Easy Paint Tool SAI 2.7z
- SHA256 882e539d9d95f8cb9f3dec3311a62dc3946f9534b1f07e1fca59f161c86dccaf
Password
infected2
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/sai2.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/sai2.exe
Resource
win11-20260513-en
windows11-21h2-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/sai2.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/sai2.exe
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
Easy Paint Tool SAI 2/Tabletka/saicrack.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
Easy Paint Tool SAI 2/Tabletka/saicrack.exe
Resource
win11-20260513-en
windows11-21h2-x64
3 signatures
150 seconds
General
- Target Easy Paint Tool SAI 2.7z
- Size 5.4MB
- Sample260517-k71tlset3z
- SHA256 882e539d9d95f8cb9f3dec3311a62dc3946f9534b1f07e1fca59f161c86dccaf
- MD5 91196d2d68a5c650982ac6b8bcf76298
- SHA1 33150ab2577cd5ea086a07cc6319c12b5d7f486f
- SHA512 0bf5f484c55f8e3a4a0cd92c9061be22f27a5206f61575fb1a7ec13d5df69204a5e0ed0fd3962605b192a3a1fce314425fd34defa18b36d27f86002ce317a96a
- SSDEEP 98304:qGeMaez8/PhxrlXPt6r+VxjHeEGKlJsVUE3a/3VwOD6JdOy/yeUyCzFUfWOklAPV:hz8/JHXzVUKfs/Jt3yzFafPMsfiub
- TLSH T1A046331CAB7814F45D0EDEC2D1B3216764E3232B891D26339835AED1B4AD3A4735E6E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/sai2.exe unpack001/Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/sai2.exe unpack001/Easy Paint Tool SAI 2/Tabletka/saicrack.exe
File Explorer
-
Easy Paint Tool SAI 2.7z.7z 5.4MB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/history.txt100KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/blotmap/Blots&Noise.bmp65KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/blotmap/Blots.bmp65KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/bristle/Bristle.bmp11KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/bristle/Flat Bristle.bmp11KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/bristle/Flat Face.bmp11KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/brshape/Water Blur.bmp85KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/brshape/Water Blur.ini1KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/brushtex/Canvas.bmp257KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/brushtex/Paper.bmp257KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/papertex/Canvas.bmp257KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/papertex/Paper.bmp257KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/papertex/Water Color 1.bmp257KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/papertex/Water Color 2.bmp257KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/scatter/Stars.bmp247KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/scatter/Stars.ini3KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/sai2.exe.exe 4.8MB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/sai2.ini4KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/history.txt100KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/blotmap/Blots&Noise.bmp65KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/blotmap/Blots.bmp65KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/bristle/Bristle.bmp11KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/bristle/Flat Bristle.bmp11KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/bristle/Flat Face.bmp11KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/brshape/Water Blur.bmp85KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/brshape/Water Blur.ini1KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/brushtex/Canvas.bmp257KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/brushtex/Paper.bmp257KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/papertex/Canvas.bmp257KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/papertex/Paper.bmp257KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/papertex/Water Color 1.bmp257KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/papertex/Water Color 2.bmp257KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/scatter/Stars.bmp247KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/scatter/Stars.ini3KB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/sai2.exe.exe 5.4MB
-
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/sai2.ini4KB
-
Easy Paint Tool SAI 2/Tabletka/saicrack.exe.exe 2.7MB
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/history.txt
- SHA256 8e493906efe0a3ccae2e1929135eafb41279916634034d6194e41c27381bd385
- MD5 c79008a3f0c2ff9afddf40dfc2fb70b8
- SHA1 767bb53074ec3fc62f631e1574699474016cd374
- SHA512 adb60579f7299cd1b12884130d1e9c9e31e6213c4ff36636ba5278e52ecbe0765c95c9fec47ebc3fa231892959bc44f722c92bd3757beea56a27f490c257e4df
- SSDEEP 1536:E4N7cXg2lPksHyMLBqa2ijYx8tJc65JxtpuckLAU:E4N7/2/HyMNzjYxeJZjuckLAU
- TLSH T139A3A3167F0FA3B14273C24A9E49A18CF76544D8932F0245799CF12D1A9C8FA92BF1ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/blotmap/Blots&Noise.bmp
- SHA256 75b412bc911f85b71ab0f74648fca9d8a7b0f88bd2eb65cd9f941cc1ca87fa42
- MD5 7e313e2d7a64656ef7101d180efc2da8
- SHA1 db826e9474a163042679c667b6f51d382b09d9e8
- SHA512 e6b01b1d0b2b2209ca58129b72936086aa7ca1de5a000ea645d82aab02e07c69581f4493c5c66c6e4904b94111c494d31290768ec6427de7f00ebdf787bdca38
- SSDEEP 1536:HvOYAaAJWndc6tmZQ4ynFVZV+NrVclruBVRV7LbWETwwhSa:OfJWnDtJ4CnQOlSj7LiETwwhSa
- TLSH T1D253029781E12C3FCCC8827135D41396FAD6E4AFB6A7095A932BE0154EBE8D94DCDC42
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/blotmap/Blots.bmp
- SHA256 3a50c1123d38839112e6efdba622098138f895eeca65a13923eaa00ef5903fb1
- MD5 b953210f80206d395f79bdfc480b08ba
- SHA1 f7ca426380a6c30c1bc1d75dd4b448298d64023f
- SHA512 fc0d6e82d492009253f906b7de82859319725d843d984ad468967703c26adc0e8bd2054f696fcc53fdccb3c74266658584f08d039605097aec5837fd233c9fdf
- SSDEEP 1536:Hqwi74oFET4vYtJ9rsQ/dVk0OAAJMneZCWk72O5w:K5RE7zs4CAAuW
- TLSH T1CE53F156E3FCEC505C2F9DC6DF898989DA28A2213B5250D21232071DD1EE5A3D7BB5F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/bristle/Bristle.bmp
- SHA256 027c4b9e37a606152c90ccb5b5b0cbfeb384521ba148cbce76c35057cbd6aa30
- MD5 94b664c148da3349be48d952364b8470
- SHA1 392911d0e7d9ce22564b0d841da5146d17483858
- SHA512 90ea80c72a6d2d89020603c2d85e42625b91dba18f20aece87551d60ad5665c1c09d9a1ac665f3ec392fa3920c0cb0666d8d1e410e2fec58823a112d70e51ee4
- SSDEEP 48:hMiI11fJEGCtiQd7uc6WgCsiaVp8YOIiV:hbYfJEGPmQBBiaVvOp
- TLSH T18E427E41B010D2646A0BB51B1DBEDBBC7860FC95AEE024E734B57B4F24713669071BC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/bristle/Flat Bristle.bmp
- SHA256 dc9dc48da8eaa9f627dc5285b4700b88d827aa26a36fcf9f36a559ab9f28a650
- MD5 a762568944134e7537eb748da8776815
- SHA1 f90c2c83a06005c0925130d229681adc95cc966f
- SHA512 832bdd390cb6cee903ff127dbe54b84772a43da23928c85c4859f85f912c1fe4276c3a5f4b33e39296e282b65d42356e592ab1d33260ec2e92636adc3015558c
- SSDEEP 48:hMiI11wOLGC9iTDFN568gC3C4nMXQKIiV:hbYwOLGPtaniC4nEp
- TLSH T18442D341B01092646A0BF51B1DBEEBAC7960FC95AEE024F734B67B4F24713669031FCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/bristle/Flat Face.bmp
- SHA256 54ba8e6318a98a6caecdac4ebf8b7b5961d49edcb908523625ce9bc3c2655bf8
- MD5 fbd59be2eed3f23790801f2a264c3f33
- SHA1 74c17e8b766a116a9fe35bb70f8a0e97f2465530
- SHA512 2f55e0f1ae9cbd191d52e56d8bd8e31a944f6b3b0c843d66e921080a7dae16d6308c30087569eb098d011d49bf6bb9383735e74122abd0dc4811139195e62a22
- SSDEEP 24:Go1SyeOtPI7jaIrBiaYdCByzTVapnDs0C0kiaVyIjjcIpOt9SyU:x5xI7OElYdCByzTVapnDs0C0MVyuAIgC
- TLSH T1B142E2627010D3645208C5139DB2DBBC6B6A3F91FEE026A734B67B4F30B136690B2DC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/brshape/Water Blur.bmp
- SHA256 9a259f9b7b94c150ed37061e18cdd8eae55538181ad1afe6dfc2a90b3bdfae57
- MD5 2a797394b1beec26aca584eb35115f00
- SHA1 686d9f2531112b9db3f735a5a79b90855039beec
- SHA512 313c1a20aa627ffe31b89d1a30909ab2fd91a08a575a23496118a7f4ab57d36049eabee6e0d243f751590708f46fe9b454cd1db391ff6fccdbce0c9862e6bc36
- SSDEEP 768:JiODirMmqNwVForiaMFyrz3CK99GjiP7IDKEQA7oNDP0JTml:JjoMFGBaQkz3x99Cg1EQ0CDRl
- TLSH T1F083E7026FAC3C92D1416A3D507C34115B5D83149CB75B4B3E76A8BCFE3A6C27E16A2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/brshape/Water Blur.ini
- SHA256 77aea28c6a18d93bcd1b81f7d456cdb2cabd224efad0c8ff39518f2e2b12bde1
- MD5 e9c5a91a1f30cfdc5801fb357bc3fcad
- SHA1 725735f5de0d56a1a624d10a42f3680eb6f8f587
- SHA512 6e5beee25d1c9ba3f3e30945bd0a121f0de24c505ab05b7a6eb5965de4bb39d9ca7c0d8561c548990617f7a5c5d5dec5d49584f42b0e452b4480c45f9cf7fbdf
- TLSH T17321DE92BFABD61A350F59E01BD506598E3B2E8F1A2CBCA8349F18553351DE2C3CD710
- MD5 SHA1 SHA512 TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/brushtex/Canvas.bmp
- SHA256 56fd2208ac9082c2500b155f5dfd312b3289c53b2e5ae259d6b30e50982a5d76
- MD5 77abf38ceb44ff0d9f32f1a28106cf40
- SHA1 4384db29026828c4f7497d11a462cf9395646923
- SHA512 e3bd4c4fbf7728f389d41dcfa35d4785e77c4ea8323ed48e398a9f5706083b59c26239687308634a3e15117ebb4e78a2f433db967e013205ae3e5c04b9ba497a
- SSDEEP 6144:XzbVhha7RgCzZoLQFYq9+pkzXrudzbVhha7RgCzZoLQFYq9+pkzXru5:XzqgIoLQFYq5udzqgIoLQFYq5u5
- TLSH T1D04401692ABFD0A5048914D40CDDA2A0698DA017F627DEF71D3123F8E1E2DBF4AC1B74
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/brushtex/Paper.bmp
- SHA256 6cfc0e01583bfd0a1b1598bb954077acd3502bc5c24524132e3a17dac129137c
- MD5 3e940d47505ae20ae27a3023c1e4c5f0
- SHA1 54d857a1756f7d86beab7fdb1b136e8cd579eeac
- SHA512 4e54e9be69330ca2b35871a898ac7cc6d90c3c5b9f1b0f67b796ec3b2e0a50fe7e2633523fb3d096b0733f806f6ea7f9b380b5ebdc7f5c2d11ad2a8054d4618b
- SSDEEP 6144:9tLBKai7LLme60hsGPE5L9FUONQdY3X6Zfpv:wai72D0hsQkFUNEX4pv
- TLSH T1744402F6DB52CADD3D4258F6BD18BC727D53027CF0DA8721618A476B70A18AC468C2F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/papertex/Canvas.bmp
- SHA256 56fd2208ac9082c2500b155f5dfd312b3289c53b2e5ae259d6b30e50982a5d76
- MD5 77abf38ceb44ff0d9f32f1a28106cf40
- SHA1 4384db29026828c4f7497d11a462cf9395646923
- SHA512 e3bd4c4fbf7728f389d41dcfa35d4785e77c4ea8323ed48e398a9f5706083b59c26239687308634a3e15117ebb4e78a2f433db967e013205ae3e5c04b9ba497a
- SSDEEP 6144:XzbVhha7RgCzZoLQFYq9+pkzXrudzbVhha7RgCzZoLQFYq9+pkzXru5:XzqgIoLQFYq5udzqgIoLQFYq5u5
- TLSH T1D04401692ABFD0A5048914D40CDDA2A0698DA017F627DEF71D3123F8E1E2DBF4AC1B74
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/papertex/Paper.bmp
- SHA256 6cfc0e01583bfd0a1b1598bb954077acd3502bc5c24524132e3a17dac129137c
- MD5 3e940d47505ae20ae27a3023c1e4c5f0
- SHA1 54d857a1756f7d86beab7fdb1b136e8cd579eeac
- SHA512 4e54e9be69330ca2b35871a898ac7cc6d90c3c5b9f1b0f67b796ec3b2e0a50fe7e2633523fb3d096b0733f806f6ea7f9b380b5ebdc7f5c2d11ad2a8054d4618b
- SSDEEP 6144:9tLBKai7LLme60hsGPE5L9FUONQdY3X6Zfpv:wai72D0hsQkFUNEX4pv
- TLSH T1744402F6DB52CADD3D4258F6BD18BC727D53027CF0DA8721618A476B70A18AC468C2F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/papertex/Water Color 1.bmp
- SHA256 43a13ec4f54eff7aaa77ab2a7a292cdbe58dbccdc6d37d95a1ad1528787c7559
- MD5 eb4116fcc59605182e8c76f4bb496958
- SHA1 aca13dfd68436c4bf62c13901723f067e2b681a6
- SHA512 9279e02fbf2f437a450fccf5b03524eee4eed33c6e0d09cca4eee3015fb4f0ae714d11c12f13dd414031263282df8aecb4eaa7196674193d2d94c6c77c583dc6
- SSDEEP 6144:JEiKyTU+zvgvE6ZZ1yqB/8mByfNbL7lcP91ZlKzQuUL38Rl6dfQ:JowYvhRUbfNvpS9NxuULMRwd4
- TLSH T1704423DA40AF32C2C486BF1B7AD094E2E97D612921C8B719239C1E00B3D7DFD5A6C576
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/papertex/Water Color 2.bmp
- SHA256 7ac03b1f36bd2a0fc257f6a2302f62a97b1098130100e5a7613fa86e1849a499
- MD5 9dd71181ba3d048b1a3bcce15c2c3871
- SHA1 0c49b850b83910efcf0127cb364777e419afa8b2
- SHA512 df4b23d5280b2c0bfe28ffebb688ccb4124ab51f3db1081934553d72d1755c163d70f8dcca132cd33ccb68df3e62f70d674586c5dded782dca8082b0687544bf
- SSDEEP 6144:O10L7Y5/adMbaDOWgyGAIVWCHef4BBrvIDatYDRw22Bva:Od5/adsaaOGAiHefe7IOtn22Ra
- TLSH T1FC4423A4C9199AC66780C72A143DE4DA5F20CACD6E84FD092F2C998BBC7B573D71970C
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/scatter/Stars.bmp
- SHA256 ff8a738cfa44cd254ea25c1695195eaea696eefbbffc2f2013524c4a2f132fb7
- MD5 da037e53ba6eb77d61e6856b2ffb02d0
- SHA1 cc8e04047af2a4fce35a5852995f427080009619
- SHA512 bfa881de9c7c6b33b9f275da85c63df9fd7832d34050d7fda1bd8c3c5d2eca84e16009726c64ade122585b967c87a43dbd7ab442cc0fbee51921dd2a3b03c908
- SSDEEP 96:F/R5ZZZ0i95q+UL696bSlwTE4v5Dco3Rf6O/Tydm39zK5iDgF2ZMZ:F/R5nmi90+UL69iCwR3zrycf
- TLSH T1C044D5863141F604EA0ABA304CEBEF042DE93D552D05825D77B4F72E6DB2F06B87BA15
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/init/scatter/Stars.ini
- SHA256 96278e4f41fae2796dacc4730d072876bcf7ff42134b262a9738d7c868a8717f
- MD5 4b20c575d361135f36a6e8627f814ddc
- SHA1 93bfd5b9197fa9cc452d83a86c1715f30494ec87
- SHA512 7f7a0b90929cefb67fcbcd8bf462783899dcce50d5ac61beb882a905c9a6bc276662d7e87821687f07c2855e73a76b17bb52b631f18b2ab31863d90b1c64afef
- TLSH T176710251EFABD60A700FC8E51BD54955DE776A8F5A2CBCA8328E05693312DA2C3DE700
- MD5 SHA1 SHA512 TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/sai2.exe
- IMPHASH 22f81497ed25230e9f1fb8f8f474cc67
- SHA256 6fbccbdd23de9fca046d3d879f67c5ed7ed16df18714dfad201ba85662c93053
- MD5 58ff1f8ca642143ff5959b8e6ac7f960
- SHA1 f339aba119c39fece64fbe1aa0e5b2c3347ed8bc
- SHA512 2e4c687c7f0e3d0c4871631f4c1466f1be9b4695809477d10053244376cdf82666597b0b8a00eb9cc305a2b800b578f1c0b48bb01f6abe5a2b25fefede0b7660
- SSDEEP 49152:N1j290lPcYHeKABXvYAQsPifqVlKC+LZww1A3Its47rR4WHrxsT+:N1js0lPeKABXvYTsafnj8NWHNl
- TLSH T1433694016A48CC52F1171130F66C6BAE1EB46C890355E1CB27697F49FAF39C0AE76EB4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected2
Minor OS version
1
Major OS version
5
Entry point
1890666
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
SystemTimeToFileTime
FlushFileBuffers
WriteFile
SetFilePointerEx
ReadFile
GetFileSizeEx
DeleteFileW
CreateFileW
Sleep
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
FileTimeToSystemTime
GetFileAttributesW
CompareFileTime
CompareStringW
GetPrivateProfileIntW
ReleaseSemaphore
GlobalAlloc
GlobalFree
LocalAlloc
LocalFree
FileTimeToLocalFileTime
SwitchToThread
CopyFileW
GetPrivateProfileStringW
CreateMutexW
GetProcAddress
CloseHandle
GetDiskFreeSpaceExW
GetCurrentProcess
GetSystemTime
WriteConsoleW
SetStdHandle
GetConsoleMode
GetConsoleCP
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetLocaleInfoW
SetPriorityClass
GlobalLock
GlobalUnlock
GetCurrentThreadId
GetCurrentThread
SetThreadPriority
GetTickCount
GetLastError
WaitForSingleObject
GetUserDefaultLCID
HeapReAlloc
HeapSize
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
ExitProcess
GetStringTypeW
WideCharToMultiByte
MultiByteToWideChar
WaitForMultipleObjects
ResetEvent
lstrlenA
SetEvent
EnterCriticalSection
LeaveCriticalSection
HeapCreate
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
VirtualAlloc
VirtualFree
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
VirtualQuery
FreeLibrary
SetFilePointer
GetFileSize
FormatMessageW
LoadLibraryW
RaiseException
Module32NextW
Module32FirstW
CreateToolhelp32Snapshot
GetCurrentProcessId
GlobalMemoryStatusEx
SetThreadAffinityMask
GetProcessAffinityMask
SetThreadIdealProcessor
SuspendThread
ResumeThread
CreateEventW
CreateSemaphoreW
GetModuleFileNameW
GetCommandLineW
GetModuleHandleW
DeviceIoControl
GetVolumeNameForVolumeMountPointW
GetVolumePathNameW
GetFileTime
SetFileTime
SetEndOfFile
FlushViewOfFile
SetLastError
MoveFileExW
CreateDirectoryW
RemoveDirectoryW
FindClose
FindNextFileW
FindFirstFileW
GetDriveTypeW
GetEnvironmentVariableW
OutputDebugStringW
DebugBreak
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimeAsFileTime
GetVersionExW
GetCPInfo
GetSystemInfo
HeapFree
RtlUnwind
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
VirtualProtect
ExitThread
CreateThread
InterlockedDecrement
InterlockedIncrement
IsProcessorFeaturePresent
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
LCMapStringW
UnhandledExceptionFilter
user32
LoadCursorW
GetAncestor
PeekMessageW
DefWindowProcW
SetWindowLongW
GetSystemMenu
MoveWindow
SystemParametersInfoW
GetWindowRect
AdjustWindowRectEx
CreateWindowExW
GetSystemMetrics
DrawTextW
FillRect
GetWindowLongW
UpdateWindow
EnableWindow
RegisterClassExW
GetSysColor
RedrawWindow
MapWindowPoints
SetLayeredWindowAttributes
FrameRect
GetClientRect
GetPropW
SetPropW
MonitorFromWindow
CreatePopupMenu
SetMenuInfo
CreateMenu
GetScrollPos
SetScrollInfo
GetScrollRange
SetScrollRange
SetScrollPos
GetMenuItemInfoW
GetMenuItemCount
EnableMenuItem
SetMenuItemInfoW
CheckMenuItem
ClientToScreen
PostThreadMessageW
SetWindowRgn
GetMonitorInfoW
MonitorFromRect
IsZoomed
GetWindowTextW
SetWindowTextW
IsWindowEnabled
EnumThreadWindows
GetWindowThreadProcessId
GetCursorPos
WindowFromPoint
SetCapture
GetMessageExtraInfo
EnumChildWindows
SetWindowPlacement
SetParent
ScrollWindowEx
LoadIconW
DestroyIcon
SendInput
GetClassLongW
LoadImageW
mouse_event
MessageBoxW
DeferWindowPos
EndDeferWindowPos
BeginDeferWindowPos
SetCaretPos
ShowCaret
CreateCaret
DestroyCaret
HideCaret
CreateIconIndirect
WaitMessage
GetDlgCtrlID
IsChild
GetKeyState
GetNextDlgTabItem
DestroyMenu
GetWindowDC
ReleaseDC
GetWindowPlacement
SetCursor
SetWindowPos
MessageBeep
GetParent
SetActiveWindow
BeginPaint
EndPaint
RegisterClipboardFormatW
SetFocus
ShowWindow
ReplyMessage
SetForegroundWindow
GetMenuInfo
IsIconic
ReleaseCapture
DestroyWindow
PostQuitMessage
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardData
CloseClipboard
IsClipboardFormatAvailable
DeleteMenu
AppendMenuW
InsertMenuItemW
GetFocus
SendMessageW
GetAsyncKeyState
SetTimer
KillTimer
GetCapture
GetMessageW
TranslateMessage
DispatchMessageW
PostMessageW
DrawIconEx
ScreenToClient
wsprintfW
GetDC
ChildWindowFromPointEx
GetDlgItem
gdi32
CreateRectRgn
BitBlt
ExtSelectClipRgn
OffsetClipRgn
SelectClipRgn
DeleteDC
DeleteObject
LineTo
MoveToEx
CreatePen
Arc
CreateSolidBrush
SelectObject
GetTextExtentExPointW
CreateDIBSection
CreateCompatibleBitmap
GetCurrentObject
CreateCompatibleDC
SetTextColor
GetDeviceCaps
GetCharacterPlacementW
GetGlyphOutlineW
GetTextExtentPoint32W
ExtTextOutW
GetTextMetricsW
CreateFontIndirectW
CreateRectRgnIndirect
ExtCreateRegion
CombineRgn
GetRegionData
CreateBitmap
CreateDIBitmap
EnumFontFamiliesExW
GetStockObject
RectVisible
SetBkMode
GetObjectW
SetBkColor
SetDIBitsToDevice
comdlg32
GetOpenFileNameW
GetSaveFileNameW
shell32
SHGetDesktopFolder
SHBrowseForFolderW
SHGetPathFromIDListW
ord21
CommandLineToArgvW
SHGetSettings
SHGetFileInfoW
DragQueryFileW
DragFinish
DragAcceptFiles
SHFileOperationW
SHGetSpecialFolderPathW
SHGetDataFromIDListW
SHGetSpecialFolderLocation
ole32
CoTaskMemFree
StringFromIID
CoCreateInstance
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoUninitialize
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
ReleaseStgMedium
OleDuplicateData
RegisterDragDrop
RevokeDragDrop
DoDragDrop
imm32
ImmNotifyIME
ImmGetCompositionStringW
ImmGetContext
ImmSetCompositionFontW
ImmSetCompositionWindow
ImmReleaseContext
ImmAssociateContext
ImmAssociateContextEx
comctl32
ImageList_GetIconSize
ImageList_GetIcon
shlwapi
PathCanonicalizeW
PathIsRelativeW
StrRetToBufW
rpcrt4
UuidCreate
advapi32
EqualSid
RegOpenKeyExW
RegCloseKey
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
FreeSid
RegQueryValueExW
RegCreateKeyExW
oleaut32
SysFreeString
VariantInit
VariantClear
SysAllocString
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.code
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
259KB
Virtual Size
258KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
330KB
Virtual Size
476KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.shared
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.appskin
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.srclibs
Size
437KB
Virtual Size
436KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
169KB
Virtual Size
168KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=152, version=20115,
count=56, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=28, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=25, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=378, id=1, productName=Unmarked objects,
count=62, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=298, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=124, productName=Unmarked objects (old),
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=151,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/sai2.ini
- SHA256 ebb0168868d0a53034a9b436f5a42034a8fd78ceadcc64c510195e7962959670
- MD5 cf2500efc3a5fcf450a510ca207ddf5e
- SHA1 5c7961b09ea1bbfbb85a3caa0cbcb4dcd9eec635
- SHA512 81d77c4a168013ba0b64c5835931c749f04ed6bd8da0d8b1e7991bfc9045aad5706964682df80f58128adc7d23ea54e3fda08466490c73193bb9ad1d9f1eeb83
- SSDEEP 96:r3SQXxaRIkRf6xaRIVmSE51lf6xaRIeoxYbxaRITUD0/m:7auWkauVTGtkauxSauTU4m
- TLSH T14C912A8226F98108F2F7BF456BBA19704B36BC95BD3CCE5C2185054D4AF1E50E972BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/history.txt
- SHA256 8e493906efe0a3ccae2e1929135eafb41279916634034d6194e41c27381bd385
- MD5 c79008a3f0c2ff9afddf40dfc2fb70b8
- SHA1 767bb53074ec3fc62f631e1574699474016cd374
- SHA512 adb60579f7299cd1b12884130d1e9c9e31e6213c4ff36636ba5278e52ecbe0765c95c9fec47ebc3fa231892959bc44f722c92bd3757beea56a27f490c257e4df
- SSDEEP 1536:E4N7cXg2lPksHyMLBqa2ijYx8tJc65JxtpuckLAU:E4N7/2/HyMNzjYxeJZjuckLAU
- TLSH T139A3A3167F0FA3B14273C24A9E49A18CF76544D8932F0245799CF12D1A9C8FA92BF1ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/blotmap/Blots&Noise.bmp
- SHA256 75b412bc911f85b71ab0f74648fca9d8a7b0f88bd2eb65cd9f941cc1ca87fa42
- MD5 7e313e2d7a64656ef7101d180efc2da8
- SHA1 db826e9474a163042679c667b6f51d382b09d9e8
- SHA512 e6b01b1d0b2b2209ca58129b72936086aa7ca1de5a000ea645d82aab02e07c69581f4493c5c66c6e4904b94111c494d31290768ec6427de7f00ebdf787bdca38
- SSDEEP 1536:HvOYAaAJWndc6tmZQ4ynFVZV+NrVclruBVRV7LbWETwwhSa:OfJWnDtJ4CnQOlSj7LiETwwhSa
- TLSH T1D253029781E12C3FCCC8827135D41396FAD6E4AFB6A7095A932BE0154EBE8D94DCDC42
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/blotmap/Blots.bmp
- SHA256 3a50c1123d38839112e6efdba622098138f895eeca65a13923eaa00ef5903fb1
- MD5 b953210f80206d395f79bdfc480b08ba
- SHA1 f7ca426380a6c30c1bc1d75dd4b448298d64023f
- SHA512 fc0d6e82d492009253f906b7de82859319725d843d984ad468967703c26adc0e8bd2054f696fcc53fdccb3c74266658584f08d039605097aec5837fd233c9fdf
- SSDEEP 1536:Hqwi74oFET4vYtJ9rsQ/dVk0OAAJMneZCWk72O5w:K5RE7zs4CAAuW
- TLSH T1CE53F156E3FCEC505C2F9DC6DF898989DA28A2213B5250D21232071DD1EE5A3D7BB5F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/bristle/Bristle.bmp
- SHA256 027c4b9e37a606152c90ccb5b5b0cbfeb384521ba148cbce76c35057cbd6aa30
- MD5 94b664c148da3349be48d952364b8470
- SHA1 392911d0e7d9ce22564b0d841da5146d17483858
- SHA512 90ea80c72a6d2d89020603c2d85e42625b91dba18f20aece87551d60ad5665c1c09d9a1ac665f3ec392fa3920c0cb0666d8d1e410e2fec58823a112d70e51ee4
- SSDEEP 48:hMiI11fJEGCtiQd7uc6WgCsiaVp8YOIiV:hbYfJEGPmQBBiaVvOp
- TLSH T18E427E41B010D2646A0BB51B1DBEDBBC7860FC95AEE024E734B57B4F24713669071BC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/bristle/Flat Bristle.bmp
- SHA256 dc9dc48da8eaa9f627dc5285b4700b88d827aa26a36fcf9f36a559ab9f28a650
- MD5 a762568944134e7537eb748da8776815
- SHA1 f90c2c83a06005c0925130d229681adc95cc966f
- SHA512 832bdd390cb6cee903ff127dbe54b84772a43da23928c85c4859f85f912c1fe4276c3a5f4b33e39296e282b65d42356e592ab1d33260ec2e92636adc3015558c
- SSDEEP 48:hMiI11wOLGC9iTDFN568gC3C4nMXQKIiV:hbYwOLGPtaniC4nEp
- TLSH T18442D341B01092646A0BF51B1DBEEBAC7960FC95AEE024F734B67B4F24713669031FCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/bristle/Flat Face.bmp
- SHA256 54ba8e6318a98a6caecdac4ebf8b7b5961d49edcb908523625ce9bc3c2655bf8
- MD5 fbd59be2eed3f23790801f2a264c3f33
- SHA1 74c17e8b766a116a9fe35bb70f8a0e97f2465530
- SHA512 2f55e0f1ae9cbd191d52e56d8bd8e31a944f6b3b0c843d66e921080a7dae16d6308c30087569eb098d011d49bf6bb9383735e74122abd0dc4811139195e62a22
- SSDEEP 24:Go1SyeOtPI7jaIrBiaYdCByzTVapnDs0C0kiaVyIjjcIpOt9SyU:x5xI7OElYdCByzTVapnDs0C0MVyuAIgC
- TLSH T1B142E2627010D3645208C5139DB2DBBC6B6A3F91FEE026A734B67B4F30B136690B2DC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/brshape/Water Blur.bmp
- SHA256 9a259f9b7b94c150ed37061e18cdd8eae55538181ad1afe6dfc2a90b3bdfae57
- MD5 2a797394b1beec26aca584eb35115f00
- SHA1 686d9f2531112b9db3f735a5a79b90855039beec
- SHA512 313c1a20aa627ffe31b89d1a30909ab2fd91a08a575a23496118a7f4ab57d36049eabee6e0d243f751590708f46fe9b454cd1db391ff6fccdbce0c9862e6bc36
- SSDEEP 768:JiODirMmqNwVForiaMFyrz3CK99GjiP7IDKEQA7oNDP0JTml:JjoMFGBaQkz3x99Cg1EQ0CDRl
- TLSH T1F083E7026FAC3C92D1416A3D507C34115B5D83149CB75B4B3E76A8BCFE3A6C27E16A2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/brshape/Water Blur.ini
- SHA256 77aea28c6a18d93bcd1b81f7d456cdb2cabd224efad0c8ff39518f2e2b12bde1
- MD5 e9c5a91a1f30cfdc5801fb357bc3fcad
- SHA1 725735f5de0d56a1a624d10a42f3680eb6f8f587
- SHA512 6e5beee25d1c9ba3f3e30945bd0a121f0de24c505ab05b7a6eb5965de4bb39d9ca7c0d8561c548990617f7a5c5d5dec5d49584f42b0e452b4480c45f9cf7fbdf
- TLSH T17321DE92BFABD61A350F59E01BD506598E3B2E8F1A2CBCA8349F18553351DE2C3CD710
- MD5 SHA1 SHA512 TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/brushtex/Canvas.bmp
- SHA256 56fd2208ac9082c2500b155f5dfd312b3289c53b2e5ae259d6b30e50982a5d76
- MD5 77abf38ceb44ff0d9f32f1a28106cf40
- SHA1 4384db29026828c4f7497d11a462cf9395646923
- SHA512 e3bd4c4fbf7728f389d41dcfa35d4785e77c4ea8323ed48e398a9f5706083b59c26239687308634a3e15117ebb4e78a2f433db967e013205ae3e5c04b9ba497a
- SSDEEP 6144:XzbVhha7RgCzZoLQFYq9+pkzXrudzbVhha7RgCzZoLQFYq9+pkzXru5:XzqgIoLQFYq5udzqgIoLQFYq5u5
- TLSH T1D04401692ABFD0A5048914D40CDDA2A0698DA017F627DEF71D3123F8E1E2DBF4AC1B74
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/brushtex/Paper.bmp
- SHA256 6cfc0e01583bfd0a1b1598bb954077acd3502bc5c24524132e3a17dac129137c
- MD5 3e940d47505ae20ae27a3023c1e4c5f0
- SHA1 54d857a1756f7d86beab7fdb1b136e8cd579eeac
- SHA512 4e54e9be69330ca2b35871a898ac7cc6d90c3c5b9f1b0f67b796ec3b2e0a50fe7e2633523fb3d096b0733f806f6ea7f9b380b5ebdc7f5c2d11ad2a8054d4618b
- SSDEEP 6144:9tLBKai7LLme60hsGPE5L9FUONQdY3X6Zfpv:wai72D0hsQkFUNEX4pv
- TLSH T1744402F6DB52CADD3D4258F6BD18BC727D53027CF0DA8721618A476B70A18AC468C2F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/papertex/Canvas.bmp
- SHA256 56fd2208ac9082c2500b155f5dfd312b3289c53b2e5ae259d6b30e50982a5d76
- MD5 77abf38ceb44ff0d9f32f1a28106cf40
- SHA1 4384db29026828c4f7497d11a462cf9395646923
- SHA512 e3bd4c4fbf7728f389d41dcfa35d4785e77c4ea8323ed48e398a9f5706083b59c26239687308634a3e15117ebb4e78a2f433db967e013205ae3e5c04b9ba497a
- SSDEEP 6144:XzbVhha7RgCzZoLQFYq9+pkzXrudzbVhha7RgCzZoLQFYq9+pkzXru5:XzqgIoLQFYq5udzqgIoLQFYq5u5
- TLSH T1D04401692ABFD0A5048914D40CDDA2A0698DA017F627DEF71D3123F8E1E2DBF4AC1B74
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/papertex/Paper.bmp
- SHA256 6cfc0e01583bfd0a1b1598bb954077acd3502bc5c24524132e3a17dac129137c
- MD5 3e940d47505ae20ae27a3023c1e4c5f0
- SHA1 54d857a1756f7d86beab7fdb1b136e8cd579eeac
- SHA512 4e54e9be69330ca2b35871a898ac7cc6d90c3c5b9f1b0f67b796ec3b2e0a50fe7e2633523fb3d096b0733f806f6ea7f9b380b5ebdc7f5c2d11ad2a8054d4618b
- SSDEEP 6144:9tLBKai7LLme60hsGPE5L9FUONQdY3X6Zfpv:wai72D0hsQkFUNEX4pv
- TLSH T1744402F6DB52CADD3D4258F6BD18BC727D53027CF0DA8721618A476B70A18AC468C2F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/papertex/Water Color 1.bmp
- SHA256 43a13ec4f54eff7aaa77ab2a7a292cdbe58dbccdc6d37d95a1ad1528787c7559
- MD5 eb4116fcc59605182e8c76f4bb496958
- SHA1 aca13dfd68436c4bf62c13901723f067e2b681a6
- SHA512 9279e02fbf2f437a450fccf5b03524eee4eed33c6e0d09cca4eee3015fb4f0ae714d11c12f13dd414031263282df8aecb4eaa7196674193d2d94c6c77c583dc6
- SSDEEP 6144:JEiKyTU+zvgvE6ZZ1yqB/8mByfNbL7lcP91ZlKzQuUL38Rl6dfQ:JowYvhRUbfNvpS9NxuULMRwd4
- TLSH T1704423DA40AF32C2C486BF1B7AD094E2E97D612921C8B719239C1E00B3D7DFD5A6C576
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/papertex/Water Color 2.bmp
- SHA256 7ac03b1f36bd2a0fc257f6a2302f62a97b1098130100e5a7613fa86e1849a499
- MD5 9dd71181ba3d048b1a3bcce15c2c3871
- SHA1 0c49b850b83910efcf0127cb364777e419afa8b2
- SHA512 df4b23d5280b2c0bfe28ffebb688ccb4124ab51f3db1081934553d72d1755c163d70f8dcca132cd33ccb68df3e62f70d674586c5dded782dca8082b0687544bf
- SSDEEP 6144:O10L7Y5/adMbaDOWgyGAIVWCHef4BBrvIDatYDRw22Bva:Od5/adsaaOGAiHefe7IOtn22Ra
- TLSH T1FC4423A4C9199AC66780C72A143DE4DA5F20CACD6E84FD092F2C998BBC7B573D71970C
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/scatter/Stars.bmp
- SHA256 ff8a738cfa44cd254ea25c1695195eaea696eefbbffc2f2013524c4a2f132fb7
- MD5 da037e53ba6eb77d61e6856b2ffb02d0
- SHA1 cc8e04047af2a4fce35a5852995f427080009619
- SHA512 bfa881de9c7c6b33b9f275da85c63df9fd7832d34050d7fda1bd8c3c5d2eca84e16009726c64ade122585b967c87a43dbd7ab442cc0fbee51921dd2a3b03c908
- SSDEEP 96:F/R5ZZZ0i95q+UL696bSlwTE4v5Dco3Rf6O/Tydm39zK5iDgF2ZMZ:F/R5nmi90+UL69iCwR3zrycf
- TLSH T1C044D5863141F604EA0ABA304CEBEF042DE93D552D05825D77B4F72E6DB2F06B87BA15
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/init/scatter/Stars.ini
- SHA256 96278e4f41fae2796dacc4730d072876bcf7ff42134b262a9738d7c868a8717f
- MD5 4b20c575d361135f36a6e8627f814ddc
- SHA1 93bfd5b9197fa9cc452d83a86c1715f30494ec87
- SHA512 7f7a0b90929cefb67fcbcd8bf462783899dcce50d5ac61beb882a905c9a6bc276662d7e87821687f07c2855e73a76b17bb52b631f18b2ab31863d90b1c64afef
- TLSH T176710251EFABD60A700FC8E51BD54955DE776A8F5A2CBCA8328E05693312DA2C3DE700
- MD5 SHA1 SHA512 TLSH
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/sai2.exe
- IMPHASH f1ce125a852d7c970032c568a2a63b0c
- SHA256 f034c8be9ec62d768d0b363cd53df696a63958b9ea8f9191eaf9d08f084fd8f3
- MD5 bd60d6750ef57668f9bc44eb98d992c4
- SHA1 f23d3d7ee1d358a7495a8bb42206b732487d14b9
- SHA512 5060917c7afed420d1358a75016b90c1cf5c7099c98109e4a2fd8f7b1a5ce8ab415fff79f8ea620acf0dac10882606e817d11a93f5c45fc9ac5691a5a9c334e4
- SSDEEP 49152:ulsjbSFcuzEflm9Xs4QsG1TxK1eQiLqBGoTt29aTIpA9Ut+ZTbd6ct:ulsv2rXPiL9a1hd6C
- TLSH T1A346A541665888C6E0276130F55C676E6BB07C890351D2CB2765BF09BEF3AD0AE76FB0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected2
Minor OS version
2
Major OS version
5
Entry point
2157860
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\MyProjectsVS2010\SYSTEMAX\sai2-branch\bin64\sai2.pdb
kernel32
SystemTimeToFileTime
FlushFileBuffers
WriteFile
SetFilePointerEx
ReadFile
GetFileSizeEx
DeleteFileW
CreateFileW
Sleep
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
FileTimeToSystemTime
GetFileAttributesW
CompareFileTime
CompareStringW
GetPrivateProfileIntW
ReleaseSemaphore
GlobalAlloc
GlobalFree
LocalAlloc
LocalFree
FileTimeToLocalFileTime
SwitchToThread
CopyFileW
GetPrivateProfileStringW
CreateMutexW
GetProcAddress
CloseHandle
GetDiskFreeSpaceExW
GetCurrentProcess
GetSystemTime
WriteConsoleW
SetStdHandle
GetConsoleMode
GetConsoleCP
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetLocaleInfoW
SetPriorityClass
GlobalLock
GlobalUnlock
GetCurrentThreadId
GetCurrentThread
SetThreadPriority
GetTickCount
GetLastError
WaitForSingleObject
GetUserDefaultLCID
HeapReAlloc
HeapSize
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
RtlPcToFileHeader
GetStdHandle
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
WaitForMultipleObjects
ResetEvent
lstrlenA
SetEvent
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
HeapCreate
GetVersion
HeapSetInformation
TerminateProcess
VirtualAlloc
VirtualFree
VirtualQuery
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
RtlVirtualUnwind
RtlLookupFunctionEntry
FreeLibrary
SetFilePointer
GetFileSize
FormatMessageW
LoadLibraryW
RaiseException
Module32NextW
Module32FirstW
CreateToolhelp32Snapshot
GetCurrentProcessId
GlobalMemoryStatusEx
RtlCaptureContext
SetThreadAffinityMask
GetProcessAffinityMask
SetThreadIdealProcessor
SuspendThread
ResumeThread
CreateEventW
CreateSemaphoreW
GetModuleFileNameW
GetCommandLineW
GetModuleHandleW
DeviceIoControl
GetVolumeNameForVolumeMountPointW
GetVolumePathNameW
GetFileTime
SetFileTime
SetEndOfFile
FlushViewOfFile
SetLastError
MoveFileExW
CreateDirectoryW
RemoveDirectoryW
FindClose
FindNextFileW
FindFirstFileW
GetDriveTypeW
GetEnvironmentVariableW
OutputDebugStringW
DebugBreak
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimeAsFileTime
GetVersionExW
GetCPInfo
GetSystemInfo
RtlUnwindEx
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoW
VirtualProtect
SetThreadStackGuarantee
ExitThread
CreateThread
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
user32
DrawIconEx
DestroyIcon
LoadCursorW
GetAncestor
PeekMessageW
DefWindowProcW
SetWindowLongPtrW
GetSystemMenu
MoveWindow
SystemParametersInfoW
GetWindowRect
AdjustWindowRectEx
CreateWindowExW
GetSystemMetrics
DrawTextW
FillRect
GetWindowLongPtrW
UpdateWindow
EnableWindow
RegisterClassExW
GetSysColor
RedrawWindow
MapWindowPoints
SetLayeredWindowAttributes
FrameRect
GetClientRect
GetPropW
SetPropW
MonitorFromWindow
CreatePopupMenu
SetMenuInfo
CreateMenu
GetScrollPos
SetScrollInfo
GetScrollRange
SetScrollRange
SetScrollPos
GetMenuItemInfoW
GetMenuItemCount
EnableMenuItem
SetMenuItemInfoW
CheckMenuItem
ClientToScreen
PostThreadMessageW
SetWindowRgn
GetMonitorInfoW
MonitorFromRect
IsZoomed
GetWindowTextW
SetWindowTextW
GetWindowLongW
SetWindowLongW
IsWindowEnabled
EnumThreadWindows
ScreenToClient
GetCursorPos
WindowFromPoint
ChildWindowFromPointEx
GetDC
EnumChildWindows
SetWindowPlacement
SetParent
GetClassLongPtrW
LoadIconW
wsprintfW
SendInput
GetDlgItem
LoadImageW
mouse_event
MessageBoxW
DeferWindowPos
EndDeferWindowPos
BeginDeferWindowPos
SetCaretPos
ShowCaret
CreateCaret
DestroyCaret
HideCaret
CreateIconIndirect
WaitMessage
GetDlgCtrlID
IsChild
GetKeyState
GetNextDlgTabItem
DestroyMenu
GetWindowDC
ReleaseDC
GetWindowPlacement
SetCursor
SetWindowPos
MessageBeep
GetParent
SetActiveWindow
BeginPaint
EndPaint
RegisterClipboardFormatW
SetFocus
ShowWindow
ReplyMessage
SetForegroundWindow
GetMenuInfo
IsIconic
ReleaseCapture
DestroyWindow
PostQuitMessage
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardData
CloseClipboard
IsClipboardFormatAvailable
DeleteMenu
AppendMenuW
InsertMenuItemW
GetFocus
SendMessageW
GetAsyncKeyState
SetTimer
KillTimer
GetCapture
GetMessageW
TranslateMessage
DispatchMessageW
PostMessageW
SetCapture
ScrollWindowEx
GetWindowThreadProcessId
GetMessageExtraInfo
gdi32
CreateRectRgn
BitBlt
ExtSelectClipRgn
OffsetClipRgn
SelectClipRgn
DeleteDC
DeleteObject
LineTo
MoveToEx
CreatePen
Arc
CreateSolidBrush
SelectObject
GetTextExtentExPointW
CreateDIBSection
CreateCompatibleBitmap
GetCurrentObject
CreateCompatibleDC
SetTextColor
GetDeviceCaps
GetCharacterPlacementW
GetGlyphOutlineW
GetTextExtentPoint32W
ExtTextOutW
GetTextMetricsW
CreateFontIndirectW
CreateRectRgnIndirect
ExtCreateRegion
CombineRgn
GetRegionData
CreateBitmap
CreateDIBitmap
EnumFontFamiliesExW
GetStockObject
RectVisible
SetBkMode
GetObjectW
SetBkColor
SetDIBitsToDevice
comdlg32
GetOpenFileNameW
GetSaveFileNameW
shell32
SHGetPathFromIDListW
CommandLineToArgvW
ord21
SHGetDataFromIDListW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetSettings
SHGetFileInfoW
DragQueryFileW
DragFinish
DragAcceptFiles
SHFileOperationW
SHGetSpecialFolderPathW
ole32
OleDuplicateData
RegisterDragDrop
RevokeDragDrop
CoTaskMemFree
StringFromIID
CoCreateInstance
OleUninitialize
OleInitialize
CoTaskMemAlloc
DoDragDrop
ReleaseStgMedium
imm32
ImmNotifyIME
ImmGetCompositionStringW
ImmGetContext
ImmSetCompositionFontW
ImmSetCompositionWindow
ImmReleaseContext
ImmAssociateContext
ImmAssociateContextEx
comctl32
ImageList_GetIconSize
ImageList_GetIcon
shlwapi
StrRetToBufW
PathCanonicalizeW
PathIsRelativeW
rpcrt4
UuidCreate
advapi32
EqualSid
RegOpenKeyExW
RegCloseKey
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
FreeSid
RegQueryValueExW
RegCreateKeyExW
oleaut32
SysFreeString
SysAllocString
Name
.text
Size
2.3MB
Virtual Size
2.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.code
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
436KB
Virtual Size
435KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
358KB
Virtual Size
519KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
121KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.shared
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.appskin
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.srclibs
Size
437KB
Virtual Size
436KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
Name
data
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
169KB
Virtual Size
168KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=152, version=20115,
count=21, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=26, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=135, version=30729,
count=25, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=376, id=1, productName=Unmarked objects,
count=62, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=293, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=124, productName=Unmarked objects (old),
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=151,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/sai2.ini
- SHA256 ebb0168868d0a53034a9b436f5a42034a8fd78ceadcc64c510195e7962959670
- MD5 cf2500efc3a5fcf450a510ca207ddf5e
- SHA1 5c7961b09ea1bbfbb85a3caa0cbcb4dcd9eec635
- SHA512 81d77c4a168013ba0b64c5835931c749f04ed6bd8da0d8b1e7991bfc9045aad5706964682df80f58128adc7d23ea54e3fda08466490c73193bb9ad1d9f1eeb83
- SSDEEP 96:r3SQXxaRIkRf6xaRIVmSE51lf6xaRIeoxYbxaRITUD0/m:7auWkauVTGtkauxSauTU4m
- TLSH T14C912A8226F98108F2F7BF456BBA19704B36BC95BD3CCE5C2185054D4AF1E50E972BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Easy Paint Tool SAI 2/Tabletka/saicrack.exe
- IMPHASH b8d12c04de39a167757fe4a34efa01e6
- SHA256 7eee0207ac1683aa09ffbcd7156b60bf7a4a2ff8e9784da08c1132a71bc7ce7a
- MD5 977b525935c4815a57d0fa1da785ca3c
- SHA1 4f5791487b63a02a63d956ade1b22c0a70aaa21a
- SHA512 a42919085db4c937dbec5b1bc05a7422d01a437d5708c0228c07d2aef7ba12887d7028c9961ae4d5e28a6ecb5698a70ae4e1ffc140408ec6cb92d67e5a3d6eae
- SSDEEP 49152:+B1vT++F3IVXwwL0S/MP/xbxBEmZLvHw8/cDD8CIKLTeH847xDOLw:b+dIVAlS/2lBEmZLvQ8/cP88TE770Lw
- TLSH T181D53350B6919075C15618304672C37242F9B5334BA1AE9BF6B409E2BBF13F25B327EB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected2
Minor OS version
1
Major OS version
5
Entry point
37029
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetVersionExA
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetModuleFileNameW
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetCommandLineW
GetStartupInfoW
GetTempPathA
GetLastError
LoadLibraryExA
Sleep
RemoveDirectoryA
CreateDirectoryA
SetStdHandle
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetFileType
DecodePointer
EncodePointer
SetConsoleCtrlHandler
HeapFree
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
HeapAlloc
DeleteFileA
FindNextFileA
GetCommandLineA
HeapSetInformation
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
RtlUnwind
SetHandleCount
GetStdHandle
DeleteCriticalSection
GetModuleHandleW
ExitProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
WideCharToMultiByte
GetFullPathNameA
CloseHandle
GetFileInformationByHandle
PeekNamedPipe
CreateFileA
GetCurrentDirectoryW
GetFileAttributesA
MultiByteToWideChar
ReadFile
SetFilePointer
WriteFile
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
LoadLibraryW
FlushFileBuffers
CompareStringW
SetEnvironmentVariableA
GetDriveTypeW
SetEndOfFile
GetProcessHeap
GetTimeZoneInformation
LCMapStringW
WriteConsoleW
GetStringTypeW
HeapSize
CreateFileW
SetEnvironmentVariableW
ws2_32
ntohl
Name
.text
Size
75KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
54KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=152, version=20115,
count=35, id=171, productName=VS2010 build 30319, version=30319,
count=18, id=158, productName=VS2010 build 30319, version=30319,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=109, id=1, productName=Unmarked objects,
count=151, id=170, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,