SF test[.]rar | Triage™

resource	yara_rule
static1/unpack001/tvsthostx86/VSTHost.pdf	pdf_with_link_action

resource
unpack001/setup.exe
unpack002/$PLUGINSDIR/AdvSplash.dll
unpack002/$PLUGINSDIR/Bass.dll
unpack002/$PLUGINSDIR/GetVersion.dll
unpack002/$PLUGINSDIR/InstallOptions.dll
unpack002/$PLUGINSDIR/NSIS_SkinCrafter_Plugin.dll
unpack002/$PLUGINSDIR/System.dll
unpack002/$PLUGINSDIR/bass.dll
unpack002/Resource/Sausage Fattener 32.dat
unpack002/Resource/Sausage Fattener 64.dat
unpack002/Sausage Fattener x64.dll
unpack002/Sausage Fattener.dll
unpack002/uninstall.exe
unpack001/tvsthostx86/VSTHostBridge32.exe
unpack001/tvsthostx86/VSTHostBridge64.exe
unpack001/tvsthostx86/vsthost.exe
unpack001/tvsthostx86/vsthostDEU.dll
unpack001/tvsthostx86/vsthostFRA.dll
unpack001/tvsthostx86/vsthostregclean.exe

resource	yara_rule
static1/unpack001/setup.exe	nsis_installer_1
static1/unpack001/setup.exe	nsis_installer_2
static1/unpack002/uninstall.exe	nsis_installer_1
static1/unpack002/uninstall.exe	nsis_installer_2

SF test.rar

SHA256 4ca542e3af27679c9dcbf5670abd4516c2b0259f8b59c2a249dea0b8c86f75a3
MD5 3b86b0d2a3f6c243833a916aaed06989
SHA1 ffb8f0ef8642238a1eb595011757f9e3b31a6dee
SHA512 34b980dd1b16804800b9de7a9597ffe40e7761021186d178bdd5abb5cd22ed99504e6ae848223a50e478845c853d7dabf68bc48a35531323510f7adb9617a489
SSDEEP 196608:9nAcLSYqwWDMXYB1KncSJtsVLb3IylAIJk0rk2Qwn2sRZRn:hAc+YIIYB1IzKVLDIyWq34wnrRZ9
TLSH
T106A633573F134536EAA95D23DA685F0B9CBA8C03047FB97621C04868B7FCE6494F8987
MD5 SHA1 SHA512 SSDEEP TLSH

Password

asdasd

setup.exe

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 81e45c1e6d6a718624159e116e6daa8c1547f39bef7f56163303e7eca8abfae1
MD5 81e69b29c4c09391a12b665e7661f48e
SHA1 b103b694d12544c9db444badd9e2263d219698b1
SHA512 5476b9fa6967aefcb73793c965224c93d2ab46268830fcb71c69bc864e22e0cb92512959fe7a728ee77c2bde00e3ce9eda64d015ff1ef34273292707680c0042
SSDEEP 98304:QhVVJqioKMFh1qKsbZcMgsGwNmlCNE4CJgcMyfQP/4:QhV1pMzHQCMFGImHgcM54
TLSH
T17F16331B17C16C87F9675136933EEA7EF3B4F842AE86674B27728DE826DF90101401DA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Password

asdasd

Minor OS version

0

Major OS version

4

Entry point

12491

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/AdvSplash.dll

IMPHASH 741b6bafe355b63a372d737b30543a95
SHA256 eb1ca2b3a6e564c32677d0cdc388e26b74ef686e071d7dbca44d0bfa10488feb
MD5 13cc92f90a299f5b2b2f795d0d2e47dc
SHA1 aa69ead8520876d232c6ed96021a4825e79f542f
SHA512 ff4e6e6e7104568fc85ef3a3f0494a5c7822a4ceaf65c584ad534f08f9a472a8d86f0a62f1f86343c61e2540b2254714b7ea43e4b312ff13d8271ff069386fa3
SSDEEP 96:6hNSXIcmYjkvTS6MnBNZ1BMjDfhkkEkkXstWpPwoS:JXIpzTSd1BSk/kJtWpP
TLSH
T137C1B837B7C216F7C35600F12916375387E9943263A1946909B3EBCAA6A185BDD34703
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

asdasd

Minor OS version

0

Major OS version

4

Entry point

4448

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/Bass.dll

SHA256 14a38f56be50a3829eb1eda2a908da2de5913f81d5cb01d8b668593d0fc36594
MD5 a8af308ff01b4477657955fbf0cc8408
SHA1 0794c059f0326e4a71be8a3ee4ac17a657d90d88
SHA512 9e221967db95d4b86bf311891193dfd1515806aa0d43198d3bc26a17d77f06f212ab9dba1ca8575f50d224380e8b109529faccf2f56daac834da83a83677a0fd
SSDEEP 3072:kR+vccy3LIweO1vFCLPkG9dfSD0BXZXmpw69Qe:S+vccy3hF1vFCT99dTBX5mupe
TLSH
T16DA30299DA7441C3E4EBF839646E036042CA6B0F421DEFF85ED8D2E022D45D522A5FCE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

asdasd

Minor OS version

0

Major OS version

4

Entry point

311363

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

BASS_Apply3D BASS_CDDoor BASS_CDFree BASS_CDGetID BASS_CDGetTrackLength BASS_CDGetTracks BASS_CDInDrive BASS_CDInit BASS_CDPlay BASS_ChannelBytes2Seconds BASS_ChannelGet3DAttributes BASS_ChannelGet3DPosition BASS_ChannelGetAttributes BASS_ChannelGetData BASS_ChannelGetEAXMix BASS_ChannelGetFlags BASS_ChannelGetLevel BASS_ChannelGetPosition BASS_ChannelIsActive BASS_ChannelIsSliding BASS_ChannelPause BASS_ChannelRemoveDSP BASS_ChannelRemoveFX BASS_ChannelRemoveLink BASS_ChannelRemoveSync BASS_ChannelResume BASS_ChannelSeconds2Bytes BASS_ChannelSet3DAttributes BASS_ChannelSet3DPosition BASS_ChannelSetAttributes BASS_ChannelSetDSP BASS_ChannelSetEAXMix BASS_ChannelSetFX BASS_ChannelSetLink BASS_ChannelSetPosition BASS_ChannelSetSync BASS_ChannelSlideAttributes BASS_ChannelStop BASS_ErrorGetCode BASS_FXGetParameters BASS_FXSetParameters BASS_Free BASS_Get3DFactors BASS_Get3DPosition BASS_GetCPU BASS_GetDSoundObject BASS_GetDeviceDescription BASS_GetEAXParameters BASS_GetGlobalVolumes BASS_GetInfo BASS_GetVersion BASS_GetVolume BASS_Init BASS_MusicFree BASS_MusicGetChannelVol BASS_MusicGetLength BASS_MusicGetName BASS_MusicLoad BASS_MusicPlay BASS_MusicPlayEx BASS_MusicPreBuf BASS_MusicSetAmplify BASS_MusicSetChannelVol BASS_MusicSetPanSep BASS_MusicSetPositionScaler BASS_Pause BASS_RecordFree BASS_RecordGetDeviceDescription BASS_RecordGetInfo BASS_RecordGetInput BASS_RecordGetInputName BASS_RecordInit BASS_RecordSetInput BASS_RecordStart BASS_SampleCreate BASS_SampleCreateDone BASS_SampleFree BASS_SampleGetInfo BASS_SampleLoad BASS_SamplePlay BASS_SamplePlay3D BASS_SamplePlay3DEx BASS_SamplePlayEx BASS_SampleSetInfo BASS_SampleStop BASS_Set3DAlgorithm BASS_Set3DFactors BASS_Set3DPosition BASS_SetBufferLength BASS_SetCLSID BASS_SetEAXParameters BASS_SetGlobalVolumes BASS_SetLogCurves BASS_SetNetConfig BASS_SetVolume BASS_Start BASS_Stop BASS_StreamCreate BASS_StreamCreateFile BASS_StreamCreateURL BASS_StreamFree BASS_StreamGetFilePosition BASS_StreamGetLength BASS_StreamGetTags BASS_StreamPlay BASS_StreamPreBuf BASS_Update _

$PLUGINSDIR/GetVersion.dll

IMPHASH fb1aa2bbc159c94cb45792330366bd5f
SHA256 16dd6da98b7e53d374830cd4c644c01b112955f8487a285f34dc0353e9cfac15
MD5 e013b625f5ae1e2f0b442cf39c0069df
SHA1 9ec785b63279144c091366badda65278c4cdee20
SHA512 306f7e674d119d129db48012c43f825bffabd078fac8518aea9d514b0787752a2e876bda2ad15df7332bfc8cfba38a0d1be17ee7c58a27e09678fce9aec58418
SSDEEP 192:9r/9XGqK7s/AlHdJZBi46AQ5VuNxHA8/1:HXGqM93Bi46AQ5Vujg8/1
TLSH
T14A02B6F207E403D4F22B4B7C906A43037B6CA92499F196290F61A5D73CFA545DB3B762
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

asdasd

Minor OS version

1

Major OS version

5

Entry point

7247

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/InstallOptions.dll

IMPHASH b1cd0d78f652ce5fc63f0879371af012
SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
MD5 325b008aec81e5aaa57096f05d4212b5
SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
TLSH
T1ED622A11778888F3DBD2013EB4533707AF9D5126B4929ED2CA271ECA6D2B05D7EB2346
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

asdasd

Minor OS version

0

Major OS version

4

Entry point

10696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryA GetCurrentDirectoryA MultiByteToWideChar GetPrivateProfileIntA GlobalLock GetModuleHandleA lstrcmpiA GetPrivateProfileStringA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalUnlock GlobalAlloc

user32

MapWindowPoints GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard PtInRect SetWindowRgn LoadIconA LoadImageA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA LoadCursorA SetCursor DrawTextA GetWindowLongA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA GetClientRect

gdi32

SetTextColor CreateCompatibleDC GetObjectA GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderA SHGetDesktopFolder SHGetPathFromIDListA ShellExecuteA

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/NSIS_SkinCrafter_Plugin.dll

IMPHASH 8a595235c826f2ae0f0362f688723bd0
SHA256 8b25cf3f7aa82fadccb2ce615ce0e40c5a8a3ea7bc51180a92173ee113a0ccfe
MD5 028251654a4d65509aa8ccb5f2ee284a
SHA1 4a4ad468a86df6b903002be4f8919017fea0c152
SHA512 f252670bca0da9e8e2c519a6ef4ad6dd0c4e548aeb7566693a7d203e73e63345fc58683072020ef771d836429bed1d7b4fdf105aa3e62a969e9c8d39556e1d2d
SSDEEP 98304:kj0Kg9frmFcqlMZ4vpHfOVlQnzW4Aogn/oXFdAaTZ8GcB7d0s:kjFA7t2RHfYlQZJgTamGcBis
TLSH
T1E7569E01B2D5D8F6C26322706E2DB726A3FDAE3447345A837BC47E1D5A31982563B31B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

asdasd

Minor OS version

0

Major OS version

4

Entry point

25310

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetModuleFileNameA SizeofResource LockResource LoadResource FindResourceA GlobalFree lstrcpyA MultiByteToWideChar FreeLibrary GetLastError GetProcAddress LoadLibraryA GetSystemDirectoryA InterlockedDecrement InterlockedIncrement InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree RtlUnwind RaiseException ExitProcess GetFileAttributesA GetCurrentThreadId GetCommandLineA GetVersionExA LCMapStringA WideCharToMultiByte LCMapStringW GetCPInfo HeapAlloc HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc IsBadWritePtr TlsAlloc SetLastError TlsFree TlsSetValue TlsGetValue GetModuleHandleA SetUnhandledExceptionFilter WriteFile FlushFileBuffers QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer CloseHandle TerminateProcess GetCurrentProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW UnhandledExceptionFilter GetLocaleInfoA VirtualProtect GetSystemInfo VirtualQuery GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage HeapSize IsBadReadPtr IsBadCodePtr GetACP GetOEMCP SetStdHandle ReadFile GetLocaleInfoW CreateFileA SetEndOfFile

user32

MessageBoxA

$PLUGINSDIR/System.dll

IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
MD5 c17103ae9072a06da581dec998343fc1
SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
TLSH
T1CA325C5993A0C1F3D5A0823C0D973A7B1779722016B14FA3CFA35842AE196D7AC7D227
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

asdasd

Minor OS version

0

Major OS version

4

Entry point

10544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/bass.dll

SHA256 14a38f56be50a3829eb1eda2a908da2de5913f81d5cb01d8b668593d0fc36594
MD5 a8af308ff01b4477657955fbf0cc8408
SHA1 0794c059f0326e4a71be8a3ee4ac17a657d90d88
SHA512 9e221967db95d4b86bf311891193dfd1515806aa0d43198d3bc26a17d77f06f212ab9dba1ca8575f50d224380e8b109529faccf2f56daac834da83a83677a0fd
SSDEEP 3072:kR+vccy3LIweO1vFCLPkG9dfSD0BXZXmpw69Qe:S+vccy3hF1vFCT99dTBX5mupe
TLSH
T16DA30299DA7441C3E4EBF839646E036042CA6B0F421DEFF85ED8D2E022D45D522A5FCE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

asdasd

Minor OS version

0

Major OS version

4

Entry point

311363

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

BASS_Apply3D BASS_CDDoor BASS_CDFree BASS_CDGetID BASS_CDGetTrackLength BASS_CDGetTracks BASS_CDInDrive BASS_CDInit BASS_CDPlay BASS_ChannelBytes2Seconds BASS_ChannelGet3DAttributes BASS_ChannelGet3DPosition BASS_ChannelGetAttributes BASS_ChannelGetData BASS_ChannelGetEAXMix BASS_ChannelGetFlags BASS_ChannelGetLevel BASS_ChannelGetPosition BASS_ChannelIsActive BASS_ChannelIsSliding BASS_ChannelPause BASS_ChannelRemoveDSP BASS_ChannelRemoveFX BASS_ChannelRemoveLink BASS_ChannelRemoveSync BASS_ChannelResume BASS_ChannelSeconds2Bytes BASS_ChannelSet3DAttributes BASS_ChannelSet3DPosition BASS_ChannelSetAttributes BASS_ChannelSetDSP BASS_ChannelSetEAXMix BASS_ChannelSetFX BASS_ChannelSetLink BASS_ChannelSetPosition BASS_ChannelSetSync BASS_ChannelSlideAttributes BASS_ChannelStop BASS_ErrorGetCode BASS_FXGetParameters BASS_FXSetParameters BASS_Free BASS_Get3DFactors BASS_Get3DPosition BASS_GetCPU BASS_GetDSoundObject BASS_GetDeviceDescription BASS_GetEAXParameters BASS_GetGlobalVolumes BASS_GetInfo BASS_GetVersion BASS_GetVolume BASS_Init BASS_MusicFree BASS_MusicGetChannelVol BASS_MusicGetLength BASS_MusicGetName BASS_MusicLoad BASS_MusicPlay BASS_MusicPlayEx BASS_MusicPreBuf BASS_MusicSetAmplify BASS_MusicSetChannelVol BASS_MusicSetPanSep BASS_MusicSetPositionScaler BASS_Pause BASS_RecordFree BASS_RecordGetDeviceDescription BASS_RecordGetInfo BASS_RecordGetInput BASS_RecordGetInputName BASS_RecordInit BASS_RecordSetInput BASS_RecordStart BASS_SampleCreate BASS_SampleCreateDone BASS_SampleFree BASS_SampleGetInfo BASS_SampleLoad BASS_SamplePlay BASS_SamplePlay3D BASS_SamplePlay3DEx BASS_SamplePlayEx BASS_SampleSetInfo BASS_SampleStop BASS_Set3DAlgorithm BASS_Set3DFactors BASS_Set3DPosition BASS_SetBufferLength BASS_SetCLSID BASS_SetEAXParameters BASS_SetGlobalVolumes BASS_SetLogCurves BASS_SetNetConfig BASS_SetVolume BASS_Start BASS_Stop BASS_StreamCreate BASS_StreamCreateFile BASS_StreamCreateURL BASS_StreamFree BASS_StreamGetFilePosition BASS_StreamGetLength BASS_StreamGetTags BASS_StreamPlay BASS_StreamPreBuf BASS_Update _

$PLUGINSDIR/dat_bgm.ogg

SHA256 ddae02d386f23c8d03792d06beb5100f1d230fa6c9c66b007fa5a3808e5dedaf
MD5 f484a5db943fbefe894146a109513ff9
SHA1 3097181ce18c30933da3566d77b6beea5c9092ca
SHA512 634615101e5ccef3fbd6bb9fdac881808f231eccb79bd135dd804251b4d564cc89c7a14fe2fe548e7345a6437383edb8fb00ba19666834e4aeaced2103f3ff6d
SSDEEP 3072:tpbseuX0bbGvARsR9Eq9TBECn066ZCtALQOcCL3qFf4vklt/9Rs5BK2KAfnVGsGB:E7XXAc9NEmwmOb3qFztwBK2KAf2/KvT8
TLSH
T1E1F312A3C8D6A0E5EC0749BFFB7204E5845EE53C586314EB83296D0136FB8868A252E5
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/dat_skin.skf

SHA256 2f2f3ff75f666826f4b40b8e277040d286e6d7ad883cabd5f4bf64670d4579aa
MD5 f172c4e44639c2c67c019e94172c780a
SHA1 2e60045e6d80e9964698f95ecdcba3e12635cae0
SHA512 3eac9c5357590a6851b59b14130aa6c22c57caff107fc24b74f984a8f7a0fdd78610bb4277553d8746a77a6d5531b06ce1b20bbcfa08cf0e9c600ebb518572dd
SSDEEP 3072:B5/dAtjL20Lr9UiaTqXDY5LNMiSJxJig+uzVZ+WrPWruDkhUj8YNj2YeQiwe39Lm:2/20LrGi1XDo8+UPUuj9kQiLNLif
TLSH
T182C492E1E31F5796FE76E471E80E49E221E45CBDB4E461093CA6BA180AF27213C4F719
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
TLSH
T1D3D0C9C9501A802944208642A97A2FA263E03E210B1725FAF5724C87EB4CDE79C9D682
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/modern-wizard.bmp

SHA256 fe2f71f6a9baa4bf426ae4710f4edce296ce3d89c6e0a03448cb00fa562462ed
MD5 344eacb265063cadfd6d3ee3ee66f895
SHA1 5606fed6dea08aebe1d7eb0187e7f5bd53c96fdb
SHA512 c7f48ba8e8ef4602de74c71fce1a08e7b4c3299808d8525339b6af37b6f30a76024c45a1f182f32c77bb3389edc6e6c45d0ff37549d201bf1f86b4f84b14b641
SSDEEP 1536:E7xAG/O+g3Q/H8/T9jtYVmj42ucaKBlZ7b:E7xAGmI/H8b9je84TcaKlZ7b
TLSH
T115E36BD2BE14C81BDF9F8630D47B86598FE03CAE5666DA2F346E354899763D20C1DB02
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/splash.bmp

SHA256 d91b10d9516f3153cfad2e00b9975a835b1538be1dc0ec0e2821a7f3755322b0
MD5 94f52dc67c016167d6eaf6e0c3cf0942
SHA1 e03a061117872d458d106ff67a70df5b4b236e08
SHA512 f2439352039abd0894e1addb23dd3033434300804c5c2d0139c1c74e8f02832033a54a0792a1bf2fabfbc220e5645bc4e4f77b9831edcf7cdecd162e7a5b6273
SSDEEP 6144:kcoYVYZtkKsq1ReH8z1UMKFAeH4kTBERaZN:kcoYVYZtPReczGM8qRaZN
TLSH
T19CD439D2FA1EC4CEDBA941308465E1980B94BD8E9A77556F34A6366CCA773C30D1EF04
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/1.bmp

SHA256 acbb674a36c859af77de0aa1d3d95c1cedf000e54febb31020e6f938194ffc6b
MD5 cd5ff562751a97fe101a67e771ba502d
SHA1 40ab4ef194902fed97926363fe6f82f3ddb905c0
SHA512 4d8d1bce35189b6b20e478330e9d94c5b4863446366da8bfebd5e29303ea2560c1749c00ea181716ef9b873d19f7bb0b0b67217bf33fbcf14ef06034eb93da2f
SSDEEP 768:GZlzyFOQrMisKWPDWPQ6HxZ5/LVlSXhyuFKTuZ/tzIywza2oHVWWHwSKY7FgqwxH:cPorwX1du
TLSH
T163D3593D109600E19871D3938B3DF642BCAEBA5AE7527EFDEB54113ED60DB4C250A923
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/10.bmp

SHA256 ffa4a594d09f8faad81a30ba0999692530b1c248939328c57781ccae55129536
MD5 315fbe95e7b2a86b874b197fbdf15849
SHA1 1cfb80ce65a3ec7797a236bd21c5de45ff49ffaf
SHA512 d0ed7b6cac55509e08dcfb6ce4bfef8da2945cab9372e0e044297fd21f8d9a74fcb601bf8faf2e97d1350bbf9363d3d25421da34747a7a2dc7660c8b3be253b7
SSDEEP 768:UqL8imr7IriZj7gNPfkxD5KhPY9dx0FHH5m1ngJMNZ7sCBTiCabGZ95YqQ+9PaW/:U7p/WGHGk
TLSH
T13ED3473D109600E09971D3938B3DF942BCAEBA5AE7423EFDEB54513ED61DB4C250A923
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/11.bmp

SHA256 fd3a02f023176a6ae82935f00f72fa13d42be28d58eec0422b9783184ea852f3
MD5 8379b1c3d19f3648f9236187e16149e9
SHA1 d1d4ef0d7071ac00c8d3abae6b79d8ebf2798452
SHA512 1822e9eb3c1943d0a6e78a78d6920db26f92257a5a368e5524162c65c08eada27a4d7fdc1714279910665189398ebe510e1e4d982bedb4915d75ce9f825b215b
SSDEEP 768:SDbNi/9re4I3yTa3xz5bZKvnedS0hHHiOGa3JRNQJCFcimltHLAFEpJvhdb1hHWt:C0Uu/IAY
TLSH
T196D3273D109600E09971D3938B3DF542BCAEBA5AE7423EEDEB94513ED61DB4C250AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/12.bmp

SHA256 67c1e8f97cb11fe2d5d658e994682dcb9b81ec73ee221e2d704bff5da8f7a360
MD5 ba19c720c62fb04a6d0687763eb3f0f9
SHA1 80ca6d7bda2b287c87d36ad2535bf9ffb5bf00c2
SHA512 298128377ca05e88fd5000725e4871ffb81f0b49de805552c7fc205b48a1739a64cfe246f360186259322ed162fb31320fe4f7f511b0f106677e0eb8c7ed84ce
SSDEEP 768:SDbNi/9re4I3yTa3xz5bZKvnedS0hHHiOGa3JRNQJC6U1WAXoIpFAPlpUwgzHQ6X:C4GskgrY
TLSH
T1B3D3383D109600E09971D3938B3DF542BCAEBA5AE7423EFDEB94513ED61DB4C250A923
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/13.bmp

SHA256 f329a87886a84e7d36a03ab620221ce2e5909bf595210a0a70e62065b68bd458
MD5 a0e8b1c81ddc511fcb5310c5deee8e9b
SHA1 88f9b448d7f5ca3a00b36b06e25fbbe94ca0a451
SHA512 3e7b08f44e8534b2208c37e8f78fc91831ef7a7f9e634577b40be3ba970141437565182e2fb5f659fceedadbadf1bb562db351a95c4ce531913a72ea35cef272
SSDEEP 768:/nk0jLE2Lr8RnfWncJZx/5/N6r4VndtGgHHxoZPNPX4lXICR8nmItsNHdqoQ9F9o:zZriT
TLSH
T1BCD3363D109600E09971D3938B3DF942BCAEBA5AE7423EFDEB54513ED61DB4C250A923
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/14.bmp

SHA256 9058e0d9ea998c21309757586d30b0e5378c0c1904ebc2d95bf01223ddba269c
MD5 22fcb3ea5ee2414880ef094b6b965c94
SHA1 dbfb1cbb08981fdd3878faf4179f5fddf67a4a9d
SHA512 f104e05e5fff7ea1b5e7e983ed8185ee5fcb3d5affe07f9d60663b61027c4de76743b4b67d21578de7f35eca75d953a8182c7d3330c2ec65966cca6a4363c294
SSDEEP 768:TVDtEq8oBHHtrCOVPggBFxxwi5N6rcvyNvP24pTkgXN39OC6hk1J+BOUozzGLjYO:2QiqbJrGBO
TLSH
T117D37F3C209600E09871D3938B3DF542ACAEBA56E7423EFDEB94113ED61DB4D254AD63
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/15.bmp

SHA256 46ed9e0e6d46d8840fc3771c5b8b5a9457d91e0a994e72a8289481dcf4a83c32
MD5 db6d2dbb0a0f2836f725f942453b29ec
SHA1 83448f73bb9104178ab354128e47a239b1abdeba
SHA512 5542a2a8dcaf436d2610cf685a2760bcc93d077086658cffe2361f3da0fae5f5f76a1761034cea5f8e9ac1151944bafa726761213acccf012bd01ba38f4d5ed4
SSDEEP 768:TVDtEq8oBHHtrCOVPggBFxxwi5N6rcvyNvP24pTkgXN39OC6hk1J+BOUohzLLdDz:2Qi5T9rGBO
TLSH
T13BD37F3C209600E09871D3938B3DF542ACAEBA56E7423EFDEB94113ED61DB4D254AD63
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/16.bmp

SHA256 d2bf6a0edd77365e2593a2fa154a9a7e1c609111316e17538706d7d453cd5b43
MD5 74963a0e21b0a442f0e327a9e83fcf02
SHA1 4aeba2036721e7d73a346c295eb436067c8d3976
SHA512 b5c0eadd8cebcfefa98b6080a51f1801233dd4f2e72b9df028fbcd571d046466ca9b7cf36172a524ff7c60820d40475a8e190d5bada901d3fd485e17c41daaea
SSDEEP 768:gj/TdkCTjrGQ5PMXISjxV5CzANeXWOWbXvpHV7eNsdoVELCeRNsF5nyt2JHg9B2A:QcEERWglz/MAlVgQT
TLSH
T186D3473D109600E09971D3938B3DF542BCAEBA5AEB423EEDEB54513ED61DB4C250AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/2.bmp

SHA256 5de6fac064d9897c7865b71528b0f4ee4375a9a1f94cfdd8ab355c17099ed75a
MD5 b983fb2e8d67378f2eead3af35a41276
SHA1 001d4dcdd316b285845f82743bc9353040365221
SHA512 c71980ee0466bf58518d914ac667516f484e991fcd03751536225ea76707e732f939e55c49137431f1d72417827339af6817ae2ef32098fe9af354c2619ecc3b
SSDEEP 768:T1+8TJ6ioYhMrr+xUxhAPbdBx05ngWQJuJB3ue3TBNq6h4HoTrJcRqLbDpaqNpIt:hHKgW/7mI6
TLSH
T151D3593D109600E09871D3938B3DF642BCAEBA5AE7527EFDEB54113ED61DB4C250A923
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/3.bmp

SHA256 91d0a751e34a1cdf6329bdab73d8c583a2600d359d4a6ee78e0a557a56d6825c
MD5 a21bc00d83d44f8ac7a4025e352a9cdd
SHA1 b44314553d206c68f901e623227b257b9b1cf4e6
SHA512 928c5060e863c6ca2052cbd51d4a4bb0170b8f5499a0cd8c6434a5ffa3c1314cc557f17bc550d8e356687c943538462b854175452e873ec256e515ad5e20fbb4
SSDEEP 768:T1+8TJ6ioYhMrNbxEicfDze4yckExo+535895beufdRTaNG/6P/VBnL0Ct7USTOM:hHBzCLEiWI6
TLSH
T1D5D3593D109600E19871C3938B3DF642BCAEBA5AE7527EEDEB54113ED61DB4C250AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/4.bmp

SHA256 3ffb2919fe2597e3ddc3e39922e44fb1a904af0dd715f30bea1de84136fdd4c6
MD5 9ad72b8e9d020a07af384e0852b0ecd9
SHA1 8db3484a1d695a913b45e9970eaf9c945b8bf028
SHA512 a08420200e5ebffe4f00868b8abc6172f17686719cb581afb12af6ce901cb074c1823f960bac66d50e2fa99fd228270774b5a41e1cbb14ce5fa63d996cfa37b2
SSDEEP 768:jHQkYBVJOrRl7tsAOMxd5M4sJorHkuzS5TGmZoSvbpbRD4zJYWijZSXrHdDTJl/I:ophUGFXp
TLSH
T186D36C3D109600E09971C3938B3DF542BCAEBA5AE7527EEDEB94113ED61DB4C250AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/5.bmp

SHA256 94f649cbb0e250d378b1f432b04faca475965e7de8a02535fc2a1f56890660fc
MD5 d659f87c193a47bdc497410bed0e443e
SHA1 12629ad7b5dfb0cf9134d7ba83f8693c897a2c58
SHA512 0bfba7ee57c0df82b52501750a7f79af77fb7dc231621452c838456bfb43f183806b52098122780f3f94c715e65fa9e08f59836895714b5b0395bd1633b2010a
SSDEEP 768:Nps1Bq7LBrmYBONU48pUqgCw5mdk8tX0tPUZO/fdeA4RAfBB8FEVRGC+IikbEs6h:kqlFkJLZyjp0DbRyBPl
TLSH
T1E6D3583D109600E09971D3938B3DF642BCAEBA5AE7523EEDEB54113ED71DB4C250A923
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/6.bmp

SHA256 719967864c4c6ed44a07ee40d9474047635f98ff970bdefc5229aaa4e2bf3bef
MD5 f508f16cbeba970dc3929da448f21098
SHA1 245bdeccbcda280250a37617a497d9b3321978da
SHA512 87ab56a227998c8da0b4934b1f1029c187b86f20b7c2a83107edd58334642a478b93d54ca0f7aa09c5083060a8b59e4d5f2dbea3d289a791c920db5001029301
SSDEEP 768:Nps1Bq7LBrmYBONU48adeqDK5G2E8kPPEZi/W6JZJtAHXymz7CARFDvkb4XCRzr9:kqlcaHTrcufDRyBPl
TLSH
T1C5D3583D109600E0997193938B3DF642BCAEBA5AE7523EEDEB54113ED71DB4C250AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/7.bmp

SHA256 e2b22df0d33ba6fb7b3a3e766560c074b15a0357714430586034f3f26ff5deb4
MD5 39799c0964d71e02398c91c45a46f45c
SHA1 cecbae88c112059bb6503cfb0081f4e680798be3
SHA512 cdaa3bc6def877991b0c42466b8e0ae9674ac18c742610f0b4775e92fc2f5a142579f6e3c28acc04793981606d6f22a6bf57c720a575ee6e9be593f3a4c9113f
SSDEEP 768:qrGxUqErtBwFrtnIxxq57mwaBkr3rJHpItmaq5MgXm3TUXm+Qlvv6bFUfNH8u5MX:hMtLntV2XhufIv
TLSH
T119D3593D109600E09971D3938B3DF542BCAEBA5AE7523EEDEB94113ED61DB4C250AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/8.bmp

SHA256 4f027fa514a301e6281d1cab0362eeb315df6c773a4c2d3974dbcb7dad74f655
MD5 ab990f0dd2ad493b807647e0cd25fd3f
SHA1 6bb429442e42f04eb5f1037fc73dc15fc35e44aa
SHA512 f0b96c5bb7d39c3260e33123c937c95b4c15ef9aab2d8dc6afbcb440a152806af0f63fcc2cd92950aa89b0c62c54bae5396b4f7816b4be4eaf8e5662da283aec
SSDEEP 768:qrGxUqErtBwFrtnIxxq57mTFzhJHH3iKBpWIqS9ZmcmgC0OjwvqUl6bJvLJ5Jslw:hOZ6gsQS5HZ/l5hv
TLSH
T1EED3493D109600E09971D3938B3DF542BCAEBA5AE7523EEDEB94113ED61DB4C250AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/9.bmp

SHA256 ba8ca656f0e81b8205ac3f4a3f944d61b7b1d988d7936b82d9143b8dafeed7fe
MD5 dc1faf224db8690ec068079fb1fef01f
SHA1 beb18c46955e435ba33c7ef4c028e43cb08f05ba
SHA512 b25654ac3775af1ab97673738a09d0122fca5ec201e5de6352c7fe87e37e3007f726852a182f1abf9e5009fb5370b6715b431cd7e4698350ecc8444ee0f46d82
SSDEEP 768:UqL8imr7IriZj7gNPfkxD5KhPY9dx0FHH5m1ngpMNU9sCL3B1W3nznDd3iOvRwJp:U7pRJSOJk
TLSH
T1ABD3383D109600E09971D3938B3DF542BCAEBA5AE7423EFDEB54513EE61DB4C250A923
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/AboutBox.bmp

SHA256 9f41ccadf3e51aeacb40aca9bf0a37a8f81cb5240e5d9d35bbfd85857125f0af
MD5 8d54f93d237afeac0f9a1f38419ec778
SHA1 d46781264b4d056fa2180ac4c8e514c192e6f813
SHA512 a8c5fa1686bc508a417fda165c7dde3c09a9b1e12256be2b29d86f90373ac6221c3b05244687de0b6795555f508061db38f1bcfe7d96fca8b7c3dfd579b92f2d
SSDEEP 1536:BQSNjG0phPqY54aUmMgNNjepTcr9H5GRyptiM7s:SSNsqNNjPGRn
TLSH
T1C24469CA16052B95C54117BAD2C381379477DC2F99A9E980CE2F38B22A7CEEC3547739
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/Background.bmp

SHA256 cbc2262ac4da76d3eedec54f95f18b0bc6f8e070b673f7e1e1d38f0c4e0e1c2a
MD5 b0df33ef469eb32ac0361082ca79e24b
SHA1 48ba103f7396206de392311d3bd85890eef6ca1e
SHA512 3c8652c20327c5d73cd85e52c5773bcdb301dfaf03729db18790569a69245fb455641c52c454a2b696e40aeaff9a3f4ecdd6a4fb7626a8ee354a7d94c0df8035
SSDEEP 6144:9r7r4H029RuSWqyvbfnTwq/hEyO8n7IofgcsUSIem53pwi:dArwSVANhEy7IofgTIZhei
TLSH
T16A4595D1D8C026284DF9ED16A343EEB965030FFD879434560CA4B7BBB48B983DE66583
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/BigKnob.bmp

SHA256 d0b440b71f97e14f9cdaa534daa3b6695c4639730be01fbb7d8643c4fe5c3d52
MD5 038308b664c7c730f28f6db0a9f4e5f1
SHA1 9535db7fa280882e827c2edd0c557547921b3ab9
SHA512 6a13bf662b3fe4e138da744644547e3c7184502d3b7b0c68aafef40673748252f4d371c207d6c9a752eda719abd9dd76b440806cdeff3a746cbb1c6c76ed7777
SSDEEP 384:J6BGy+U2cqJFI8AosWWaV9mp8YADM4addZWUFazcrOGYMs2DD7E7myC18:3y+PcqJFI8zsWWk9SZSM4InFIEvLL
TLSH
T1C8A31C0C59E0F9F8C7A1877828E1D43C22791D777C4E8345AA90FBE07DB6B6C1E4586A
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/Fonts.dat

SHA256 2e07347d0d6ca356a51fdaab611673c3748aabc73599edafc255af33a6d95664
MD5 9214d2202b9f4d8374668200f6be09e4
SHA1 049c8125e7e89385d79e14e6ddb48d297f1ccefe
SHA512 b0de7e0b7e52ed9aa546de79066b314b00fed40bed911afbdf9f75a4df75fe3611285ba9f51219b7ad5469f71f4a09a87949da2b6281a439e36f9f6a0570c229
SSDEEP 192:zLEzVkc1uTrTi98cCub3gKaqNDKTOMUyHlU3JWtbyJ3MI4Bpe8RTGAxAEwIQsCvr:zLEzVkc1uT+HmM3IhEzFrwDk1DDMB4fT
TLSH
T15794CBB96B7FD744881524ACDD6E41F822A5DE5BFE91B6FB48043F8EB2B0B940C0E544
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/GreenLight.bmp

SHA256 dae8344797318866589485444c0fdc69bd708c69b975c82ce0ce949a8cbf221d
MD5 ac16658dc8cd56e5fcc586bc5ea00a50
SHA1 08a6fa7376251cd6a4f0989090fa6d7c5e4f314d
SHA512 ee15b3f29a916d54d58caef920fdf5a70d029c9e578ea71e8850c2962e0c41049c492a9e7870e3a6c17b5757d9a1851b5d6ebd4c772bce2d70739614c8ec90bb
SSDEEP 192:5oG1yXBrr/MA92BWOp4tz0suw+ykelKfbkhF:5B141klQtzR+ykegIhF
TLSH
T16CE186ECD04C20367BB7119A65D75C8662090CB0C8D99D8953E39FBA7B0B267A53A31B
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/OrangeLight.bmp

SHA256 f961fce5458d40d996876c7c0802e0555f621d6a901cc1fb1560cf1ca362ad8e
MD5 c599581a4a128aefe283fc78f0164fe9
SHA1 1dd263fcfad1d5b2054e9c670925ba88677a0822
SHA512 ddb5725bc3bfa52fe5c57525a949f8ef63b9fc437859e26b36a95b98b7e9ec61a05ddc8942b6a80052e33af42e19a71685a3e0da243b136d8bc5bbfde19ee3df
SSDEEP 192:5DkjcTF9VAmItogfqOzYpJt3+YcWmgqzbCoLTCr4LA374ma4AIE:5ojcTtOfB8pP3mWmgq9lLA3m4AL
TLSH
T14CE186ECD50D21274277258940E38E8266561EF8C1F99C4AA3B2BF9D360B557323B30F
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/OverlayKnob.bmp

SHA256 6418a8be1d341df869be125fee4a4530dd8b2fed02133c318525ae903d231c75
MD5 abff5a6d250d20116dd3539922ad60c0
SHA1 7a9216973e5b7a8003ef4df16e7cf0e43f638a70
SHA512 e53e3b1fabc1d2519780a3c4c089e8622853325785d7cb77fac4fef480abcef89870c757cccd50ce9089544f76d77888955dd0e507bf5bff948d3d239780a494
SSDEEP 6:j//68lY6t000000000000000000000000000000000000000000000000000000/:b/U6F
TLSH
T1F1A302043100C106D0341230DC4081F912155E02D410035371463F49F83234C084D2C0
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/RedLight.bmp

SHA256 8663024c93b4d2379401bb178db9be8c9beb427d3c231ac6876cd70731d0f45f
MD5 674ab57e3f97ca76ac9d3face6689e41
SHA1 350ebd0d9d23ac753198d833a24953c106d0c556
SHA512 bd466b46a5839c7957eba5d717163f20cb9f8ccd1a9f201b1c334a4df88cc00b0418de6168f31366655a1b2798cfd03435dae8a1d696852db336f9aea7401df3
SSDEEP 192:5DkjyF3FQa5Yh/277eb3U6BoqDxnzUVjsC6WmkQIB4uvbs8KskKr3LN:5ojyZBm216BogdKIC6Ovbs85kKrR
TLSH
T13AE1B5E4C41890264A73265AC8B7ECE271461EB460958D0782F27FDF370BA9B643774B
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/Sausage Fattener 32.dat

IMPHASH 62b0a5f873cb2de51be602047c657213
SHA256 662c308546fc42506073e1f12d38252f7cdaad888e13ee4cf109d062ac609955
MD5 69d6f94235a27ef0e06544e9ce0d632e
SHA1 ea92ea58a7db386092a868eea87949fc5d8fa626
SHA512 39432cea09d8a9921176f14aaae140ce6638c8321f5fe3808616152dc84473bcbfd0215150632d6cfc32f78c7419576a20d5e00f19507018f7de88761e577ea3
SSDEEP 12288:8E980FzsrMFYul42/YkXE7bZ0TaOI7Yme6lvWHSRukPOGx4FCN225w/l4n:54MJ9TYYmZoSwGYCxC/l
TLSH
T1F3056BB239588D31CD98117B44FAAB6960BE5D158B65E4D3AFE4BA3F0C741F0BE31902
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

363294

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Build\SausageFattenerPC\Win32\Release\Sausage Fattener.pdb

user32

BeginPaint MessageBoxA KillTimer EndPaint GetSysColorBrush GetWindowLongA SetWindowLongA InvalidateRect SetCursor LoadCursorA SetTimer CreateWindowExA DestroyWindow SetForegroundWindow ScreenToClient ReleaseCapture SetFocus SetCapture DefWindowProcA GetClientRect GetUpdateRect UnregisterClassA RegisterClassExA

ole32

OleInitialize OleUninitialize

gdiplus

GdipCreateSolidFill GdipSetImageAttributesColorMatrix GdipCreateBitmapFromScan0 GdipGetImageHeight GdipDisposeImage GdipDeleteFont GdipCreateFont GdipDeleteFontFamily GdipSetPenWidth GdipCreateFontFamilyFromName GdipDeleteGraphics GdipDeleteStringFormat GdipCreateStringFormat GdipDeletePen GdipCreatePen1 GdipDeleteBrush GdipDisposeImageAttributes GdipCreateImageAttributes GdipAlloc GdipFree GdiplusStartup GdiplusShutdown GdipCloneImage GdipCloneBrush GdipRestoreGraphics GdipSetPenEndCap GdipSetStringFormatAlign GdipCreateFromHDC GdipGetImageGraphicsContext GdipSetInterpolationMode GdipSetSmoothingMode GdipResetWorldTransform GdipTranslateWorldTransform GdipRotateWorldTransform GdipDrawLine GdipDrawLines GdipDrawRectangleI GdipDrawEllipseI GdipDrawPolygon GdipFillRectangleI GdipFillPolygon GdipFillEllipseI GdipDrawString GdipDrawImageRectRect GdipDrawImagePointRectI GdipSetClipRectI GdipSaveGraphics GdipGetGenericFontFamilySansSerif

advapi32

RegOpenKeyA RegSetValueExA RegOpenKeyExA RegCloseKey RegQueryValueExA

shell32

SHGetSpecialFolderPathA DragFinish DragQueryFileA ShellExecuteA DragAcceptFiles

kernel32

IsValidCodePage LCMapStringW ReadFile SetFilePointer GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeW GetOEMCP GetACP GetCPInfo GetConsoleMode GetConsoleCP GetStartupInfoW GetFileType InitializeCriticalSectionAndSpinCount GetStdHandle SetHandleCount HeapSize IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess SetLastError TlsFree TlsGetValue TlsAlloc ExitProcess GetModuleHandleW InterlockedIncrement InterlockedDecrement GetCommandLineA CreateThread GetCurrentThreadId ExitThread DecodePointer EncodePointer RaiseException RtlUnwind GetModuleFileNameA VirtualQuery HeapFree GetProcessHeap HeapAlloc LoadLibraryW HeapReAlloc SetStdHandle FlushFileBuffers WriteConsoleW CreateFileW WriteFile OutputDebugStringA IsProcessorFeaturePresent CreateDirectoryA InitializeCriticalSection DeleteCriticalSection UnmapViewOfFile CreateFileA CreateFileMappingA MapViewOfFile GetFileSize CloseHandle FindFirstFileA FindNextFileA FindClose LeaveCriticalSection EnterCriticalSection WaitForSingleObject GetFileAttributesExA GetTickCount WideCharToMultiByte MultiByteToWideChar Sleep GetLastError GetProcAddress GetSystemInfo TlsSetValue SetEndOfFile

comdlg32

GetOpenFileNameA CommDlgExtendedError GetSaveFileNameA

Resource/Sausage Fattener 64.dat

IMPHASH 71eef6a4413fd0527c0d774b1d1d1e98
SHA256 59b707eefe8286a9468d8ddb4cab4fc5ad4090ef21d68f4c57a3da2c9a5df58d
MD5 54796ccdb2d6031b2e0d1259e534caac
SHA1 5c46b4ee988900a2da2a0a60314ac45ac265c9ef
SHA512 d3fc2c18f431bb7a7aa08ebc70026409363700bc509c22e53d12e14e480fb9096cb0e583cead0e882ebeb21c1b29e7655d86bad65a041b27c377404fe41c186a
SSDEEP 6144:B12aJOgYCwbtc6bZ7e7c30XnmT/0Vn3wTpyw4156CM5uG7t6q5bAy2WGvy+Vv1nC:5kgob6QZJ0Xnq/3N5uG7eyDcFbA8oKo
TLSH
T147F44B75945949D6C83380B6C8A3C641EBF6BC644B346BD702E4063E6E7FBF88676720
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

296048

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Build\SausageFattenerPC\x64\Release\Sausage Fattener.pdb

user32

SetWindowLongPtrA SetTimer CreateWindowExA DestroyWindow KillTimer InvalidateRect SetCursor LoadCursorA DefWindowProcA SetForegroundWindow ScreenToClient ReleaseCapture SetFocus SetCapture EndPaint GetClientRect GetUpdateRect BeginPaint RegisterClassExA GetSysColorBrush UnregisterClassA MessageBoxA GetWindowLongPtrA

ole32

OleUninitialize OleInitialize

gdiplus

GdipSetPenEndCap GdipSetPenWidth GdipCreateSolidFill GdipSetImageAttributesColorMatrix GdipCreateBitmapFromScan0 GdipGetImageHeight GdipDisposeImage GdipDeleteFont GdipCreateFont GdipSetStringFormatAlign GdipGetGenericFontFamilySansSerif GdipCreateFontFamilyFromName GdipDeleteGraphics GdipDeleteStringFormat GdipCreateStringFormat GdipDeletePen GdipCreatePen1 GdipDeleteBrush GdipDisposeImageAttributes GdipCreateImageAttributes GdipAlloc GdipFree GdiplusStartup GdiplusShutdown GdipCreateFromHDC GdipGetImageGraphicsContext GdipSetInterpolationMode GdipSetSmoothingMode GdipResetWorldTransform GdipTranslateWorldTransform GdipRotateWorldTransform GdipDrawLine GdipDrawLines GdipDrawRectangleI GdipDrawEllipseI GdipDrawPolygon GdipFillRectangleI GdipFillPolygon GdipFillEllipseI GdipDrawString GdipDrawImageRectRect GdipDrawImagePointRectI GdipSetClipRectI GdipSaveGraphics GdipRestoreGraphics GdipCloneBrush GdipCloneImage GdipDeleteFontFamily

advapi32

RegSetValueExA RegOpenKeyExA RegQueryValueExA RegCloseKey

shell32

SHGetSpecialFolderPathA ShellExecuteA DragQueryFileA DragFinish DragAcceptFiles

kernel32

GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter HeapDestroy HeapCreate GetVersion HeapSetInformation GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW IsValidCodePage HeapReAlloc LoadLibraryW GetOEMCP GetACP GetCPInfo GetModuleFileNameW SetFilePointer ReadFile GetConsoleMode GetConsoleCP WideCharToMultiByte WriteFile GetStartupInfoW GetFileType InitializeCriticalSectionAndSpinCount GetStdHandle SetHandleCount RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess SetStdHandle GetModuleHandleW GetProcAddress HeapSize HeapFree HeapAlloc FlsAlloc SetLastError FlsFree FlsGetValue GetCommandLineA FlsSetValue CreateThread GetCurrentThreadId ExitThread DecodePointer EncodePointer RtlPcToFileHeader RaiseException RtlUnwindEx RtlLookupFunctionEntry FlushFileBuffers WriteConsoleW GetStringTypeW GetModuleFileNameA CreateFileW SetEndOfFile CreateDirectoryA InitializeCriticalSection DeleteCriticalSection UnmapViewOfFile CreateFileA CreateFileMappingA GetFileSize CloseHandle FindFirstFileA FindNextFileA FindClose LeaveCriticalSection EnterCriticalSection WaitForSingleObject GetFileAttributesExA GetTickCount Sleep GetLastError MultiByteToWideChar ExitProcess GetProcessHeap MapViewOfFile

comdlg32

CommDlgExtendedError GetOpenFileNameA GetSaveFileNameA

Name

.text

Size

469KB

Virtual Size

468KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

156KB

Virtual Size

156KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

27KB

Virtual Size

125KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

31KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

text

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE

Name

data

Size

32KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

436B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resource/SausageBottom.bmp

SHA256 223283d885aa71d8e1ff73f02c4df8d6d40c6b2c9b371c984a5ffedfc9244ced
MD5 34af6f4249eabf73d03f18404d4e279e
SHA1 e60617c8e9cbad6773d29e45b9dd361f1646a3d8
SHA512 cdb44bf28b005c5b8220ab5bcedc8bc49b6962e96840048b700073eafba8faf0b9b637ce9bd8d3018ef01a053a696a43ba63dd616c554579348519da29ac061a
SSDEEP 768:MzSbNWB7BXWh/HO50X3bbC3AhsWZP7aZORCPqRDkd2B:Znbt1tDkd2B
TLSH
T10783C33C14C500916973D3A3CA3CEA02ACAFAE55F7423EEEE744506EEB1DF486249567
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/SausageBottomAlpha.bmp

SHA256 040fc672e445e01866ba76ad0c9aca0039b6d96ce574b61d79cb4089b48716de
MD5 a2ee9a815337bff1292f9dfb707c0858
SHA1 06069c862f101e6767950aa9f991f6087cfa6a53
SHA512 807246e5565f369ac94f080047859809d65c86c80833270ca0b1a560ad259dfd8ac2c7e007bb91cf90ff6c74d61c92db51eba8c2e2d5a95c6955d6381ef43dc2
SSDEEP 768:MzS+wZYHJ7NUPLe8qG9OZA1hZTKZrYYkRuLB:+w68dmkR2B
TLSH
T1AB83D13C14C540A099B3D3938A3CE942ACEFBE59F7423EEDF744502EEB58B486219567
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/SmallKnob.bmp

SHA256 3c12dbd602c83761453ad6e83273c75dcd16e72e254fcb0b5874c9112d7fcf44
MD5 74d08b6908b10f665a2782e099d8137e
SHA1 c10238fc58d698334917276d1e2380cb86e47ada
SHA512 d0e7e5451bec6824d95545d6f4aa2a34894a3aca5cb28ec082b5f8f95e164e3f5b0dc6d1c503c91473cbb3f465f20fff228bd1a6b01991a2e823d9554499eba9
TLSH
T197411896D446DA2AE951CA34E5A72749778F02C64C203607805CBFF3830EAAE0F060E6
MD5 SHA1 SHA512 TLSH

Resource/Wheel2.bmp

SHA256 d14b8d4dae6875bfc11d2501c9bb972770d91164f7cf503b4477fa275b3d91b5
MD5 53ce88ab4c2136c751b33526ed11e617
SHA1 aa101ca595414bd291ea1a4da2d295d654cc6445
SHA512 a593b9df9e49de8bae1e2cef19ba7dd9ae75b56b818a1346557e5f82b85e09b913381be20fc94c2a6629222228bcad14072ea07325dee3ac260cd2af08cdfb64
SSDEEP 192:90YdY/eWQLmeioGLX18HRNInhkPDCVXkKYUwF09YVU6+:90PomeioGWH6hkkYUDx
TLSH
T16543D7A1931031D0DDBA47AEF4268C4D138EDDAFF06C6385D5DA35904B7E63EA6F108A
MD5 SHA1 SHA512 SSDEEP TLSH

Sausage Fattener x64.dll

IMPHASH fc5e8bca03e7a8bd189935814ca20665
SHA256 7ef161e760e967040516a79d961bd137fb12a54753dad80d16caf26fc2421994
MD5 8d7608fa89581b1fb6f35c48a6f110ec
SHA1 9741b557de8207c934b81e00983eeba1f71e1f7b
SHA512 e962f63c38bb37b65d0adbfd5020243f2bed6cffebb40c61c8ebaa43d8ae1e58e7f8d51a77c28c56046a4c7f03c65440e30f59ac6f8ae05141254228b2fc33e4
SSDEEP 1536:a7wHSj5Heqr6T2b2XrVx4GHNsCqhmMQfVuzoC2BXTt3xHH5ZuMBuNpHoUqNJ4X:aO4kq2T2q7H4uNXqhmMQfLjxn5FAoxLm
TLSH
T17F936C46329004F6E4734234C8E36E55E773F856427983BF07A486AE9F673909E2B732
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

7232

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Build\WinVSTWrapper\x64\SausageFattener\Sausage Fattener.pdb

kernel32

GetLastError CloseHandle CreateFileW GetProcAddress LoadLibraryA FreeLibrary DecodePointer EncodePointer GetCurrentThreadId FlsSetValue GetCommandLineA WriteFile GetStdHandle GetModuleFileNameW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapFree HeapAlloc RaiseException RtlUnwindEx FlsGetValue FlsFree SetLastError FlsAlloc Sleep GetModuleHandleW ExitProcess SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapSetInformation GetVersion HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage LeaveCriticalSection EnterCriticalSection LoadLibraryW HeapSize SetFilePointer GetConsoleCP GetConsoleMode HeapReAlloc LCMapStringW MultiByteToWideChar GetStringTypeW SetStdHandle WriteConsoleW FlushFileBuffers

user32

MessageBoxA

advapi32

RegQueryValueExA RegOpenKeyExA

Name

.text

Size

48KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

text

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE

Name

data

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

436B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sausage Fattener.dll

IMPHASH f4b67d0e8e832c5f08a33a057f12be13
SHA256 42349ce1da21c41e2f72641a76d64fca1a7c7f6c405a50d331c581d2fbf10f76
MD5 52e95d9e2e0cfc550ce4e40f1d686480
SHA1 59984bb6becc0f6084851b623f0f2c4bbc901fe1
SHA512 95b59db3be017ba7486dc774d80af1bc55e50dfcb86b918f266d4db77fc88061b84ba77fd1682a2af81e49608b23ffa4153763a264c85078b32d399b6ebffd03
SSDEEP 1536:YVoTTf6N2C80UWDOS1Vjw2+OSqbUSovFFvJnystkH+vtmgMbFu6kN:NTxtlB0GNBo4Ag0Fu6kN
TLSH
T130A38E1172F3C9B3C0BA153448689BA25A79382256F444BB7FF91B7E5FE03D04A76362
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7877

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Build\WinVSTWrapper\Win32\SausageFattener\Sausage Fattener.pdb

uninstall.exe

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 09511049b3b5d519bd9ad7fffe29fbae5bde288364e69cff6490a64d6e4f601e
MD5 4d80cf1dcb4050035ababe91073376ed
SHA1 66479ddbc4426fb45a526d7a6fb1df1ad09eedde
SHA512 972bddb89968cb422c6e35aad471b3ca262a40169ff624a207d5a4053efd211251fa04f6381a34230163d0a22239897e751b24dbfa8390444ffe77b7d3c261cb
SSDEEP 768:c4wO7XBz+5Qm3W0tYdrQZHV4EWuWEUOg4jjfS3XJ3Tc8F1:PLXB65939tY6HBg4sXJ3TJ
TLSH
T152039E6A72C1D4BBDA52053005F7F73AD3BBF3E91352156B67242F7D29611C38A2A2C2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12491

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

tvsthostx86/Data/DefaultSkin/ChainOffOn.bmp

SHA256 51b7775bc167cfb1c58b79f943f054e9c637fda193fac805b33a7f6bf66f6a49
MD5 df10d1aa2242f5995d7e3bbdb6d42781
SHA1 a45364727cc29ff770ea08984ef878733c4f42aa
SHA512 598724c28bc6d67832555819a2e685385fe47e5cdf0bb74cb5649ab33d2d667985f1b22e6a8d20947d12ff69a63c041203c9f0421cf5ec6581798c8012a43e3a
TLSH
T1093130291B00E880DD58C53089D57A390728F997C0F93462A2D44EAEAF27CF3E1601E8
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/ChainSend.bmp

SHA256 2a711533c94e3e8ce930f9d67419a71f867e0ddc3af9906323cb2aab7276b296
MD5 bf4db63f76826544f64db8277210c0d2
SHA1 90bf661bd7cc2edcf0ee2241a60eecc54cf3661b
SHA512 bbc6c18c30933cd95167ef43f382fbad7d6494b65c43f879bf2d4d112d14011adc3412388a83799ae90ad650f9c10a27ef1c47fb822e02fbc0889c06c850f0df
TLSH
T10B31CFFA26134C0BF8558034898679780579B7C7D0F734A953E02D5E9F37DA2A2A4214
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/InnerKnob.png

SHA256 71bc3345c2f6bca8b5b57fe3dfb24e6f08d42c0494b8ffb08eaf3d602371f7cf
MD5 cbf5594e4f8302edf3e985640448fb36
SHA1 d23a32581e52711bb76ed59692b9b14376ef4b8f
SHA512 7d649e5b1bb42645eb35b0efac6a06451dadcd254ba8a6862563f4423b1e0f7953825a247aa241ab472a87a68cb4be395d29922467d6416514f910c02185ee40
SSDEEP 192:/S4dttn3WFyK1Vb/fujM6aZIqU7RJ+dhxcK:K4jt3WFhR6aZI1udhxcK
TLSH
T1F7F19EA6FC0D1E44A5B7CC25D7B2996696CA2498BE8CD1F23CFF23131E096F8A1D1C11
MD5 SHA1 SHA512 SSDEEP TLSH

tvsthostx86/Data/DefaultSkin/OuterKnob.png

SHA256 108a1e8ed2b8f4c4a16c9abbd4b54ab7c148a31597fcbd05e9a9f668268906ff
MD5 6f624efe87f055bdf4f2eff09b91368f
SHA1 00a47f894b916eaa996282bc407eec1a895f87ba
SHA512 d2901376e5a23ba12a7aad4529a0281715d59b2a024aa0bff13336d49dee2feec57c97e9190236903c330a83bbb88e6b67b85f9f20e278081d42e982713bcab2
SSDEEP 384:Y6tVCnkIHsC1cIccyYb35tu+0lEx1KTutmeg:Y+CnkIMabcc375M1Cx8StM
TLSH
T1EC429EC3BD2F88AB0538CC550570369776432F1AEE8B011748A6663E5353DD0CA6AF2B
MD5 SHA1 SHA512 SSDEEP TLSH

tvsthostx86/Data/DefaultSkin/PluginFx.bmp

SHA256 ceed253f64408d25bcdb03b6bd62aae50ed640809365a8169e72f9a8829f7332
MD5 250a9a4e9a129d4fe1238d0184d4cdb6
SHA1 0f6013eacfb154ee511a2a5b6df8185f2ea1183b
SHA512 a84baba51039cbb175b254b42bff78628af6a4d5d484a22edfbd29ce3758bb973e79b3ce54bb92e179db5f9c0a5f008f6fc343c2bb7985798bc0ab33d8dd1009
TLSH
T176E0240A315AC688D84C0C70CC43C6F818D4DC02AC868137F2E4BBAFB835A056C0A0AE
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/PluginIn.bmp

SHA256 256d09a283889565511faa68e907ebec62416be9ac0c6f5dbe7be92ef6a70a6b
MD5 76b99d430ca6bf537a1595e3f52728c2
SHA1 6b54657a5e0e563d82193f334ee8591f520125f6
SHA512 fefbd85de954f4cbe141313ac5f9b3017efd96102f3fe735d27ebe10c1357b5ace173120dd6e2240462473b1f2f4353fc3b56040b517192eaa2b0003ed4f18a3
TLSH
T1E3E00B136117C45BD02010B2C8CABEFE2921BC429A4C0D6733A1BB8F6AF47075E4A0E6
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/PluginMid.bmp

SHA256 81a9450db656b0832ec8594063f1a8d0c8091f18809b79cf8d3294b76df8afb7
MD5 bfc8f21d87d3ca62a8b06f761d87ab14
SHA1 385fcc57bf80a5afe8890253a833bdb42ff62519
SHA512 7d23db1624d485e0026e5b933c20eb282ea3d7b4e5d43780bcdb629fd26faf69963fa0c025dfe2444490912cd342bf67067047c7e171669fe978655f4344098c
TLSH
T1B1E0240A3198C60DD45C9C30CC03C5F81880DC12AD0A8577F2E07BEF7C70A05680A05A
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/PluginShell.bmp

SHA256 203cad1dce13308e290c324b46ddfc00bc553f439e5076f560a6c5a2f14d30e0
MD5 97c1620aff983f5b2c20313add3c5a15
SHA1 a232019cdafd3b4bd862d3ec47a4176e6b47228f
SHA512 6e2c197f6b4bf52b68ec2f39ee6b71cc5fb640b63a31cd21abd0bb6c760cc2a99b243875ddbfb26dac08efa3a3146a6ec30fa03aa842ff720f3c2e268cc9ce2f
TLSH
T1DEE0920A719CC519E00C18B0CE07CAFC19E4AE06DCC4856B72E07FCF3E75E2C2009951
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/Skin.ini

SHA256 0665cc58fc8695af9a1c9e9024c0dd25edf560a0a957082a2671e30066f5e02e
MD5 37b925206428d0205a3cc55b02948636
SHA1 526e7f1d88516806fe4c5c442301c57f1f0f4c98
SHA512 4551760a72c953b3bcd45c10f3a65655ed21900d09fc54c3f447719920bb29fb5eec46aa4079fa7a81d073003ac50dfa0de771359cc5a4454ea5eee6d3805221
SSDEEP 384:IvWdHszjuf+OBLQUfseP3sjHEsbkbdlIF4hwxR1ujrj481DvN:IaU+MG93MEsbkRlIQ6Ss81DV
TLSH
T12AC2B9027E8A23B20433C109564EE9C5F31996B652B699D93C6F0D5D2E58C7BC1BF2F8
MD5 SHA1 SHA512 SSDEEP TLSH

tvsthostx86/Data/DefaultSkin/Toolbar.bmp

SHA256 fe420c28ef5cb07909614678e469bb214dd7ede76d2bff70dede69565af8d0a6
MD5 c50db16e7d19fed5de3e08338b233e74
SHA1 0826f9c25d87a71f9c8ef067f7d89417cdb7700f
SHA512 2b7c45c15c8f1aa1c8d2f64872c3ba938153fcdc2a2eeabb93949c740d5c7c5a9eba4922ab1aa66fa07785ec7869cd29ff8adfa8bea6fcc3f85aac2cbe71ce54
SSDEEP 24:fIV0giqqqqfqCiqCiqyCiqqqqqqSD2qCiqCiq4iqIiqqqqqqqqqqg/YqfbqCiqCL:fk0J
TLSH
T1946206423D2EC9F0C4140434CC8ACBAC1A34BD42B800A107F3B6BFAFE8B8761E61664C
MD5 SHA1 SHA512 SSDEEP TLSH

tvsthostx86/Data/DefaultSkin/ToolbarDisabled.bmp

SHA256 cb5f0caf93c7a3c7dfb1cd7a0dad7cd7b38c0922a0b1c1788051e49620bf23ff
MD5 ba91c1669274b3218710f89e02cb5cf6
SHA1 a2d13872e3f5a061596109698408325d31819112
SHA512 ddf1dfdaa612c774f664b78de7a1b6da0885a8f0b0d38ee200948283c8c812394ebe4af0d4e45c7bdab819702fb36c5e2f1d8faf4c045fbf570d7f3478537d6b
SSDEEP 48:fk0Vbvf0iv001F/eUV4XHiAY52gy3ncEKpqgbbFpwTzXLlhlp:fHWgfrwTDLDr
TLSH
T1B4629DE3CDA06C79A33091ABD7BEEFFD851015A69BDC10A62206DF8935227D05EF1718
MD5 SHA1 SHA512 SSDEEP TLSH

tvsthostx86/Data/DefaultSkin/abutton.bmp

SHA256 475c996461d99abee5b6183e3de8221a23c937c711dbb9e79096be8e62ac8134
MD5 e9c20d265cdc3378c2adca071e870cf8
SHA1 b36988d085ab94c68cd03b63788b613dbbc4007f
SHA512 17f8f6ada173d67a9a78d733a3186c34f27a11db30dc1ed79759946a383c3848a5a2675e211ea2069068a27e69651b53da6c04cb3c737e349909a03e073fc67c
TLSH
T19B31EAC4D2261A1CDE7F8770906D3A07E926F12065E210D2B5F6F8D543017E713D0B89
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/backgnd.bmp

SHA256 74e2bef7fae49dc79c390024d4f99d40eb1d411c43372d322462c8f94c999d28
MD5 d619423937d9eb031715ab9b9d637efc
SHA1 6d9f87e734e76fa8374d507fe2a174328e4dafac
SHA512 7f7f7aef3e4cd06b056f670fbe60549361ae4bd4ceca3d1ae126aff4624fe02c11fff16358ecedd2857d45e1846970596a76cc34ed055b323bdd013fb7b37304
SSDEEP 96:DR/fZMpRooLRCw5wZH5jSAz9e5VGHjSAcYmvnMnfu03g7rfPucpM1dlM4mdyA1wG:tpIHCwsFSJ54HjovnUyWcV4Mydfe
TLSH
T10D3247184570B23EA5AB47F7FA1D70C6DAC4A4C3B6EE32A0855CC72163A12DBDE091C7
MD5 SHA1 SHA512 SSDEEP TLSH

tvsthostx86/Data/DefaultSkin/bbutton.bmp

SHA256 6ffaafb77626eb01fcf51ca19011ec7598894776a855b9547971850779a04080
MD5 317772bfad081aeac522f4f2f571c33f
SHA1 817c9934f45de73e22010fa82c371c4007d737e2
SHA512 61965cca43676abe672780b260993205866dcee02f9662a322f285cf69a62e3f7f7b889521ff65580352da771bf62921bb30ac6b2401fa4cca3ee015569029d3
TLSH
T1471132048C0BF70DC9E3DDB092B6276BCEE68DF456CA14A9D209C46A58205F5AB4D10A
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/bgdata.bmp

SHA256 1ef053662df520ab257474b1eacf18a3fb1179bb13d2717b88dd5a0150ab6b2d
MD5 eb592b88f29c2b1deea881d4a0490b78
SHA1 184253ca2730c31f7876205023a1bdb0521112ef
SHA512 981ab869b3cd5753edeaed6642050f0a799da5cb7d159c6e93d93192f69a79cd9b51e5b41a54a38e5b071d8d3f0b0ef27420c4a2f76a2b851f9bd95cd089fdcf
SSDEEP 192:txgmfDy8mtweapFjap7aRI4+4xmkjh19vp4Vj:AmfDy8mtweQisjPDjhiVj
TLSH
T1CD323758453CE139A4ABC7A2FA1E708EF9C894C376EB33C8844D875246A55D7FE092C7
MD5 SHA1 SHA512 SSDEEP TLSH

tvsthostx86/Data/DefaultSkin/btnsolo.bmp

SHA256 09953fd26be25c61bc7c41bc10eacb4d56a5f3c34b81bb81e1d6d0323c681b32
MD5 91e1a9a579d95abb1de0e0a734e62c81
SHA1 3007e24529c05d12aba484ccbcbbbbf52286db17
SHA512 0e90082cbaf3ce58a702da19c5a4935a949f64a4e1c85cb834191e22b3e153d040095214506aa30baf3e18bd76d47121ec6d249655597b40913e354a95a01264
TLSH
T14431AC9219741951CB614DF8BE7960AFF6307A91381DB517A712DBD23BBCF0192D0E1C
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/cbutton.bmp

SHA256 611c3b41fb364d0e1d0b99982cb0701f58bbc7e03ee14d3435dfe48c89ed954b
MD5 7af8c339448e97a79f80b688b08366cc
SHA1 bfed04a4b2d6eb2abac43241b8e96dc51179285c
SHA512 3c6fde6e6ac23495b93799b86d91e99fe976064222606cd3c059f9589d7ecac8922ac72bb97112a9cfaa926ff8e997e29dff436e98f25a12fe3345a71b76e75c
TLSH
T19F31C901D6E44FC1DFDD16F0CFCC5958073C964ACEB2915C36AE896AB071A289A1254E
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/ebutton.bmp

SHA256 37aa77769eb5bcde236f728d49333efbf45c095f482998da2af3249514d99993
MD5 f6b3cfa66f25037d2004f88b3c4c9fa5
SHA1 19618067f6f728dda19ea5883825bc40488adc07
SHA512 2d973369e760702e64ff1bf98d65676d38853313099ca2591c9c478f9e63b9aa566358ef36aa9351bd552f09290f18944edd92da583a6587e6f1eef2a87a0f6e
TLSH
T17D31A73579E78096FE69C2350158BCC95C935A7B0DBB5A4E6362109CAEE42F3801D82E
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/effect.bmp

SHA256 17308f1c9037a3dfcbec0ab84669faee06a3ff2b152efe3a74eeafed50222ab3
MD5 e6b7675d8295245f44e3a6a8436bcbc1
SHA1 5d90df158f86336e0693b42d98fa70f5a268314b
SHA512 cd495abd22261b57e5a230db0427fa20e48f027ad2d6859fc2f915ec0e83909ef6a2cc00ffd111d99920026348ceb7cfe2c8c17361a3a6dea98a1f6f21efbc0a
SSDEEP 192:7gNso8W86G64T64j6AhKi6Zab668Bl/0XOUiQnO7uqi/QkHpv+G6CKfOMk/026NL:7GtxVLpISLMCn
TLSH
T18612CB5EED5592C5CB6045FB1CF8C0D4C49F8E33FE875872B0A4A45ACA46E22E99323D
MD5 SHA1 SHA512 SSDEEP TLSH

tvsthostx86/Data/DefaultSkin/effedit.ico

SHA256 bdace1d91207377e176b4ddc0cd67545df7286300b9ec47bd615eb9c4429eca6
MD5 02373f9972eecbaa4438b11c5b15787e
SHA1 0843a87651d519282ecc27f94a9351d6f88ccd7f
SHA512 a77a72acf1d04fd519cd5fe30f32699a6dbf50978af3b8d4756eac143b21ac76ea35750ea10ede0ffcd8c2d5f8469cf8022d09c2ebd19e2d7ac65ba6d7f086dc
TLSH
T1E751CA1616288D8DF9C6CD3C8453A9781628FC274B8139F767D05D5F2E33BE3EA215A8
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/effinfo.ico

SHA256 5fd963a5d711b205397ea5dbaf7a5fb2e2a512749a79696b5323d9f97ad81a2c
MD5 e8d5cfd8f6e1593dcf2609a3881a93c8
SHA1 6efe8575a077925496ed7da15d30c385cd327727
SHA512 11225bd7cbf20297c314d624348e493b7317918e2f6c290087653cc62fc3a9d38e10a422a94a2f4e3b03639dc2daae80ccc768bb957d594b900441f53a4ecede
TLSH
T110514B231624888DF6C6C93D888759741624FC5387527EE71BD09D5F1F33BCAD831199
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/effmidiparm.ico

SHA256 375d34972b86864ffdcad4ae47b6df9be5c0e90cb7a9635a08278d7a7d9dca8e
MD5 b59f3c98a5a02444aec31d430ab87f77
SHA1 f1fea340cac2da824329923d8ec46ce3e59487e6
SHA512 b0d99ed65a3d2fbf587e9f7240cbeb068f628e1d4e195f29d3e314ecc9893b765390563e35a128afdec32710cc332c6b2fefbc271d20a83a0aa4f22a5614f379
TLSH
T14E519C931565488EF6C2CD3D855396740228FC135B5139E717F09E4F1E73BD6D9342A8
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/effparm.ico

SHA256 d1919c2a4294f938305d4f5d96a09914a380cf8c5eaf4cb5b9e7b7e555f94b67
MD5 691779d4a0f2c026ecb88244a7f9eec3
SHA1 4bdbb0e834f7de05fd46d616e9b5b49bb74e13b5
SHA512 0243737707e50e383591e396545756e50d60652da8a8850b9963087233089a4991fc1f89350408dfaeeacbe30571344e51173117b097c12900007eebfb43bbc5
TLSH
T14F519D671199A884D5C888394D87597016F8BDB3E8A1667363F02E0F6F33EC1E96151D
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/fadercap.bmp

SHA256 1c1d8667a16092831ea2c00a2d61d6a5839a78d5ea3bb1e877978647c13a5688
MD5 ab10ad27d66cb06e13e6ef8880a7bd8a
SHA1 9e493a7d862148e1f383cf4e240aaa211d4256e5
SHA512 cc680716afbbf8ca255d64121a980ed5f5b0c7684fc4faa4afe4ba2102829cbf3fee6b05c841494de481ed6a80332c4f3f6c7fb4c5c63976888dd077954c9c81
TLSH
T16B216D2216B04886EB94DC36484F98AD0528F817A15EBDC933C39F273B03EDED56422B
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/iabutton.bmp

SHA256 81bcaf82bcc358bbc05f588fcd989c309494348ebe366b3ea9280e475301eb89
MD5 de8f7a34459fba1c54deaa03a4088251
SHA1 d884b6579a3c7c9fbd747ed6544a884412bd6433
SHA512 b9b0facc1a4af65b829dec93d648da5e2953d369f6af16d5d48856783548d46a55d53cb08de91ec0a34bb8800881ae457109426b690be012ce6f272906872102
TLSH
T177217412E1489C44EFC9DD389DDED7A70EE84430AD67C53DB1C95821B0CBEB1232A302
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/ibutton.bmp

SHA256 35b67d4f601cbd3335a0d6a035e0491fb1b5b7a0c1b9e2a13eaaa8786ecbda6d
MD5 b86748f5ba5bc9ba1ca9e22463a83f65
SHA1 bfe2fbe96b7840d70a09573cb5bc21aeb0a47496
SHA512 b32c42830b37065ed5219aff44ecf04e1510c349ed4ce747ccec2f703c81b8d3b8cac943478c3ddca46bfa60a2d32c66da73cf00732ec99b43d5da9e11c8c7ba
TLSH
T1EC31B93256278C90DED4D83249DA68748938FA9394EBBE7007C04E2F4F13CCBD15922E
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/idr_main.ico

SHA256 13cca568faf8bd5e8e2dbfcd648b61aedb7aee160c8c00385b40ccb648677e15
MD5 b681bf204bc8afe2105c52f3e76b7e5f
SHA1 08c45cca271410a463e3dd4aad64d323f959c461
SHA512 d1f8a76f36ea34054aa594b058282043c036525aba9b5b004864823e6183d03c125985e99e8f5554b9a31c97a2102144fb2005edd7c633552505862156e6dd94
TLSH
T19461F51AC2242CCEE9C180BD45574A282124BC93D3553DEBC7D0BD4F1F2ABE5E53629B
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/instrument.bmp

SHA256 177422b9a4fd5988501606fc3920a1daa55311110a9642af3c80954c66b6c19c
MD5 f5a3bd4feba2926d249fe8890a6d4bfb
SHA1 05c158db0afc44be76635c0c5f9d5097fb0a2119
SHA512 01983ffd4ede0ebeca1dfcd6a3f90a79515b3ad638b3652992e8b8c3c1a4a8bd116831a8f3cf7a017e2130dc970c1d1d77cd096f375b2e81cc55a50d460d870f
SSDEEP 384:t3kMvfIEeAQQ4gUUwEFcTrUo1B3XUiPBZfvHR8SLUAO2pL/4zBAGpvv:tNfIEeAQQ4gUUwEGrUcRXUiPnLUAO2RS
TLSH
T1087259BB653E39E6DDE8593980A5749923A2E0DFD40FE5A30198393074F3AD870CD62D
MD5 SHA1 SHA512 SSDEEP TLSH

tvsthostx86/Data/DefaultSkin/kbd.ico

SHA256 91ff6079cddf311c9cf361ff1f6c21bdb190a4f51ef92571e66a6d3fe939d37a
MD5 0a0b8cffbe46e2dd0d3099ba658a5604
SHA1 4717238d8d92d3881fcf4372587d87e132affa5b
SHA512 fdd69a6f338744dc71e6df50d73bca501240a1c02319c42c4293d2eafa678aa0322881f63678fef450a9ca33818d8b4d814a2d55040830a63e545758a4508e41
TLSH
T170117501F81474C9D4C0067A44E7C57A96286E2BB6C3AC031798FB5EFC383206E4B9DB
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/masterfa.bmp

SHA256 b08d30fa3992c3853b0a765f92d23a0e9b21e098f2a02891fe2126569686b31a
MD5 19f059ec85972f08e297161f91b8d6d5
SHA1 cec41b970061f806d0a786a41c94ded3d242281b
SHA512 38d0acbe8676c950d8dd867b90fac6cd14e3c71abd53bdc8f8cbfa7eaa749eedf90573ded9c2986b621adab7ed98d6d2e53299fee2c699aa3587ef178555ed55
SSDEEP 96:FdfhHAJ1cDy9zQPyrvO+7Gdkpc/lcYsyeE2:3NADiy9zoyrvO+7GSc/BsyE
TLSH
T15D91A2CACFE837D5039885BE05541D0EAAB2C90598FEDCE7D4D0AD4B963CE31A4761C5
MD5 SHA1 SHA512 SSDEEP TLSH

tvsthostx86/Data/DefaultSkin/mbutton.bmp

SHA256 2cf7944e2b947840b33aab561981f224a4a95fbccaf925be555f8b817b960e77
MD5 c4ea852ec524114ebcacbc3445380583
SHA1 be4363e83176b9a0dc1f51e22665f4171a56f74d
SHA512 50754b10cadc0c3a05b0869b7d5c45348f59adb0f11b244669c48e5891a16c5c24f0e9c265d47975d082fd8b92aa2d6af158289ace72e541099f49dcfe61c745
TLSH
T12A1112D53DD7108BFBE15F32CE8253741CE49823AC87629A567CE6C4C1993CA0A6CF66
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/midi_tb.bmp

SHA256 d393640968854b89c20e554268bb1d4fabee164e0630e3a96278b8d48a1d6cd8
MD5 17f332ba0f5285d58f807792b2afabe4
SHA1 3c12887f3dfbd3e6f8981ecf34283647986bb500
SHA512 50260919ecd48dea25b00f24db5af7e9d06475b99835b751f5dab69426049f4c6f413918c84ab3243e081be9e2449ed75563cdefd352c0e047644ecaa57648ac
SSDEEP 24:qLu0wYqqqqqqqYNiqqqqqqqGiqqqqqqqYiqqGiqqqqqqqgiqqqq0qqqQiqqq4Pi2:aV
TLSH
T1CBB12A843D2F8CF0C0180030CC8E8BAC053A3C82B840E483E3BA2EBFD8B9B40E20240C
MD5 SHA1 SHA512 SSDEEP TLSH

tvsthostx86/Data/DefaultSkin/midi_tbDisabled.bmp

SHA256 a6e744588b87fe3bed091cc00a3f5ed3f31d0efe7628e7b84854a7c88123c746
MD5 6d326580864be0552bdfb2e74856dbc3
SHA1 caba56909604ac934c708cdbb84244a61ad9ba5b
SHA512 68d3eaf004154d3d01786a00491fd0c01fbd0e9bb3b0dde1d50ff531924c314a5fe51c637327b3e59d0c3a27707d0165c0b97d4a30ee28e97836341fc34d5021
TLSH
T139511DC25E9E7C26CBA28C3787801E11B9F1F900B3135E1FAE322C04C27CB819729236
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/mlbutton.bmp

SHA256 524cd685610b6d40a7c2ec4ba3db5d100bb8f27e90eb56ec99612ee5e57de6bd
MD5 ef9ef4be6acd54f24c9bee194a183ea3
SHA1 32b2c84bf0add613de2318e9da12f35ef75bd4f2
SHA512 66ba8d7bbfe0ab571c9f341a63e1dd333a65bab52c84214cc2509600ce85c29cde17b9c599a2611b95320e424b99a80b2ddc530459ee30df126b6b97435b11f7
TLSH
T1B53112A31A214884DFE0C8318AC59C709068F85B68CA767527D84E6F4F03DF7C5AD36C
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/oabutton.bmp

SHA256 2d16d747a058a2bdc4a5daefe01bcda7598ccccde5a3d151d0daf994e0a570af
MD5 6eae6752a3dccb0dcdd876afe97c1a13
SHA1 c6e1fc83ecef74c57f520e86957a2ca894e96484
SHA512 27dc80c0cfb5c96f2f526d7d6400dba873829e32845a3ea47ebb669abd5710329d2893acbdd5b20ee105cf2440216c12e4bc07a75bd32559f4ba89e2c26a9126
TLSH
T166214124E803ECC5EEF20971C982ABFE0ABC4C72E05AD50272687D1DF6236526229706
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/pbutton.bmp

SHA256 44b8e1dc98b3747b02bb62cff33b7877aa41a6e6fe59117da67de39e9788b1e6
MD5 305fe06e6a3b8713c0a924a5ab724cb2
SHA1 feb3148255dd1d254a81761219d3b2984bd0b6d7
SHA512 80a2a40cf058808df3ee4bf39bf12b91d874eef79aae2b7840aed0258a813193ef7c5187d889369bc84331470880d6e449b49e9c29550b8e8adbae1ee7e356fd
TLSH
T13021DD97C857EAABF6480A3D0A823456C74137CCF2B6D276286E3C1C96335C468A2D17
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/pfbutton.bmp

SHA256 e8fa76863e72a3b72af9c70aa8530d5e5b4bdeb21be97728a29fc36c69bbd3d3
MD5 b108b6b3da7e3861ac1dbc6904cf882b
SHA1 1a5b4573d112910e096136dd877e5655f224b0d2
SHA512 34ec9034257abbdffd4426e3caac6f0d76c9e32f12608fe0bba09040f75009eb06593694b052e70edac30a7bb180b02a4af2e190d6e87c65f86169100d021529
TLSH
T149319D2A301CECC8CFE10C320C4C16B9A22EB51715F6F7C426C56A8B8B8BD76C156B86
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/toolbar1.bmp

SHA256 642d34a09deffed0f8b4dc3f536e0b007ab99034b049f86efd1ad1816c1550f0
MD5 07a2fc857dcd2002d119f892ec626220
SHA1 b04cfa7791eae5ee2cc5afa791072bf66c3f9628
SHA512 d93f0640dade570676bf1052c4f201c94f824eb5dbd798d298a249822966b341c3a92d052411fea8ed28999aa6bc8b8a21211a87d6601f6625e23a00a54d3fa6
SSDEEP 24:SGOwYqqqqqqqaiqqiqqqqqqq4iqqqqqgiqqqqqqqKiqqqqqqiqqqqqqqYfiqqqqF:ae
TLSH
T1961205556D2FCDF0D0580430CC8E9BAC1A787D063941E513E3B26EBFC9B9B94E62644C
MD5 SHA1 SHA512 SSDEEP TLSH

tvsthostx86/Data/DefaultSkin/toolbar1Disabled.bmp

SHA256 4316673b4706a42a56b1164fec9c31cac286e155e94290d0d2fd0944b783fd94
MD5 8d5b2c12595fbd76808ecc838c625e77
SHA1 a48925612a9f6627575dcd00b33b66da53b8aa89
SHA512 23c884692cd82ebed769a6749896f6dab4938e9715d29224e27df7774d94c57c238bbcf597017db4b015c11808dd2a41dd17965384215c3e7442eee709d6e157
SSDEEP 3:ClllDli/mlg0X3lllllllllllllllllllllllllllllllllllllllllllllllllF:C/GKg0f
TLSH
T1811202A85D0DC580D06C04304C4C5F3C155049063141362083524C04C6CD3E4E404848
MD5 SHA1 SHA512 SSDEEP TLSH

tvsthostx86/Data/DefaultSkin/ubutton.bmp

SHA256 0f42c74323bee578fc60f1edc9a21269b13cd4bb6bb494e5a0aa7cb7c1c9fe2a
MD5 9141ad0f862acd41007922f9be8a765f
SHA1 2eaf2b64dbc41bf53dc06e5612e40457fe9dd0e7
SHA512 b9454355a62698bdabeabad97aef65493c7c9d9c1b035c8c3b3ee960beffb9e16d8a7f775106c8ae10e04f8c840e105bf80ae192de2b5035bfde5f7e17e9a0eb
TLSH
T177319703464FA951EEA24C74058AC2745650AA4E52C764F2EDD63E6BDB01D0A63097DB
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/vuoff.bmp

SHA256 86c9c24fe06c001fcb6fc98118e84019b9d895cf98d7e5372110a4112fa9fa7d
MD5 8a34297942e40d3212e66c7ffb00762e
SHA1 81291742829b740b7a4cf9a239157d48344dcf1f
SHA512 6fd546aff3c9a769950b318f8db894fe50f2d06f92c1fd617b21ab8d52847b9ffb4d6c3bdd9c51ff30888d40d94d1974b009dc0ccecadb228d42ef7135d56dd1
TLSH
T1254111110A229EC4EB80947944DD862224D4BE9F437AB0B40EFCCE173973897D7B146D
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/vuon.bmp

SHA256 cbe603444fef23009abea9122412637f74e19c23a7fd90c05129466cf0fffe8e
MD5 44ea5a5c393891635ac9af73291caec3
SHA1 a0889627e131de13060b3691c7116bdc098945af
SHA512 309c4097461dd494f84bbc76747fdbb4836ea9698807220f68a13443822a52a6e0e0857f4179cdaeb013902ad8d01d7d307561d06a86cf112a3c8a3e005ab294
TLSH
T1F44133364B253844FBA454334AC998ED55641113D37BB8A4CAA25F0F3F87CABFA88183
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/DefaultSkin/xbutton.bmp

SHA256 393d9c5ec5972fbb6cf8aa41c27494052ac9e202d1a44caf5e88155d39cea6e8
MD5 85cda279a31c53274b1ea3a8c2ceeb2d
SHA1 c2d2f3936b53334b59ae6f53bc4b77ce1e991e47
SHA512 5c5ef895d835b0e1bd2c90547bf69488f7b868ab4528095b14108df1da606859c4ed3b2f0f7c38d088f87105c65e553e7e8abc095ebd56344a0df1f0371cd207
TLSH
T19C31DE36411894C8DBE4D53144D958B42538BA6B90B5317137D3BE9F6F23DC3E620258
MD5 SHA1 SHA512 TLSH

tvsthostx86/Data/effCanDos.ini

SHA256 5754544d0fdccbff996807e054af32f834db5294de449cc5d878e20b5b5ed592
MD5 04f97b8e643e3e2f9c8f73b2a489f722
SHA1 2666ffac05a11cf1d93f595df5aaa9116b71452d
SHA512 95ca57496c14f803cb6e2c02f3b8592b2e70e150c51e7f394ff2a3ff240f9ab8ec2e71c1b2b67ce86859f60421cf521477b76eed5a8e3acc4c64dd6e29d1c9af
SSDEEP 192:w1mMMs0FkpMaITG+pjwKO+Yd7GNy/pHIjzfaCWXwXlXGM:w8hjFxjEt5IjzfaCWgV2M
TLSH
T147D1533A3215036D4D3034B6634AD5F6F336466F41709A64B62E8E43AB2937BC5FE6B0
MD5 SHA1 SHA512 SSDEEP TLSH

tvsthostx86/Data/hostCanDos.ini

SHA256 f05c03dd7527924ad0df39baf67738896a1d3c6acb16475cee81f88a7c40f62d
MD5 edc18fee18c4f4814248b5d3b5a667ab
SHA1 5701e6109673bf52c9bb6cddeb80c2ebd1a2613e
SHA512 2c111930fc03305cd2bce6bc76858329ef4f29a79b1a2b2977cd5de9d7b5668ca8999a6f37bfea844bdcafa7c15f307c02f1bcb4b1baae76fe93c5a8b8504b0f
TLSH
T13051616A4E85937C9A3531C1A7AD42EBF31589FF133002D416345E246E9B393B2BA0F6
MD5 SHA1 SHA512 TLSH

tvsthostx86/VSTHost.pdb

SHA256 f16e0547ccaf8decefbd80a0e848050801da3169c63e0efa899167dee62633aa
MD5 f4d9538fe4a3bec40509612cc7758f01
SHA1 75fbd1d85838b4a5742ffd5c9faab9f8faa5fc98
SHA512 0676e9e972be410b283ddee22c278def2d58670956b91513a40062b1292bf4d7a7a683e6aa31403dc89709ef0d252eb4a8e2b60e807205473ef372e6e5a7b418
SSDEEP 98304:x5OPhAQgRmnVpoTzUfPv+3CHudZVLd82oqlM/18WeyoHxkImevAc:
TLSH
T16F26C529D7AB6EE3C56C83BA48E7076D32FCD49053D3835F8109B8723C52766CD62698
MD5 SHA1 SHA512 SSDEEP TLSH

tvsthostx86/VSTHost.pdf

SHA256 e86320861501f1e77b7ad34a349c30f956b975f3bccf20134d86d4186fa9aa97
MD5 1bde67a53c8dd5cdef477cbd404d10b4
SHA1 f00d17788842b12dfe9a0f59f18d5a31a4803f53
SHA512 3d96f1c624e6646bc02572d8a5927f72939684a3ccf91d27c8156cf87074ef634828f8bacdb38956b59185db2ad5371b7615bba86859fb8e94f9094c46df3ab0
SSDEEP 49152:HnvKSZUaE7/6FCuhkpvxzs28beKu85P/RpROGf2ED:iT7/6QoWQR1hV
TLSH
T133B5F178F5028C9CFC428BD5A0723A6C856E73673ACD7AB04475CB56E2D48894E83DE7
MD5 SHA1 SHA512 SSDEEP TLSH

HTTP links in PDF interactive object

Detects HTTP links in interactive objects within PDF files.

pdf link

tvsthostx86/VSTHostBridge32.exe

IMPHASH 5028c1f98d749bfdf60bd78d21de3fd1
SHA256 5cf64db50c48d22359b9e3fc80c4749fab657378e89f56e9e64073936b5f11ce
MD5 c675dca527210818e1b91e5bf1bff6f6
SHA1 264210d6034863d26c917290cb09bec31c86ad65
SHA512 1ac8ee9c6c7d96b0f2490c171380596f8606f5a6b24f0601d8b73950c260a4a9fa12f96c131c2807fc1e516da17e75b1711e96c8a701743782daad0bc3e1d95a
SSDEEP 12288:vdEP46obCoWOmjatHcsHPzJ/g7MUhfcEL87nICja3rjcuPPls/1JBczYZeJiJpnB:O2nYaOW9QrLls/vXsJivjRmWWJw
TLSH
T1DA458E607BC2C0B3CA5370B145ABD76D56A6D2700F365AC3E2981E3F4E716D12D3D2AA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

714379

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\Dev\VSTHost\TRelease.08\Win32\VSTHostBridge32.pdb

winmm

midiOutGetNumDevs midiInGetNumDevs midiOutOpen midiInOpen midiStreamClose midiOutClose midiInClose midiStreamOut midiOutShortMsg midiOutPrepareHeader midiOutLongMsg midiStreamStop midiStreamRestart midiStreamPause midiStreamPosition midiStreamProperty midiStreamOpen midiOutGetErrorTextA midiOutCacheDrumPatches midiOutCachePatches midiOutMessage midiOutReset midiOutGetDevCapsA midiInGetErrorTextA midiInUnprepareHeader midiInPrepareHeader midiInAddBuffer midiInMessage midiInReset midiInStop midiInStart midiInGetDevCapsA midiOutUnprepareHeader timeGetTime

kernel32

GetLocalTime FindFirstFileA GetTempPathA QueryPerformanceFrequency QueryPerformanceCounter GetUserDefaultLCID ExitProcess RaiseException SetPriorityClass SetUnhandledExceptionFilter InterlockedExchangeAdd SuspendThread LocalFree FormatMessageA GlobalSize CopyFileA LocalAlloc TlsGetValue GlobalReAlloc GlobalHandle TlsAlloc TlsSetValue LocalReAlloc TlsFree InterlockedDecrement lstrcmpW CompareStringA GlobalDeleteAtom GlobalFindAtomA GlobalAddAtomA GlobalGetAtomNameA MoveFileA GetStringTypeExA GetThreadLocale lstrcmpiA SetFilePointer FindNextFileA LockFile UnlockFile SetEndOfFile GetVolumeInformationA GetShortPathNameA GetPrivateProfileIntA WritePrivateProfileStringA GetPrivateProfileStringA GetLocaleInfoA EnumResourceLanguagesA ConvertDefaultLocale GlobalFlags GetAtomNameA FileTimeToSystemTime SystemTimeToFileTime GetCPInfo GetOEMCP FileTimeToLocalFileTime GetFileAttributesExA LocalFileTimeToFileTime SetFileTime SetFileAttributesA GetFileAttributesA GetFileSizeEx GetFileTime GetSystemDirectoryW RtlUnwind UnhandledExceptionFilter VirtualProtect VirtualAlloc VirtualQuery GetSystemTimeAsFileTime GetCommandLineA GetStartupInfoA ExitThread CreateThread HeapSize SetHandleCount GetStdHandle GetFileType GetACP IsValidCodePage LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode SetConsoleCtrlHandler GetStringTypeA GetStringTypeW HeapDestroy VirtualFree FatalAppExitA GetTimeZoneInformation FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW InitializeCriticalSectionAndSpinCount SetStdHandle GetTimeFormatA GetDateFormatA EnumSystemLocalesA IsValidLocale GetLocaleInfoW WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA GetProcessHeap DeleteFileA FindClose ReadProcessMemory MulDiv GetTickCount GetVersionExA GetSystemInfo IsDebuggerPresent lstrcmpA GlobalUnlock GlobalAlloc GlobalLock GlobalFree IsBadReadPtr InterlockedExchange HeapCompact HeapCreate HeapReAlloc HeapAlloc HeapFree InterlockedIncrement SetErrorMode LoadLibraryExA GetEnvironmentVariableA lstrlenA lstrcpyA MultiByteToWideChar lstrlenW UnmapViewOfFile CreateFileA GetFileSize CreateFileMappingA MapViewOfFile ResetEvent GetCurrentDirectoryA SetCurrentDirectoryA GetPriorityClass LoadLibraryA CreatePipe DuplicateHandle CreateProcessA WriteFile ReadFile GetCurrentProcessId OutputDebugStringA GetModuleFileNameW SetLastError GetLastError LoadLibraryW WideCharToMultiByte GetExitCodeProcess TerminateProcess GetThreadPriority GetCurrentThread SetThreadPriority GetModuleFileNameA FreeResource FreeLibrary GetFullPathNameA FindResourceA LoadResource LockResource SizeofResource GetVersion GetFileAttributesW GetModuleHandleW GetCurrentThreadId ResumeThread GetCurrentProcess CloseHandle CreateEventA WaitForSingleObject SetEvent LeaveCriticalSection Sleep DeleteCriticalSection EnterCriticalSection GetProcAddress InitializeCriticalSection GetModuleHandleA FlushFileBuffers

user32

SetPropA GetClassNameA GetClassLongA WinHelpA SendDlgItemMessageA CheckDlgButton CheckRadioButton GetDlgItemInt GetDlgItemTextA SetDlgItemInt SetDlgItemTextA IsDlgButtonChecked IsDialogMessageA SetWindowTextA MoveWindow ShowWindow ScrollWindowEx CharUpperA FillRect TabbedTextOutA DrawTextA DrawTextExA GrayStringA GetWindowDC BeginPaint EndPaint EndDialog GetNextDlgTabItem CreateDialogIndirectParamA GetDesktopWindow WindowFromPoint SetCursor ShowOwnedPopups GetSysColorBrush UnregisterClassA GetDialogBaseUnits TranslateAcceleratorA BringWindowToTop InsertMenuItemA LoadAcceleratorsA GetMenuBarInfo LoadMenuA ReuseDDElParam UnpackDDElParam SetRect GetKeyNameTextA MapVirtualKeyA GetSystemMenu GetDCEx GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu SetMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos CreateWindowExA GetClassInfoExA AdjustWindowRectEx DeferWindowPos GetScrollInfo SetScrollInfo SetWindowPlacement GetDlgCtrlID CallWindowProcA GetMenu SetWindowPos GetWindowPlacement GetWindow DestroyMenu GetWindowThreadProcessId GetLastActivePopup IsWindowEnabled MessageBoxA UnhookWindowsHookEx GetMenuStringA InsertMenuA RemoveMenu SetMenuItemBitmaps GetPropA ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem SetWindowsHookExA CallNextHookEx GetMessageA GetActiveWindow IsWindowVisible GetKeyState GetCursorPos ValidateRect WaitMessage TranslateMessage DispatchMessageA PostQuitMessage GetClipboardFormatNameA OpenClipboard EmptyClipboard SetClipboardData CloseClipboard wsprintfA FrameRect GetMenuItemID DeleteMenu LoadImageA DestroyIcon GetSysColor GetAsyncKeyState GetClassInfoA DefWindowProcA RegisterClassA LoadCursorA GetParent ShowScrollBar GetFocus SetCapture KillTimer SetTimer LockWindowUpdate GetUpdateRect UpdateWindow ReleaseDC GetWindowRect DrawFocusRect LoadBitmapA EqualRect UnionRect IntersectRect OffsetRect InflateRect SetRectEmpty PtInRect IsRectEmpty CopyRect SystemParametersInfoA MonitorFromWindow GetMonitorInfoA GetWindowLongA SetWindowLongA GetDC GetSystemMetrics LoadIconA IsIconic DrawIcon ReleaseCapture EnableWindow SetForegroundWindow IsChild GetCapture InvalidateRect ScreenToClient GetMenuItemInfoA GetTopWindow SetParent ClientToScreen GetClientRect SendMessageA SetMenuItemInfoA GetMenuItemCount AppendMenuA CreatePopupMenu RegisterWindowMessageA PostMessageA PeekMessageA RemovePropA IsWindow SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow SetActiveWindow BeginDeferWindowPos EndDeferWindowPos GetDlgItem GetMenuCheckMarkDimensions DestroyWindow RedrawWindow GetSubMenu

gdi32

GetCurrentObject GetDIBits SetDIBits GetTextExtentPoint32A CreateBitmapIndirect CreateDiscardableBitmap SetBrushOrgEx DeleteDC SelectObject SetDIBColorTable DeleteObject CreateDIBSection CopyMetaFileA CreateDCA ExtTextOutA GetDCOrgEx GetClipBox SetTextColor SetBkColor SetGraphicsMode SetWorldTransform ModifyWorldTransform SetMapMode ExcludeClipRect IntersectClipRect OffsetClipRgn LineTo MoveToEx SetTextAlign SetTextJustification SetTextCharacterExtra SetMapperFlags SetArcDirection SetColorAdjustment SelectClipRgn GetClipRgn CreateRectRgn SelectClipPath GetViewportExtEx SetPixelV StartDocA GetPixel RectVisible TextOutA Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx SetROP2 ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn CreateDIBPatternBrushPt CreatePatternBrush GetStockObject SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile CreatePen ExtCreatePen CreateSolidBrush CreateHatchBrush GetMapMode DPtoLP GetCharWidthA CreateFontA StretchDIBits GetBkColor GetWindowExtEx GetTextMetricsA SetPolyFillMode SetBkMode RestoreDC SaveDC StretchBlt BitBlt PatBlt GetDeviceCaps CreateCompatibleDC RectInRegion CombineRgn SetRectRgn CreateRectRgnIndirect CreateCompatibleBitmap CreateBitmap CreateFontIndirectA PtVisible GetObjectA SetStretchBltMode

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueA RegEnumKeyA RegDeleteKeyA RegDeleteValueA RegSetValueExA RegOpenKeyExA RegCreateKeyExA RegSetValueA GetUserNameA RegOpenKeyA RegQueryValueExA RegCloseKey RegCreateKeyA

shell32

SHGetFileInfoA DragFinish DragQueryFileA ExtractIconA

shlwapi

PathFindFileNameA PathFindExtensionA PathRemoveExtensionA PathStripToRootA PathIsUNCA PathRemoveFileSpecW

ole32

IIDFromString StringFromGUID2 CreateStreamOnHGlobal CoInitialize CoCreateGuid CoTaskMemFree SetConvertStg WriteFmtUserTypeStg WriteClassStg OleRegGetUserType ReadFmtUserTypeStg ReadClassStg StringFromCLSID CoTreatAsClass CreateBindCtx ReleaseStgMedium CoTaskMemAlloc OleDuplicateData CoDisconnectObject CoCreateInstance CLSIDFromString CoUninitialize CoInitializeEx

oleaut32

VarBstrFromDec VarBstrFromDate VarCyFromStr VarDecFromStr VarDateFromStr SysReAllocStringLen SystemTimeToVariantTime VarBstrFromCy VariantTimeToSystemTime SafeArrayDestroyDescriptor SafeArrayDestroyData SafeArrayDestroy SafeArrayUnlock SafeArrayLock SafeArrayPutElement SafeArrayPtrOfIndex SafeArrayGetElement SafeArrayCopy SafeArrayAllocDescriptor SafeArrayAllocData VariantCopy SafeArrayRedim SafeArrayCreate SafeArrayGetDim SafeArrayGetElemsize SafeArrayGetLBound SafeArrayGetUBound SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen SysStringByteLen VariantClear VariantChangeType VariantInit RegisterTypeLi LoadTypeLi LoadRegTypeLi SafeArrayUnaccessData SafeArrayAccessData

gdiplus

GdiplusShutdown GdiplusStartup GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStreamICM GdipCreateBitmapFromStream GdipCreateBitmapFromFileICM GdipGetImageGraphicsContext GdipGetImagePalette GdipGetImagePaletteSize GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipDisposeImage GdipDeleteGraphics GdipAlloc GdipFree GdipDrawImageI GdipCloneImage GdipCreateBitmapFromFile

tvsthostx86/VSTHostBridge32.pdb

SHA256 1f1cf22ae293a1aba77b86266445a1bf48f0115c5e8675c1b155770dcb071634
MD5 7d48760d462cd5183ac76097cbaa58c8
SHA1 e3986b07a8b66db2885e69d687a1900503ee0778
SHA512 6884cf07a7b74a5fcad8568756e41423f4db8bc5b1fc9b428296473346c5ff4b4a918feb069db0f2eba83d3e63881e4575cc8cc5d79d580c70cae50a459edcb4
SSDEEP 12288:jWgdwSUjM5D2CsvLa9MDj7LY+NuJJ5aunj81rKKWMisJ1F9gsJ7oEcEscRV0TyKi:6eDeO9MDj7VNuJJ5nn49ZhL6E+0ii
TLSH
T154A5B525EB1F6EA3C50D93B658A7076C33BCE4D463A3875F9005F4323C66366CE62698
MD5 SHA1 SHA512 SSDEEP TLSH

tvsthostx86/VSTHostBridge64.exe

IMPHASH 3a438529df9c6207675a35f92a2c5200
SHA256 1d70031226ffba5b1d587b1bfb0badd517aa00a20b017c5937a5a99ba4f64f0a
MD5 cf60614375cae4a3affdc11e0735c4fb
SHA1 e1ae7d2d5f56ebe07ee26bc3f0a5c7da39198076
SHA512 b96353b036e8610c044f0a1f003bdf79c634e0547dfa79ac340aee3c5f8c75aa08e34df1e9fb732404572cdceba37c9488a8bd0f6bc4af39e667ed1a0727110d
SSDEEP 24576:VvhC2FoBlUjkfFZt4AF3IPdp9FuZ7DIZQEjSDN5Dva3dYRXjUTsuCDZ:3oBlUYfviO3IPdpwYvO5GYlGa
TLSH
T1FD853B5AB66885F5D037C1BEC5839F8DE9B270425F209BCB11558B9E1F273E64C3A322
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

896972

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

e:\Dev\VSTHost\TRelease.08\x64\VSTHostBridge64.pdb

winmm

midiOutGetNumDevs midiInGetNumDevs midiOutOpen midiInOpen midiStreamClose midiOutClose midiInClose midiStreamOut midiOutShortMsg midiOutPrepareHeader midiOutLongMsg midiStreamStop midiStreamRestart midiStreamPause midiStreamPosition midiStreamProperty midiStreamOpen midiOutGetErrorTextA midiOutCacheDrumPatches midiOutCachePatches midiOutMessage midiOutReset midiOutGetDevCapsA midiInGetErrorTextA midiInUnprepareHeader midiInPrepareHeader midiInAddBuffer midiInMessage midiInReset midiInStop midiInStart midiInGetDevCapsA midiOutUnprepareHeader timeGetTime

kernel32

DeleteFileA GetLocalTime FindFirstFileA GetTempPathA QueryPerformanceCounter QueryPerformanceFrequency GetUserDefaultLCID ExitProcess RaiseException SetPriorityClass SetUnhandledExceptionFilter SuspendThread LocalFree FormatMessageA GlobalSize CopyFileA LocalAlloc TlsGetValue TlsAlloc GlobalReAlloc GlobalHandle TlsSetValue LocalReAlloc TlsFree lstrcmpW CompareStringA GlobalDeleteAtom GlobalFindAtomA GlobalAddAtomA GlobalGetAtomNameA MoveFileA GetStringTypeExA GetThreadLocale lstrcmpiA SetFilePointer FlushFileBuffers LockFile UnlockFile SetEndOfFile GetVolumeInformationA GetShortPathNameA GetPrivateProfileIntA FindNextFileA GetPrivateProfileStringA GetLocaleInfoA EnumResourceLanguagesA ConvertDefaultLocale GlobalFlags GetModuleHandleW GetAtomNameA FileTimeToSystemTime SystemTimeToFileTime GetCPInfo GetOEMCP FileTimeToLocalFileTime GetFileAttributesExA LocalFileTimeToFileTime SetFileTime SetFileAttributesA GetFileAttributesA GetFileSizeEx GetFileTime GetSystemDirectoryW RtlLookupFunctionEntry RtlUnwindEx RtlPcToFileHeader UnhandledExceptionFilter RtlVirtualUnwind RtlCaptureContext VirtualProtect VirtualAlloc VirtualQuery GetSystemTimeAsFileTime GetCommandLineA GetStartupInfoA ExitThread CreateThread HeapSize HeapQueryInformation EncodePointer DecodePointer FlsGetValue FlsSetValue FlsFree FlsAlloc SetHandleCount GetStdHandle GetFileType GetACP IsValidCodePage LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode GetStringTypeA GetStringTypeW HeapSetInformation HeapDestroy FatalAppExitA GetTimeZoneInformation SetConsoleCtrlHandler FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW InitializeCriticalSectionAndSpinCount SetStdHandle GetDateFormatA GetTimeFormatA EnumSystemLocalesA IsValidLocale GetLocaleInfoW WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA GetProcessHeap FindClose ReadProcessMemory MulDiv GetTickCount GetVersionExA GetSystemInfo IsDebuggerPresent lstrcmpA GlobalUnlock GlobalAlloc GlobalLock GlobalFree IsBadReadPtr HeapCompact HeapCreate HeapReAlloc HeapAlloc HeapFree SetErrorMode LoadLibraryExA GetEnvironmentVariableA lstrlenA lstrcpyA MultiByteToWideChar lstrlenW UnmapViewOfFile CreateFileA GetFileSize CreateFileMappingA MapViewOfFile ResetEvent GetCurrentDirectoryA SetCurrentDirectoryA GetPriorityClass CreatePipe DuplicateHandle CreateProcessA WriteFile ReadFile GetCurrentProcessId LoadLibraryA WideCharToMultiByte GetExitCodeProcess TerminateProcess GetThreadPriority GetCurrentThread SetThreadPriority GetModuleFileNameA FreeResource FreeLibrary GetFullPathNameA FindResourceA LoadResource LockResource SizeofResource OutputDebugStringA GetModuleHandleExW GetModuleFileNameW SetLastError GetLastError LoadLibraryW QueryActCtxW FindActCtxSectionStringW DeactivateActCtx ActivateActCtx CreateActCtxW GetCurrentThreadId ResumeThread GetCurrentProcess CloseHandle CreateEventA WaitForSingleObject SetEvent LeaveCriticalSection Sleep DeleteCriticalSection EnterCriticalSection GetProcAddress InitializeCriticalSection GetModuleHandleA WritePrivateProfileStringA

user32

RemovePropA GetPropA SetPropA GetClassLongPtrA GetClassNameA GetClassLongA WinHelpA SendDlgItemMessageA CheckDlgButton CheckRadioButton GetDlgItemInt GetDlgItemTextA SetDlgItemInt SetDlgItemTextA IsDlgButtonChecked IsDialogMessageA SetWindowTextA MoveWindow ShowWindow ScrollWindowEx CharUpperA FillRect TabbedTextOutA DrawTextA DrawTextExA GrayStringA GetWindowDC BeginPaint EndPaint EndDialog GetNextDlgTabItem CreateDialogIndirectParamA GetDesktopWindow WindowFromPoint SetCursor ShowOwnedPopups GetSysColorBrush UnregisterClassA GetDialogBaseUnits TranslateAcceleratorA BringWindowToTop InsertMenuItemA LoadAcceleratorsA GetMenuBarInfo LoadMenuA ReuseDDElParam UnpackDDElParam SetRect GetKeyNameTextA MapVirtualKeyA GetSystemMenu GetDCEx GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu SetMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos CreateWindowExA GetClassInfoExA AdjustWindowRectEx DeferWindowPos GetScrollInfo SetScrollInfo SetWindowPlacement GetDlgCtrlID CallWindowProcA GetMenu SetWindowPos GetWindowPlacement GetWindow DestroyMenu GetWindowThreadProcessId GetLastActivePopup IsWindowEnabled MessageBoxA UnhookWindowsHookEx GetMenuStringA InsertMenuA GetSubMenu IsWindow SetMenuItemBitmaps GetMenuCheckMarkDimensions GetMenuState EnableMenuItem CheckMenuItem SetWindowsHookExA CallNextHookEx GetMessageA GetActiveWindow IsWindowVisible GetKeyState GetCursorPos ValidateRect WaitMessage TranslateMessage DispatchMessageA PostQuitMessage GetClipboardFormatNameA OpenClipboard EmptyClipboard SetClipboardData CloseClipboard wsprintfA FrameRect GetMenuItemID DeleteMenu LoadImageA DestroyIcon GetSysColor GetAsyncKeyState GetClassInfoA DefWindowProcA LoadCursorA GetParent ShowScrollBar GetFocus SetCapture KillTimer SetTimer RedrawWindow LockWindowUpdate GetUpdateRect UpdateWindow ReleaseDC DrawFocusRect LoadBitmapA EqualRect UnionRect IntersectRect OffsetRect InflateRect SetRectEmpty PtInRect IsRectEmpty CopyRect SystemParametersInfoA MonitorFromWindow GetMonitorInfoA GetWindowLongA SetWindowLongA GetDC RegisterClassA GetSystemMetrics LoadIconA IsIconic DrawIcon ReleaseCapture EnableWindow SetForegroundWindow IsChild GetCapture InvalidateRect ScreenToClient GetMenuItemInfoA GetTopWindow SetParent ClientToScreen GetClientRect SendMessageA SetMenuItemInfoA GetMenuItemCount AppendMenuA CreatePopupMenu RegisterWindowMessageA PostMessageA PeekMessageA SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow SetActiveWindow BeginDeferWindowPos EndDeferWindowPos GetDlgItem DestroyWindow GetWindowLongPtrA RemoveMenu SetWindowLongPtrA GetWindowRect ModifyMenuA

gdi32

GetCurrentObject GetDIBits SetDIBits GetTextExtentPoint32A CreateBitmapIndirect CreateDiscardableBitmap SetBrushOrgEx DeleteDC SelectObject SetDIBColorTable DeleteObject CreateDIBSection CopyMetaFileA CreateDCA ExtTextOutA GetDCOrgEx GetClipBox SetTextColor SetBkColor SetGraphicsMode SetWorldTransform ModifyWorldTransform SetMapMode ExcludeClipRect IntersectClipRect OffsetClipRgn LineTo MoveToEx SetTextAlign SetTextJustification SetTextCharacterExtra SetMapperFlags SetArcDirection SetColorAdjustment SelectClipRgn GetClipRgn CreateRectRgn SelectClipPath GetViewportExtEx SetPixelV StartDocA GetPixel RectVisible TextOutA Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw SetROP2 PolylineTo PolyBezierTo ExtSelectClipRgn CreateDIBPatternBrushPt CreatePatternBrush GetStockObject SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile CreatePen ExtCreatePen CreateSolidBrush CreateHatchBrush GetMapMode DPtoLP GetCharWidthA CreateFontA StretchDIBits GetBkColor GetWindowExtEx GetTextMetricsA SetPolyFillMode SetBkMode RestoreDC SaveDC StretchBlt BitBlt PatBlt GetDeviceCaps CreateCompatibleDC RectInRegion CombineRgn SetRectRgn CreateRectRgnIndirect CreateCompatibleBitmap CreateBitmap CreateFontIndirectA PtVisible GetObjectA SetStretchBltMode

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueA RegEnumKeyA RegDeleteKeyA RegDeleteValueA RegSetValueExA RegOpenKeyExA RegCreateKeyExA RegSetValueA GetUserNameA RegOpenKeyA RegQueryValueExA RegCloseKey RegCreateKeyA

shell32

SHGetFileInfoA DragFinish DragQueryFileA ExtractIconA

shlwapi

PathFindFileNameA PathFindExtensionA PathRemoveExtensionA PathStripToRootA PathIsUNCA PathRemoveFileSpecW

ole32

IIDFromString StringFromGUID2 CreateStreamOnHGlobal CoInitialize CoCreateGuid CoTaskMemFree SetConvertStg WriteFmtUserTypeStg WriteClassStg OleRegGetUserType ReadFmtUserTypeStg ReadClassStg StringFromCLSID CoTreatAsClass CreateBindCtx ReleaseStgMedium CoTaskMemAlloc OleDuplicateData CoDisconnectObject CoCreateInstance CLSIDFromString CoUninitialize CoInitializeEx

oleaut32

VarBstrFromDec VarBstrFromDate VarCyFromStr VarBstrFromCy VarDecFromStr VarDateFromStr SysReAllocStringLen SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayDestroyDescriptor SafeArrayDestroyData SafeArrayDestroy SafeArrayUnlock SafeArrayLock SafeArrayPutElement SafeArrayPtrOfIndex SafeArrayGetElement SafeArrayCopy SafeArrayAllocDescriptor SafeArrayAllocData VariantCopy SafeArrayRedim SafeArrayCreate SafeArrayGetDim SafeArrayGetElemsize SafeArrayGetLBound SafeArrayGetUBound SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen SysStringByteLen VariantClear VariantChangeType VariantInit RegisterTypeLi LoadTypeLi LoadRegTypeLi SafeArrayUnaccessData SafeArrayAccessData

gdiplus

GdiplusShutdown GdiplusStartup GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStreamICM GdipCreateBitmapFromStream GdipCreateBitmapFromFileICM GdipGetImageGraphicsContext GdipGetImagePalette GdipGetImagePaletteSize GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipDisposeImage GdipDeleteGraphics GdipAlloc GdipFree GdipDrawImageI GdipCloneImage GdipCreateBitmapFromFile

tvsthostx86/VSTHostBridge64.pdb

SHA256 609af1e425dfc390a7a28301d9d86d7600d2539d92317b1088992945ea18fff3
MD5 c7b142d4fee4634920e3e6697290baa0
SHA1 b0c8bb1109db88891e86f05cb9f1fbc634387dc8
SHA512 dc2cb6ac9bff7806e667f5b7bf1845dcc6e546ad846635c231a6f73ed32f60f2c630939351565118735b8fe66a11bd562c2a6db375fae34fc40a38e2acca8e67
SSDEEP 24576:zXpZYkJ5ejmLT2+sn5Aosv8ypDJG4oUEyaa0v:zXpZYswjAT25EvvDY4
TLSH
T135B59229A71B6AE3C11EC3F604E6474C72FD969413E38B9F4102B4223DF637ADC56998
MD5 SHA1 SHA512 SSDEEP TLSH

tvsthostx86/history.txt

SHA256 923a250081534b091e3e3a136f12309169b1a8e89aff0b0242a32001d5e4d63e
MD5 2e31421b465649fe9952b98a3cfed028
SHA1 584fab77a10aadaf346c20a25a6c248307673bf6
SHA512 ddc37d3052e5f652002d6943a4d1ac4654d4338d27345c0c23bfec48a5edd4273c7fd9fef6b8fac560c042ab756968d255d493bcd3454d4f9dc38b799ff6066d
SSDEEP 768:LLtWFcRadpbtASmiDsLaAl4fC1mIDZIkWLXkTPMuBK1EwfSR:PtWFCadpCSXDsLai1s1rwPxBKbKR
TLSH
T1F0F21C57AA0583A314B31102620535E2F32A81FEF36D4256B16CD2DC774A43ED6FBAF9
MD5 SHA1 SHA512 SSDEEP TLSH

tvsthostx86/license.txt

SHA256 3e037510c32133d7fbcf87e052dc0cbd92f6c2327b6fddf84f67c89250517043
MD5 a786106f05f95dd8844433060f8056f5
SHA1 6d9d588f03b161558f4e2d1799158ff38ec6c6f6
SHA512 52a3ba142f0adcb038866b1a81104c173893446de075be7c5491976b1bd2193897693ca19fef9be70827d330fe20be56d899ef4c9224b97d80ae08eba235b25a
SSDEEP 192:JxM4xfSkMm8UlypK4XeV3OqYTlOr78N58O64c:JxM4tumVE0nOz5e8P8Ofc
TLSH
T131026469B70A13B3239203A6560B92D5F73BD9F8667E43417168C12A3381C3897FA9DC
MD5 SHA1 SHA512 SSDEEP TLSH

tvsthostx86/vsthost.exe

IMPHASH 6c1643861f05063ba250c95d5b957d27
SHA256 534d05a301dce81ea061e2f173ea41d6ff66430cd76fdba77844cd158e806dfe
MD5 b35ed655840683f3f245b83b687e9b5a
SHA1 ea4704365a937807858a6454dec08fe6e8ecff6e
SHA512 20e9726125b01306fdea7e1f8127efa501a356480b332047ce07425b3bb535be395ec07794dc752232d87a3e53d9242f0d8cee7e96563e123c13b9a3ded6492b
SSDEEP 49152:rgkKXq8mH1upu5r0Q8bFzWOjSueZjZG+kKeEBfdY:eYVupuWQOzWJuenpJe
TLSH
T1DAE58D01BBDAC1B2CA87217144AAA26E52A6EF943F746BD391443F2E5D313D13C3939D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

1913437

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\Dev\VSTHost\TRelease.08\Win32\vsthost.pdb

winmm

mmioFlush mmioCreateChunk mmioWrite mmioDescend mmioRead mmioSeek mmioAscend mmioClose timeEndPeriod timeKillEvent timeGetDevCaps timeSetEvent mmioOpenA waveInGetErrorTextA waveOutClose waveInClose waveInReset waveOutSetVolume waveOutGetVolume waveOutSetPlaybackRate waveOutGetPlaybackRate waveOutSetPitch waveOutGetPitch waveOutGetPosition waveOutWrite waveOutBreakLoop waveOutRestart waveOutPause waveOutReset waveOutGetErrorTextA waveInStop waveInStart waveOutUnprepareHeader waveOutPrepareHeader waveOutMessage waveOutGetNumDevs waveOutGetDevCapsA waveOutOpen waveInAddBuffer waveInMessage waveInGetPosition waveInUnprepareHeader waveInPrepareHeader waveInGetNumDevs waveInGetDevCapsA timeBeginPeriod joyGetPos joyGetNumDevs joySetThreshold joyGetPosEx joySetCapture joyReleaseCapture joyGetDevCapsA midiOutUnprepareHeader midiInGetDevCapsA midiInMessage midiInAddBuffer midiInPrepareHeader midiInUnprepareHeader midiInGetErrorTextA midiOutGetDevCapsA midiOutMessage midiOutGetErrorTextA midiStreamProperty midiStreamPosition midiStreamPause midiStreamRestart midiStreamStop midiInStart midiInStop midiInReset midiOutReset midiOutCachePatches midiOutCacheDrumPatches midiStreamOpen midiStreamOut midiOutPrepareHeader timeGetTime midiInClose midiOutClose midiOutLongMsg midiOutShortMsg midiStreamClose midiInOpen midiOutOpen midiInGetNumDevs waveInOpen midiOutGetNumDevs

kernel32

lstrlenA GetModuleHandleW GetFileAttributesW GetVersion LoadLibraryW GetLastError SetLastError GetModuleFileNameW OutputDebugStringA FreeResource lstrlenW MultiByteToWideChar FreeLibrary GetEnvironmentVariableA LoadLibraryA LoadLibraryExA SetErrorMode SetThreadPriority GlobalFree GlobalUnlock GlobalLock GlobalAlloc GlobalSize QueryPerformanceCounter QueryPerformanceFrequency GetLocalTime GetFileAttributesExA GetTickCount ExpandEnvironmentStringsA DeviceIoControl GetSystemPowerStatus lstrcpynA lstrcmpiA InterlockedIncrement HeapFree HeapAlloc HeapReAlloc HeapCreate HeapCompact InterlockedExchange IsBadReadPtr GetThreadPriority GetCurrentThread lstrcmpA VirtualAlloc VirtualFree VirtualUnlock VirtualLock GetSystemInfo GetVersionExA DeleteFileA GetCurrentDirectoryA ReadProcessMemory FindClose FindNextFileA FindFirstFileA GetTempPathA OpenEventA GetPriorityClass MulDiv InterlockedDecrement MoveFileA SetPriorityClass GetUserDefaultLCID GetFileAttributesA GetProcessAffinityMask ExitProcess RaiseException SetEnvironmentVariableA SetUnhandledExceptionFilter InterlockedExchangeAdd OpenFile lstrcmpW CompareStringA GlobalDeleteAtom GlobalFindAtomA GlobalAddAtomA GlobalGetAtomNameA LocalFree FormatMessageA CopyFileA SuspendThread GetStringTypeExA GetThreadLocale SetFilePointer FlushFileBuffers LockFile UnlockFile SetEndOfFile GetVolumeInformationA GetShortPathNameA VirtualProtect FileTimeToSystemTime FileTimeToLocalFileTime GetSystemDirectoryW LocalAlloc TlsGetValue GlobalReAlloc GlobalHandle TlsAlloc TlsSetValue LocalReAlloc TlsFree GetLocaleInfoA EnumResourceLanguagesA ConvertDefaultLocale GlobalFlags GetCPInfo GetOEMCP GetAtomNameA SystemTimeToFileTime LocalFileTimeToFileTime SetFileTime SetFileAttributesA GetFileSizeEx GetFileTime FindResourceExA RtlUnwind UnhandledExceptionFilter GetSystemTimeAsFileTime VirtualQuery CreateDirectoryA GetCommandLineA GetStartupInfoA ExitThread CreateThread SetStdHandle GetFileType HeapSize GetACP IsValidCodePage GetStringTypeA GetStringTypeW GetStdHandle LCMapStringA LCMapStringW SetConsoleCtrlHandler GetConsoleCP GetConsoleMode SetHandleCount SetEnvironmentVariableW FatalAppExitA HeapDestroy GetTimeZoneInformation FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetDriveTypeA InitializeCriticalSectionAndSpinCount GetTimeFormatA GetDateFormatA EnumSystemLocalesA IsValidLocale GetLocaleInfoW WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW GetProcessHeap lstrcpyA UnmapViewOfFile CreateFileA GetFileSize CreateFileMappingA MapViewOfFile GetFullPathNameA GetModuleFileNameA ResetEvent CreatePipe DuplicateHandle CreateProcessA WriteFile ReadFile SizeofResource GetCurrentProcessId GetExitCodeProcess TerminateProcess GetCurrentProcess GetCurrentThreadId InitializeCriticalSection ResumeThread CloseHandle CreateEventA WaitForSingleObject SetEvent LeaveCriticalSection EnterCriticalSection DeleteCriticalSection IsDebuggerPresent Sleep GetModuleHandleA GetProcAddress WideCharToMultiByte FindResourceA LoadResource LockResource SetCurrentDirectoryA

user32

GetClassLongA EndDeferWindowPos BeginDeferWindowPos GetSysColorBrush GetMenuStringA SetMenuItemInfoA IsWindow MapWindowPoints ChildWindowFromPoint GetClipboardFormatNameA CheckMenuItem RemoveMenu RegisterClassExA GetClassInfoExA WaitMessage LoadAcceleratorsA CharLowerBuffA EndDialog GetNextDlgTabItem IsWindowEnabled GetDlgItem DestroyWindow CreateDialogIndirectParamA SetActiveWindow GetActiveWindow GetDesktopWindow GetWindowPlacement SetWindowPos GetMenu CallWindowProcA GetDlgCtrlID SetWindowPlacement SetScrollInfo GetScrollInfo DeferWindowPos AdjustWindowRectEx CreateWindowExA MessageBoxA GetScrollPos SetScrollPos GetScrollRange SetScrollRange SetMenu TrackPopupMenu TrackPopupMenuEx ScrollWindow GetMessagePos GetMessageTime UnhookWindowsHookEx GetTopWindow GetLastActivePopup GetForegroundWindow GetWindowTextLengthA SetFocus RemovePropA GetPropA SetPropA CallNextHookEx SetWindowsHookExA WinHelpA SendDlgItemMessageA LoadIconA GetMenuCheckMarkDimensions CheckDlgButton CheckRadioButton GetDlgItemInt GetDlgItemTextA SetDlgItemInt SetDlgItemTextA IsDlgButtonChecked IsDialogMessageA SetWindowTextA MoveWindow ShowWindow ScrollWindowEx GetKeyNameTextA MapVirtualKeyA GetWindowThreadProcessId ValidateRect TabbedTextOutA DrawTextA DrawTextExA GrayStringA GetWindowDC BeginPaint EndPaint CharUpperA WindowFromPoint DefFrameProcA DefMDIChildProcA DrawMenuBar BringWindowToTop TranslateMDISysAccel TranslateAcceleratorA InsertMenuItemA SetCursor GetMenuBarInfo GetDCEx UnpackDDElParam MapDialogRect IsZoomed CharNextA ShowOwnedPopups SetWindowContextHelpId GetDialogBaseUnits CopyAcceleratorTableA InvalidateRgn GetNextDlgGroupItem MessageBeep PostThreadMessageA DrawFocusRect InvertRect LoadBitmapA SetWindowLongA LoadImageA SetMenuItemBitmaps GetCursorPos OpenIcon SetForegroundWindow IsWindowVisible ReleaseDC GetDC IsIconic GetSystemMenu ModifyMenuA GetMenuState GetMenuItemID GetMenuItemCount AppendMenuA CreatePopupMenu KillTimer SetTimer RegisterClipboardFormatA GetClipboardData DragDetect DestroyCaret EmptyClipboard SetClipboardData CloseClipboard IsClipboardFormatAvailable ShowCaret HideCaret SetCaretPos CreateCaret OpenClipboard SetCapture EnableScrollBar LoadMenuA GetSubMenu EnableMenuItem EqualRect UnionRect GetClassNameA GetWindowTextA ReleaseCapture SetParent IsChild ChildWindowFromPointEx GetCapture GetMenuItemInfoA SetRectEmpty SetRect GetKeyState GetSystemMetrics GetWindow GetWindowRect DestroyCursor LoadCursorA GetSysColor UnregisterClassA RegisterClassA DefWindowProcA GetParent GetFocus InvalidateRect FrameRect FillRect InflateRect GetAsyncKeyState PtInRect ClientToScreen OffsetRect CopyRect RegisterWindowMessageA GetMessageA DispatchMessageA TranslateMessage PostQuitMessage PostMessageA PeekMessageA wsprintfA GetClientRect SendMessageA EnableWindow IsMenu InsertMenuA DeleteMenu DestroyIcon GetWindowLongA GetClassInfoA ShowScrollBar RedrawWindow LockWindowUpdate IntersectRect SystemParametersInfoA DestroyMenu MonitorFromWindow GetMonitorInfoA GetUpdateRect UpdateWindow ReuseDDElParam IsRectEmpty ScreenToClient

gdi32

CreateBitmapIndirect CreateDiscardableBitmap CreateEllipticRgn Arc Ellipse GetStockObject CreateRectRgnIndirect SetRectRgn CombineRgn RectInRegion PatBlt StretchBlt GetPixel SetPixelV GetCurrentObject GetDIBits SetDIBits SetBrushOrgEx SetPixel CreateFontIndirectW DeleteDC SelectObject SetDIBColorTable CreateBitmap CreateFontA GetDCOrgEx GetClipBox SetTextColor SetBkColor CopyMetaFileA PlayMetaFile EnumMetaFile GetObjectType PlayMetaFileRecord SelectPalette CreatePatternBrush CreateDIBPatternBrushPt ExtSelectClipRgn PolyBezierTo PolylineTo PolyDraw ArcTo GetCurrentPositionEx ScaleWindowExtEx SetWindowExtEx OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx GetTextMetricsA Rectangle SetBoundsRect GetCharWidthA GetTextColor GetBkColor CreateCompatibleBitmap BitBlt DeleteObject CreateSolidBrush CreatePen GetDeviceCaps CreateFontIndirectA GetTextExtentPoint32A CreateCompatibleDC CreateDIBSection ExtCreatePen GetRgnBox EnumFontFamiliesExA DPtoLP GetMapMode StretchDIBits CreateHatchBrush CreateDCA SaveDC RestoreDC SetBkMode SetPolyFillMode SetROP2 SetStretchBltMode SetGraphicsMode SetWorldTransform ModifyWorldTransform SetMapMode ExcludeClipRect IntersectClipRect OffsetClipRgn LineTo MoveToEx SetTextAlign SetTextJustification SetTextCharacterExtra SetMapperFlags SetArcDirection SetColorAdjustment SelectClipRgn GetClipRgn CreateRectRgn SelectClipPath GetViewportExtEx GetWindowExtEx StartDocA PtVisible RectVisible TextOutA ExtTextOutA Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx GetObjectA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter OpenPrinterA DocumentPropertiesA

advapi32

RegEnumValueA RegCloseKey RegQueryValueExA RegOpenKeyA RegDeleteKeyA RegEnumKeyA RegSetValueExA RegCreateKeyA RegOpenKeyExA GetUserNameA RegCreateKeyExA RegSetValueA RegQueryValueA RegDeleteValueA

shell32

SHGetFileInfoA DragFinish DragQueryPoint DragQueryFileA Shell_NotifyIconA ShellExecuteA ExtractIconA DragAcceptFiles SHBrowseForFolderA SHGetPathFromIDListA

shlwapi

PathRemoveFileSpecW PathRemoveExtensionA PathStripToRootA PathIsUNCA PathFindExtensionA PathFindFileNameA

oledlg

ord8

ole32

SetConvertStg CoTaskMemFree CoUninitialize CoInitialize CLSIDFromString WriteFmtUserTypeStg CoInitializeEx CreateStreamOnHGlobal StringFromGUID2 IIDFromString CoCreateInstance CoFreeUnusedLibraries WriteClassStg OleRegGetUserType ReadFmtUserTypeStg ReadClassStg StringFromCLSID CoTreatAsClass CreateBindCtx ReleaseStgMedium CoTaskMemAlloc OleDuplicateData CLSIDFromProgID CoDisconnectObject CoGetClassObject StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleRun OleInitialize CoRegisterClassObject CoRevokeClassObject OleSetClipboard OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CoCreateGuid OleUninitialize

oleaut32

SysAllocStringLen VariantClear SafeArrayDestroy SysFreeString SafeArrayUnaccessData SafeArrayAccessData SafeArrayCreateVector SafeArrayGetUBound SafeArrayGetLBound SysAllocString VariantInit SafeArrayPutElement SafeArrayCreate VariantChangeType SysStringLen SysAllocStringByteLen SysStringByteLen OleCreateFontIndirect RegisterTypeLi LoadTypeLi LoadRegTypeLi SafeArrayGetElemsize SafeArrayGetDim SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayLock SafeArrayUnlock SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromDate GetErrorInfo SetErrorInfo CreateErrorInfo

gdiplus

GdiplusStartup GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStreamICM GdipCreateBitmapFromStream GdipCreateBitmapFromFileICM GdipCreateBitmapFromFile GdiplusShutdown GdipGetImagePaletteSize GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipDisposeImage GdipDeleteGraphics GdipAlloc GdipFree GdipGetImageGraphicsContext GdipDrawImageI GdipGetImagePalette GdipCloneImage

tvsthostx86/vsthostDEU.dll

SHA256 493df20b90b27f1a93fc08ec6318ff9cb1a40f5a79e8a3555c615ba4bd92d050
MD5 e292d3bcffa2dbff97c66e16dc826f2f
SHA1 797ef0b2c0e07924a5bae05454f254ecd7d94def
SHA512 c7529029626b4b5734bc8c806bdae816fa5da51baa8653a2794ae75872a5261d0a75228f4050ebc8f2b1b4d4e4c647f533bd08f434d035bf9c81bfaf7ab0c3a8
SSDEEP 3072:4bd5rIaeZ3klz7BafdfFwtxVLpZLMCQNxWx4xP/UC325ey3n9XnsbntXnsSXnlmJ:4vrIz6zdafditxVLpZLMCQNx8/0Qz
TLSH
T1BE443111D2E44558F5BE4B34E8F53254A6EDFC53AAB3E27E0A88374D1571A808D20FBE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

tvsthostx86/vsthostFRA.dll

SHA256 a889c8cf6ed3fd250927d80168debdcb54d6501149f358b732f7c9defe944097
MD5 4d0b1934908e8c5151bba7b107c20fa8
SHA1 20e1ccd81ae9d372c91b9cf58cbbb6978eff933d
SHA512 dc26845634aaaf61a8748878ef60a6ee610a47afd569793c4dbd5b8a18b36cd0b6e80546a4bcda62224145abae5947e4971dcee184e3ecaa6b979a7bdc06cc22
SSDEEP 3072:5nurIaeZ3k7z7BafdfFwtxVLpZLMCQNxWx4xP/UC325eUVoMFSPZmhTwWL:5nurIz4zdafditxVLpZLMCQNxgr
TLSH
T11A542E11D3F45544F5BE6B34E8F531489AEEFC4399B7E27E0988774D1972A808C20BAE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

tvsthostx86/vsthostregclean.exe

IMPHASH 57ed345338954d08266242542aede88f
SHA256 e5a96aa37e37d36efb079bafdc368aa32dbad89df53089c075841b0e000b12e3
MD5 bb42d7784925c4f7e51c1f95ce323364
SHA1 3d8500070fa98dea1dbe38b5c3cfa952c88faa8c
SHA512 36eb3de4f1f8a730f02c338dfb23f7c7fd4834f276c980d5ac19ca8800b4033a0cec3ffa84da82bbf6e29b2e5294eca462cd3b55deed8bc6dfdc0819d2520332
SSDEEP 6144:6jFIXicdRM4wFvQ21QOCMaENkYujp5wCjeRFlhz4bmI9lG94N15TzMW/cvD8Xc:6jFIzru+OCMaXjpYF3z4v9e2fMicrD
TLSH
T113847B11BBC0D076C26634724E82D3796AEAA6715F2567C77BD01F3DAF341C2A93930A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

192742

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsSetValue LocalReAlloc DeleteCriticalSection TlsFree GetModuleHandleW InterlockedIncrement GlobalGetAtomNameA FileTimeToSystemTime FileTimeToLocalFileTime GetFileAttributesA GetFileSizeEx GetFileTime GlobalFlags GetVersionExA lstrcmpW GlobalFindAtomA GetCPInfo GetOEMCP RtlUnwind RaiseException CreateDirectoryA TlsAlloc HeapAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc ExitProcess HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetACP IsValidCodePage GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW SetHandleCount GetStdHandle GetFileType GetStartupInfoA HeapCreate VirtualFree FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetTimeZoneInformation GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc SetErrorMode FreeResource GetCurrentProcessId GlobalAddAtomA GetPrivateProfileIntA InterlockedDecrement GetModuleFileNameW GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA LoadLibraryExA CompareStringA InterlockedExchange FreeLibrary lstrcmpA GetProcAddress CreateFileA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle CloseHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile LoadLibraryA GetThreadLocale GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv GetLastError SetLastError GetCommandLineA GetModuleHandleA GetPrivateProfileStringA lstrlenA GetModuleFileNameA WritePrivateProfileStringA MultiByteToWideChar Sleep GetFullPathNameA ExpandEnvironmentStringsA WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource GetTickCount HeapFree GetFileAttributesExA

advapi32

RegQueryValueA RegCreateKeyExA RegQueryValueExA RegDeleteValueA RegOpenKeyExA RegEnumValueA RegCreateKeyA RegSetValueExA RegEnumKeyA RegOpenKeyA RegDeleteKeyA RegCloseKey

ole32

CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CoTaskMemAlloc IIDFromString StringFromGUID2 CoTaskMemFree OleIsCurrentClipboard OleFlushClipboard CLSIDFromProgID CoInitialize CoRegisterMessageFilter

shlwapi

PathFindExtensionA PathFindFileNameA PathIsUNCA PathStripToRootA

oledlg

ord8

user32

CharNextA CopyAcceleratorTableA IsRectEmpty SetRect InvalidateRgn SetCapture ReleaseCapture GetNextDlgGroupItem GetNextDlgTabItem MessageBeep EndDialog CreateDialogIndirectParamA RegisterClipboardFormatA PostThreadMessageA LoadIconA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA SetPropA GetPropA RemovePropA SetFocus GetForegroundWindow SetActiveWindow GetDlgItem GetTopWindow DestroyWindow GetMessageTime GetMessagePos MapWindowPoints SetMenu SetForegroundWindow GetClientRect CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect DefWindowProcA CallWindowProcA GetMenu OffsetRect IsIconic GetWindowPlacement IntersectRect SetWindowLongA IsWindow InvalidateRect GetDesktopWindow GetDlgCtrlID GetWindowRect GetClassNameA PtInRect SetWindowTextA EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA GetWindowTextA LoadCursorA GetDC ReleaseDC GetSysColorBrush GetWindow SetWindowContextHelpId MapDialogRect SetWindowPos GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled EnableWindow MessageBoxA SetCursor SetWindowsHookExA CallNextHookEx GetMessageA ShowWindow MoveWindow IsDialogMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos UpdateWindow RegisterWindowMessageA GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState GetSystemMetrics CharUpperA CopyRect DestroyMenu SystemParametersInfoA GetSysColor PostQuitMessage PostMessageA UnhookWindowsHookEx CheckMenuItem EnableMenuItem ModifyMenuA SendMessageA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps ValidateRect

gdi32

ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx GetObjectA ExtTextOutA CreateBitmap SaveDC RestoreDC SelectObject ExtSelectClipRgn DeleteDC GetStockObject CreateRectRgnIndirect GetMapMode GetBkColor GetTextColor GetRgnBox Escape TextOutA RectVisible SetBkColor GetDeviceCaps GetWindowExtEx GetViewportExtEx DeleteObject GetClipBox SetMapMode SetTextColor PtVisible

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

comdlg32

GetFileTitleA

oleaut32

SysFreeString SysAllocStringByteLen SysAllocStringLen VariantClear VariantChangeType VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime VariantInit OleCreateFontIndirect SysAllocString SysStringLen

Sharing

General

Malware Config

Signatures

File Explorer

SF test.rar

setup.exe

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

$PLUGINSDIR/AdvSplash.dll

kernel32

user32

gdi32

winmm

generic

$PLUGINSDIR/Bass.dll

generic

$PLUGINSDIR/GetVersion.dll

kernel32

user32

advapi32

generic

$PLUGINSDIR/InstallOptions.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/NSIS_SkinCrafter_Plugin.dll

kernel32

user32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/bass.dll

generic

$PLUGINSDIR/dat_bgm.ogg

$PLUGINSDIR/dat_skin.skf

$PLUGINSDIR/ioSpecial.ini

$PLUGINSDIR/modern-wizard.bmp

$PLUGINSDIR/splash.bmp

Resource/1.bmp

Resource/10.bmp

Resource/11.bmp

Resource/12.bmp

Resource/13.bmp

Resource/14.bmp

Resource/15.bmp

Resource/16.bmp

Resource/2.bmp

Resource/3.bmp

Resource/4.bmp

Resource/5.bmp

Resource/6.bmp

Resource/7.bmp

Resource/8.bmp

Resource/9.bmp

Resource/AboutBox.bmp

Resource/Background.bmp

Resource/BigKnob.bmp

Resource/Fonts.dat

Resource/GreenLight.bmp

Resource/OrangeLight.bmp

Resource/OverlayKnob.bmp

Resource/RedLight.bmp

Resource/Sausage Fattener 32.dat

user32

ole32