Panagement-2-FREE-2[.]8[.]0[.]exe

resource
unpack001/$PLUGINSDIR/System.dll
unpack001/$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Panagement 2.aaxplugin/Contents/x64/Auburn Sounds Panagement 2.aaxplugin

Panagement-2-FREE-2.8.0.exe

IMPHASH 573bb7b41bc641bd95c0f5eec13c233b
SHA256 c3669b6879d86c9b63f22de39a4a90fe2f9e19e02dae8097091be05f717f47fe
MD5 7afc661eae6d1c9090031a793aa09a19
SHA1 e9081f344f07b61e08956d1426c3d92a01ec509d
SHA512 9f14ccbd719db0449a92d4f88df64a0df81c0daf1e132bd172f1ce9abaf547638a877e3359865f8a946ef2576bc0859b439037cc5514677c73ba53ade174c0a2
SSDEEP 196608:omJtFhTHtOht/6ziB5pcoRHjJG1MD186603MOHLDenHz7GtmBrFslw0lw:oWlTNgCzYpRRDJG1e003trDenHzKtmB1
TLSH
T128A633A3C1C301E3CAC0A9367460A974B87EE2D9E58537C627ADB451B4CDF5F863A261
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

69:a4:11:95:c8:9a:1f:c3:ed:e7:89:71:d9:81:ca:bc:f1:26:55:fc:52:4a:65:be:af:ad:ac:a1:49:ea:04:35

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,ST=Isère,C=FR

Chains

Feb 13, 2026

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,ST=Isère,C=FR

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,ST=Isère,C=FR

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Subject

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,ST=Isère,C=FR

Serial Number

01:69:17:04:6e:c3:b6:19:9d:06:60:99:55:f0:a4:c4

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 1, 2025 - Sep 30, 2028

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Timestamp 2025,O=Asseco Data Systems S.A.,C=PL

Serial Number

9e:9c:04:f6:55:a8:b4:a7:02:6d:49:8c:6c:78:8d:aa

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 9, 2025 - Jan 7, 2036

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Serial Number

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

May 31, 2021 - Sep 17, 2029

Minor OS version

0

Major OS version

4

Entry point

13709

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW WriteFile ExitProcess GetCurrentProcess GetModuleFileNameW GetLastError GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject CopyFileW

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
TLSH
T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/modern-header.bmp

SHA256 d0fcf2b4f8d621190e00ee260abf219b6cb2247e99638df0b038c4af6b5b7f81
MD5 98a96e7e7dab282d6de957595e4e5aa9
SHA1 50cd2dcbdc9445ce58c3df67c8947decae33a7af
SHA512 335b7ee84fb1fd055df3365f65a50f57378fe71bb99bc0594bcc9812513085b705bc7f7fff941fecd3ea066915101ef1ccc48a6186eb25e34c3a0113bc77320a
SSDEEP 192:dOCN2Rmai8gP0O080egRt9uaWJ9sSriln25KVxxLvKBDiOCPDShjyDCVJlgzNcYL:oUNisiXxxLKBDiOEEA3Y6
TLSH
T198C29DED7D0DB9E87EA3566C2E1848C1B42AAEA400A776A1903DB757107E2D4DCF1DB0
MD5 SHA1 SHA512 SSDEEP TLSH

$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Panagement 2.aaxplugin/Contents/Factory Presets/Panagement 2/Auburn Sounds Panagement 2 Factory Presets/Back And Forth.tfx

SHA256 9da3b520d9aa02a55dd157ef01d67029e29f706b1281a700bf2eeb67e67e17f4
MD5 a2c34d8d5f8e2af5983ca1db43847d79
SHA1 5e0a0f6d692eff981a60d89492bb0c9d16aebdc0
SHA512 3796d132e7d32afc1d4ee73ddd38207d8e7ed0d3de13b4d76d5b96190b9cd6bf91049d65b8a8bf63fd1d82762ad9487ee2b426fed42f3a21494e1ce16818d440
TLSH
T187D09294582BF19EDA78777505A78F51C136A4105DB8197B23200A0CECC07225823A05
MD5 SHA1 SHA512 TLSH

$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Panagement 2.aaxplugin/Contents/Factory Presets/Panagement 2/Auburn Sounds Panagement 2 Factory Presets/Bass Ducking.tfx

SHA256 392efcf6e8242180e6910b24e39669dbab084f687f486274eea8d463d3e8607d
MD5 0321aab282c722669d1ff3bfe1c9d393
SHA1 1beaacc85c852f57928dfc3b4a7d4191d045569a
SHA512 0ad2c5efc559bffa1c2daed7e79b2e3c4ce4717ad0bd85262a0e79d538b27ac3520b36da38c8ace94c1a32e6b5bfb2d973ea143775fc44c0c671b9a5a73af47e
TLSH
T17DD08C80066A79BACA787379088B8E24893495022D680F3382B0421898C07220422300
MD5 SHA1 SHA512 TLSH

$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Panagement 2.aaxplugin/Contents/Factory Presets/Panagement 2/Auburn Sounds Panagement 2 Factory Presets/Concrete Tunnel.tfx

SHA256 71ff77ffdeef8c461b61aa519304dfeedd89670e672b282b65904b06850b55be
MD5 25659879de59ac33d66fd108577d93cf
SHA1 8491162db6572a963d54ca57e1ecbb2ebb4b805f
SHA512 b8a7da27dfec0ee5bf158b7b1fdc0b93abb5bf8235fa5f9158c72de3766c8182667b65cda5ded45180e3337286843b4cd4b6208d16506a8da55c2d7467310599
TLSH
T112D092A4E88AF6BED6B473B50667CE11C63088650DB86A37A2200658BCC87364532A89
MD5 SHA1 SHA512 TLSH

$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Panagement 2.aaxplugin/Contents/Factory Presets/Panagement 2/Auburn Sounds Panagement 2 Factory Presets/Default.tfx

SHA256 47ccb48c5355ccea319f0267f9ee4088a8240fa4d9ada6032d34539a2d8622b6
MD5 53c69c97b88b7835e74874a49aa1a089
SHA1 758490e089820ff3e149de4eefbad5dd43574ccd
SHA512 331b77a890332704e13f865c776fe224bb589506b58571d406eb6294bddbcf2d74259c3da4494e78c8166021a2e86375bcb695d6d5374020d7b6339647a556e5
TLSH
T1D5D09284D88A79BECAB473B502AB4F11C630C8160DB42973D110032CACC87210922A42
MD5 SHA1 SHA512 TLSH

$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Panagement 2.aaxplugin/Contents/Factory Presets/Panagement 2/Auburn Sounds Panagement 2 Factory Presets/Drums Dark Plate.tfx

SHA256 18f7b959b8c4b0a377c67bc5f2e206ba3a6eead550f4117e7836a152a257e95c
MD5 cc7013abf40995948ff99e69248f299b
SHA1 0e95ac14e6259aab823040b6e51e25c3fcac416c
SHA512 b64e48f24a1373420e707558d9ee983336c2ca1d620e36bdb45b4c2c527f581e3f0ffefb1164f85235e985f66262334f33086128127893e07aadd3f0544d0965
TLSH
T16FD02B6E980C71A6D370B3B0422B8F03C330CC060DB816375230020CFCC8F220221544
MD5 SHA1 SHA512 TLSH

$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Panagement 2.aaxplugin/Contents/Factory Presets/Panagement 2/Auburn Sounds Panagement 2 Factory Presets/Kick Illegal Reverb.tfx

SHA256 090b8ab78595276c4493b9b34d929706a771a39a69f502b5c16c184b35bc840a
MD5 484493e31b6b7b400ac9f58cb1d6861c
SHA1 9df5073d505425c25f9ad4442ff31167bae03fac
SHA512 d3ee87252c335d1221844a6fa199b5b29d1e1907f3fd3a17de90b886f961b801f04e1ee38487d03b77db18df5468955cef07e4a2e0de52066a4deb573d23dead
TLSH
T19BD09B54845935E5D575337411574F559D3194111E74177753740218FCDC6714561604
MD5 SHA1 SHA512 TLSH

$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Panagement 2.aaxplugin/Contents/Factory Presets/Panagement 2/Auburn Sounds Panagement 2 Factory Presets/Kick More Dynamics.tfx

SHA256 4c0398de5d2ee3689a01fce6bea0809994b0b1dace2648d42239b2fb58969228
MD5 f71cee42da057ca3d8d8d302ba656798
SHA1 d775234e28a386b5e8061141837f0a4ce8184089
SHA512 1fe51df0cd602cc04611a51aa18892166372767bff325f650e816473d29cef9b981cb16c6cfec2c86b54bf4dc8f84129816b0344ce77f009f09ffffb88bfb7df
TLSH
T10BD09298C46A7DAEEA34BB76511B8F22C13094150DB81A376320071D6DC97620422624
MD5 SHA1 SHA512 TLSH

$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Panagement 2.aaxplugin/Contents/Factory Presets/Panagement 2/Auburn Sounds Panagement 2 Factory Presets/Once At The Chalet.tfx

SHA256 ab3cfff4ee6cf9b5bf132e37ef3af9c2c9e5bc1e523e737870a581d9f771b4d9
MD5 32c6c5630e9a3b9d43e2cb77e58365ec
SHA1 3306121537709ce5f8e02abeaac9a6b8f7ed9bac
SHA512 1ce95f3a0673229683cda175f75ab7bec924114a7894a6ccc975b7095b78ea0f98717743759523eb9637c427453ef64de613077aeeb6d703e8dfe1903024b129
TLSH
T129D02BE6800AF1FDC1F0B37101378E01C232E8000DE44937B6100F0C6CE03110B20400
MD5 SHA1 SHA512 TLSH

$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Panagement 2.aaxplugin/Contents/Factory Presets/Panagement 2/Auburn Sounds Panagement 2 Factory Presets/Random Movement.tfx

SHA256 718dc065c144c3f19b095d99eec52c7326a97f14727d8f703ea0a0f6d389379f
MD5 03edb1904f047f4f8f4136b865a11c71
SHA1 223d03e5fd0a74de8bf50aa8fb0bb434e0321da7
SHA512 23b384aa6a9e7f85b105f414d726851ca902f01c575c368076b1746d1037bb41d8a1ed90af92720f22cf65096d6c4a1031c1908e0b156da74488b287f1b28d52
TLSH
T17AD08C2142857AAAD1B43375001F4E02C231C8200C3816379321022A2CD833E0020A50
MD5 SHA1 SHA512 TLSH

$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Panagement 2.aaxplugin/Contents/Factory Presets/Panagement 2/Auburn Sounds Panagement 2 Factory Presets/Random Pan.tfx

SHA256 f24065afdd762fabeb72666d10e0b0da6b9aa854bb92398ba6620e728db565b8
MD5 e0c9673fc2da6de1f8238db0492cdbd6
SHA1 7a0f6a39e48d59285b6a616ba3fb331461e6937b
SHA512 e10903aeedd5184b14283b1ef93ca2899069605a9b17cc3800e947a80ebfb7d16f6c88bcb0284442c5a82de56f16e2d3c14029acb1ea09d338be2492c483d3be
TLSH
T1EAD09B99D896F9AED6B07775496F8F11C331D4151C791537E360071C5CC57254423544
MD5 SHA1 SHA512 TLSH

$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Panagement 2.aaxplugin/Contents/Factory Presets/Panagement 2/Auburn Sounds Panagement 2 Factory Presets/Reverb Send Moria.tfx

SHA256 1dc0013468dacfcd379d6275c12bf2e53b8e642f34009077957e67e1a9e414eb
MD5 412d214b864ca03a78ab031cd4364bb9
SHA1 d7c2ae76888d8d389b20be4ee0e0f07785537bda
SHA512 ecc69bd938ea45d574e7b2a24f2591ebca957fbe2026602cc782b634db8b36fbcd57618998b2ca508c9fa9079888db09aac6a4fe29f591d3b5771a5eadf6c7ec
TLSH
T1EBD09BD4D44976ADC67477B7015B4F51C630C8150D6C2D379320071D5CC87110523514
MD5 SHA1 SHA512 TLSH

$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Panagement 2.aaxplugin/Contents/Factory Presets/Panagement 2/Auburn Sounds Panagement 2 Factory Presets/Reverb Send Mountain.tfx

SHA256 d0c1464c66f97b6176f06e00d9f1b74495a771f229bf432189fa7a243f9422b9
MD5 df423b79a38164977233da6295951fc3
SHA1 e0c571f2f80721e71101fc154810721c32af4615
SHA512 5b0934e6e86c8abf82734c7af285f37a61a20682562cf4f1d8e0f7a14c55b82b04153113a8107fac085172bfa9b2314eaa4cdbacc2e71e9cc3166a44d5da1965
TLSH
T132D02B90C4C5BCFDC2B03377819B4F00C230C8001C681933A220030C5CC47220423500
MD5 SHA1 SHA512 TLSH

$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Panagement 2.aaxplugin/Contents/Factory Presets/Panagement 2/Auburn Sounds Panagement 2 Factory Presets/Rolling On The Floor.tfx

SHA256 a557675adbd047b35ce23d2aaeeef48b01555c3244cb96319fbc1d323cccd327
MD5 fefe767998f9c11b3f355847158cfea7
SHA1 4d1cb0a570419f277389fb44e268723ccfa61441
SHA512 691c231b106ffa2d3dc5e978ceef56b08070a51e75077a58a3115b941a5f4c5cb865778e62366dc719163f5bab3f8b535254b209f493df3d14f898765ff0766e
TLSH
T14DD09B55A4D575BED6717335135B4F01C171D4155C70257BD514132D7CC5B350511541
MD5 SHA1 SHA512 TLSH

$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Panagement 2.aaxplugin/Contents/Factory Presets/Panagement 2/Auburn Sounds Panagement 2 Factory Presets/Vocals Goa Gate.tfx

SHA256 a5f18c349330d57f818b30dbb116e0af1db0b4dc3b295ccac0fcf1785a3ec30e
MD5 de6ba9b7ead8a442a7e821282ed719ff
SHA1 098bc6b6a337dc3c776f9d221f0824723c02669e
SHA512 bae13dc4b8e15eaa0a1db76abdbd23db42bf7052c4c793ec4f5921f72448a834e765b8765ac40790a60c6fb18cee180663e14cb795d3d5118d959a82986fe395
TLSH
T1EDD08C60A24975EDCA707339261B0E91C13084060C3508379608072CACC63260423948
MD5 SHA1 SHA512 TLSH

$PROGRAMFILES64/Common Files/Avid/Audio/Plug-Ins/Auburn Sounds Panagement 2.aaxplugin/Contents/x64/Auburn Sounds Panagement 2.aaxplugin

IMPHASH 34cf140f9b9ce1e71a8820b06bd7398b
SHA256 9b73859ac1df3f6d929c852ece4112ec6af2d38fa333710f3ac0d5d918f3d8cf
MD5 da8cb92ba59e513eb2121ac093f3c1fd
SHA1 e574439822da8eeaf4a45de829efb2c73beb9ab2
SHA512 80aa5c64f9f745d00d39b1e1c5fdb3ba3f96b0153c29fbafb0b51bc18abcf3c8f463fb91bb6c6642ec929c102dad2bb109e6c69eca23d2bc61de6107c9d371bc
SSDEEP 49152:Od03SguU4IAIc4eTcz0qPe8S5OhlCQnU6v2WwLSDyD5h+5:OdsSg/g5iCyUsDyG
TLSH
T181E5C047F59654F9C02A813842A7B726F7717C4887346ADB12A0B6293E777C02B37F68
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

1212752

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

gdi32

GetRegionData GetClipRgn DeleteObject SetDIBitsToDevice CreateRectRgn

user32

GetWindowLongPtrA DefWindowProcA DestroyWindow UnregisterClassW GetClientRect GetWindowLongW GetParent SetWindowPos GetKeyState InvalidateRect GetUpdateRgn BeginPaint GetCapture LoadCursorW CreateWindowExW ShowWindow ReleaseCapture GetAsyncKeyState TrackMouseEvent GetWindowRect GetAncestor SendMessageW DefWindowProcW EndPaint SetCapture GetMessageW TranslateMessage RegisterClassW DispatchMessageW SetFocus SetTimer GetDesktopWindow SetWindowLongPtrA

kernel32

LCMapStringW CompareStringW VirtualProtect InitializeCriticalSectionEx FlsFree FlsSetValue FlsGetValue FlsAlloc GetFileSizeEx ReadConsoleW GetConsoleMode HeapReAlloc HeapFree HeapAlloc ExitProcess SetStdHandle SetFilePointerEx GetFileType EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetProcAddress LoadLibraryA GetModuleHandleA QueryPerformanceFrequency QueryPerformanceCounter GetModuleHandleW GetModuleFileNameA FreeLibrary ResumeThread WaitForSingleObject CloseHandle GetSystemInfo CreateSemaphoreA ReleaseSemaphore GetCurrentThreadId TryEnterCriticalSection GetCurrentProcessId CreateFileW ReadFile GetLastError WriteFile GetModuleFileNameW FindNextFileW FindClose FlushFileBuffers LockFileEx GetTimeZoneInformation SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime FormatMessageW LocalFree SetLastError SetEnvironmentVariableW GetEnvironmentStringsW FreeEnvironmentStringsW GetStdHandle TerminateProcess lstrlenW ExpandEnvironmentStringsW GetCurrentProcess VirtualAlloc VirtualFree RaiseException VerSetConditionMask VerifyVersionInfoW GetExitCodeThread Sleep SwitchToThread GetCurrentThread SuspendThread GetThreadContext FreeLibraryAndExitThread GetModuleHandleExW TerminateThread InitializeCriticalSection OpenThread RtlCaptureContext GetEnvironmentVariableA SetEndOfFile GlobalMemoryStatusEx CreateEventW SetEvent GetConsoleOutputCP WideCharToMultiByte MultiByteToWideChar GetCommandLineW IsDebuggerPresent ExitThread CreateThread RtlPcToFileHeader LoadLibraryExW TlsFree GetCPInfo FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetProcessHeap GetStringTypeW HeapSize WriteConsoleW TlsSetValue TlsGetValue TlsAlloc EncodePointer InterlockedFlushSList RtlUnwindEx IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry InitializeSListHead GetSystemTimeAsFileTime RtlUnwind

shell32

ShellExecuteA

advapi32

RegQueryInfoKeyW RegFlushKey RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegOpenKeyW RegSetValueExW RegOpenKeyExW RegQueryValueExW RegCloseKey RegEnumValueW RegEnumKeyExW

ws2_32

WSAGetLastError WSAStartup WSACleanup getprotobynumber ntohs getservbyname getservbyport ntohl gethostbyname htonl gethostbyaddr inet_addr inet_ntoa WSAIoctl setsockopt recvfrom recv sendto send getsockname getpeername shutdown accept listen connect bind getsockopt ioctlsocket closesocket getprotobyname socket

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

107KB

Virtual Size

113KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

36KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.minfo

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PROGRAMFILES64/Common Files/CLAP/Auburn Sounds Panagement 2.clap

IMPHASH 296066416eb80cb7140bdd48359ea4da
SHA256 193e7d536c5f61d6704aeeef57b2f97eeeca54bcaa1a1c210304e3862b17f953
MD5 22f701c8eb1aa0d48382952d2f0fe13b
SHA1 ef879fe43151ef6b5bcfdbb7a566329fb8a7ddd7
SHA512 b5278fad336786d2f6d24451ba7ec0cac2c5e52a30914f3ba13838040232810dc78d3188a4267aa9b2145eb76b782a750075bccd07c0bb563dc6eead74b34276
SSDEEP 49152:pb6MqopnBpOFJmU8CSkFHuHbliO8S5OhlCQnU6v2WwLSDyD5F+p0M:pb65opqXw5iCyUsDyWp7
TLSH
T19AE5C046F69644F9C01AC13847A7B726F771BC48C7316ADB17A076292E777C02B37A28
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

81:0a:bb:eb:73:f9:1c:55:5e:c9:ec:0b:0f:74:ed:7c:64:56:73:17:02:32:4c:69:bc:2e:b0:63:ee:81:8f:81

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,ST=Isère,C=FR

Chains

Feb 13, 2026

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,ST=Isère,C=FR

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,ST=Isère,C=FR

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Subject

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,ST=Isère,C=FR

Serial Number

01:69:17:04:6e:c3:b6:19:9d:06:60:99:55:f0:a4:c4

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 1, 2025 - Sep 30, 2028

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Timestamp 2025,O=Asseco Data Systems S.A.,C=PL

Serial Number

9e:9c:04:f6:55:a8:b4:a7:02:6d:49:8c:6c:78:8d:aa

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 9, 2025 - Jan 7, 2036

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Serial Number

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

May 31, 2021 - Sep 17, 2029

Minor OS version

0

Major OS version

6

Entry point

1205120

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

gdi32

GetRegionData GetClipRgn DeleteObject SetDIBitsToDevice CreateRectRgn

user32

GetWindowLongPtrA DefWindowProcA DestroyWindow UnregisterClassW GetClientRect GetWindowLongW GetParent SetWindowPos GetKeyState InvalidateRect GetUpdateRgn BeginPaint LoadCursorW CreateWindowExW ShowWindow GetCapture ReleaseCapture TrackMouseEvent GetWindowRect GetAncestor SendMessageW DefWindowProcW EndPaint SetCapture GetMessageW TranslateMessage RegisterClassW DispatchMessageW SetFocus SetTimer GetDesktopWindow SetWindowLongPtrA

kernel32

LCMapStringW CompareStringW VirtualProtect InitializeCriticalSectionEx FlsFree FlsSetValue FlsGetValue FlsAlloc GetFileSizeEx ReadConsoleW GetConsoleMode HeapReAlloc HeapFree HeapAlloc ExitProcess SetStdHandle SetFilePointerEx InitializeCriticalSectionAndSpinCount DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetProcAddress LoadLibraryA GetModuleHandleA QueryPerformanceFrequency QueryPerformanceCounter GetModuleHandleW GetModuleFileNameA FreeLibrary ResumeThread WaitForSingleObject CloseHandle GetSystemInfo CreateSemaphoreA ReleaseSemaphore GetCurrentThreadId TryEnterCriticalSection GetCurrentProcessId CreateFileW ReadFile GetLastError WriteFile GetModuleFileNameW FindNextFileW FindClose FlushFileBuffers LockFileEx GetTimeZoneInformation SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime FormatMessageW LocalFree SetLastError SetEnvironmentVariableW GetEnvironmentStringsW FreeEnvironmentStringsW GetStdHandle TerminateProcess lstrlenW ExpandEnvironmentStringsW GetCurrentProcess VirtualAlloc VirtualFree RaiseException VerSetConditionMask VerifyVersionInfoW GetExitCodeThread Sleep SwitchToThread GetCurrentThread SuspendThread GetThreadContext FreeLibraryAndExitThread GetModuleHandleExW TerminateThread InitializeCriticalSection OpenThread SetEndOfFile RtlCaptureContext GetEnvironmentVariableA GlobalMemoryStatusEx CreateEventW SetEvent GetConsoleOutputCP WideCharToMultiByte MultiByteToWideChar GetCommandLineW IsDebuggerPresent GetFileType ExitThread CreateThread RtlPcToFileHeader LoadLibraryExW GetCPInfo FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetProcessHeap GetStringTypeW HeapSize WriteConsoleW TlsFree TlsSetValue TlsGetValue TlsAlloc EncodePointer InterlockedFlushSList RtlUnwindEx IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry InitializeSListHead GetSystemTimeAsFileTime RtlUnwind

shell32

ShellExecuteA

advapi32

RegQueryInfoKeyW RegFlushKey RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegOpenKeyW RegSetValueExW RegOpenKeyExW RegQueryValueExW RegCloseKey RegEnumValueW RegEnumKeyExW

ws2_32

WSAGetLastError WSAStartup WSACleanup getprotobyname ntohs getservbyname getservbyport ntohl gethostbyname htonl gethostbyaddr inet_addr inet_ntoa socket WSAIoctl setsockopt recvfrom recv sendto send getsockname getpeername shutdown accept listen connect bind getsockopt ioctlsocket getprotobynumber closesocket

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

101KB

Virtual Size

108KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

36KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.minfo

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PROGRAMFILES64/Common Files/VST3/Auburn Sounds Panagement 2-64.vst3

IMPHASH 86f8e7d0f8f7a2eef57daf465271d31b
SHA256 f4e4e266d1a19ccb9c571a71ef8983326e80ba1130a73fba0453d296b7757491
MD5 b9629c649aeb8418fac882c64378f42e
SHA1 101ceb877290e08aa03494baf1b9ecac3e645066
SHA512 06f19ab1845ae81eb53bf2c8a6157a3e3e3a3f13efcfa8fc24b518c9efe4eedb846b4622618da00ebb6c5ff823158dbc6bfca0704074d5c88eaa69a68a45dc05
SSDEEP 49152:l88fio3OVwO3QROqmgsmP8S5OhlCQnU6v2WwLSDyD5I+JG9y:l88ao3cY5iCyUsDynT
TLSH
T129E5CF47F69644F9C01AC17846A7B72AF7327C48873159DB13A0B6292E777C02F37A68
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

8b:9b:90:ce:eb:63:4d:27:25:a2:88:e2:a0:f2:f0:a1:d6:b4:ef:6d:8a:a9:8e:65:2d:77:b2:f9:29:49:77:f7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,ST=Isère,C=FR

Chains

Feb 13, 2026

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,ST=Isère,C=FR

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,ST=Isère,C=FR

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Subject

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,ST=Isère,C=FR

Serial Number

01:69:17:04:6e:c3:b6:19:9d:06:60:99:55:f0:a4:c4

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 1, 2025 - Sep 30, 2028

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Timestamp 2025,O=Asseco Data Systems S.A.,C=PL

Serial Number

9e:9c:04:f6:55:a8:b4:a7:02:6d:49:8c:6c:78:8d:aa

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 9, 2025 - Jan 7, 2036

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Serial Number

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

May 31, 2021 - Sep 17, 2029

Minor OS version

0

Major OS version

6

Entry point

1213568

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

gdi32

GetRegionData GetClipRgn DeleteObject SetDIBitsToDevice CreateRectRgn

user32

GetWindowLongPtrA DefWindowProcA DestroyWindow UnregisterClassW GetClientRect GetWindowLongW GetParent SetWindowPos GetKeyState InvalidateRect GetUpdateRgn BeginPaint LoadCursorW CreateWindowExW ShowWindow GetCapture ReleaseCapture TrackMouseEvent GetWindowRect GetAncestor SendMessageW DefWindowProcW EndPaint SetCapture GetMessageW TranslateMessage RegisterClassW DispatchMessageW SetFocus SetTimer GetDesktopWindow SetWindowLongPtrA

kernel32

LCMapStringW CompareStringW VirtualProtect InitializeCriticalSectionEx FlsFree FlsSetValue FlsGetValue FlsAlloc GetFileSizeEx ReadConsoleW GetConsoleMode HeapReAlloc HeapFree HeapAlloc ExitProcess SetStdHandle SetFilePointerEx EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetProcAddress LoadLibraryA GetModuleHandleA QueryPerformanceFrequency QueryPerformanceCounter GetModuleHandleW GetModuleFileNameA FreeLibrary ResumeThread WaitForSingleObject CloseHandle GetSystemInfo CreateSemaphoreA ReleaseSemaphore GetCurrentThreadId TryEnterCriticalSection GetCurrentProcessId CreateFileW ReadFile GetLastError WriteFile GetModuleFileNameW FindNextFileW FindClose FlushFileBuffers LockFileEx GetTimeZoneInformation SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime FormatMessageW LocalFree SetLastError SetEnvironmentVariableW GetEnvironmentStringsW FreeEnvironmentStringsW GetStdHandle TerminateProcess lstrlenW ExpandEnvironmentStringsW GetCurrentProcess VirtualAlloc VirtualFree RaiseException VerSetConditionMask VerifyVersionInfoW GetExitCodeThread Sleep SwitchToThread GetCurrentThread SuspendThread GetThreadContext FreeLibraryAndExitThread GetModuleHandleExW TerminateThread InitializeCriticalSection OpenThread SetEndOfFile RtlCaptureContext GetEnvironmentVariableA GlobalMemoryStatusEx CreateEventW SetEvent GetConsoleOutputCP WideCharToMultiByte MultiByteToWideChar GetCommandLineW IsDebuggerPresent GetFileType ExitThread CreateThread RtlPcToFileHeader LoadLibraryExW GetCPInfo FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetProcessHeap GetStringTypeW HeapSize WriteConsoleW TlsFree TlsSetValue TlsGetValue TlsAlloc EncodePointer InterlockedFlushSList RtlUnwindEx IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry InitializeSListHead GetSystemTimeAsFileTime RtlUnwind

shell32

ShellExecuteA

advapi32

RegQueryInfoKeyW RegFlushKey RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegOpenKeyW RegSetValueExW RegOpenKeyExW RegQueryValueExW RegCloseKey RegEnumValueW RegEnumKeyExW

ws2_32

WSAGetLastError WSAStartup WSACleanup getprotobyname ntohs getservbyname getservbyport ntohl gethostbyname htonl gethostbyaddr inet_addr inet_ntoa socket WSAIoctl setsockopt recvfrom recv sendto send getsockname getpeername shutdown accept listen connect bind getsockopt ioctlsocket getprotobynumber closesocket

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

103KB

Virtual Size

109KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

36KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.minfo

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$_26_/Auburn Sounds Panagement 2-64.dll

IMPHASH 665b69ecbd91a1ec198920f6f7ef4151
SHA256 b5674c9e72ca1a37d2983e53670ecb33010990cda52d9876aa36fc7765c7beb5
MD5 eca6c0b3f41c7098b93e9fb7fa8d41f6
SHA1 03397bda50192c5bb1ba6909fe0e8a882d8bbdc6
SHA512 0aa33a7bb98bafa43e331c50a028d5580f8bdd649c531fd72f0a80e771ae5dfaa7d01fefcbfb01a06a9c0ca1352d32f78dd1293666de6fde5d62f9dd56b633fe
SSDEEP 49152:4XYcmjti2uciK6ZxY/Ok8S5OhlCQnU6v2WwLSDyD5R+p6:4XLmjia5iCyUsDyGw
TLSH
T1F6E5C046F69584FCC01BC13447E7B626F7727C48C73569DB16A0B2292E76BD02B3BA24
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

5c:85:80:f6:4a:d3:31:8d:7e:44:69:30:ea:53:3c:44:e7:55:4c:c5:f1:39:bd:2d:05:05:00:b7:0f:23:8e:6e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,ST=Isère,C=FR

Chains

Feb 13, 2026

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,ST=Isère,C=FR

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,ST=Isère,C=FR

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Subject

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,ST=Isère,C=FR

Serial Number

01:69:17:04:6e:c3:b6:19:9d:06:60:99:55:f0:a4:c4

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 1, 2025 - Sep 30, 2028

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Timestamp 2025,O=Asseco Data Systems S.A.,C=PL

Serial Number

9e:9c:04:f6:55:a8:b4:a7:02:6d:49:8c:6c:78:8d:aa

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 9, 2025 - Jan 7, 2036

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Serial Number

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

May 31, 2021 - Sep 17, 2029

Minor OS version

0

Major OS version

6

Entry point

1194960

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

gdi32

GetRegionData GetClipRgn DeleteObject SetDIBitsToDevice CreateRectRgn

user32

GetWindowLongPtrA DefWindowProcA DestroyWindow UnregisterClassW GetClientRect GetWindowLongW GetParent SetWindowPos GetKeyState InvalidateRect GetUpdateRgn BeginPaint LoadCursorW CreateWindowExW ShowWindow GetCapture ReleaseCapture TrackMouseEvent GetWindowRect GetAncestor SendMessageW DefWindowProcW EndPaint SetCapture GetMessageW TranslateMessage RegisterClassW DispatchMessageW SetFocus SetTimer GetDesktopWindow SetWindowLongPtrA

kernel32

LCMapStringW CompareStringW VirtualProtect InitializeCriticalSectionEx FlsFree FlsSetValue FlsGetValue FlsAlloc GetFileSizeEx ReadConsoleW GetConsoleMode HeapReAlloc HeapFree HeapAlloc ExitProcess SetStdHandle SetFilePointerEx InitializeCriticalSectionAndSpinCount DeleteCriticalSection WaitForSingleObject EnterCriticalSection LeaveCriticalSection ReleaseSemaphore CloseHandle GetProcAddress LoadLibraryA GetModuleHandleA QueryPerformanceFrequency QueryPerformanceCounter GetModuleHandleW GetModuleFileNameA FreeLibrary ResumeThread GetSystemInfo CreateSemaphoreA GetCurrentThreadId TryEnterCriticalSection GetCurrentProcessId CreateFileW ReadFile GetLastError WriteFile GetModuleFileNameW FindNextFileW FindClose FlushFileBuffers LockFileEx GetTimeZoneInformation SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime FormatMessageW LocalFree SetLastError SetEnvironmentVariableW GetEnvironmentStringsW FreeEnvironmentStringsW GetStdHandle TerminateProcess lstrlenW ExpandEnvironmentStringsW GetCurrentProcess VirtualAlloc VirtualFree RaiseException VerSetConditionMask VerifyVersionInfoW GetExitCodeThread Sleep SwitchToThread GetCurrentThread SuspendThread GetThreadContext FreeLibraryAndExitThread GetModuleHandleExW TerminateThread InitializeCriticalSection OpenThread RtlCaptureContext GetEnvironmentVariableA SetEndOfFile GlobalMemoryStatusEx CreateEventW SetEvent GetConsoleOutputCP WideCharToMultiByte MultiByteToWideChar GetCommandLineW IsDebuggerPresent GetFileType ExitThread CreateThread RtlPcToFileHeader LoadLibraryExW GetCPInfo FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetProcessHeap GetStringTypeW HeapSize WriteConsoleW TlsFree TlsSetValue TlsGetValue TlsAlloc EncodePointer InterlockedFlushSList RtlUnwindEx IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry InitializeSListHead GetSystemTimeAsFileTime RtlUnwind

shell32

ShellExecuteA

advapi32

RegQueryInfoKeyW RegFlushKey RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegOpenKeyW RegSetValueExW RegOpenKeyExW RegQueryValueExW RegCloseKey RegEnumValueW RegEnumKeyExW

ws2_32

WSAGetLastError WSAStartup WSACleanup getprotobyname ntohs getservbyname getservbyport ntohl gethostbyname htonl gethostbyaddr inet_addr inet_ntoa socket WSAIoctl setsockopt recvfrom recv sendto send getsockname getpeername shutdown accept listen connect bind getsockopt ioctlsocket getprotobynumber closesocket

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

100KB

Virtual Size

107KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.minfo

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$_27_/Panagement 2/Panagement 2_x64.dll

IMPHASH 3d2524752d9af67f7f6b77508a80966a
SHA256 8c827d3a1c728f5fde81e710d09457ca509ecdf5b4e5e4370144b59dc9500f86
MD5 de0164fa228141e9600fd5a14723d4a5
SHA1 9f0ef0e7a841b7823911a8bb765500078abd68e6
SHA512 c16176c69aa614bceb1580fb5145ed093e24b108a72d46d222a32d2bd262d6087f85df9c3d29bc32f504c0fd8e6bcaf32f9f4f961d4c68c6edebd9927e232e04
SSDEEP 49152:/kqdCQOuMfW6+srm4rCYH74gH8S5OhlCQnU6v2WwLSDyD54+ooUhW:cgZOu+75iCyUsDyDf
TLSH
T1FFE5C046F59644FCC41B817847A7B726F7227C48C7316ADB17A0B2293E767C02B37A68
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

ec:9d:1a:e0:cd:ab:76:0e:d0:de:35:a3:ed:53:19:b4:ba:6f:09:84:3c:34:61:e7:52:cc:98:45:8e:0a:2c:0f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,ST=Isère,C=FR

Chains

Feb 13, 2026

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,ST=Isère,C=FR

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,ST=Isère,C=FR

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Subject

CN=Guillaume Piolat,O=Guillaume Piolat,L=Grenoble,ST=Isère,C=FR

Serial Number

01:69:17:04:6e:c3:b6:19:9d:06:60:99:55:f0:a4:c4

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 1, 2025 - Sep 30, 2028

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Timestamp 2025,O=Asseco Data Systems S.A.,C=PL

Serial Number

9e:9c:04:f6:55:a8:b4:a7:02:6d:49:8c:6c:78:8d:aa

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 9, 2025 - Jan 7, 2036

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Serial Number

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

May 31, 2021 - Sep 17, 2029

Minor OS version

0

Major OS version

6

Entry point

1192528

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

gdi32

GetRegionData GetClipRgn DeleteObject SetDIBitsToDevice CreateRectRgn

user32

GetWindowLongPtrA DefWindowProcA DestroyWindow UnregisterClassW GetClientRect GetWindowLongW GetParent SetWindowPos GetKeyState InvalidateRect GetUpdateRgn BeginPaint LoadCursorW CreateWindowExW ShowWindow GetCapture ReleaseCapture TrackMouseEvent GetWindowRect GetAncestor SendMessageW DefWindowProcW EndPaint SetCapture GetMessageW TranslateMessage RegisterClassW DispatchMessageW SetFocus SetTimer GetDesktopWindow SetWindowLongPtrA

kernel32

LCMapStringW CompareStringW VirtualProtect InitializeCriticalSectionEx FlsFree FlsSetValue FlsGetValue FlsAlloc GetFileSizeEx ReadConsoleW GetConsoleMode HeapReAlloc HeapFree HeapAlloc ExitProcess SetStdHandle SetFilePointerEx InitializeCriticalSectionAndSpinCount DeleteCriticalSection EnterCriticalSection LeaveCriticalSection OutputDebugStringA GetProcAddress LoadLibraryA GetModuleHandleA QueryPerformanceFrequency QueryPerformanceCounter GetModuleHandleW GetModuleFileNameA FreeLibrary ResumeThread WaitForSingleObject CloseHandle GetSystemInfo CreateSemaphoreA ReleaseSemaphore GetCurrentThreadId TryEnterCriticalSection GetCurrentProcessId CreateFileW ReadFile GetLastError WriteFile GetModuleFileNameW FindNextFileW FindClose FlushFileBuffers LockFileEx GetTimeZoneInformation SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime FormatMessageW LocalFree SetLastError SetEnvironmentVariableW GetEnvironmentStringsW FreeEnvironmentStringsW GetStdHandle TerminateProcess lstrlenW ExpandEnvironmentStringsW GetCurrentProcess VirtualAlloc VirtualFree RaiseException VerSetConditionMask VerifyVersionInfoW GetExitCodeThread Sleep SwitchToThread GetCurrentThread SuspendThread GetThreadContext FreeLibraryAndExitThread GetModuleHandleExW TerminateThread InitializeCriticalSection OpenThread SetEndOfFile RtlCaptureContext GetEnvironmentVariableA GlobalMemoryStatusEx CreateEventW SetEvent GetConsoleOutputCP WideCharToMultiByte MultiByteToWideChar GetCommandLineW IsDebuggerPresent GetFileType ExitThread CreateThread RtlPcToFileHeader LoadLibraryExW GetCPInfo FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetProcessHeap GetStringTypeW HeapSize WriteConsoleW TlsFree TlsSetValue TlsGetValue TlsAlloc EncodePointer InterlockedFlushSList RtlUnwindEx IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry InitializeSListHead GetSystemTimeAsFileTime RtlUnwind

shell32

ShellExecuteA

advapi32

RegQueryInfoKeyW RegFlushKey RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegOpenKeyW RegSetValueExW RegOpenKeyExW RegQueryValueExW RegCloseKey RegEnumValueW RegEnumKeyExW

ws2_32

WSAGetLastError WSAStartup WSACleanup getprotobyname ntohs getservbyname getservbyport ntohl gethostbyname htonl gethostbyaddr inet_addr inet_ntoa socket WSAIoctl setsockopt recvfrom recv sendto send getsockname getpeername shutdown accept listen connect bind getsockopt ioctlsocket getprotobynumber closesocket

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

101KB

Virtual Size

107KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.minfo

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$_27_/Panagement 2/Plugin.nfo

SHA256 937f51316dae2ca4b30f1791a0e2096b807411146f54b477dbf5129908f65f2f
MD5 5646a4a986d7f76dfddc510086b3f722
SHA1 805d127fb218f0d9e9e752212a48a0a6c8150c7c
SHA512 b035bc5b9002618b629d06e3ca1450a24d2f7db8c31885ec66855281dc29e9150f73db04f3922505c65c60377fe84a715310116aa20cb7d60b3ca56bb517a337
MD5 SHA1 SHA512

Sharing

General

Malware Config

Signatures

File Explorer