA
FindResourceA
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumCalendarInfoA
EnterCriticalSection
DeleteFileA
DeleteCriticalSection
CreateThread
CreateFileA
CreateEventA
CompareStringA
CloseHandle
Sleep
gdi32
UnrealizeObject
StretchBlt
SetWindowOrgEx
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RestoreDC
RectVisible
RealizePalette
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetTextMetricsA
GetTextExtentPoint32A
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectA
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
ExcludeClipRect
DeleteObject
DeleteDC
CreateSolidBrush
CreatePenIndirect
CreatePalette
CreateHalftonePalette
CreateFontIndirectA
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
BitBlt
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
comctl32
_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
InitCommonControls
UninstallFiles
Name
.text
Size
339KB
Virtual Size
338KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
19KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
81B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
$PLUGINSDIR/InstallOptions.dll
- IMPHASH b1cd0d78f652ce5fc63f0879371af012
- SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
- MD5 325b008aec81e5aaa57096f05d4212b5
- SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
- SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
- SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10696
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc
user32
MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect
gdi32
SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject
shell32
SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
ole32
CoTaskMemFree
dialog
initDialog
show
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
152B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=72, id=1, productName=Unmarked objects,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=48, version=9044,
count=1, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/ioSpecial.ini
- SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
- MD5 e2d5070bc28db1ac745613689ff86067
- SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
- SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
- MD5 SHA1 SHA512
$PLUGINSDIR/modern-wizard.bmp
- SHA256 498d402163d5d4578d8e76a22c97ab927cf31bf16f7125938cf03cc200c7a290
- MD5 d08f87bb8ff9f53b90b5a148d5d3ca58
- SHA1 3474d4b9c8af736555224356e3ca0df5a52c0dc3
- SHA512 325e5ec5e6e403c263bef4689ec27a4a1bdeed7e8bedea79979abc0e8a6e7118f7697733665d4921abea78e02abcec4a7407ef6a5c6000fb01fb4fc9d9c019af
- SSDEEP 384:0Pjg8pscoYJMND08L4n7zqNY9CHTBW1KBAEpESC6+k8sC5BUfFs2eg:C3psco7LfBRpzfD8sC5BUfFs2eg
- MD5 SHA1 SHA512 SSDEEP
uninstall.fud
- SHA256 b042fa631b871af35dd0b6a672c996fac94d238e5744afac457ff7aa4a9d66ce
- MD5 9363cb3d063d49add4301f628fa9afb0
- SHA1 2a28a2b0fa8e185ffc215664d4550adc6481cad5
- SHA512 10fabd02a3f06cd32bcf852506c09d228648a93664c5e34829878d6bd95de63f4d15016189ff578c0ca0a9087ddb59680e82efc5d80767faee20d7b57c638d7d
- MD5 SHA1 SHA512
dsp_ipp.dll
- IMPHASH 7b5125d2f80f5f7947131a80c664fc60
- SHA256 2ba068e7d530cf963d85a82643b103e0c190235eca70e72a8c75aa35615e8885
- MD5 8134d79dec100c8a206af8d3241af19a
- SHA1 e8aae5ded07676b4426b51ecafbc4fabadf17883
- SHA512 644c728b4038fc1a1e94aa90941018a970d22cbd83456a6d2ddbf0678f89ec6d933b57b80388e3ea07e89b2d4d495c9760fc3ab10f9050741dafc40b56a90197
- SSDEEP 393216:T/atkuztRlG8InIBMU5w4JRizYoIhIz4F5ltwXTsqSILINb5SGUNXYDVCIUTFSh4:T/atkuztRw8InIBMU5w4JRi0oIhIz4Fc
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
38757
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
FormatMessageA
LoadLibraryA
GetThreadLocale
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteFile
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
ippFree
ippGetNumThreads
ippInitCpu
ippMalloc
ippSetDenormAreZeros
ippSetFlushToZero
ippSetNumThreads
ippiAddC_8u_AC4RSfs
ippiAddC_8u_C3IRSfs
ippiAddC_8u_C3RSfs
ippiAddC_8u_C4IRSfs
ippiAlphaCompC_8u_C3R
ippiAlphaCompC_8u_C4R
ippiAlphaComp_8u_AC4R
ippiAlphaPremul_8u_AC4IR
ippiAlphaPremul_8u_AC4R
ippiColorToGray_8u_AC4C1R
ippiColorToGray_8u_C3C1R
ippiCopyConstBorder_8u_C3R
ippiCopyConstBorder_8u_C4R
ippiCopyReplicateBorder_8u_C3R
ippiCopyReplicateBorder_8u_C4R
ippiCopy_8u_AC4C3R
ippiCopy_8u_C1C4R
ippiCopy_8u_C3AC4R
ippiCopy_8u_C3R
ippiCopy_8u_C4R
ippiCopy_8u_P3C3R
ippiFilterBox_8u_C1IR
ippiFilterBox_8u_C3IR
ippiFilterBox_8u_C3R
ippiFilterBox_8u_C4IR
ippiFilterBox_8u_C4R
ippiFilterGauss_8u_C4R
ippiFilter_8u_C4R
ippiMirror_8u_C3IR
ippiMirror_8u_C4IR
ippiMulC_8u_AC4RSfs
ippiMulC_8u_C1RSfs
ippiMulC_8u_C3IRSfs
ippiMulC_8u_C3RSfs
ippiMulC_8u_C4IRSfs
ippiMulC_8u_C4RSfs
ippiRGBToGray_8u_AC4C1R
ippiRemap_8u_C3R
ippiRemap_8u_C4R
ippiResizeCenter_8u_C3R
ippiResizeCenter_8u_C4R
ippiResizeGetBufSize
ippiResizeSqrPixelGetBufSize
ippiResizeSqrPixel_8u_C3R
ippiResizeSqrPixel_8u_C4R
ippiResize_8u_C3R
ippiResize_8u_C4R
ippiSet_8u_C3R
ippiSet_8u_C4R
ippiSubC_8u_C3IRSfs
ippiSubC_8u_C4IRSfs
ippiWarpAffineQuad_8u_C3R
ippiWarpAffineQuad_8u_C4R
ippiWarpAffine_8u_C3R
ippiWarpAffine_8u_C4R
ippiWarpBilinearQuad_8u_C3R
ippiWarpBilinearQuad_8u_C4R
ippiWarpPerspectiveQuad_8u_C3R
ippiWarpPerspectiveQuad_8u_C4R
ippsAbs_32f
ippsAbs_32f_I
ippsAbs_64f
ippsAbs_64f_I
ippsAddC_32f
ippsAddC_32f_I
ippsAddC_32fc
ippsAddC_64f
ippsAddC_64f_I
ippsAddProductC_32f
ippsAddProduct_32f
ippsAddProduct_32fc
ippsAddProduct_64f
ippsAddProduct_64fc
ippsAdd_32f
ippsAdd_32f_I
ippsAdd_64f
ippsAdd_64f_I
ippsAdd_64fc
ippsAdd_64fc_I
ippsAndC_32u_I
ippsArctan_32f_I
ippsAtan_32f_A11
ippsAtan_32f_A21
ippsAtan_32f_A24
ippsAtan_64f_A53
ippsAutoCorr_NormA_32f
ippsCbrt_32f_A11
ippsCbrt_32f_A21
ippsCbrt_32f_A24
ippsConjCcs_32fc
ippsConjCcs_32fc_I
ippsConjCcs_64fc
ippsConjCcs_64fc_I
ippsConjFlip_32fc
ippsConjFlip_64fc
ippsConjPack_32fc
ippsConjPack_32fc_I
ippsConjPack_64fc
ippsConjPack_64fc_I
ippsConjPerm_32fc
ippsConjPerm_32fc_I
ippsConjPerm_64fc
ippsConjPerm_64fc_I
ippsConj_32fc
ippsConj_32fc_I
ippsConj_64fc
ippsConj_64fc_I
ippsConvBiased_32f
ippsConvCyclic4x4_32f32fc
ippsConvCyclic8x8_32f
ippsConv_32f
ippsConv_64f
ippsConvert_16s32f
ippsConvert_16s32f_Sfs
ippsConvert_16s32s
ippsConvert_16s64f_Sfs
ippsConvert_24s32f
ippsConvert_24s32s
ippsConvert_32f16s_Sfs
ippsConvert_32f24s_Sfs
ippsConvert_32f32s_Sfs
ippsConvert_32f64f
ippsConvert_32f8u_Sfs
ippsConvert_32s16s_Sfs
ippsConvert_32s24s_Sfs
ippsConvert_32s32f
ippsConvert_32s32f_Sfs
ippsConvert_32s64f
ippsConvert_32s64f_Sfs
ippsConvert_64f32f
ippsConvert_64f32s_Sfs
ippsCopy_16s
ippsCopy_32f
ippsCopy_32s
ippsCopy_64f
ippsCopy_64s
ippsCopy_8u
ippsCos_32f_A21
ippsCos_32f_A24
ippsCos_64f_A26
ippsCos_64f_A50
ippsCos_64f_A53
ippsCplxToReal_32fc
ippsCplxToReal_64fc
ippsCrossCorr_32f
ippsDeinterleave_16s
ippsDeinterleave_32f
ippsDivCRev_32f_I
ippsDiv_32f_A11
ippsDiv_32f_A21
ippsDiv_32f_A24
ippsDiv_64f_A53
ippsExp_32f64f
ippsExp_32f_A11
ippsExp_32f_A21
ippsExp_32f_A24
ippsExp_32f_I
ippsExp_64f_A50
ippsExp_64f_A53
ippsExpm1_32f_A11
ippsExpm1_32f_A21
ippsExpm1_32f_A24
ippsFFTFree_R_32f
ippsFFTFree_R_64f
ippsFFTFwd_RToCCS_32f
ippsFFTFwd_RToCCS_32f_I
ippsFFTFwd_RToCCS_64f
ippsFFTFwd_RToCCS_64f_I
ippsFFTFwd_RToPack_32f
ippsFFTFwd_RToPack_32f_I
ippsFFTFwd_RToPack_64f
ippsFFTFwd_RToPack_64f_I
ippsFFTFwd_RToPerm_32f
ippsFFTFwd_RToPerm_32f_I
ippsFFTFwd_RToPerm_64f
ippsFFTFwd_RToPerm_64f_I
ippsFFTGetBufSize_R_32f
ippsFFTGetBufSize_R_64f
ippsFFTGetSize_R_32f
ippsFFTGetSize_R_64f
ippsFFTInitAlloc_R_32f
ippsFFTInitAlloc_R_64f
ippsFFTInit_R_32f
ippsFFTInit_R_64f
ippsFFTInv_CCSToR_32f
ippsFFTInv_CCSToR_32f_I
ippsFFTInv_CCSToR_64f
ippsFFTInv_CCSToR_64f_I
ippsFFTInv_PackToR_32f
ippsFFTInv_PackToR_32f_I
ippsFFTInv_PackToR_64f
ippsFFTInv_PackToR_64f_I
ippsFFTInv_PermToR_32f
ippsFFTInv_PermToR_32f_I
ippsFFTInv_PermToR_64f
ippsFFTInv_PermToR_64f_I
ippsFIR64f_32f
ippsFIR64f_32f_I
ippsFIRFree64f_32f
ippsFIRFree_32f
ippsFIRGenBandpass_64f
ippsFIRGenBandstop_64f
ippsFIRGenHighpass_64f
ippsFIRGenLowpass_64f
ippsFIRInitAlloc64f_32f
ippsFIRInitAlloc_32f
ippsFIRMRInitAlloc64f_32f
ippsFIRMRInitAlloc_32f
ippsFIRSetDlyLine64f_32f
ippsFIRSetDlyLine_32f
ippsFIRSetTaps64f_32f
ippsFIRSetTaps_32f
ippsFIR_32f
ippsFIR_32f_I
ippsFilterMedian_32f_I
ippsFlip_16u_I
ippsFlip_32f
ippsFlip_32f_I
ippsFlip_32fc_I
ippsFlip_64f_I
ippsIIR64f_32f
ippsIIR64f_32f_I
ippsIIRFree64f_32f
ippsIIRFree_32f
ippsIIRFree_32fc
ippsIIRGetDlyLine64f_32f
ippsIIRGetDlyLine_32f
ippsIIRGetDlyLine_32fc
ippsIIRInitAlloc64f_BiQuad_32f
ippsIIRInitAlloc_BiQuad_32f
ippsIIRInitAlloc_BiQuad_32fc
ippsIIRSetDlyLine64f_32f
ippsIIRSetDlyLine_32f
ippsIIRSetDlyLine_32fc
ippsIIRSetTaps64f_32f
ippsIIRSetTaps_32f
ippsIIRSetTaps_32fc
ippsIIR_32f
ippsIIR_32f_I
ippsIIR_32fc
ippsIIR_32fc_I
ippsImag_32fc
ippsImag_64fc
ippsInterleave_16s
ippsInterleave_32f
ippsInv_32f_A21
ippsInv_32f_A24
ippsLn_32f_A11
ippsLn_32f_A21
ippsLn_32f_A24
ippsLn_32f_I
ippsLn_64f32f
ippsLn_64f_A50
ippsLn_64f_A53
ippsLog10_32f_A11
ippsLog10_32f_A21
ippsLog10_32f_A24
ippsLog10_64f_A50
ippsLog10_64f_A53
ippsMagnitude_32fc
ippsMagnitude_64fc
ippsMaxAbs_16s
ippsMaxAbs_32s
ippsMax_16s
ippsMax_32f
ippsMax_32s
ippsMax_64f
ippsMinAbs_16s
ippsMinAbs_32s
ippsMinMax_16s
ippsMinMax_16u
ippsMinMax_32f
ippsMinMax_32s
ippsMinMax_32u
ippsMinMax_64f
ippsMinMax_8u
ippsMin_16s
ippsMin_32f
ippsMin_32s
ippsMin_64f
ippsMove_16s
ippsMove_32f
ippsMove_32s
ippsMove_64f
ippsMove_64s
ippsMove_8u
ippsMulC_32f
ippsMulC_32f_I
ippsMulC_64f
ippsMulC_64f_I
ippsMulC_64fc
ippsMulC_64fc_I
ippsMulPack_32f
ippsMulPack_32f_I
ippsMulPack_64f
ippsMulPack_64f_I
ippsMul_32f
ippsMul_32f32fc
ippsMul_32f32fc_I
ippsMul_32f_I
ippsMul_32fc
ippsMul_32fc_I
ippsMul_64f
ippsMul_64f_I
ippsMul_64fc
ippsMul_64fc_I
ippsOrC_32u_I
ippsPhase_32f
ippsPhase_32fc
ippsPhase_64f
ippsPhase_64fc
ippsPow_32f_A11
ippsPow_32f_A21
ippsPow_32f_A24
ippsPowerSpectr_32fc
ippsPowerSpectr_64fc
ippsPowx_32f_A11
ippsPowx_32f_A21
ippsPowx_32f_A24
ippsPowx_64f_A53
ippsRandGauss_Direct_32f
ippsRandGauss_Direct_64f
ippsRandUniform_Direct_32f
ippsRandUniform_Direct_64f
ippsRealToCplx_32f
ippsRealToCplx_64f
ippsReal_32fc
ippsReal_64fc
ippsSet_16s
ippsSet_16sc
ippsSet_32f
ippsSet_32fc
ippsSet_32s
ippsSet_32sc
ippsSet_64f
ippsSet_64fc
ippsSet_64s
ippsSet_64sc
ippsSet_8u
ippsSignChangeRate_32f
ippsSinC_32f64f
ippsSinC_32f_I
ippsSinC_64f_I
ippsSin_32f_A11
ippsSin_32f_A21
ippsSin_32f_A24
ippsSin_64f_A26
ippsSin_64f_A50
ippsSin_64f_A53
ippsSqr_32f
ippsSqr_32f_I
ippsSqr_64f
ippsSqr_64f_I
ippsSqrt_32f
ippsSqrt_32f_A11
ippsSqrt_32f_A21
ippsSqrt_32f_A24
ippsSqrt_32f_I
ippsSqrt_64f
ippsSqrt_64f_A50
ippsSqrt_64f_A53
ippsSqrt_64f_I
ippsSubCRev_32f
ippsSubCRev_32f_I
ippsSubCRev_64f_I
ippsSub_32f
ippsSub_32f_I
ippsSub_64f
ippsSub_64f_I
ippsSum_32f
ippsSum_64f
ippsSwapBytes_16u
ippsSwapBytes_16u_I
ippsSwapBytes_24u
ippsSwapBytes_24u_I
ippsSwapBytes_32u
ippsSwapBytes_32u_I
ippsTanh_32f_A11
ippsTanh_32f_A21
ippsTanh_32f_A24
ippsThreshold_GTAbs_32f
ippsThreshold_GTAbs_32f_I
ippsThreshold_GTVal_32f
ippsThreshold_GTVal_32f_I
ippsThreshold_GT_32f
ippsThreshold_GT_32f_I
ippsThreshold_GT_32s
ippsThreshold_GT_32s_I
ippsThreshold_GT_64f_I
ippsThreshold_LTAbs_32f
ippsThreshold_LTAbs_32f_I
ippsThreshold_LTValGTVal_32f
ippsThreshold_LTValGTVal_32f_I
ippsThreshold_LTValGTVal_32s
ippsThreshold_LTValGTVal_32s_I
ippsThreshold_LTVal_32f
ippsThreshold_LTVal_32f_I
ippsThreshold_LTVal_64f
ippsThreshold_LTVal_64f_I
ippsThreshold_LT_32f
ippsThreshold_LT_32f_I
ippsThreshold_LT_32s
ippsThreshold_LT_32s_I
ippsThreshold_LT_64f_I
ippsTone_Direct_32f
ippsTone_Direct_32fc
ippsTone_Direct_64f
ippsTriangle_Direct_32f
ippsTriangle_Direct_32fc
ippsVectorRamp_32f
ippsVectorRamp_64f
ippsVectorSlope_32f
ippsVectorSlope_32s
ippsVectorSlope_64f
ippsWinKaiser_32f_I
ippsWinKaiser_64f_I
ippsXorC_32u_I
ippsZero_16s
ippsZero_32f
ippsZero_32s
ippsZero_64f
ippsZero_64s
ippsZero_8u
Name
.text
Size
11.1MB
Virtual Size
11.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
48KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
116KB
Virtual Size
114KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=32, id=110, productName=VS2005 build 50727, version=50727,
count=111, id=109, productName=VS2005 build 50727, version=50727,
count=486, id=125, productName=VS2005 build 50727, version=50727,
count=423, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=87, id=1, productName=Unmarked objects,
count=5304, productName=Unmarked objects (old),
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
oggio.dll
- IMPHASH 984ae25a8963daafaa1da959beef6abc
- SHA256 d0541f23601367fdafcae015b979d73962c517a83c316ad3fc16ab320e12ccb5
- MD5 3845c1f909ea09c7b6f616ef5a55571e
- SHA1 64609211e0b9e183453e8ef17ba2b7612c156077
- SHA512 75465bc3c2031789e01429ced9efba748b5415ac38426dc4ed3a77541ff1cce5ac78975287cafb1f25b2de76e341f0be609532342ef3801c00cb81607df9160b
- SSDEEP 6144:vHqpqaQuiUnV3eittSnQ/uI4wQ9zTJVv2b9FH7WfkDMQIGR0CtAOa3JeDX:vHBaQuiUnwitYn6m/JVO3ekSqNtoeD
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
147320
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetLastError
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
RtlUnwind
WriteFile
GetStdHandle
GetModuleFileNameA
CloseHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapSize
MultiByteToWideChar
ReadFile
SetFilePointer
SetHandleCount
GetFileType
GetStartupInfoA
Sleep
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
RaiseException
SetConsoleCtrlHandler
LoadLibraryA
InitializeCriticalSection
CreateFileA
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
AllocConsole
LocalFree
FormatMessageA
SetEvent
ResetEvent
WaitForSingleObject
DuplicateHandle
CreateThread
CreateEventA
GetExitCodeThread
SleepEx
VirtualQuery
SetThreadAffinityMask
QueryPerformanceFrequency
GetSystemInfo
GetEnvironmentVariableA
?FlacSaveEncode@@YGJPAUTFlacSaveHandle@@PAMJ@Z
?FlacSaveFinish@@YGJPAUTFlacSaveHandle@@@Z
?FlacSaveInit@@YGJPADPAUTOggioSaveFileInfo@@PAPAUTFlacSaveHandle@@@Z
OggioFreeInfo
OggioLoadFile
OggioSaveEncode
OggioSaveFinish
OggioSaveInit
Name
.text
Size
292KB
Virtual Size
291KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
28KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=38, id=110, productName=VS2005 build 50727, version=50727,
count=2, id=42, version=8803,
count=1, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=2, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=68, id=125, productName=VS2005 build 50727, version=50727,
count=59, productName=Unmarked objects (old),
count=174, id=109, productName=VS2005 build 50727, version=50727,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=110, id=1, productName=Unmarked objects,
count=6, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
wavpackdll.dll
- IMPHASH f59ee14e51b58c2a878c5ff5cc02ded1
- SHA256 8873ebb648664ddac923eaa6834f62fc10e3590796f9289b3e692e8aefc6d07e
- MD5 a0523c8eac0136df475a5e4efe3d74a0
- SHA1 c21471b29771d11d613ae20499ffcde7b5cb29a2
- SHA512 c09525e296881fe7025568f062383156e4c9345bde84c64e1ebd4b436cf8647422f17d5ace1ef09caa19ed046c4a4d1fcf8c0292978b561bf0e24aada5a5f7b6
- SSDEEP 6144:Y3jWWH/0iKxeyYYnzi/nMnUXuJfkgSMwxraDk:WzywyXnzi/nMnUXEkX7U
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
107702
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\cygwin\home\dbryant\trunk\release\wavpackdll.pdb
kernel32
GetLastError
HeapFree
HeapAlloc
HeapReAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFileType
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetStdHandle
SetHandleCount
GetStartupInfoA
MultiByteToWideChar
ReadFile
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
CloseHandle
RtlUnwind
Sleep
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSection
LoadLibraryA
RaiseException
GetTimeZoneInformation
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
HeapSize
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
WavpackAddWrapper
WavpackAppendTagItem
WavpackCloseFile
WavpackDeleteTagItem
WavpackFlushSamples
WavpackFreeWrapper
WavpackGetAverageBitrate
WavpackGetBitsPerSample
WavpackGetBytesPerSample
WavpackGetChannelMask
WavpackGetErrorMessage
WavpackGetFileSize
WavpackGetFloatNormExp
WavpackGetInstantBitrate
WavpackGetLibraryVersion
WavpackGetLibraryVersionString
WavpackGetMD5Sum
WavpackGetMode
WavpackGetNumChannels
WavpackGetNumErrors
WavpackGetNumSamples
WavpackGetNumTagItems
WavpackGetProgress
WavpackGetRatio
WavpackGetReducedChannels
WavpackGetSampleIndex
WavpackGetSampleRate
WavpackGetTagItem
WavpackGetTagItemIndexed
WavpackGetVersion
WavpackGetWrapperBytes
WavpackGetWrapperData
WavpackGetWrapperLocation
WavpackLittleEndianToNative
WavpackLossyBlocks
WavpackNativeToLittleEndian
WavpackOpenFileInput
WavpackOpenFileInputEx
WavpackOpenFileOutput
WavpackPackInit
WavpackPackSamples
WavpackSeekSample
WavpackSeekTrailingWrapper
WavpackSetConfiguration
WavpackStoreMD5Sum
WavpackUnpackSamples
WavpackUpdateNumSamples
WavpackWriteTag
Name
.text
Size
160KB
Virtual Size
158KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=34, id=110, productName=VS2005 build 50727, version=50727,
count=22, id=125, productName=VS2005 build 50727, version=50727,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=92, id=1, productName=Unmarked objects,
count=144, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
$PLUGINSDIR/splash.bmp
- SHA256 d9d9748931fab021c18618ed4f196be47731cfa397ee3f3bc850945a18ff45a5
- MD5 64a2961133a081df36c9a30b190ba101
- SHA1 5c0801ff1773e8efc306efb22f58bb4efbca50fa
- SHA512 2684d4004b95d5d92e897c652b7dd1ab664915c9dd7a6a92fa6355dce434047e01f8cda21d48621bcde9937d377e77d5c3c61288fdfdf1b9ed0778e21e13581c
- SSDEEP 6144:u2+HTeDSCVJCvsJD9JfmV6jV836S4ElkHjFG57cFCH636fCl8hIrivJcqaivqM9M:ZKCkKvSI+B19vqM9UZ3N
- MD5 SHA1 SHA512 SSDEEP
Artwork/About.png
- SHA256 1ace4be1d35cdc29b5d218e2066f2fdb117053ba377811eb80d1882f7f909614
- MD5 a39236510697f0c7429b47f17de02bef
- SHA1 5b17ce86cdf0a0ddeeed98afb3e6c2b785a66f0e
- SHA512 631378aea071088a5629e229a54bf029407f17fb48b1957c889878ea42ae31a6bdac943f531417827255ac6927d7d289985948e0d8120d28a8527335ff1d3ad2
- SSDEEP 3072:Hdw0og2LE3jrUiBDtoziJYbKf6+zdFpi0KoqCZ7ykjsd4A55cx478:KwwsDtQV+RFpi5oqCZm2sdPz78
- MD5 SHA1 SHA512 SSDEEP
Artwork/Back.bmp
- SHA256 c51faaa8b57aea90e1b9f708cb2bf5a8193b4032d79e1333eb73742c1cd1d96e
- MD5 fdfab8a51b0fba1b2ec1e30150aaefe6
- SHA1 7fda5c4c5e628580638276b18b31ae52c8f08b5a
- SHA512 2960c34d292bbef7043df1cb0b97242e6fe57389e3548549db7ec5d5b7e17416803cbb88d94c737397d90f9bf12747386f120c911f986d650d747f37d8492f10
- SSDEEP 24576:S4T1spNNsIJZG7qs3sjssY7WjWDx3hkOMMmpVq:p
- MD5 SHA1 SHA512 SSDEEP
Artwork/Demo.bmp
- SHA256 7695cc7234b622ec49f4464290ebbeb3c0eabb59274c6a927fc8ce62f20bcff7
- MD5 a056e311302bc5ceddeff49a4f203cd3
- SHA1 d085d829910e898013b87b7f648eda3af1a90586
- SHA512 ba4549ea67947852a721710a77b281b2f25c9729f5f5c6b4d59a49d22be2de2c9015c6240e869c64a2c8beb59b95762af0779257042aadf93871dcdefcf67862
- SSDEEP 384:IuO/FIDBZZz6600xPchwqIbUAQlVrB8wMUIfFZ4ocuq:DO/Fy0qPBolVrBi7q1
- MD5 SHA1 SHA512 SSDEEP
Artwork/TB Btn.bmp
- SHA256 96cd17a9e67a968df06dc2db304c4dcf7ea4f71900ae9c543d99851a0cc933a9
- MD5 1c7f4f61af758e65a2ca0ff2ab1545b6
- SHA1 3eba4a33166031a1ca86d7c4c67bc347987c2d9f
- SHA512 cadca85280438bd716ca73f66893daf895698ff4a63b385a975eaaddc9efef633571436294dd4e5633e0436bf3db78b0749ccb9a190611ecf10e29af54c78c4d
- MD5 SHA1 SHA512
Artwork/TB PrevNextBtn.bmp
- SHA256 a597e22d07bf45cdb5b7c1581ef6659bba0aa4eb1701eb04004fdfea5ee4c215
- MD5 90a05fae66bd87a1356819a168684ea2
- SHA1 3a3aa55b591262f88ba75c05c52eed78b1ae30f7
- SHA512 ea1a547fdd8fbd30ae3b356220ac53358c2d68dfae48af403fff2359d8c1a3f6a9c6de159a82d03619c12ea192607eeaa4ee5a612ea04949d47444a53bd443ab
- MD5 SHA1 SHA512
Artwork/TB Small.bmp
- SHA256 4838b77ecc9ce9fb31028efa06bde554a7b0aadd452231ae113c031937cf8dc1
- MD5 7612a0eec1bbaab001eb34e00dd5e8ec
- SHA1 a2e3c0424a5e19ac312a3acdf28a0c6b7ed3cd8c
- SHA512 60ff19990e2e1d8125549a52b266c624b8d93ae380776a8e8b2371825f66da3f6251702935b21893163d40c6d38f84fca6242f0c253eb3708ae365d384125301
- SSDEEP 96:i8cMp/TAn0127TSaEl/5mH+MozoPAWXAS0NWIcMMgzUZiHe+kPkS2cfyRFIbAlKj:
- MD5 SHA1 SHA512 SSDEEP
Artwork/TB WP.bmp
- SHA256 c1ea9f06adf1167c35283a0b3d1e34d4902d2790d6e6d5da9027993529477703
- MD5 f430bf0a08a6996fb2722366fd5ebc47
- SHA1 68e88f7532c30722d20f7fe7f5f14a7d10a2789b
- SHA512 042b37901ec771ec1c4fa117540c86d667e113d94de0f75b316633a22bfd8b2b4e59ec35f3d6be5a414ebe103f3e544fd716ec06c40add53242ac4b557cce40b
- SSDEEP 384:YD04XE/qSsFzxD7/Y8Z5WLnocxYyWxEzhjAJi0pz:zxNmi0
- MD5 SHA1 SHA512 SSDEEP
Artwork/skin.ini
- SHA256 384c28f083e0a7016fcb26a09f15628961c41792f24165443adfd0aa7a2bdbdc
- MD5 50a8428a56d2ee9a9b7137ff7fd8c27f
- SHA1 456fe3d7817a6af401eacc3eba3b0611d9411267
- SHA512 a1c1e49250bd2777162ec32d8cbffb872a9fdc28231af76545e069f845bfa9e6b1467cec22ddb61470330e1eb72f266017ea612f0b2bd9197d8884a4c5b4abf3
- MD5 SHA1 SHA512
Data/Maps/Default.fnv
- SHA256 a8d80a3138bdc7519cb3a10c510d6162b932eaaaf87b16e908de5e560f742ef5
- MD5 507138db000737eb4c9461d5f54984c3
- SHA1 3d31f3262e135953e57260d037dbccd36f41b480
- SHA512 4c8fdf75f7a7f398441e3feebde6b4d716ac29ff81ac1fcb2a2b9d80c812407d35c0d4b0a0c2747689ffe4256d0cbbef9b281d6453310cbe0f17b0269b9cd28d
- MD5 SHA1 SHA512
Data/Maps/Env filter - asymmetry.fnv
- SHA256 0f5018572e28dc4c957487709262a13220965c43613906a8267c6c914ea91c29
- MD5 08cdafbcabef86ded1079a2d9414c182
- SHA1 796036e145f4574444c06441e2cc058c0fe1db59
- SHA512 dec6ed090c3cbaaaecd5731988d9e5ad03ddfde31fcfd970517510e71b008605a159e31d4c8c7c95fadb15833a11759c570f89bdbde83b445c8b53d7a4b164c1
- MD5 SHA1 SHA512
Data/Maps/Env filter - default.fnv
- SHA256 e1bfe87814e9aca427d33d8cd9355dd3703298077e73db610d380d37f6b0d98f
- MD5 9084258accebf0a1bacfdb0d73ad1bb8
- SHA1 ec3dc7f1306934653b228b6f0481af3234a2d621
- SHA512 15902ef402ef94862e44405dc1a44aeb341be957f66550f9dda1bdfafca84b9466f838953a1f187321500da034eca7ca12883475c9251b93848385bc2e2d9150
- MD5 SHA1 SHA512
Data/Maps/Env filter - flat.fnv
- SHA256 690959bfcbe079ce51bb37e24127de0bd3590f732bac464c86cfe6ce5d67ca38
- MD5 3c2d51f477e56b8fc854bdcb66177ab5
- SHA1 7a034863b76c7f3ac11eb54b45cac2572776a6aa
- SHA512 036cd560b47785cd8bcb630e0214dd58e9b9eeba7d75718194f6b883a38d50c3574fd53a45587681b78850c1ad838de90e36097231304fa9b89b77a0444192f4
- MD5 SHA1 SHA512
Data/Maps/Env filter - small knee.fnv
- SHA256 6f303fb90f008d80d1359199fbd208433513b6b2614e99c938e96d99038404fb
- MD5 20a360e8dfae637bc7ab5018a23c9ca7
- SHA1 96912fad8ef611b631b05e8d136f402f5d4647dc
- SHA512 507797c6b4269719faaf160db788e34e9d88d8f2895c22ef5d70879763d1b16a996108f1f403fddd900111f9eecf670cdd0f5ffec8d1ee27b8d15ff08be819b7
- MD5 SHA1 SHA512
Gross Beat.chm
- SHA256 d6c6560a7379ea4b7e413923f12714cd3777938abdb4c5c67ebe5bc2f5ed2ce0
- MD5 887bee4dc6c8f2640e3e21a9e7242529
- SHA1 5e7632e6da6a61b9660cd9b6eecfd799d415a28f
- SHA512 f2042bcb4b1a895783647899b8e7c283784f336435f0fa6ac355e735552408c2c9d9ab23ed0b3fe8c45bceb2195795ebd0b4140386f08db3848ecae501481e89
- SSDEEP 24576:a/OQ2T/gvJSEEyTELXVHNv8eLrKm/yBc/tkiw8/n81vOlce7lvI:a/fu/gsEE0+lp8e/Vae/tg8kItlvI
- MD5 SHA1 SHA512 SSDEEP
Gross Beat.chw
- SHA256 f415f6f1465056aeb3d6184624b6fe5dd559c8a89f5c4354ba363d069863d619
- MD5 56c3f13c54123878999f4442dd197dc8
- SHA1 d1e9d7eb084489af751a478425217e7cb6d94e3f
- SHA512 dd169f68a3369fb7753d30e8db9c5ed3a684d6fbd73fe79730d661cf82cfab3131da47479b349a2201ab0661e44262474b007fceacb5bcef9d62bacf786f3257
- SSDEEP 48:h4cE5sf4AQjA/f7q+ZljFZslCwTy/Vhi+piOj3yvPUUg71V2FlEClErlEl3:Xw84WZ1NwTcVhiD2Nu
- MD5 SHA1 SHA512 SSDEEP
IL Gross Beat.dll
- IMPHASH 29f9b0bb42684460fbf24e776473eb09
- SHA256 c203ef0873e711b27ea94b2628218a6a39a9e99695ae9b77a893f28c907eb575
- MD5 9aa6e6391e2e96e9218da0663eaa208f
- SHA1 19d48b1709e6be0179a0b5f448e304a43372517d
- SHA512 de2c2d1ec27a6ee1d0056613570565c0a298de47c5b0be2a7553c6ade2d3c29de474011889c02925e14cf1096df92a1913ec274c1f5c6ec8bbf7eb2835f9e7bf
- SSDEEP 49152:CiqG1E0AQxFoSJDdknXOsL+YjCQAT9SX0R:CimQ7JJhknXO5B
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1465508
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
GetErrorInfo
SysFreeString
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegFlushKey
RegCreateKeyExA
RegCloseKey
user32
GetKeyboardType
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
CreateWindowExA
wvsprintfA
WindowFromPoint
WindowFromDC
WaitMessage
ValidateRect
UpdateWindow
UnregisterClassA
UnionRect
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoA
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCursor
ShowCaret
SetWindowRgn
SetWindowsHookExA
SetWindowTextA
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetWindowLongA
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropA
SetParent
SetMenuItemInfoA
SetMenu
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardData
SetClassLongA
SetCapture
SetActiveWindow
SendMessageW
SendMessageA
ScrollWindowEx
ScrollWindow
ScreenToClient
RemovePropA
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageA
PeekMessageW
PeekMessageA
OpenClipboard
OffsetRect
OemToCharA
MsgWaitForMultipleObjects
MessageBoxA
MessageBeep
MapWindowPoints
MapVirtualKeyA
LockWindowUpdate
LoadStringA
LoadKeyboardLayoutA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageW
IsDialogMessageA
IsClipboardFormatAvailable
IsChild
InvalidateRect
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
HideCaret
GetWindowThreadProcessId
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropA
GetParent
GetWindow
GetMessagePos
GetMenuStringA
GetMenuState
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameA
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextA
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgItem
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardFormatNameA
GetClipboardData
GetClipCursor
GetClientRect
GetClassLongA
GetClassInfoA
GetCapture
GetActiveWindow
FrameRect
FindWindowA
FillRect
EqualRect
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CreatePopupMenu
CreateMenu
CreateIcon
CloseClipboard
ClientToScreen
CheckMenuItem
CallWindowProcA
CallNextHookEx
BeginPaint
AttachThreadInput
CharNextA
CharLowerBuffA
CharLowerA
CharUpperBuffA
CharToOemBuffA
CharToOemA
AdjustWindowRectEx
ActivateKeyboardLayout
kernel32
GetACP
Sleep
VirtualFree
VirtualAlloc
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringA
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
lstrcpyA
lstrcmpiA
WriteProcessMemory
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtectEx
VirtualFree
VirtualAlloc
UnmapViewOfFile
SizeofResource
SetThreadLocale
SetFilePointer
SetFileAttributesA
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
ReadFile
QueryPerformanceCounter
OutputDebugStringA
MultiByteToWideChar
MulDiv
MoveFileA
MapViewOfFile
LockResource
LoadResource
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GlobalUnlock
GlobalSize
GlobalLock
GlobalFree
GlobalFindAtomA
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetVersionExA
GetVersion
GetTickCount
GetThreadLocale
GetTempPathA
GetSystemInfo
GetStdHandle
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameA
GetFileSize
GetFileAttributesA
GetExitCodeThread
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCPInfo
FreeResource
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
FreeLibrary
FormatMessageA
FindResourceA
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumCalendarInfoA
EnterCriticalSection
DuplicateHandle
DeleteFileA
DeleteCriticalSection
CreateThread
CreateFileMappingA
CreateFileA
CreateEventA
CreateDirectoryA
CompareStringA
CloseHandle
Sleep
GetProcAddress
FreeLibrary
LoadLibraryA
DeleteTimerQueueTimer
CreateTimerQueueTimer
msimg32
AlphaBlend
gdi32
UnrealizeObject
TextOutA
StretchDIBits
StretchBlt
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixelV
SetPixel
SetPaletteEntries
SetMapMode
SetEnhMetaFileBits
SetDIBitsToDevice
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RestoreDC
ResizePalette
RemoveFontResourceA
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PlayEnhMetaFile
PatBlt
MoveToEx
MaskBlt
LineTo
LPtoDP
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsA
GetTextExtentPointA
GetTextExtentPoint32A
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectA
GetNearestPaletteIndex
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
GdiFlush
ExtTextOutA
ExcludeClipRect
EnumFontFamiliesExA
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreatePenIndirect
CreatePatternBrush
CreatePalette
CreateHalftonePalette
CreateFontIndirectA
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileA
BitBlt
AddFontResourceA
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
ole32
IsEqualGUID
CLSIDFromString
CoCreateGuid
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
ReleaseStgMedium
OleIsCurrentClipboard
OleFlushClipboard
OleGetClipboard
OleSetClipboard
DoDragDrop
RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
StgCreateDocfileOnILockBytes
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoCreateInstance
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoInitialize
IsEqualGUID
comctl32
_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_SetDragCursorImage
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
shell32
ShellExecuteA
SHGetFileInfoA
SHFileOperationA
DragQueryPoint
DragQueryFileA
DragFinish
DragAcceptFiles
SHGetPathFromIDListW
SHGetMalloc
SHGetDesktopFolder
ord18
comdlg32
ChooseColorA
GetSaveFileNameA
GetOpenFileNameA
winmm
timeGetTime
timeGetDevCaps
timeEndPeriod
timeBeginPeriod
msacm32
acmStreamUnprepareHeader
acmStreamPrepareHeader
acmStreamConvert
acmStreamMessage
acmStreamSize
acmStreamClose
acmStreamOpen
acmFormatSuggest
acmFormatChooseA
acmDriverDetailsA
acmDriverClose
acmDriverOpen
acmDriverEnum
acmMetrics
hhctrl.ocx
HtmlHelpA
VstPluginMain
main
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
733KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
93B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
86KB
Virtual Size
86KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
534KB
Virtual Size
534KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Presets/Default.fst
- SHA256 eee2325fb9a65bd394f10e40c26b3532468ad009688e3618a92ff47717312ad2
- MD5 913733b03b69e05dbac33144d07712f2
- SHA1 a0954c865520838f2fac1f583c351ab940086c14
- SHA512 0f946ec6f576ab5bb00613621e470e51e6f1ebf823f741c376262ffca74b1b45f6aa24e8ee7fddfadaa972492ba25f65441cc2fcc4b3dbab0006cc4822b84d9a
- SSDEEP 6:ci+dheaCnjy0mIn4V1NePPkpg4kpg4kpg4kpg4kpg4kpg4kpg4kpg4kpg4kpg4kK:j+dh4jy444F
- MD5 SHA1 SHA512 SSDEEP
Presets/Flanging.fst
- SHA256 bef03abb469704bca62ace71740ff94ea4f5afd5c1fbec7aba8fe0b6a35b6b0a
- MD5 5a542c1762549d6c42e8b9df448d32c0
- SHA1 b29d266715ae9b0a75ae7c8fab2393211b8697a5
- SHA512 e485a24d0cc729eb7e0ccc4a866a811d376fc9b662909990d22397fcef733e6fb26577715bcbe9e10df66dc4e9281e042e40f4ac8ce42b973edaa34fbf75b2d0
- SSDEEP 6:cyYdNdheaCn5JmIn4fc/PzXAugtgYp2hLAdbhLAsgGRUEVjTK8Gv8BB/ElnWB1lM:nYdNdh4R4fc3uhg/wV08Q67mmmV
- MD5 SHA1 SHA512 SSDEEP
Presets/Momentary.fst
- SHA256 dbcea05e57ade512556f2cad8d0600c71cecb89f3ade07b5517a23cc11032b92
- MD5 feaedf9818ed1e0e7ac4ca3d65a11dc0
- SHA1 5ba721fd7cac95d299ccdf6d9485890536f91f7b
- SHA512 e364f45bb5dd0da681303c0c8c899111518ab23fbdf8dbbf8bc66d57b5eb3013425b8535a57f20ac18c8f7e72065db26cf0687a67e5a6e61539c586da88e8da9
- SSDEEP 384:qjePXenysQKPXPsvaHWtOQQQQ1+0KAeuArdWCQapvm5VI9eq5bqLS:qj2sQKPXPsvaHWtOQQQQ1MXT9
- MD5 SHA1 SHA512 SSDEEP
Presets/Patterns.fst
- SHA256 029b7b25289d3bf28ecda6bb76e72e382ad2e30ab51e2bc11e77b2ec48f33e5a
- MD5 56da1fb683b84a8b44e91c1b10d3c33b
- SHA1 dc3923cc1911429bcd8dc173b5209361db30fe10
- SHA512 250466e17d77660f48beb56e270622d5f09c2badc4cddbc87400e1d4d8a7148cba068cccbbb947f293b9085fca78fb9fa7741fdd5f8126e85b0006d1153644f9
- SSDEEP 384:j/jLJFk0unlsQgPXPsva0IthQQQQ1u0KAeuArdWCQapvm5VI9eq5bqLa:j/jLJFWsQgPXPsva0IthQQQQ18XTB
- MD5 SHA1 SHA512 SSDEEP
Presets/Pitch shifter.fst
- SHA256 a574292041fe01cba0f747c78393e0828476087ab1fb301c0df78fd852150208
- MD5 250a8a2461e4bf92564e2be635e99c05
- SHA1 6780f262d7ac45da493f8b6a9e92fc3bd94e7162
- SHA512 6995d8ef69f7aaf4f4cf4eb57684b13465f416fc6ad4a97923898da89c9c0713f09d59531e1c11afe3af57e89b72ec0828fee10b6f03748299246e13e0f8448d
- SSDEEP 384:NzzzzzzzzzzzzzzzIIIIIIIIIIIIIIII8Ekkk+EEEEEEEEW:NzzzzzzzzzzzzzzzcEkkk+EEEEEEEEW
- MD5 SHA1 SHA512 SSDEEP
Presets/Stutter.fst
- SHA256 05c51ec46bc000da979a61ccd093e3d820629fe0711402f54973e3ac4b833fac
- MD5 0a4f63fee274faae32de3f4914609432
- SHA1 49f4891704bd9c8e146c7c2e0a6ec61c49c5741c
- SHA512 f5658e604d098bbd092182d14122ceca8dd3062c1ce9a9fb55305491251dd0492221d0e7b637af836dbf888465404ca98e11c1cea6d97fe8a572abe365409d1a
- SSDEEP 24:UCS4A4EkWIVvOwmlekGlGlD32X2KJ000ROkBVZmNQLxGKu+Rlaf:nTA4vVvrmQ1M13pvO6VkNQdG/+RI
- MD5 SHA1 SHA512 SSDEEP
Presets/Turntablist.fst
- SHA256 7a5903d238347aed4988c3b6df64c10b66b1512edfee9c1c9204a337f4a3e158
- MD5 60598b340bb3ccf45b4c4bacbc1cb616
- SHA1 0dcc07fe2cd4e06d51238b66a8e215fda39fb25c
- SHA512 5fef89e75ad98ba6f5c820a34ea52e11c6f4463b9f611f222b7e45186f41c79a8697b2321b4aad8493f4988b4cd5ed2d1dd567b15cbd0f185077b36f315389b7
- SSDEEP 96:xMov6WT6gxGQfBvdhNADTjBlL/pXYJ6ONxwixy2Mjzj40c/pXjJ6ONawixy7dj6w:d/Y/4/bh6n6HFQQQQnPXPsvgr
- MD5 SHA1 SHA512 SSDEEP
uninstall.exe
- IMPHASH 7fa974366048f9c551ef45714595665e
- SHA256 82d45f62debed77da4c768a6f827461be18852ea376928733be79539b9d3ebb4
- MD5 e4f3ddc1ac94e6703ec7a96c52dc6d53
- SHA1 316416c096a9d4a3b9c38e5fb3a5939f0f726df4
- SHA512 f707328f73f0925395ff3fc5610bc88ea124488680dffa4d8f83e2e43b9c78cd66ded113720d0dbe1e007d8bc88c0168224ad3da8a5599c4d645acb002a6e063
- SSDEEP 1536:1LXB65939tY6HBg4sXJpE90eaApbpzUR0B9u:1Lk395hYXJpfWplYuB8
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
12491
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA
user32
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Name
.text
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=155, id=1, productName=Unmarked objects,
count=17, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,