Sausage 2[.]zip | Triage™

resource	yara_rule
static1/unpack001/vsthostx64/VSTHost.pdf	pdf_with_link_action

resource
unpack001/Resource/Sausage Fattener 32.dat
unpack001/Resource/Sausage Fattener 64.dat
unpack001/Sausage Fattener x64.dll
unpack001/vsthostx64/VSTHostBridge32.exe
unpack001/vsthostx64/VSTHostBridge64.exe
unpack001/vsthostx64/vsthost.exe
unpack001/vsthostx64/vsthostDEU.dll
unpack001/vsthostx64/vsthostFRA.dll
unpack001/vsthostx64/vsthostregclean.exe

Sausage 2.zip

SHA256 eb9d408f6cc427d1c850eb2ff3786e35467277ab84fe26a9a941344116b2cc91
MD5 8596cc5e131ac47d773e8566541f370e
SHA1 e4d5ee67003d025f5727c2cd245e66ba293fe99a
SHA512 c3d437ea2d2b351367857f051b9eb9cc9e6bc13195aee2d54e7cd93eaba222336557b0f6ba63017c513a8d087ed98660303fa887a792fd35d339c74454c81174
SSDEEP 196608:RXRB6SvIohvjgOZKiEYS8Whg0WIqPjWxfH8SiodWamCUA:RXRB6yIkjgOZ6A7PeP8ShdWamI
TLSH
T13986330995B2CD83CED44F3EA857314CAFF9041F1EE0B91B047E66B9570FE5522292AE
MD5 SHA1 SHA512 SSDEEP TLSH

Password

asdasd

Resource/1.bmp

SHA256 acbb674a36c859af77de0aa1d3d95c1cedf000e54febb31020e6f938194ffc6b
MD5 cd5ff562751a97fe101a67e771ba502d
SHA1 40ab4ef194902fed97926363fe6f82f3ddb905c0
SHA512 4d8d1bce35189b6b20e478330e9d94c5b4863446366da8bfebd5e29303ea2560c1749c00ea181716ef9b873d19f7bb0b0b67217bf33fbcf14ef06034eb93da2f
SSDEEP 768:GZlzyFOQrMisKWPDWPQ6HxZ5/LVlSXhyuFKTuZ/tzIywza2oHVWWHwSKY7FgqwxH:cPorwX1du
TLSH
T163D3593D109600E19871D3938B3DF642BCAEBA5AE7527EFDEB54113ED60DB4C250A923
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/10.bmp

SHA256 ffa4a594d09f8faad81a30ba0999692530b1c248939328c57781ccae55129536
MD5 315fbe95e7b2a86b874b197fbdf15849
SHA1 1cfb80ce65a3ec7797a236bd21c5de45ff49ffaf
SHA512 d0ed7b6cac55509e08dcfb6ce4bfef8da2945cab9372e0e044297fd21f8d9a74fcb601bf8faf2e97d1350bbf9363d3d25421da34747a7a2dc7660c8b3be253b7
SSDEEP 768:UqL8imr7IriZj7gNPfkxD5KhPY9dx0FHH5m1ngJMNZ7sCBTiCabGZ95YqQ+9PaW/:U7p/WGHGk
TLSH
T13ED3473D109600E09971D3938B3DF942BCAEBA5AE7423EFDEB54513ED61DB4C250A923
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/11.bmp

SHA256 fd3a02f023176a6ae82935f00f72fa13d42be28d58eec0422b9783184ea852f3
MD5 8379b1c3d19f3648f9236187e16149e9
SHA1 d1d4ef0d7071ac00c8d3abae6b79d8ebf2798452
SHA512 1822e9eb3c1943d0a6e78a78d6920db26f92257a5a368e5524162c65c08eada27a4d7fdc1714279910665189398ebe510e1e4d982bedb4915d75ce9f825b215b
SSDEEP 768:SDbNi/9re4I3yTa3xz5bZKvnedS0hHHiOGa3JRNQJCFcimltHLAFEpJvhdb1hHWt:C0Uu/IAY
TLSH
T196D3273D109600E09971D3938B3DF542BCAEBA5AE7423EEDEB94513ED61DB4C250AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/12.bmp

SHA256 67c1e8f97cb11fe2d5d658e994682dcb9b81ec73ee221e2d704bff5da8f7a360
MD5 ba19c720c62fb04a6d0687763eb3f0f9
SHA1 80ca6d7bda2b287c87d36ad2535bf9ffb5bf00c2
SHA512 298128377ca05e88fd5000725e4871ffb81f0b49de805552c7fc205b48a1739a64cfe246f360186259322ed162fb31320fe4f7f511b0f106677e0eb8c7ed84ce
SSDEEP 768:SDbNi/9re4I3yTa3xz5bZKvnedS0hHHiOGa3JRNQJC6U1WAXoIpFAPlpUwgzHQ6X:C4GskgrY
TLSH
T1B3D3383D109600E09971D3938B3DF542BCAEBA5AE7423EFDEB94513ED61DB4C250A923
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/13.bmp

SHA256 f329a87886a84e7d36a03ab620221ce2e5909bf595210a0a70e62065b68bd458
MD5 a0e8b1c81ddc511fcb5310c5deee8e9b
SHA1 88f9b448d7f5ca3a00b36b06e25fbbe94ca0a451
SHA512 3e7b08f44e8534b2208c37e8f78fc91831ef7a7f9e634577b40be3ba970141437565182e2fb5f659fceedadbadf1bb562db351a95c4ce531913a72ea35cef272
SSDEEP 768:/nk0jLE2Lr8RnfWncJZx/5/N6r4VndtGgHHxoZPNPX4lXICR8nmItsNHdqoQ9F9o:zZriT
TLSH
T1BCD3363D109600E09971D3938B3DF942BCAEBA5AE7423EFDEB54513ED61DB4C250A923
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/14.bmp

SHA256 9058e0d9ea998c21309757586d30b0e5378c0c1904ebc2d95bf01223ddba269c
MD5 22fcb3ea5ee2414880ef094b6b965c94
SHA1 dbfb1cbb08981fdd3878faf4179f5fddf67a4a9d
SHA512 f104e05e5fff7ea1b5e7e983ed8185ee5fcb3d5affe07f9d60663b61027c4de76743b4b67d21578de7f35eca75d953a8182c7d3330c2ec65966cca6a4363c294
SSDEEP 768:TVDtEq8oBHHtrCOVPggBFxxwi5N6rcvyNvP24pTkgXN39OC6hk1J+BOUozzGLjYO:2QiqbJrGBO
TLSH
T117D37F3C209600E09871D3938B3DF542ACAEBA56E7423EFDEB94113ED61DB4D254AD63
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/15.bmp

SHA256 46ed9e0e6d46d8840fc3771c5b8b5a9457d91e0a994e72a8289481dcf4a83c32
MD5 db6d2dbb0a0f2836f725f942453b29ec
SHA1 83448f73bb9104178ab354128e47a239b1abdeba
SHA512 5542a2a8dcaf436d2610cf685a2760bcc93d077086658cffe2361f3da0fae5f5f76a1761034cea5f8e9ac1151944bafa726761213acccf012bd01ba38f4d5ed4
SSDEEP 768:TVDtEq8oBHHtrCOVPggBFxxwi5N6rcvyNvP24pTkgXN39OC6hk1J+BOUohzLLdDz:2Qi5T9rGBO
TLSH
T13BD37F3C209600E09871D3938B3DF542ACAEBA56E7423EFDEB94113ED61DB4D254AD63
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/16.bmp

SHA256 d2bf6a0edd77365e2593a2fa154a9a7e1c609111316e17538706d7d453cd5b43
MD5 74963a0e21b0a442f0e327a9e83fcf02
SHA1 4aeba2036721e7d73a346c295eb436067c8d3976
SHA512 b5c0eadd8cebcfefa98b6080a51f1801233dd4f2e72b9df028fbcd571d046466ca9b7cf36172a524ff7c60820d40475a8e190d5bada901d3fd485e17c41daaea
SSDEEP 768:gj/TdkCTjrGQ5PMXISjxV5CzANeXWOWbXvpHV7eNsdoVELCeRNsF5nyt2JHg9B2A:QcEERWglz/MAlVgQT
TLSH
T186D3473D109600E09971D3938B3DF542BCAEBA5AEB423EEDEB54513ED61DB4C250AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/2.bmp

SHA256 5de6fac064d9897c7865b71528b0f4ee4375a9a1f94cfdd8ab355c17099ed75a
MD5 b983fb2e8d67378f2eead3af35a41276
SHA1 001d4dcdd316b285845f82743bc9353040365221
SHA512 c71980ee0466bf58518d914ac667516f484e991fcd03751536225ea76707e732f939e55c49137431f1d72417827339af6817ae2ef32098fe9af354c2619ecc3b
SSDEEP 768:T1+8TJ6ioYhMrr+xUxhAPbdBx05ngWQJuJB3ue3TBNq6h4HoTrJcRqLbDpaqNpIt:hHKgW/7mI6
TLSH
T151D3593D109600E09871D3938B3DF642BCAEBA5AE7527EFDEB54113ED61DB4C250A923
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/3.bmp

SHA256 91d0a751e34a1cdf6329bdab73d8c583a2600d359d4a6ee78e0a557a56d6825c
MD5 a21bc00d83d44f8ac7a4025e352a9cdd
SHA1 b44314553d206c68f901e623227b257b9b1cf4e6
SHA512 928c5060e863c6ca2052cbd51d4a4bb0170b8f5499a0cd8c6434a5ffa3c1314cc557f17bc550d8e356687c943538462b854175452e873ec256e515ad5e20fbb4
SSDEEP 768:T1+8TJ6ioYhMrNbxEicfDze4yckExo+535895beufdRTaNG/6P/VBnL0Ct7USTOM:hHBzCLEiWI6
TLSH
T1D5D3593D109600E19871C3938B3DF642BCAEBA5AE7527EEDEB54113ED61DB4C250AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/4.bmp

SHA256 3ffb2919fe2597e3ddc3e39922e44fb1a904af0dd715f30bea1de84136fdd4c6
MD5 9ad72b8e9d020a07af384e0852b0ecd9
SHA1 8db3484a1d695a913b45e9970eaf9c945b8bf028
SHA512 a08420200e5ebffe4f00868b8abc6172f17686719cb581afb12af6ce901cb074c1823f960bac66d50e2fa99fd228270774b5a41e1cbb14ce5fa63d996cfa37b2
SSDEEP 768:jHQkYBVJOrRl7tsAOMxd5M4sJorHkuzS5TGmZoSvbpbRD4zJYWijZSXrHdDTJl/I:ophUGFXp
TLSH
T186D36C3D109600E09971C3938B3DF542BCAEBA5AE7527EEDEB94113ED61DB4C250AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/5.bmp

SHA256 94f649cbb0e250d378b1f432b04faca475965e7de8a02535fc2a1f56890660fc
MD5 d659f87c193a47bdc497410bed0e443e
SHA1 12629ad7b5dfb0cf9134d7ba83f8693c897a2c58
SHA512 0bfba7ee57c0df82b52501750a7f79af77fb7dc231621452c838456bfb43f183806b52098122780f3f94c715e65fa9e08f59836895714b5b0395bd1633b2010a
SSDEEP 768:Nps1Bq7LBrmYBONU48pUqgCw5mdk8tX0tPUZO/fdeA4RAfBB8FEVRGC+IikbEs6h:kqlFkJLZyjp0DbRyBPl
TLSH
T1E6D3583D109600E09971D3938B3DF642BCAEBA5AE7523EEDEB54113ED71DB4C250A923
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/6.bmp

SHA256 719967864c4c6ed44a07ee40d9474047635f98ff970bdefc5229aaa4e2bf3bef
MD5 f508f16cbeba970dc3929da448f21098
SHA1 245bdeccbcda280250a37617a497d9b3321978da
SHA512 87ab56a227998c8da0b4934b1f1029c187b86f20b7c2a83107edd58334642a478b93d54ca0f7aa09c5083060a8b59e4d5f2dbea3d289a791c920db5001029301
SSDEEP 768:Nps1Bq7LBrmYBONU48adeqDK5G2E8kPPEZi/W6JZJtAHXymz7CARFDvkb4XCRzr9:kqlcaHTrcufDRyBPl
TLSH
T1C5D3583D109600E0997193938B3DF642BCAEBA5AE7523EEDEB54113ED71DB4C250AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/7.bmp

SHA256 e2b22df0d33ba6fb7b3a3e766560c074b15a0357714430586034f3f26ff5deb4
MD5 39799c0964d71e02398c91c45a46f45c
SHA1 cecbae88c112059bb6503cfb0081f4e680798be3
SHA512 cdaa3bc6def877991b0c42466b8e0ae9674ac18c742610f0b4775e92fc2f5a142579f6e3c28acc04793981606d6f22a6bf57c720a575ee6e9be593f3a4c9113f
SSDEEP 768:qrGxUqErtBwFrtnIxxq57mwaBkr3rJHpItmaq5MgXm3TUXm+Qlvv6bFUfNH8u5MX:hMtLntV2XhufIv
TLSH
T119D3593D109600E09971D3938B3DF542BCAEBA5AE7523EEDEB94113ED61DB4C250AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/8.bmp

SHA256 4f027fa514a301e6281d1cab0362eeb315df6c773a4c2d3974dbcb7dad74f655
MD5 ab990f0dd2ad493b807647e0cd25fd3f
SHA1 6bb429442e42f04eb5f1037fc73dc15fc35e44aa
SHA512 f0b96c5bb7d39c3260e33123c937c95b4c15ef9aab2d8dc6afbcb440a152806af0f63fcc2cd92950aa89b0c62c54bae5396b4f7816b4be4eaf8e5662da283aec
SSDEEP 768:qrGxUqErtBwFrtnIxxq57mTFzhJHH3iKBpWIqS9ZmcmgC0OjwvqUl6bJvLJ5Jslw:hOZ6gsQS5HZ/l5hv
TLSH
T1EED3493D109600E09971D3938B3DF542BCAEBA5AE7523EEDEB94113ED61DB4C250AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/9.bmp

SHA256 ba8ca656f0e81b8205ac3f4a3f944d61b7b1d988d7936b82d9143b8dafeed7fe
MD5 dc1faf224db8690ec068079fb1fef01f
SHA1 beb18c46955e435ba33c7ef4c028e43cb08f05ba
SHA512 b25654ac3775af1ab97673738a09d0122fca5ec201e5de6352c7fe87e37e3007f726852a182f1abf9e5009fb5370b6715b431cd7e4698350ecc8444ee0f46d82
SSDEEP 768:UqL8imr7IriZj7gNPfkxD5KhPY9dx0FHH5m1ngpMNU9sCL3B1W3nznDd3iOvRwJp:U7pRJSOJk
TLSH
T1ABD3383D109600E09971D3938B3DF542BCAEBA5AE7423EFDEB54513EE61DB4C250A923
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/AboutBox.bmp

SHA256 9f41ccadf3e51aeacb40aca9bf0a37a8f81cb5240e5d9d35bbfd85857125f0af
MD5 8d54f93d237afeac0f9a1f38419ec778
SHA1 d46781264b4d056fa2180ac4c8e514c192e6f813
SHA512 a8c5fa1686bc508a417fda165c7dde3c09a9b1e12256be2b29d86f90373ac6221c3b05244687de0b6795555f508061db38f1bcfe7d96fca8b7c3dfd579b92f2d
SSDEEP 1536:BQSNjG0phPqY54aUmMgNNjepTcr9H5GRyptiM7s:SSNsqNNjPGRn
TLSH
T1C24469CA16052B95C54117BAD2C381379477DC2F99A9E980CE2F38B22A7CEEC3547739
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/Background.bmp

SHA256 cbc2262ac4da76d3eedec54f95f18b0bc6f8e070b673f7e1e1d38f0c4e0e1c2a
MD5 b0df33ef469eb32ac0361082ca79e24b
SHA1 48ba103f7396206de392311d3bd85890eef6ca1e
SHA512 3c8652c20327c5d73cd85e52c5773bcdb301dfaf03729db18790569a69245fb455641c52c454a2b696e40aeaff9a3f4ecdd6a4fb7626a8ee354a7d94c0df8035
SSDEEP 6144:9r7r4H029RuSWqyvbfnTwq/hEyO8n7IofgcsUSIem53pwi:dArwSVANhEy7IofgTIZhei
TLSH
T16A4595D1D8C026284DF9ED16A343EEB965030FFD879434560CA4B7BBB48B983DE66583
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/BigKnob.bmp

SHA256 d0b440b71f97e14f9cdaa534daa3b6695c4639730be01fbb7d8643c4fe5c3d52
MD5 038308b664c7c730f28f6db0a9f4e5f1
SHA1 9535db7fa280882e827c2edd0c557547921b3ab9
SHA512 6a13bf662b3fe4e138da744644547e3c7184502d3b7b0c68aafef40673748252f4d371c207d6c9a752eda719abd9dd76b440806cdeff3a746cbb1c6c76ed7777
SSDEEP 384:J6BGy+U2cqJFI8AosWWaV9mp8YADM4addZWUFazcrOGYMs2DD7E7myC18:3y+PcqJFI8zsWWk9SZSM4InFIEvLL
TLSH
T1C8A31C0C59E0F9F8C7A1877828E1D43C22791D777C4E8345AA90FBE07DB6B6C1E4586A
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/Fonts.dat

SHA256 2e07347d0d6ca356a51fdaab611673c3748aabc73599edafc255af33a6d95664
MD5 9214d2202b9f4d8374668200f6be09e4
SHA1 049c8125e7e89385d79e14e6ddb48d297f1ccefe
SHA512 b0de7e0b7e52ed9aa546de79066b314b00fed40bed911afbdf9f75a4df75fe3611285ba9f51219b7ad5469f71f4a09a87949da2b6281a439e36f9f6a0570c229
SSDEEP 192:zLEzVkc1uTrTi98cCub3gKaqNDKTOMUyHlU3JWtbyJ3MI4Bpe8RTGAxAEwIQsCvr:zLEzVkc1uT+HmM3IhEzFrwDk1DDMB4fT
TLSH
T15794CBB96B7FD744881524ACDD6E41F822A5DE5BFE91B6FB48043F8EB2B0B940C0E544
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/GreenLight.bmp

SHA256 dae8344797318866589485444c0fdc69bd708c69b975c82ce0ce949a8cbf221d
MD5 ac16658dc8cd56e5fcc586bc5ea00a50
SHA1 08a6fa7376251cd6a4f0989090fa6d7c5e4f314d
SHA512 ee15b3f29a916d54d58caef920fdf5a70d029c9e578ea71e8850c2962e0c41049c492a9e7870e3a6c17b5757d9a1851b5d6ebd4c772bce2d70739614c8ec90bb
SSDEEP 192:5oG1yXBrr/MA92BWOp4tz0suw+ykelKfbkhF:5B141klQtzR+ykegIhF
TLSH
T16CE186ECD04C20367BB7119A65D75C8662090CB0C8D99D8953E39FBA7B0B267A53A31B
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/OrangeLight.bmp

SHA256 f961fce5458d40d996876c7c0802e0555f621d6a901cc1fb1560cf1ca362ad8e
MD5 c599581a4a128aefe283fc78f0164fe9
SHA1 1dd263fcfad1d5b2054e9c670925ba88677a0822
SHA512 ddb5725bc3bfa52fe5c57525a949f8ef63b9fc437859e26b36a95b98b7e9ec61a05ddc8942b6a80052e33af42e19a71685a3e0da243b136d8bc5bbfde19ee3df
SSDEEP 192:5DkjcTF9VAmItogfqOzYpJt3+YcWmgqzbCoLTCr4LA374ma4AIE:5ojcTtOfB8pP3mWmgq9lLA3m4AL
TLSH
T14CE186ECD50D21274277258940E38E8266561EF8C1F99C4AA3B2BF9D360B557323B30F
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/OverlayKnob.bmp

SHA256 6418a8be1d341df869be125fee4a4530dd8b2fed02133c318525ae903d231c75
MD5 abff5a6d250d20116dd3539922ad60c0
SHA1 7a9216973e5b7a8003ef4df16e7cf0e43f638a70
SHA512 e53e3b1fabc1d2519780a3c4c089e8622853325785d7cb77fac4fef480abcef89870c757cccd50ce9089544f76d77888955dd0e507bf5bff948d3d239780a494
SSDEEP 6:j//68lY6t000000000000000000000000000000000000000000000000000000/:b/U6F
TLSH
T1F1A302043100C106D0341230DC4081F912155E02D410035371463F49F83234C084D2C0
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/RedLight.bmp

SHA256 8663024c93b4d2379401bb178db9be8c9beb427d3c231ac6876cd70731d0f45f
MD5 674ab57e3f97ca76ac9d3face6689e41
SHA1 350ebd0d9d23ac753198d833a24953c106d0c556
SHA512 bd466b46a5839c7957eba5d717163f20cb9f8ccd1a9f201b1c334a4df88cc00b0418de6168f31366655a1b2798cfd03435dae8a1d696852db336f9aea7401df3
SSDEEP 192:5DkjyF3FQa5Yh/277eb3U6BoqDxnzUVjsC6WmkQIB4uvbs8KskKr3LN:5ojyZBm216BogdKIC6Ovbs85kKrR
TLSH
T13AE1B5E4C41890264A73265AC8B7ECE271461EB460958D0782F27FDF370BA9B643774B
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/Sausage Fattener 32.dat

IMPHASH 62b0a5f873cb2de51be602047c657213
SHA256 662c308546fc42506073e1f12d38252f7cdaad888e13ee4cf109d062ac609955
MD5 69d6f94235a27ef0e06544e9ce0d632e
SHA1 ea92ea58a7db386092a868eea87949fc5d8fa626
SHA512 39432cea09d8a9921176f14aaae140ce6638c8321f5fe3808616152dc84473bcbfd0215150632d6cfc32f78c7419576a20d5e00f19507018f7de88761e577ea3
SSDEEP 12288:8E980FzsrMFYul42/YkXE7bZ0TaOI7Yme6lvWHSRukPOGx4FCN225w/l4n:54MJ9TYYmZoSwGYCxC/l
TLSH
T1F3056BB239588D31CD98117B44FAAB6960BE5D158B65E4D3AFE4BA3F0C741F0BE31902
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

asdasd

Minor OS version

1

Major OS version

5

Entry point

363294

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Build\SausageFattenerPC\Win32\Release\Sausage Fattener.pdb

user32

BeginPaint MessageBoxA KillTimer EndPaint GetSysColorBrush GetWindowLongA SetWindowLongA InvalidateRect SetCursor LoadCursorA SetTimer CreateWindowExA DestroyWindow SetForegroundWindow ScreenToClient ReleaseCapture SetFocus SetCapture DefWindowProcA GetClientRect GetUpdateRect UnregisterClassA RegisterClassExA

ole32

OleInitialize OleUninitialize

gdiplus

GdipCreateSolidFill GdipSetImageAttributesColorMatrix GdipCreateBitmapFromScan0 GdipGetImageHeight GdipDisposeImage GdipDeleteFont GdipCreateFont GdipDeleteFontFamily GdipSetPenWidth GdipCreateFontFamilyFromName GdipDeleteGraphics GdipDeleteStringFormat GdipCreateStringFormat GdipDeletePen GdipCreatePen1 GdipDeleteBrush GdipDisposeImageAttributes GdipCreateImageAttributes GdipAlloc GdipFree GdiplusStartup GdiplusShutdown GdipCloneImage GdipCloneBrush GdipRestoreGraphics GdipSetPenEndCap GdipSetStringFormatAlign GdipCreateFromHDC GdipGetImageGraphicsContext GdipSetInterpolationMode GdipSetSmoothingMode GdipResetWorldTransform GdipTranslateWorldTransform GdipRotateWorldTransform GdipDrawLine GdipDrawLines GdipDrawRectangleI GdipDrawEllipseI GdipDrawPolygon GdipFillRectangleI GdipFillPolygon GdipFillEllipseI GdipDrawString GdipDrawImageRectRect GdipDrawImagePointRectI GdipSetClipRectI GdipSaveGraphics GdipGetGenericFontFamilySansSerif

advapi32

RegOpenKeyA RegSetValueExA RegOpenKeyExA RegCloseKey RegQueryValueExA

shell32

SHGetSpecialFolderPathA DragFinish DragQueryFileA ShellExecuteA DragAcceptFiles

kernel32

IsValidCodePage LCMapStringW ReadFile SetFilePointer GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeW GetOEMCP GetACP GetCPInfo GetConsoleMode GetConsoleCP GetStartupInfoW GetFileType InitializeCriticalSectionAndSpinCount GetStdHandle SetHandleCount HeapSize IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess SetLastError TlsFree TlsGetValue TlsAlloc ExitProcess GetModuleHandleW InterlockedIncrement InterlockedDecrement GetCommandLineA CreateThread GetCurrentThreadId ExitThread DecodePointer EncodePointer RaiseException RtlUnwind GetModuleFileNameA VirtualQuery HeapFree GetProcessHeap HeapAlloc LoadLibraryW HeapReAlloc SetStdHandle FlushFileBuffers WriteConsoleW CreateFileW WriteFile OutputDebugStringA IsProcessorFeaturePresent CreateDirectoryA InitializeCriticalSection DeleteCriticalSection UnmapViewOfFile CreateFileA CreateFileMappingA MapViewOfFile GetFileSize CloseHandle FindFirstFileA FindNextFileA FindClose LeaveCriticalSection EnterCriticalSection WaitForSingleObject GetFileAttributesExA GetTickCount WideCharToMultiByte MultiByteToWideChar Sleep GetLastError GetProcAddress GetSystemInfo TlsSetValue SetEndOfFile

comdlg32

GetOpenFileNameA CommDlgExtendedError GetSaveFileNameA

Resource/Sausage Fattener 64.dat

IMPHASH 71eef6a4413fd0527c0d774b1d1d1e98
SHA256 59b707eefe8286a9468d8ddb4cab4fc5ad4090ef21d68f4c57a3da2c9a5df58d
MD5 54796ccdb2d6031b2e0d1259e534caac
SHA1 5c46b4ee988900a2da2a0a60314ac45ac265c9ef
SHA512 d3fc2c18f431bb7a7aa08ebc70026409363700bc509c22e53d12e14e480fb9096cb0e583cead0e882ebeb21c1b29e7655d86bad65a041b27c377404fe41c186a
SSDEEP 6144:B12aJOgYCwbtc6bZ7e7c30XnmT/0Vn3wTpyw4156CM5uG7t6q5bAy2WGvy+Vv1nC:5kgob6QZJ0Xnq/3N5uG7eyDcFbA8oKo
TLSH
T147F44B75945949D6C83380B6C8A3C641EBF6BC644B346BD702E4063E6E7FBF88676720
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Password

asdasd

Minor OS version

2

Major OS version

5

Entry point

296048

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Build\SausageFattenerPC\x64\Release\Sausage Fattener.pdb

user32

SetWindowLongPtrA SetTimer CreateWindowExA DestroyWindow KillTimer InvalidateRect SetCursor LoadCursorA DefWindowProcA SetForegroundWindow ScreenToClient ReleaseCapture SetFocus SetCapture EndPaint GetClientRect GetUpdateRect BeginPaint RegisterClassExA GetSysColorBrush UnregisterClassA MessageBoxA GetWindowLongPtrA

ole32

OleUninitialize OleInitialize

gdiplus

GdipSetPenEndCap GdipSetPenWidth GdipCreateSolidFill GdipSetImageAttributesColorMatrix GdipCreateBitmapFromScan0 GdipGetImageHeight GdipDisposeImage GdipDeleteFont GdipCreateFont GdipSetStringFormatAlign GdipGetGenericFontFamilySansSerif GdipCreateFontFamilyFromName GdipDeleteGraphics GdipDeleteStringFormat GdipCreateStringFormat GdipDeletePen GdipCreatePen1 GdipDeleteBrush GdipDisposeImageAttributes GdipCreateImageAttributes GdipAlloc GdipFree GdiplusStartup GdiplusShutdown GdipCreateFromHDC GdipGetImageGraphicsContext GdipSetInterpolationMode GdipSetSmoothingMode GdipResetWorldTransform GdipTranslateWorldTransform GdipRotateWorldTransform GdipDrawLine GdipDrawLines GdipDrawRectangleI GdipDrawEllipseI GdipDrawPolygon GdipFillRectangleI GdipFillPolygon GdipFillEllipseI GdipDrawString GdipDrawImageRectRect GdipDrawImagePointRectI GdipSetClipRectI GdipSaveGraphics GdipRestoreGraphics GdipCloneBrush GdipCloneImage GdipDeleteFontFamily

advapi32

RegSetValueExA RegOpenKeyExA RegQueryValueExA RegCloseKey

shell32

SHGetSpecialFolderPathA ShellExecuteA DragQueryFileA DragFinish DragAcceptFiles

kernel32

GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter HeapDestroy HeapCreate GetVersion HeapSetInformation GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW IsValidCodePage HeapReAlloc LoadLibraryW GetOEMCP GetACP GetCPInfo GetModuleFileNameW SetFilePointer ReadFile GetConsoleMode GetConsoleCP WideCharToMultiByte WriteFile GetStartupInfoW GetFileType InitializeCriticalSectionAndSpinCount GetStdHandle SetHandleCount RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess SetStdHandle GetModuleHandleW GetProcAddress HeapSize HeapFree HeapAlloc FlsAlloc SetLastError FlsFree FlsGetValue GetCommandLineA FlsSetValue CreateThread GetCurrentThreadId ExitThread DecodePointer EncodePointer RtlPcToFileHeader RaiseException RtlUnwindEx RtlLookupFunctionEntry FlushFileBuffers WriteConsoleW GetStringTypeW GetModuleFileNameA CreateFileW SetEndOfFile CreateDirectoryA InitializeCriticalSection DeleteCriticalSection UnmapViewOfFile CreateFileA CreateFileMappingA GetFileSize CloseHandle FindFirstFileA FindNextFileA FindClose LeaveCriticalSection EnterCriticalSection WaitForSingleObject GetFileAttributesExA GetTickCount Sleep GetLastError MultiByteToWideChar ExitProcess GetProcessHeap MapViewOfFile

comdlg32

CommDlgExtendedError GetOpenFileNameA GetSaveFileNameA

Name

.text

Size

469KB

Virtual Size

468KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

156KB

Virtual Size

156KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

27KB

Virtual Size

125KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

31KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

text

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE

Name

data

Size

32KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

436B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resource/SausageBottom.bmp

SHA256 223283d885aa71d8e1ff73f02c4df8d6d40c6b2c9b371c984a5ffedfc9244ced
MD5 34af6f4249eabf73d03f18404d4e279e
SHA1 e60617c8e9cbad6773d29e45b9dd361f1646a3d8
SHA512 cdb44bf28b005c5b8220ab5bcedc8bc49b6962e96840048b700073eafba8faf0b9b637ce9bd8d3018ef01a053a696a43ba63dd616c554579348519da29ac061a
SSDEEP 768:MzSbNWB7BXWh/HO50X3bbC3AhsWZP7aZORCPqRDkd2B:Znbt1tDkd2B
TLSH
T10783C33C14C500916973D3A3CA3CEA02ACAFAE55F7423EEEE744506EEB1DF486249567
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/SausageBottomAlpha.bmp

SHA256 040fc672e445e01866ba76ad0c9aca0039b6d96ce574b61d79cb4089b48716de
MD5 a2ee9a815337bff1292f9dfb707c0858
SHA1 06069c862f101e6767950aa9f991f6087cfa6a53
SHA512 807246e5565f369ac94f080047859809d65c86c80833270ca0b1a560ad259dfd8ac2c7e007bb91cf90ff6c74d61c92db51eba8c2e2d5a95c6955d6381ef43dc2
SSDEEP 768:MzS+wZYHJ7NUPLe8qG9OZA1hZTKZrYYkRuLB:+w68dmkR2B
TLSH
T1AB83D13C14C540A099B3D3938A3CE942ACEFBE59F7423EEDF744502EEB58B486219567
MD5 SHA1 SHA512 SSDEEP TLSH

Resource/SmallKnob.bmp

SHA256 3c12dbd602c83761453ad6e83273c75dcd16e72e254fcb0b5874c9112d7fcf44
MD5 74d08b6908b10f665a2782e099d8137e
SHA1 c10238fc58d698334917276d1e2380cb86e47ada
SHA512 d0e7e5451bec6824d95545d6f4aa2a34894a3aca5cb28ec082b5f8f95e164e3f5b0dc6d1c503c91473cbb3f465f20fff228bd1a6b01991a2e823d9554499eba9
TLSH
T197411896D446DA2AE951CA34E5A72749778F02C64C203607805CBFF3830EAAE0F060E6
MD5 SHA1 SHA512 TLSH

Resource/Wheel2.bmp

SHA256 d14b8d4dae6875bfc11d2501c9bb972770d91164f7cf503b4477fa275b3d91b5
MD5 53ce88ab4c2136c751b33526ed11e617
SHA1 aa101ca595414bd291ea1a4da2d295d654cc6445
SHA512 a593b9df9e49de8bae1e2cef19ba7dd9ae75b56b818a1346557e5f82b85e09b913381be20fc94c2a6629222228bcad14072ea07325dee3ac260cd2af08cdfb64
SSDEEP 192:90YdY/eWQLmeioGLX18HRNInhkPDCVXkKYUwF09YVU6+:90PomeioGWH6hkkYUDx
TLSH
T16543D7A1931031D0DDBA47AEF4268C4D138EDDAFF06C6385D5DA35904B7E63EA6F108A
MD5 SHA1 SHA512 SSDEEP TLSH

Sausage Fattener x64.dll

IMPHASH fc5e8bca03e7a8bd189935814ca20665
SHA256 7ef161e760e967040516a79d961bd137fb12a54753dad80d16caf26fc2421994
MD5 8d7608fa89581b1fb6f35c48a6f110ec
SHA1 9741b557de8207c934b81e00983eeba1f71e1f7b
SHA512 e962f63c38bb37b65d0adbfd5020243f2bed6cffebb40c61c8ebaa43d8ae1e58e7f8d51a77c28c56046a4c7f03c65440e30f59ac6f8ae05141254228b2fc33e4
SSDEEP 1536:a7wHSj5Heqr6T2b2XrVx4GHNsCqhmMQfVuzoC2BXTt3xHH5ZuMBuNpHoUqNJ4X:aO4kq2T2q7H4uNXqhmMQfLjxn5FAoxLm
TLSH
T17F936C46329004F6E4734234C8E36E55E773F856427983BF07A486AE9F673909E2B732
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Password

asdasd

Minor OS version

2

Major OS version

5

Entry point

7232

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Build\WinVSTWrapper\x64\SausageFattener\Sausage Fattener.pdb

kernel32

GetLastError CloseHandle CreateFileW GetProcAddress LoadLibraryA FreeLibrary DecodePointer EncodePointer GetCurrentThreadId FlsSetValue GetCommandLineA WriteFile GetStdHandle GetModuleFileNameW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapFree HeapAlloc RaiseException RtlUnwindEx FlsGetValue FlsFree SetLastError FlsAlloc Sleep GetModuleHandleW ExitProcess SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapSetInformation GetVersion HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage LeaveCriticalSection EnterCriticalSection LoadLibraryW HeapSize SetFilePointer GetConsoleCP GetConsoleMode HeapReAlloc LCMapStringW MultiByteToWideChar GetStringTypeW SetStdHandle WriteConsoleW FlushFileBuffers

user32

MessageBoxA

advapi32

RegQueryValueExA RegOpenKeyExA

Name

.text

Size

48KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

text

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE

Name

data

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

436B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

vsthostx64/Data/DefaultSkin/ChainOffOn.bmp

SHA256 51b7775bc167cfb1c58b79f943f054e9c637fda193fac805b33a7f6bf66f6a49
MD5 df10d1aa2242f5995d7e3bbdb6d42781
SHA1 a45364727cc29ff770ea08984ef878733c4f42aa
SHA512 598724c28bc6d67832555819a2e685385fe47e5cdf0bb74cb5649ab33d2d667985f1b22e6a8d20947d12ff69a63c041203c9f0421cf5ec6581798c8012a43e3a
TLSH
T1093130291B00E880DD58C53089D57A390728F997C0F93462A2D44EAEAF27CF3E1601E8
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/ChainSend.bmp

SHA256 2a711533c94e3e8ce930f9d67419a71f867e0ddc3af9906323cb2aab7276b296
MD5 bf4db63f76826544f64db8277210c0d2
SHA1 90bf661bd7cc2edcf0ee2241a60eecc54cf3661b
SHA512 bbc6c18c30933cd95167ef43f382fbad7d6494b65c43f879bf2d4d112d14011adc3412388a83799ae90ad650f9c10a27ef1c47fb822e02fbc0889c06c850f0df
TLSH
T10B31CFFA26134C0BF8558034898679780579B7C7D0F734A953E02D5E9F37DA2A2A4214
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/InnerKnob.png

SHA256 71bc3345c2f6bca8b5b57fe3dfb24e6f08d42c0494b8ffb08eaf3d602371f7cf
MD5 cbf5594e4f8302edf3e985640448fb36
SHA1 d23a32581e52711bb76ed59692b9b14376ef4b8f
SHA512 7d649e5b1bb42645eb35b0efac6a06451dadcd254ba8a6862563f4423b1e0f7953825a247aa241ab472a87a68cb4be395d29922467d6416514f910c02185ee40
SSDEEP 192:/S4dttn3WFyK1Vb/fujM6aZIqU7RJ+dhxcK:K4jt3WFhR6aZI1udhxcK
TLSH
T1F7F19EA6FC0D1E44A5B7CC25D7B2996696CA2498BE8CD1F23CFF23131E096F8A1D1C11
MD5 SHA1 SHA512 SSDEEP TLSH

Password

asdasd

vsthostx64/Data/DefaultSkin/OuterKnob.png

SHA256 108a1e8ed2b8f4c4a16c9abbd4b54ab7c148a31597fcbd05e9a9f668268906ff
MD5 6f624efe87f055bdf4f2eff09b91368f
SHA1 00a47f894b916eaa996282bc407eec1a895f87ba
SHA512 d2901376e5a23ba12a7aad4529a0281715d59b2a024aa0bff13336d49dee2feec57c97e9190236903c330a83bbb88e6b67b85f9f20e278081d42e982713bcab2
SSDEEP 384:Y6tVCnkIHsC1cIccyYb35tu+0lEx1KTutmeg:Y+CnkIMabcc375M1Cx8StM
TLSH
T1EC429EC3BD2F88AB0538CC550570369776432F1AEE8B011748A6663E5353DD0CA6AF2B
MD5 SHA1 SHA512 SSDEEP TLSH

Password

asdasd

vsthostx64/Data/DefaultSkin/PluginFx.bmp

SHA256 ceed253f64408d25bcdb03b6bd62aae50ed640809365a8169e72f9a8829f7332
MD5 250a9a4e9a129d4fe1238d0184d4cdb6
SHA1 0f6013eacfb154ee511a2a5b6df8185f2ea1183b
SHA512 a84baba51039cbb175b254b42bff78628af6a4d5d484a22edfbd29ce3758bb973e79b3ce54bb92e179db5f9c0a5f008f6fc343c2bb7985798bc0ab33d8dd1009
TLSH
T176E0240A315AC688D84C0C70CC43C6F818D4DC02AC868137F2E4BBAFB835A056C0A0AE
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/PluginIn.bmp

SHA256 256d09a283889565511faa68e907ebec62416be9ac0c6f5dbe7be92ef6a70a6b
MD5 76b99d430ca6bf537a1595e3f52728c2
SHA1 6b54657a5e0e563d82193f334ee8591f520125f6
SHA512 fefbd85de954f4cbe141313ac5f9b3017efd96102f3fe735d27ebe10c1357b5ace173120dd6e2240462473b1f2f4353fc3b56040b517192eaa2b0003ed4f18a3
TLSH
T1E3E00B136117C45BD02010B2C8CABEFE2921BC429A4C0D6733A1BB8F6AF47075E4A0E6
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/PluginMid.bmp

SHA256 81a9450db656b0832ec8594063f1a8d0c8091f18809b79cf8d3294b76df8afb7
MD5 bfc8f21d87d3ca62a8b06f761d87ab14
SHA1 385fcc57bf80a5afe8890253a833bdb42ff62519
SHA512 7d23db1624d485e0026e5b933c20eb282ea3d7b4e5d43780bcdb629fd26faf69963fa0c025dfe2444490912cd342bf67067047c7e171669fe978655f4344098c
TLSH
T1B1E0240A3198C60DD45C9C30CC03C5F81880DC12AD0A8577F2E07BEF7C70A05680A05A
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/PluginShell.bmp

SHA256 203cad1dce13308e290c324b46ddfc00bc553f439e5076f560a6c5a2f14d30e0
MD5 97c1620aff983f5b2c20313add3c5a15
SHA1 a232019cdafd3b4bd862d3ec47a4176e6b47228f
SHA512 6e2c197f6b4bf52b68ec2f39ee6b71cc5fb640b63a31cd21abd0bb6c760cc2a99b243875ddbfb26dac08efa3a3146a6ec30fa03aa842ff720f3c2e268cc9ce2f
TLSH
T1DEE0920A719CC519E00C18B0CE07CAFC19E4AE06DCC4856B72E07FCF3E75E2C2009951
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/Skin.ini

SHA256 0665cc58fc8695af9a1c9e9024c0dd25edf560a0a957082a2671e30066f5e02e
MD5 37b925206428d0205a3cc55b02948636
SHA1 526e7f1d88516806fe4c5c442301c57f1f0f4c98
SHA512 4551760a72c953b3bcd45c10f3a65655ed21900d09fc54c3f447719920bb29fb5eec46aa4079fa7a81d073003ac50dfa0de771359cc5a4454ea5eee6d3805221
SSDEEP 384:IvWdHszjuf+OBLQUfseP3sjHEsbkbdlIF4hwxR1ujrj481DvN:IaU+MG93MEsbkRlIQ6Ss81DV
TLSH
T12AC2B9027E8A23B20433C109564EE9C5F31996B652B699D93C6F0D5D2E58C7BC1BF2F8
MD5 SHA1 SHA512 SSDEEP TLSH

vsthostx64/Data/DefaultSkin/Toolbar.bmp

SHA256 fe420c28ef5cb07909614678e469bb214dd7ede76d2bff70dede69565af8d0a6
MD5 c50db16e7d19fed5de3e08338b233e74
SHA1 0826f9c25d87a71f9c8ef067f7d89417cdb7700f
SHA512 2b7c45c15c8f1aa1c8d2f64872c3ba938153fcdc2a2eeabb93949c740d5c7c5a9eba4922ab1aa66fa07785ec7869cd29ff8adfa8bea6fcc3f85aac2cbe71ce54
SSDEEP 24:fIV0giqqqqfqCiqCiqyCiqqqqqqSD2qCiqCiq4iqIiqqqqqqqqqqg/YqfbqCiqCL:fk0J
TLSH
T1946206423D2EC9F0C4140434CC8ACBAC1A34BD42B800A107F3B6BFAFE8B8761E61664C
MD5 SHA1 SHA512 SSDEEP TLSH

vsthostx64/Data/DefaultSkin/ToolbarDisabled.bmp

SHA256 cb5f0caf93c7a3c7dfb1cd7a0dad7cd7b38c0922a0b1c1788051e49620bf23ff
MD5 ba91c1669274b3218710f89e02cb5cf6
SHA1 a2d13872e3f5a061596109698408325d31819112
SHA512 ddf1dfdaa612c774f664b78de7a1b6da0885a8f0b0d38ee200948283c8c812394ebe4af0d4e45c7bdab819702fb36c5e2f1d8faf4c045fbf570d7f3478537d6b
SSDEEP 48:fk0Vbvf0iv001F/eUV4XHiAY52gy3ncEKpqgbbFpwTzXLlhlp:fHWgfrwTDLDr
TLSH
T1B4629DE3CDA06C79A33091ABD7BEEFFD851015A69BDC10A62206DF8935227D05EF1718
MD5 SHA1 SHA512 SSDEEP TLSH

vsthostx64/Data/DefaultSkin/abutton.bmp

SHA256 475c996461d99abee5b6183e3de8221a23c937c711dbb9e79096be8e62ac8134
MD5 e9c20d265cdc3378c2adca071e870cf8
SHA1 b36988d085ab94c68cd03b63788b613dbbc4007f
SHA512 17f8f6ada173d67a9a78d733a3186c34f27a11db30dc1ed79759946a383c3848a5a2675e211ea2069068a27e69651b53da6c04cb3c737e349909a03e073fc67c
TLSH
T19B31EAC4D2261A1CDE7F8770906D3A07E926F12065E210D2B5F6F8D543017E713D0B89
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/backgnd.bmp

SHA256 74e2bef7fae49dc79c390024d4f99d40eb1d411c43372d322462c8f94c999d28
MD5 d619423937d9eb031715ab9b9d637efc
SHA1 6d9f87e734e76fa8374d507fe2a174328e4dafac
SHA512 7f7f7aef3e4cd06b056f670fbe60549361ae4bd4ceca3d1ae126aff4624fe02c11fff16358ecedd2857d45e1846970596a76cc34ed055b323bdd013fb7b37304
SSDEEP 96:DR/fZMpRooLRCw5wZH5jSAz9e5VGHjSAcYmvnMnfu03g7rfPucpM1dlM4mdyA1wG:tpIHCwsFSJ54HjovnUyWcV4Mydfe
TLSH
T10D3247184570B23EA5AB47F7FA1D70C6DAC4A4C3B6EE32A0855CC72163A12DBDE091C7
MD5 SHA1 SHA512 SSDEEP TLSH

vsthostx64/Data/DefaultSkin/bbutton.bmp

SHA256 6ffaafb77626eb01fcf51ca19011ec7598894776a855b9547971850779a04080
MD5 317772bfad081aeac522f4f2f571c33f
SHA1 817c9934f45de73e22010fa82c371c4007d737e2
SHA512 61965cca43676abe672780b260993205866dcee02f9662a322f285cf69a62e3f7f7b889521ff65580352da771bf62921bb30ac6b2401fa4cca3ee015569029d3
TLSH
T1471132048C0BF70DC9E3DDB092B6276BCEE68DF456CA14A9D209C46A58205F5AB4D10A
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/bgdata.bmp

SHA256 1ef053662df520ab257474b1eacf18a3fb1179bb13d2717b88dd5a0150ab6b2d
MD5 eb592b88f29c2b1deea881d4a0490b78
SHA1 184253ca2730c31f7876205023a1bdb0521112ef
SHA512 981ab869b3cd5753edeaed6642050f0a799da5cb7d159c6e93d93192f69a79cd9b51e5b41a54a38e5b071d8d3f0b0ef27420c4a2f76a2b851f9bd95cd089fdcf
SSDEEP 192:txgmfDy8mtweapFjap7aRI4+4xmkjh19vp4Vj:AmfDy8mtweQisjPDjhiVj
TLSH
T1CD323758453CE139A4ABC7A2FA1E708EF9C894C376EB33C8844D875246A55D7FE092C7
MD5 SHA1 SHA512 SSDEEP TLSH

vsthostx64/Data/DefaultSkin/btnsolo.bmp

SHA256 09953fd26be25c61bc7c41bc10eacb4d56a5f3c34b81bb81e1d6d0323c681b32
MD5 91e1a9a579d95abb1de0e0a734e62c81
SHA1 3007e24529c05d12aba484ccbcbbbbf52286db17
SHA512 0e90082cbaf3ce58a702da19c5a4935a949f64a4e1c85cb834191e22b3e153d040095214506aa30baf3e18bd76d47121ec6d249655597b40913e354a95a01264
TLSH
T14431AC9219741951CB614DF8BE7960AFF6307A91381DB517A712DBD23BBCF0192D0E1C
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/cbutton.bmp

SHA256 611c3b41fb364d0e1d0b99982cb0701f58bbc7e03ee14d3435dfe48c89ed954b
MD5 7af8c339448e97a79f80b688b08366cc
SHA1 bfed04a4b2d6eb2abac43241b8e96dc51179285c
SHA512 3c6fde6e6ac23495b93799b86d91e99fe976064222606cd3c059f9589d7ecac8922ac72bb97112a9cfaa926ff8e997e29dff436e98f25a12fe3345a71b76e75c
TLSH
T19F31C901D6E44FC1DFDD16F0CFCC5958073C964ACEB2915C36AE896AB071A289A1254E
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/ebutton.bmp

SHA256 37aa77769eb5bcde236f728d49333efbf45c095f482998da2af3249514d99993
MD5 f6b3cfa66f25037d2004f88b3c4c9fa5
SHA1 19618067f6f728dda19ea5883825bc40488adc07
SHA512 2d973369e760702e64ff1bf98d65676d38853313099ca2591c9c478f9e63b9aa566358ef36aa9351bd552f09290f18944edd92da583a6587e6f1eef2a87a0f6e
TLSH
T17D31A73579E78096FE69C2350158BCC95C935A7B0DBB5A4E6362109CAEE42F3801D82E
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/effect.bmp

SHA256 17308f1c9037a3dfcbec0ab84669faee06a3ff2b152efe3a74eeafed50222ab3
MD5 e6b7675d8295245f44e3a6a8436bcbc1
SHA1 5d90df158f86336e0693b42d98fa70f5a268314b
SHA512 cd495abd22261b57e5a230db0427fa20e48f027ad2d6859fc2f915ec0e83909ef6a2cc00ffd111d99920026348ceb7cfe2c8c17361a3a6dea98a1f6f21efbc0a
SSDEEP 192:7gNso8W86G64T64j6AhKi6Zab668Bl/0XOUiQnO7uqi/QkHpv+G6CKfOMk/026NL:7GtxVLpISLMCn
TLSH
T18612CB5EED5592C5CB6045FB1CF8C0D4C49F8E33FE875872B0A4A45ACA46E22E99323D
MD5 SHA1 SHA512 SSDEEP TLSH

vsthostx64/Data/DefaultSkin/effedit.ico

SHA256 bdace1d91207377e176b4ddc0cd67545df7286300b9ec47bd615eb9c4429eca6
MD5 02373f9972eecbaa4438b11c5b15787e
SHA1 0843a87651d519282ecc27f94a9351d6f88ccd7f
SHA512 a77a72acf1d04fd519cd5fe30f32699a6dbf50978af3b8d4756eac143b21ac76ea35750ea10ede0ffcd8c2d5f8469cf8022d09c2ebd19e2d7ac65ba6d7f086dc
TLSH
T1E751CA1616288D8DF9C6CD3C8453A9781628FC274B8139F767D05D5F2E33BE3EA215A8
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/effinfo.ico

SHA256 5fd963a5d711b205397ea5dbaf7a5fb2e2a512749a79696b5323d9f97ad81a2c
MD5 e8d5cfd8f6e1593dcf2609a3881a93c8
SHA1 6efe8575a077925496ed7da15d30c385cd327727
SHA512 11225bd7cbf20297c314d624348e493b7317918e2f6c290087653cc62fc3a9d38e10a422a94a2f4e3b03639dc2daae80ccc768bb957d594b900441f53a4ecede
TLSH
T110514B231624888DF6C6C93D888759741624FC5387527EE71BD09D5F1F33BCAD831199
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/effmidiparm.ico

SHA256 375d34972b86864ffdcad4ae47b6df9be5c0e90cb7a9635a08278d7a7d9dca8e
MD5 b59f3c98a5a02444aec31d430ab87f77
SHA1 f1fea340cac2da824329923d8ec46ce3e59487e6
SHA512 b0d99ed65a3d2fbf587e9f7240cbeb068f628e1d4e195f29d3e314ecc9893b765390563e35a128afdec32710cc332c6b2fefbc271d20a83a0aa4f22a5614f379
TLSH
T14E519C931565488EF6C2CD3D855396740228FC135B5139E717F09E4F1E73BD6D9342A8
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/effparm.ico

SHA256 d1919c2a4294f938305d4f5d96a09914a380cf8c5eaf4cb5b9e7b7e555f94b67
MD5 691779d4a0f2c026ecb88244a7f9eec3
SHA1 4bdbb0e834f7de05fd46d616e9b5b49bb74e13b5
SHA512 0243737707e50e383591e396545756e50d60652da8a8850b9963087233089a4991fc1f89350408dfaeeacbe30571344e51173117b097c12900007eebfb43bbc5
TLSH
T14F519D671199A884D5C888394D87597016F8BDB3E8A1667363F02E0F6F33EC1E96151D
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/fadercap.bmp

SHA256 1c1d8667a16092831ea2c00a2d61d6a5839a78d5ea3bb1e877978647c13a5688
MD5 ab10ad27d66cb06e13e6ef8880a7bd8a
SHA1 9e493a7d862148e1f383cf4e240aaa211d4256e5
SHA512 cc680716afbbf8ca255d64121a980ed5f5b0c7684fc4faa4afe4ba2102829cbf3fee6b05c841494de481ed6a80332c4f3f6c7fb4c5c63976888dd077954c9c81
TLSH
T16B216D2216B04886EB94DC36484F98AD0528F817A15EBDC933C39F273B03EDED56422B
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/iabutton.bmp

SHA256 81bcaf82bcc358bbc05f588fcd989c309494348ebe366b3ea9280e475301eb89
MD5 de8f7a34459fba1c54deaa03a4088251
SHA1 d884b6579a3c7c9fbd747ed6544a884412bd6433
SHA512 b9b0facc1a4af65b829dec93d648da5e2953d369f6af16d5d48856783548d46a55d53cb08de91ec0a34bb8800881ae457109426b690be012ce6f272906872102
TLSH
T177217412E1489C44EFC9DD389DDED7A70EE84430AD67C53DB1C95821B0CBEB1232A302
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/ibutton.bmp

SHA256 35b67d4f601cbd3335a0d6a035e0491fb1b5b7a0c1b9e2a13eaaa8786ecbda6d
MD5 b86748f5ba5bc9ba1ca9e22463a83f65
SHA1 bfe2fbe96b7840d70a09573cb5bc21aeb0a47496
SHA512 b32c42830b37065ed5219aff44ecf04e1510c349ed4ce747ccec2f703c81b8d3b8cac943478c3ddca46bfa60a2d32c66da73cf00732ec99b43d5da9e11c8c7ba
TLSH
T1EC31B93256278C90DED4D83249DA68748938FA9394EBBE7007C04E2F4F13CCBD15922E
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/idr_main.ico

SHA256 13cca568faf8bd5e8e2dbfcd648b61aedb7aee160c8c00385b40ccb648677e15
MD5 b681bf204bc8afe2105c52f3e76b7e5f
SHA1 08c45cca271410a463e3dd4aad64d323f959c461
SHA512 d1f8a76f36ea34054aa594b058282043c036525aba9b5b004864823e6183d03c125985e99e8f5554b9a31c97a2102144fb2005edd7c633552505862156e6dd94
TLSH
T19461F51AC2242CCEE9C180BD45574A282124BC93D3553DEBC7D0BD4F1F2ABE5E53629B
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/instrument.bmp

SHA256 177422b9a4fd5988501606fc3920a1daa55311110a9642af3c80954c66b6c19c
MD5 f5a3bd4feba2926d249fe8890a6d4bfb
SHA1 05c158db0afc44be76635c0c5f9d5097fb0a2119
SHA512 01983ffd4ede0ebeca1dfcd6a3f90a79515b3ad638b3652992e8b8c3c1a4a8bd116831a8f3cf7a017e2130dc970c1d1d77cd096f375b2e81cc55a50d460d870f
SSDEEP 384:t3kMvfIEeAQQ4gUUwEFcTrUo1B3XUiPBZfvHR8SLUAO2pL/4zBAGpvv:tNfIEeAQQ4gUUwEGrUcRXUiPnLUAO2RS
TLSH
T1087259BB653E39E6DDE8593980A5749923A2E0DFD40FE5A30198393074F3AD870CD62D
MD5 SHA1 SHA512 SSDEEP TLSH

vsthostx64/Data/DefaultSkin/kbd.ico

SHA256 91ff6079cddf311c9cf361ff1f6c21bdb190a4f51ef92571e66a6d3fe939d37a
MD5 0a0b8cffbe46e2dd0d3099ba658a5604
SHA1 4717238d8d92d3881fcf4372587d87e132affa5b
SHA512 fdd69a6f338744dc71e6df50d73bca501240a1c02319c42c4293d2eafa678aa0322881f63678fef450a9ca33818d8b4d814a2d55040830a63e545758a4508e41
TLSH
T170117501F81474C9D4C0067A44E7C57A96286E2BB6C3AC031798FB5EFC383206E4B9DB
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/masterfa.bmp

SHA256 b08d30fa3992c3853b0a765f92d23a0e9b21e098f2a02891fe2126569686b31a
MD5 19f059ec85972f08e297161f91b8d6d5
SHA1 cec41b970061f806d0a786a41c94ded3d242281b
SHA512 38d0acbe8676c950d8dd867b90fac6cd14e3c71abd53bdc8f8cbfa7eaa749eedf90573ded9c2986b621adab7ed98d6d2e53299fee2c699aa3587ef178555ed55
SSDEEP 96:FdfhHAJ1cDy9zQPyrvO+7Gdkpc/lcYsyeE2:3NADiy9zoyrvO+7GSc/BsyE
TLSH
T15D91A2CACFE837D5039885BE05541D0EAAB2C90598FEDCE7D4D0AD4B963CE31A4761C5
MD5 SHA1 SHA512 SSDEEP TLSH

vsthostx64/Data/DefaultSkin/mbutton.bmp

SHA256 2cf7944e2b947840b33aab561981f224a4a95fbccaf925be555f8b817b960e77
MD5 c4ea852ec524114ebcacbc3445380583
SHA1 be4363e83176b9a0dc1f51e22665f4171a56f74d
SHA512 50754b10cadc0c3a05b0869b7d5c45348f59adb0f11b244669c48e5891a16c5c24f0e9c265d47975d082fd8b92aa2d6af158289ace72e541099f49dcfe61c745
TLSH
T12A1112D53DD7108BFBE15F32CE8253741CE49823AC87629A567CE6C4C1993CA0A6CF66
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/midi_tb.bmp

SHA256 d393640968854b89c20e554268bb1d4fabee164e0630e3a96278b8d48a1d6cd8
MD5 17f332ba0f5285d58f807792b2afabe4
SHA1 3c12887f3dfbd3e6f8981ecf34283647986bb500
SHA512 50260919ecd48dea25b00f24db5af7e9d06475b99835b751f5dab69426049f4c6f413918c84ab3243e081be9e2449ed75563cdefd352c0e047644ecaa57648ac
SSDEEP 24:qLu0wYqqqqqqqYNiqqqqqqqGiqqqqqqqYiqqGiqqqqqqqgiqqqq0qqqQiqqq4Pi2:aV
TLSH
T1CBB12A843D2F8CF0C0180030CC8E8BAC053A3C82B840E483E3BA2EBFD8B9B40E20240C
MD5 SHA1 SHA512 SSDEEP TLSH

vsthostx64/Data/DefaultSkin/midi_tbDisabled.bmp

SHA256 a6e744588b87fe3bed091cc00a3f5ed3f31d0efe7628e7b84854a7c88123c746
MD5 6d326580864be0552bdfb2e74856dbc3
SHA1 caba56909604ac934c708cdbb84244a61ad9ba5b
SHA512 68d3eaf004154d3d01786a00491fd0c01fbd0e9bb3b0dde1d50ff531924c314a5fe51c637327b3e59d0c3a27707d0165c0b97d4a30ee28e97836341fc34d5021
TLSH
T139511DC25E9E7C26CBA28C3787801E11B9F1F900B3135E1FAE322C04C27CB819729236
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/mlbutton.bmp

SHA256 524cd685610b6d40a7c2ec4ba3db5d100bb8f27e90eb56ec99612ee5e57de6bd
MD5 ef9ef4be6acd54f24c9bee194a183ea3
SHA1 32b2c84bf0add613de2318e9da12f35ef75bd4f2
SHA512 66ba8d7bbfe0ab571c9f341a63e1dd333a65bab52c84214cc2509600ce85c29cde17b9c599a2611b95320e424b99a80b2ddc530459ee30df126b6b97435b11f7
TLSH
T1B53112A31A214884DFE0C8318AC59C709068F85B68CA767527D84E6F4F03DF7C5AD36C
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/oabutton.bmp

SHA256 2d16d747a058a2bdc4a5daefe01bcda7598ccccde5a3d151d0daf994e0a570af
MD5 6eae6752a3dccb0dcdd876afe97c1a13
SHA1 c6e1fc83ecef74c57f520e86957a2ca894e96484
SHA512 27dc80c0cfb5c96f2f526d7d6400dba873829e32845a3ea47ebb669abd5710329d2893acbdd5b20ee105cf2440216c12e4bc07a75bd32559f4ba89e2c26a9126
TLSH
T166214124E803ECC5EEF20971C982ABFE0ABC4C72E05AD50272687D1DF6236526229706
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/pbutton.bmp

SHA256 44b8e1dc98b3747b02bb62cff33b7877aa41a6e6fe59117da67de39e9788b1e6
MD5 305fe06e6a3b8713c0a924a5ab724cb2
SHA1 feb3148255dd1d254a81761219d3b2984bd0b6d7
SHA512 80a2a40cf058808df3ee4bf39bf12b91d874eef79aae2b7840aed0258a813193ef7c5187d889369bc84331470880d6e449b49e9c29550b8e8adbae1ee7e356fd
TLSH
T13021DD97C857EAABF6480A3D0A823456C74137CCF2B6D276286E3C1C96335C468A2D17
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/pfbutton.bmp

SHA256 e8fa76863e72a3b72af9c70aa8530d5e5b4bdeb21be97728a29fc36c69bbd3d3
MD5 b108b6b3da7e3861ac1dbc6904cf882b
SHA1 1a5b4573d112910e096136dd877e5655f224b0d2
SHA512 34ec9034257abbdffd4426e3caac6f0d76c9e32f12608fe0bba09040f75009eb06593694b052e70edac30a7bb180b02a4af2e190d6e87c65f86169100d021529
TLSH
T149319D2A301CECC8CFE10C320C4C16B9A22EB51715F6F7C426C56A8B8B8BD76C156B86
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/toolbar1.bmp

SHA256 642d34a09deffed0f8b4dc3f536e0b007ab99034b049f86efd1ad1816c1550f0
MD5 07a2fc857dcd2002d119f892ec626220
SHA1 b04cfa7791eae5ee2cc5afa791072bf66c3f9628
SHA512 d93f0640dade570676bf1052c4f201c94f824eb5dbd798d298a249822966b341c3a92d052411fea8ed28999aa6bc8b8a21211a87d6601f6625e23a00a54d3fa6
SSDEEP 24:SGOwYqqqqqqqaiqqiqqqqqqq4iqqqqqgiqqqqqqqKiqqqqqqiqqqqqqqYfiqqqqF:ae
TLSH
T1961205556D2FCDF0D0580430CC8E9BAC1A787D063941E513E3B26EBFC9B9B94E62644C
MD5 SHA1 SHA512 SSDEEP TLSH

vsthostx64/Data/DefaultSkin/toolbar1Disabled.bmp

SHA256 4316673b4706a42a56b1164fec9c31cac286e155e94290d0d2fd0944b783fd94
MD5 8d5b2c12595fbd76808ecc838c625e77
SHA1 a48925612a9f6627575dcd00b33b66da53b8aa89
SHA512 23c884692cd82ebed769a6749896f6dab4938e9715d29224e27df7774d94c57c238bbcf597017db4b015c11808dd2a41dd17965384215c3e7442eee709d6e157
SSDEEP 3:ClllDli/mlg0X3lllllllllllllllllllllllllllllllllllllllllllllllllF:C/GKg0f
TLSH
T1811202A85D0DC580D06C04304C4C5F3C155049063141362083524C04C6CD3E4E404848
MD5 SHA1 SHA512 SSDEEP TLSH

vsthostx64/Data/DefaultSkin/ubutton.bmp

SHA256 0f42c74323bee578fc60f1edc9a21269b13cd4bb6bb494e5a0aa7cb7c1c9fe2a
MD5 9141ad0f862acd41007922f9be8a765f
SHA1 2eaf2b64dbc41bf53dc06e5612e40457fe9dd0e7
SHA512 b9454355a62698bdabeabad97aef65493c7c9d9c1b035c8c3b3ee960beffb9e16d8a7f775106c8ae10e04f8c840e105bf80ae192de2b5035bfde5f7e17e9a0eb
TLSH
T177319703464FA951EEA24C74058AC2745650AA4E52C764F2EDD63E6BDB01D0A63097DB
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/vuoff.bmp

SHA256 86c9c24fe06c001fcb6fc98118e84019b9d895cf98d7e5372110a4112fa9fa7d
MD5 8a34297942e40d3212e66c7ffb00762e
SHA1 81291742829b740b7a4cf9a239157d48344dcf1f
SHA512 6fd546aff3c9a769950b318f8db894fe50f2d06f92c1fd617b21ab8d52847b9ffb4d6c3bdd9c51ff30888d40d94d1974b009dc0ccecadb228d42ef7135d56dd1
TLSH
T1254111110A229EC4EB80947944DD862224D4BE9F437AB0B40EFCCE173973897D7B146D
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/vuon.bmp

SHA256 cbe603444fef23009abea9122412637f74e19c23a7fd90c05129466cf0fffe8e
MD5 44ea5a5c393891635ac9af73291caec3
SHA1 a0889627e131de13060b3691c7116bdc098945af
SHA512 309c4097461dd494f84bbc76747fdbb4836ea9698807220f68a13443822a52a6e0e0857f4179cdaeb013902ad8d01d7d307561d06a86cf112a3c8a3e005ab294
TLSH
T1F44133364B253844FBA454334AC998ED55641113D37BB8A4CAA25F0F3F87CABFA88183
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/DefaultSkin/xbutton.bmp

SHA256 393d9c5ec5972fbb6cf8aa41c27494052ac9e202d1a44caf5e88155d39cea6e8
MD5 85cda279a31c53274b1ea3a8c2ceeb2d
SHA1 c2d2f3936b53334b59ae6f53bc4b77ce1e991e47
SHA512 5c5ef895d835b0e1bd2c90547bf69488f7b868ab4528095b14108df1da606859c4ed3b2f0f7c38d088f87105c65e553e7e8abc095ebd56344a0df1f0371cd207
TLSH
T19C31DE36411894C8DBE4D53144D958B42538BA6B90B5317137D3BE9F6F23DC3E620258
MD5 SHA1 SHA512 TLSH

vsthostx64/Data/effCanDos.ini

SHA256 5754544d0fdccbff996807e054af32f834db5294de449cc5d878e20b5b5ed592
MD5 04f97b8e643e3e2f9c8f73b2a489f722
SHA1 2666ffac05a11cf1d93f595df5aaa9116b71452d
SHA512 95ca57496c14f803cb6e2c02f3b8592b2e70e150c51e7f394ff2a3ff240f9ab8ec2e71c1b2b67ce86859f60421cf521477b76eed5a8e3acc4c64dd6e29d1c9af
SSDEEP 192:w1mMMs0FkpMaITG+pjwKO+Yd7GNy/pHIjzfaCWXwXlXGM:w8hjFxjEt5IjzfaCWgV2M
TLSH
T147D1533A3215036D4D3034B6634AD5F6F336466F41709A64B62E8E43AB2937BC5FE6B0
MD5 SHA1 SHA512 SSDEEP TLSH

vsthostx64/Data/hostCanDos.ini

SHA256 f05c03dd7527924ad0df39baf67738896a1d3c6acb16475cee81f88a7c40f62d
MD5 edc18fee18c4f4814248b5d3b5a667ab
SHA1 5701e6109673bf52c9bb6cddeb80c2ebd1a2613e
SHA512 2c111930fc03305cd2bce6bc76858329ef4f29a79b1a2b2977cd5de9d7b5668ca8999a6f37bfea844bdcafa7c15f307c02f1bcb4b1baae76fe93c5a8b8504b0f
TLSH
T13051616A4E85937C9A3531C1A7AD42EBF31589FF133002D416345E246E9B393B2BA0F6
MD5 SHA1 SHA512 TLSH

vsthostx64/VSTHost.pdb

SHA256 b8f2186f100f98f4c94d70a1e97446d87f2a7417984a494a4fd3394a0a5f09bb
MD5 278f2cc9e3f4b8facefbb1d0d63460b2
SHA1 a352eb989daf8b2cd96fce115346784c5b17ec60
SHA512 6b23977c7b4e153a8779b881061d5b31433e1da0fb9731dc74ba6462dcf75faa6f6f7af71f967693f532f05506a693846ee919b0ee4118832d44c93b80f98aa0
SSDEEP 98304:POZi5YkWi678MVNNaBZ/C1kKUmH01geqW/d9zMw+9SobPxcu7Ef3ZPmmj/LU+I+:P
TLSH
T1363682299B2B69E3C66DD3F604D60B5C32F8958013E39A6F411AB4313DB7372CC9B994
MD5 SHA1 SHA512 SSDEEP TLSH

vsthostx64/VSTHost.pdf

SHA256 e86320861501f1e77b7ad34a349c30f956b975f3bccf20134d86d4186fa9aa97
MD5 1bde67a53c8dd5cdef477cbd404d10b4
SHA1 f00d17788842b12dfe9a0f59f18d5a31a4803f53
SHA512 3d96f1c624e6646bc02572d8a5927f72939684a3ccf91d27c8156cf87074ef634828f8bacdb38956b59185db2ad5371b7615bba86859fb8e94f9094c46df3ab0
SSDEEP 49152:HnvKSZUaE7/6FCuhkpvxzs28beKu85P/RpROGf2ED:iT7/6QoWQR1hV
TLSH
T133B5F178F5028C9CFC428BD5A0723A6C856E73673ACD7AB04475CB56E2D48894E83DE7
MD5 SHA1 SHA512 SSDEEP TLSH

HTTP links in PDF interactive object

Detects HTTP links in interactive objects within PDF files.

pdf link

Password

asdasd

Extracted URLs

file http://jstuff.wordpress.com/jbridge/
file http://opensoundcontrol.org/
file http://osw.sourceforge.net/
file http://vintage-sounds.freeforums.net/
file http://web.archive.org/web/20090309000041/http:/www.lionstracs.com/store/
file http://www.artvera-music.com/
file http://www.asio4all.com/
file http://www.dreampoint.co.uk/
file http://www.ijg.org/
file http://www.kvraudio.com/
file http://www.libpng.org/
file http://www.lionstracs.com/
file http://www.mpg123.org/
file http://www.mpg123.org/download/win32/mpg123-1.13.0-x86.zip
file http://www.mpg123.org/download/win64/mpg123-1.13.0-x86-64.zip
file http://www.steinberg.net/en/company/developer.html
file http://www.vigierguitars.com/
file http://www.waves.com/
file http://zlib.net/
file https://www.hermannseib.com/english/vsthost.htm
file https://www.hermannseib.com/programs/beta
file https://www.hermannseib.com/vsthost.htm
file mailto:[email protected]
Show all

vsthostx64/VSTHostBridge32.exe

IMPHASH fc1c14bbe3f3a739b40a7785a9d6877f
SHA256 d1c4420366cc5c7029868d0b213f7e1f0239fb5193953ebff897e56ee8122b73
MD5 cee3e62101a9eb8a612d95fa332e7892
SHA1 ad37175908e74bb61b639dd5ac4398e60d5261cf
SHA512 ce0da60d87d3c7e0a4bdff73b5686cbd5729c0b33d0cb15fe8a378b11cfdc04154ebb32e38aed77b95bec05421142e87472b99c91a973bb7b9cf6b659551c680
SSDEEP 12288:wiCPdTBeO6m0SrQol9ozoyEuFp6NA3P9ucpqk/TE1Msz1E/vH77fne7OiZ:w5PCD1CXcpqk/TEq41ibD4
TLSH
T111E46C207BD5C1B3CB5230B10D6A976F5126F2661B285EC3F2952F2E4E392D13D3929E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

asdasd

Minor OS version

0

Major OS version

5

Entry point

427204

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

winmm

midiOutUnprepareHeader timeGetTime

kernel32

FindFirstFileA GetTempPathA GetUserDefaultLCID ExitProcess RaiseException SetPriorityClass SetUnhandledExceptionFilter InterlockedExchangeAdd SuspendThread LocalFree FormatMessageA LocalAlloc TlsGetValue GlobalReAlloc GlobalHandle TlsAlloc TlsSetValue LocalReAlloc TlsFree InterlockedDecrement lstrcmpW CompareStringA GlobalDeleteAtom GlobalFindAtomA GlobalAddAtomA GlobalGetAtomNameA SetFilePointer FlushFileBuffers LockFile GetLocalTime SetEndOfFile GetVolumeInformationA WritePrivateProfileStringA GetLocaleInfoA EnumResourceLanguagesA ConvertDefaultLocale GlobalFlags FileTimeToSystemTime GetCPInfo GetOEMCP FileTimeToLocalFileTime GetFileAttributesA GetFileSizeEx GetFileTime RtlUnwind UnhandledExceptionFilter VirtualProtect VirtualAlloc VirtualQuery GetCommandLineA GetStartupInfoA ExitThread CreateThread HeapSize SetHandleCount GetStdHandle GetFileType GetACP IsValidCodePage LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode GetStringTypeA GetStringTypeW VirtualFree FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetTimeZoneInformation SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW GetProcessHeap CompareStringW SetEnvironmentVariableA FindNextFileA DeleteFileA FindClose GetCurrentProcessId ReadProcessMemory MulDiv GetTickCount GetVersionExA GetSystemInfo IsDebuggerPresent lstrcmpA GlobalUnlock GlobalAlloc GlobalLock GlobalFree InterlockedExchange HeapCreate HeapReAlloc HeapAlloc HeapFree InterlockedIncrement SetErrorMode LoadLibraryExA GetEnvironmentVariableA lstrlenA lstrcpyA MultiByteToWideChar lstrlenW UnmapViewOfFile CreateFileA GetFileSize CreateFileMappingA MapViewOfFile ResetEvent GetCurrentDirectoryA SetCurrentDirectoryA LoadLibraryA CreatePipe DuplicateHandle CreateProcessA WriteFile ReadFile OutputDebugStringA GetModuleFileNameW SetLastError GetLastError LoadLibraryW WideCharToMultiByte GetExitCodeProcess TerminateProcess GetThreadPriority GetCurrentThread SetThreadPriority GetModuleFileNameA FreeResource FreeLibrary GetFullPathNameA FindResourceA LoadResource LockResource SizeofResource GetVersion GetFileAttributesW GetModuleHandleW GetCurrentThreadId ResumeThread GetCurrentProcess CloseHandle CreateEventA WaitForSingleObject SetEvent LeaveCriticalSection Sleep DeleteCriticalSection EnterCriticalSection GetProcAddress InitializeCriticalSection GetModuleHandleA UnlockFile

user32

GetClassLongA WinHelpA SendDlgItemMessageA SetDlgItemTextA IsDialogMessageA SetWindowTextA MoveWindow ShowWindow CharUpperA TabbedTextOutA DrawTextA DrawTextExA GrayStringA BeginPaint EndPaint EndDialog GetNextDlgTabItem CreateDialogIndirectParamA GetDesktopWindow WindowFromPoint SetCursor GetSysColorBrush UnregisterClassA GetDlgItem DestroyWindow GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenu SetMenu SetScrollPos CreateWindowExA GetClassInfoExA AdjustWindowRectEx GetScrollInfo SetScrollInfo GetDlgCtrlID CallWindowProcA GetMenu SetWindowPos GetWindowPlacement GetWindow DestroyMenu GetWindowThreadProcessId GetLastActivePopup IsWindowEnabled MessageBoxA UnhookWindowsHookEx GetSubMenu GetClassNameA GetMenuCheckMarkDimensions ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem SetWindowsHookExA CallNextHookEx GetMessageA GetActiveWindow IsWindowVisible GetKeyState GetCursorPos ValidateRect TranslateMessage DispatchMessageA PostQuitMessage OpenClipboard EmptyClipboard SetClipboardData CloseClipboard wsprintfA FrameRect GetMenuItemID DeleteMenu LoadImageA DestroyIcon GetSysColor GetAsyncKeyState GetClassInfoA DefWindowProcA RegisterClassA LoadCursorA GetParent GetFocus SetCapture LockWindowUpdate GetUpdateRect UpdateWindow ReleaseDC GetWindowRect DrawFocusRect LoadBitmapA EqualRect UnionRect IntersectRect OffsetRect InflateRect SetRectEmpty PtInRect IsRectEmpty CopyRect SystemParametersInfoA GetWindowLongA SetWindowLongA GetDC GetSystemMetrics LoadIconA IsIconic DrawIcon ReleaseCapture EnableWindow SetForegroundWindow IsChild GetCapture InvalidateRect ScreenToClient GetMenuItemInfoA GetTopWindow SetParent ClientToScreen GetClientRect SendMessageA SetMenuItemInfoA GetMenuItemCount AppendMenuA CreatePopupMenu RegisterWindowMessageA PostMessageA PeekMessageA SetPropA GetPropA RemovePropA IsWindow SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow SetActiveWindow SetMenuItemBitmaps RedrawWindow GetMenuStringA

gdi32

GetDIBits SetDIBits GetTextExtentPoint32A CreateBitmapIndirect CreateDiscardableBitmap SetBrushOrgEx DeleteDC SelectObject SetDIBColorTable DeleteObject CreateDIBSection ExtTextOutA GetClipBox SetTextColor SetBkColor SetMapMode LineTo MoveToEx RectVisible TextOutA Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetStockObject CreatePen CreateSolidBrush SetBkMode RestoreDC SaveDC StretchBlt BitBlt PatBlt GetDeviceCaps CreateCompatibleDC RectInRegion CombineRgn SetRectRgn CreateRectRgnIndirect CreateCompatibleBitmap CreateBitmap CreateFontIndirectA PtVisible GetObjectA SetStretchBltMode

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueA RegEnumKeyA RegDeleteKeyA RegSetValueExA RegOpenKeyExA RegCreateKeyExA GetUserNameA RegOpenKeyA RegQueryValueExA RegCloseKey

shlwapi

PathFindFileNameA PathFindExtensionA PathStripToRootA PathIsUNCA

ole32

StringFromGUID2 CreateStreamOnHGlobal CoInitialize

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit

gdiplus

GdiplusShutdown GdiplusStartup GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipCreateBitmapFromFileICM GdipGetImageGraphicsContext GdipGetImagePalette GdipGetImagePaletteSize GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipDisposeImage GdipDeleteGraphics GdipAlloc GdipFree GdipDrawImageI GdipCloneImage GdipCreateBitmapFromFile

vsthostx64/VSTHostBridge64.exe

IMPHASH 30af88f3e4ed456c2bb1207bf3c730d7
SHA256 1de634ee36e4fac47540d8addb1666d341743fa5f31a3e570bf2dbb0249026f5
MD5 c4a78105240b110987febb25db23d075
SHA1 6210219004dd1b914273e3ddb65feba66480d5c7
SHA512 446e327428001a2acf669707618c79cfe01175216395db66336616a985fa4ee8cec299f1f19aef7b83331714e43050782e72a31c500d06c02c74f04b20430f93
SSDEEP 12288:5jUClMSJZLQuevLJXGeSqNrE+C92gb0NsPSb+DvspeNx/bO:5wC1JZ2vNhM92gKdb1KbO
TLSH
T1B7153A5DB67880F2D036C07EC9929686E7B2B4520B318BCB5162876F7F375E58D3A321
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Password

asdasd

Minor OS version

2

Major OS version

5

Entry point

498724

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

winmm

midiOutUnprepareHeader timeGetTime

kernel32

GetLocalTime FindFirstFileA GetTempPathA GetUserDefaultLCID ExitProcess RaiseException SetPriorityClass SetUnhandledExceptionFilter SuspendThread LocalFree FormatMessageA LocalAlloc TlsGetValue TlsAlloc GlobalReAlloc GlobalHandle TlsSetValue LocalReAlloc TlsFree lstrcmpW CompareStringA GlobalDeleteAtom GlobalFindAtomA GlobalAddAtomA GlobalGetAtomNameA SetFilePointer FlushFileBuffers LockFile UnlockFile SetEndOfFile GetVolumeInformationA WritePrivateProfileStringA DeleteFileA EnumResourceLanguagesA ConvertDefaultLocale GlobalFlags GetModuleHandleW FileTimeToSystemTime GetCPInfo GetOEMCP FileTimeToLocalFileTime GetFileAttributesA GetFileSizeEx GetFileTime RtlLookupFunctionEntry RtlUnwindEx RtlPcToFileHeader UnhandledExceptionFilter RtlVirtualUnwind RtlCaptureContext VirtualProtect VirtualAlloc VirtualQuery GetCommandLineA GetStartupInfoA ExitThread CreateThread HeapSize HeapQueryInformation EncodePointer DecodePointer FlsGetValue FlsSetValue FlsFree FlsAlloc SetHandleCount GetStdHandle GetFileType GetACP IsValidCodePage LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode GetStringTypeA GetStringTypeW HeapSetInformation FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetTimeZoneInformation SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW GetProcessHeap CompareStringW SetEnvironmentVariableA FindNextFileA FindClose GetCurrentProcessId ReadProcessMemory MulDiv GetTickCount GetVersionExA GetSystemInfo IsDebuggerPresent lstrcmpA GlobalUnlock GlobalAlloc GlobalLock GlobalFree HeapCreate HeapReAlloc HeapAlloc HeapFree SetErrorMode LoadLibraryExA GetEnvironmentVariableA lstrlenA lstrcpyA MultiByteToWideChar lstrlenW UnmapViewOfFile CreateFileA GetFileSize CreateFileMappingA MapViewOfFile ResetEvent GetCurrentDirectoryA SetCurrentDirectoryA CreatePipe DuplicateHandle CreateProcessA WriteFile ReadFile LoadLibraryA WideCharToMultiByte GetExitCodeProcess TerminateProcess GetThreadPriority GetCurrentThread SetThreadPriority GetModuleFileNameA FreeResource FreeLibrary GetFullPathNameA FindResourceA LoadResource LockResource SizeofResource OutputDebugStringA GetModuleHandleExW GetModuleFileNameW SetLastError GetLastError LoadLibraryW QueryActCtxW FindActCtxSectionStringW DeactivateActCtx ActivateActCtx CreateActCtxW GetCurrentThreadId ResumeThread GetCurrentProcess CloseHandle CreateEventA WaitForSingleObject SetEvent LeaveCriticalSection Sleep DeleteCriticalSection EnterCriticalSection GetProcAddress InitializeCriticalSection GetModuleHandleA GetLocaleInfoA

user32

SetPropA GetClassLongPtrA GetClassNameA GetClassLongA WinHelpA SendDlgItemMessageA SetDlgItemTextA IsDialogMessageA SetWindowTextA MoveWindow ShowWindow CharUpperA TabbedTextOutA DrawTextA DrawTextExA GrayStringA BeginPaint EndPaint EndDialog GetNextDlgTabItem CreateDialogIndirectParamA GetDesktopWindow WindowFromPoint SetCursor GetSysColorBrush UnregisterClassA GetWindowLongPtrA SetWindowLongPtrA GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenu SetMenu SetScrollPos CreateWindowExA GetClassInfoExA AdjustWindowRectEx GetScrollInfo SetScrollInfo GetDlgCtrlID CallWindowProcA GetMenu SetWindowPos GetWindowPlacement GetWindow DestroyMenu GetWindowThreadProcessId GetLastActivePopup IsWindowEnabled MessageBoxA UnhookWindowsHookEx GetMenuStringA GetPropA GetMenuCheckMarkDimensions ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem SetWindowsHookExA CallNextHookEx GetMessageA GetActiveWindow IsWindowVisible GetKeyState GetCursorPos ValidateRect TranslateMessage DispatchMessageA PostQuitMessage OpenClipboard EmptyClipboard SetClipboardData CloseClipboard wsprintfA FrameRect GetMenuItemID DeleteMenu LoadImageA DestroyIcon GetSysColor GetAsyncKeyState GetClassInfoA DefWindowProcA LoadCursorA GetParent GetFocus SetCapture RedrawWindow LockWindowUpdate GetUpdateRect UpdateWindow ReleaseDC DrawFocusRect LoadBitmapA EqualRect UnionRect IntersectRect OffsetRect InflateRect SetRectEmpty PtInRect IsRectEmpty CopyRect SystemParametersInfoA GetWindowLongA SetWindowLongA GetDC RegisterClassA GetSystemMetrics LoadIconA IsIconic DrawIcon ReleaseCapture EnableWindow SetForegroundWindow IsChild GetCapture InvalidateRect ScreenToClient GetMenuItemInfoA GetTopWindow SetParent ClientToScreen GetClientRect SendMessageA SetMenuItemInfoA GetMenuItemCount AppendMenuA CreatePopupMenu RegisterWindowMessageA PostMessageA PeekMessageA RemovePropA IsWindow SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow SetActiveWindow GetDlgItem GetSubMenu DestroyWindow GetWindowRect SetMenuItemBitmaps

gdi32

GetDIBits SetDIBits GetTextExtentPoint32A CreateBitmapIndirect CreateDiscardableBitmap SetBrushOrgEx DeleteDC SelectObject SetDIBColorTable DeleteObject CreateDIBSection ExtTextOutA GetClipBox SetTextColor SetBkColor SetMapMode LineTo MoveToEx RectVisible TextOutA Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetStockObject CreatePen CreateSolidBrush SetBkMode RestoreDC SaveDC StretchBlt BitBlt PatBlt GetDeviceCaps CreateCompatibleDC RectInRegion CombineRgn SetRectRgn CreateRectRgnIndirect CreateCompatibleBitmap CreateBitmap CreateFontIndirectA PtVisible GetObjectA SetStretchBltMode

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueA RegEnumKeyA RegDeleteKeyA RegSetValueExA RegOpenKeyExA RegCreateKeyExA GetUserNameA RegOpenKeyA RegQueryValueExA RegCloseKey

shlwapi

PathFindFileNameA PathFindExtensionA PathStripToRootA PathIsUNCA

ole32

StringFromGUID2 CreateStreamOnHGlobal CoInitialize

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit

gdiplus

GdiplusShutdown GdiplusStartup GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipGetImageGraphicsContext GdipGetImagePalette GdipGetImagePaletteSize GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipDisposeImage GdipDeleteGraphics GdipAlloc GdipFree GdipDrawImageI GdipCloneImage GdipCreateBitmapFromFile

vsthostx64/history.txt

SHA256 923a250081534b091e3e3a136f12309169b1a8e89aff0b0242a32001d5e4d63e
MD5 2e31421b465649fe9952b98a3cfed028
SHA1 584fab77a10aadaf346c20a25a6c248307673bf6
SHA512 ddc37d3052e5f652002d6943a4d1ac4654d4338d27345c0c23bfec48a5edd4273c7fd9fef6b8fac560c042ab756968d255d493bcd3454d4f9dc38b799ff6066d
SSDEEP 768:LLtWFcRadpbtASmiDsLaAl4fC1mIDZIkWLXkTPMuBK1EwfSR:PtWFCadpCSXDsLai1s1rwPxBKbKR
TLSH
T1F0F21C57AA0583A314B31102620535E2F32A81FEF36D4256B16CD2DC774A43ED6FBAF9
MD5 SHA1 SHA512 SSDEEP TLSH

vsthostx64/license.txt

SHA256 3e037510c32133d7fbcf87e052dc0cbd92f6c2327b6fddf84f67c89250517043
MD5 a786106f05f95dd8844433060f8056f5
SHA1 6d9d588f03b161558f4e2d1799158ff38ec6c6f6
SHA512 52a3ba142f0adcb038866b1a81104c173893446de075be7c5491976b1bd2193897693ca19fef9be70827d330fe20be56d899ef4c9224b97d80ae08eba235b25a
SSDEEP 192:JxM4xfSkMm8UlypK4XeV3OqYTlOr78N58O64c:JxM4tumVE0nOz5e8P8Ofc
TLSH
T131026469B70A13B3239203A6560B92D5F73BD9F8667E43417168C12A3381C3897FA9DC
MD5 SHA1 SHA512 SSDEEP TLSH

vsthostx64/vsthost.exe

IMPHASH 2a789c3f66abb86750d63b07abf87dbe
SHA256 5e37f34953d4a4c4411179d36bf2ee666b3d46f514d85d79648806752e3577ad
MD5 d936ec401ee51fc6821da27a858cdf7a
SHA1 13f6dfafad1839acdb3666d25922d77ffdbaf8a7
SHA512 7ca6be0953639093b4c1984e5371fccebf54dc194dfd5fec96bb9fed3e3107bf2eb446664f3f1acc4b9043dcc3e0fd45c05adee7730d73b72f51f8cb007a9fef
SSDEEP 49152:PBvwOrOWdsWyneGKP/F3Yo0ySmYb6T0Onuxk4DV2547KIRWQHA1Vmfdz:J41eWPb6T0pQxQHSV2
TLSH
T1C536E759B96C81E1D133C1BFD1839E8DDAB274521B215BC7010ADBAA1E377D68C36B32
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

2339940

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

e:\Dev\VSTHost\Release.08\x64\vsthost.pdb

winmm

mmioFlush mmioCreateChunk mmioWrite mmioDescend mmioRead mmioSeek timeEndPeriod timeKillEvent timeGetDevCaps timeSetEvent mmioAscend mmioClose mmioOpenA waveOutClose waveInClose waveInReset waveOutSetVolume waveOutGetVolume waveOutSetPlaybackRate waveOutGetPlaybackRate waveOutSetPitch waveOutGetPitch waveOutGetPosition waveOutWrite waveOutBreakLoop waveOutRestart waveOutPause waveOutReset waveInStop waveInStart waveOutUnprepareHeader waveOutPrepareHeader waveOutMessage waveOutGetNumDevs waveOutGetDevCapsA waveOutOpen waveInAddBuffer waveInMessage waveInGetPosition waveInUnprepareHeader waveInPrepareHeader waveInGetNumDevs waveInGetDevCapsA timeBeginPeriod joyGetPos joyGetNumDevs joySetThreshold joyGetPosEx joySetCapture joyReleaseCapture joyGetDevCapsA midiOutUnprepareHeader midiInGetDevCapsA midiInMessage midiInAddBuffer midiInPrepareHeader midiInUnprepareHeader midiInGetErrorTextA midiOutGetDevCapsA midiOutMessage midiOutGetErrorTextA midiStreamProperty midiStreamPosition midiStreamPause midiStreamRestart midiStreamStop midiInStart midiInStop midiInReset midiOutReset midiOutCachePatches midiOutCacheDrumPatches midiStreamOpen midiStreamOut midiOutPrepareHeader midiInClose timeGetTime midiOutClose midiOutLongMsg midiOutShortMsg midiStreamClose midiInOpen midiOutOpen midiInGetNumDevs midiOutGetNumDevs waveInOpen

kernel32

DeactivateActCtx FindActCtxSectionStringW QueryActCtxW LoadLibraryW GetLastError SetLastError GetModuleFileNameW GetModuleHandleExW OutputDebugStringA FreeResource lstrlenW MultiByteToWideChar FreeLibrary GetEnvironmentVariableA LoadLibraryA LoadLibraryExA SetErrorMode SetThreadPriority GlobalFree GlobalUnlock GlobalLock GlobalAlloc GlobalSize QueryPerformanceCounter QueryPerformanceFrequency GetFileAttributesExA GetTickCount ExpandEnvironmentStringsA DeviceIoControl lstrcpynA lstrcmpiA HeapFree HeapAlloc HeapReAlloc HeapCreate HeapCompact IsBadReadPtr GetThreadPriority GetCurrentThread lstrcmpA VirtualAlloc VirtualFree VirtualUnlock VirtualLock GetSystemInfo GetVersionExA DeleteFileA GetCurrentDirectoryA ReadProcessMemory GetCurrentProcessId FindClose FindNextFileA GetLocalTime FindFirstFileA GetTempPathA OpenEventA SetCurrentDirectoryA MoveFileA SetPriorityClass GetPriorityClass GetProcessAffinityMask GetUserDefaultLCID GetFileAttributesA ExitProcess RaiseException ActivateActCtx SetUnhandledExceptionFilter OpenFile lstrcmpW CompareStringA GlobalDeleteAtom GlobalFindAtomA GlobalAddAtomA GlobalGetAtomNameA LocalFree FormatMessageA CopyFileA SuspendThread GetStringTypeExA GetThreadLocale SetFilePointer FlushFileBuffers LockFile UnlockFile SetEndOfFile GetVolumeInformationA GetShortPathNameA VirtualProtect FileTimeToSystemTime FileTimeToLocalFileTime GetSystemDirectoryW LocalAlloc TlsGetValue TlsAlloc GlobalReAlloc GlobalHandle TlsSetValue LocalReAlloc TlsFree GetLocaleInfoA EnumResourceLanguagesA ConvertDefaultLocale GlobalFlags GetCPInfo GetOEMCP GetAtomNameA GetModuleHandleW SystemTimeToFileTime LocalFileTimeToFileTime SetFileTime SetFileAttributesA GetFileSizeEx GetFileTime FindResourceExA RtlLookupFunctionEntry RtlUnwindEx RtlPcToFileHeader UnhandledExceptionFilter RtlVirtualUnwind RtlCaptureContext GetSystemTimeAsFileTime VirtualQuery CreateDirectoryA GetCommandLineA GetStartupInfoA ExitThread CreateThread SetStdHandle GetFileType HeapQueryInformation HeapSize EncodePointer DecodePointer FlsGetValue FlsSetValue FlsFree FlsAlloc GetACP IsValidCodePage GetStringTypeA GetStringTypeW GetStdHandle LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode SetHandleCount SetEnvironmentVariableW FatalAppExitA HeapSetInformation HeapDestroy GetTimeZoneInformation SetConsoleCtrlHandler FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetDriveTypeA InitializeCriticalSectionAndSpinCount GetDateFormatA GetTimeFormatA EnumSystemLocalesA IsValidLocale GetLocaleInfoW WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW GetProcessHeap CreateActCtxW lstrlenA MulDiv lstrcpyA UnmapViewOfFile CreateFileA GetFileSize CreateFileMappingA MapViewOfFile GetFullPathNameA GetModuleFileNameA CreatePipe SizeofResource DuplicateHandle ResetEvent CreateProcessA WriteFile ReadFile GetExitCodeProcess TerminateProcess GetCurrentProcess GetCurrentThreadId GetProcAddress InitializeCriticalSection ResumeThread CloseHandle CreateEventA WaitForSingleObject SetEvent LeaveCriticalSection EnterCriticalSection DeleteCriticalSection GetModuleHandleA IsDebuggerPresent Sleep WideCharToMultiByte FindResourceA LoadResource LockResource SetEnvironmentVariableA

user32

GetClassLongPtrA EndDeferWindowPos BeginDeferWindowPos GetSysColorBrush IsWindow GetMenuStringA SetMenuItemInfoA MapWindowPoints ChildWindowFromPoint RegisterClassExA GetClassInfoExA CheckMenuItem RemoveMenu LoadAcceleratorsA CharLowerBuffA EndDialog GetNextDlgTabItem IsWindowEnabled GetDlgItem DestroyWindow CreateDialogIndirectParamA SetActiveWindow GetActiveWindow GetDesktopWindow GetWindowPlacement SetWindowPos GetMenu CallWindowProcA GetDlgCtrlID SetWindowPlacement SetScrollInfo GetScrollInfo DeferWindowPos AdjustWindowRectEx CreateWindowExA MessageBoxA GetScrollPos SetScrollPos GetScrollRange SetScrollRange SetMenu TrackPopupMenu TrackPopupMenuEx ScrollWindow GetMessagePos GetMessageTime UnhookWindowsHookEx SetWindowLongPtrA GetWindowLongPtrA GetTopWindow GetLastActivePopup GetForegroundWindow GetWindowTextLengthA SetFocus RemovePropA GetPropA SetPropA GetClassLongA CallNextHookEx SetWindowsHookExA WinHelpA SendDlgItemMessageA LoadIconA GetMenuCheckMarkDimensions CheckDlgButton CheckRadioButton GetDlgItemInt GetDlgItemTextA SetDlgItemInt SetDlgItemTextA IsDlgButtonChecked IsDialogMessageA SetWindowTextA MoveWindow ShowWindow ScrollWindowEx GetKeyNameTextA MapVirtualKeyA GetWindowThreadProcessId ValidateRect TabbedTextOutA DrawTextA DrawTextExA GrayStringA GetWindowDC BeginPaint EndPaint CharUpperA WindowFromPoint DefFrameProcA DefMDIChildProcA DrawMenuBar BringWindowToTop TranslateMDISysAccel TranslateAcceleratorA InsertMenuItemA SetCursor GetMenuBarInfo GetDCEx UnpackDDElParam MapDialogRect IsZoomed CharNextA ShowOwnedPopups SetWindowContextHelpId GetDialogBaseUnits CopyAcceleratorTableA InvalidateRgn GetNextDlgGroupItem MessageBeep PostThreadMessageA IsRectEmpty DrawFocusRect InvertRect LoadBitmapA SetWindowLongA LoadImageA GetWindowTextA SetMenuItemBitmaps GetCursorPos OpenIcon SetForegroundWindow IsWindowVisible ReleaseDC GetDC IsIconic GetSystemMenu ModifyMenuA GetMenuState GetMenuItemID GetMenuItemCount AppendMenuA CreatePopupMenu KillTimer SetTimer RegisterClipboardFormatA GetClipboardData DragDetect DestroyCaret EmptyClipboard SetClipboardData CloseClipboard IsClipboardFormatAvailable ShowCaret HideCaret SetCaretPos CreateCaret OpenClipboard SetCapture EnableScrollBar LoadMenuA GetSubMenu EnableMenuItem EqualRect UnionRect ReleaseCapture SetParent IsChild ChildWindowFromPointEx GetCapture GetMenuItemInfoA SetRectEmpty SetRect GetKeyState GetSystemMetrics GetWindow GetWindowRect RegisterDeviceNotificationA UnregisterDeviceNotification DestroyCursor LoadCursorA GetSysColor DefWindowProcA GetParent GetFocus InvalidateRect FrameRect FillRect InflateRect UnregisterClassA RegisterClassA GetAsyncKeyState PtInRect ScreenToClient ClientToScreen CopyRect RegisterWindowMessageA GetMessageA TranslateMessage DispatchMessageA PostQuitMessage PostMessageA PeekMessageA wsprintfA GetClientRect SendMessageA EnableWindow IsMenu InsertMenuA DeleteMenu DestroyIcon GetWindowLongA GetClassInfoA ShowScrollBar RedrawWindow LockWindowUpdate IntersectRect SystemParametersInfoA DestroyMenu GetClassNameA MonitorFromWindow GetMonitorInfoA GetUpdateRect ReuseDDElParam UpdateWindow OffsetRect

gdi32

CreateBitmapIndirect CreateDiscardableBitmap CreateEllipticRgn Arc Ellipse GetStockObject CreateRectRgnIndirect SetRectRgn CombineRgn RectInRegion PatBlt StretchBlt GetPixel SetPixelV GetCurrentObject GetDIBits SetDIBits SetBrushOrgEx SetPixel CreateFontIndirectW DeleteDC SelectObject SetDIBColorTable CreateBitmap CreateFontA GetDCOrgEx GetClipBox SetTextColor SetBkColor CopyMetaFileA CreateHatchBrush ExtCreatePen PlayMetaFile EnumMetaFile GetObjectType PlayMetaFileRecord SelectPalette CreatePatternBrush CreateDIBPatternBrushPt ExtSelectClipRgn PolyBezierTo PolylineTo PolyDraw ArcTo GetCurrentPositionEx ScaleWindowExtEx SetWindowExtEx OffsetWindowOrgEx GetTextMetricsA Rectangle SetBoundsRect GetCharWidthA GetTextColor GetBkColor CreateCompatibleBitmap BitBlt DeleteObject CreateSolidBrush CreatePen GetDeviceCaps CreateFontIndirectA GetTextExtentPoint32A CreateCompatibleDC CreateDIBSection StretchDIBits GetRgnBox EnumFontFamiliesExA DPtoLP GetMapMode CreateDCA SaveDC RestoreDC SetBkMode SetPolyFillMode SetROP2 SetStretchBltMode SetGraphicsMode SetWorldTransform ModifyWorldTransform SetMapMode ExcludeClipRect IntersectClipRect OffsetClipRgn LineTo MoveToEx SetTextAlign SetTextJustification SetTextCharacterExtra SetMapperFlags SetArcDirection SetColorAdjustment SelectClipRgn GetClipRgn CreateRectRgn SelectClipPath GetViewportExtEx GetWindowExtEx StartDocA PtVisible RectVisible TextOutA ExtTextOutA Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx GetObjectA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter OpenPrinterA DocumentPropertiesA

advapi32

RegEnumValueA RegCloseKey RegQueryValueExA RegOpenKeyA RegDeleteKeyA RegEnumKeyA RegSetValueExA RegCreateKeyA RegOpenKeyExA GetUserNameA RegCreateKeyExA RegSetValueA RegQueryValueA RegDeleteValueA

shell32

SHGetFileInfoA DragFinish DragQueryPoint DragQueryFileA Shell_NotifyIconA ShellExecuteA ExtractIconA DragAcceptFiles SHBrowseForFolderA SHGetPathFromIDListA

shlwapi

PathRemoveFileSpecW PathRemoveExtensionA PathStripToRootA PathIsUNCA PathFindExtensionA PathFindFileNameA

oledlg

ord8

ole32

WriteFmtUserTypeStg SetConvertStg CoTaskMemFree CoUninitialize CoInitialize CLSIDFromString WriteClassStg CoInitializeEx CreateStreamOnHGlobal StringFromGUID2 IIDFromString CoFreeUnusedLibrariesEx CoCreateInstance OleRegGetUserType ReadFmtUserTypeStg ReadClassStg StringFromCLSID CoTreatAsClass CreateBindCtx ReleaseStgMedium CoTaskMemAlloc OleDuplicateData CLSIDFromProgID CoDisconnectObject CoGetClassObject StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleRun OleUninitialize OleInitialize CoRegisterClassObject CoRevokeClassObject OleSetClipboard OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CoCreateGuid CoFreeUnusedLibraries

oleaut32

SysAllocStringLen VariantClear SafeArrayDestroy SysFreeString SafeArrayUnaccessData SafeArrayAccessData SafeArrayCreateVector SafeArrayGetUBound SafeArrayGetLBound SysAllocString VariantInit SafeArrayPutElement SafeArrayCreate VariantChangeType SysStringLen SysAllocStringByteLen SysStringByteLen OleCreateFontIndirect RegisterTypeLi LoadTypeLi LoadRegTypeLi SafeArrayGetElemsize SafeArrayGetDim SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayLock SafeArrayUnlock SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromDate GetErrorInfo SetErrorInfo CreateErrorInfo

gdiplus

GdiplusStartup GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStreamICM GdipCreateBitmapFromStream GdipCreateBitmapFromFileICM GdipCreateBitmapFromFile GdiplusShutdown GdipGetImagePaletteSize GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipDisposeImage GdipDeleteGraphics GdipAlloc GdipFree GdipGetImageGraphicsContext GdipDrawImageI GdipGetImagePalette GdipCloneImage

vsthostx64/vsthostDEU.dll

SHA256 f52449109e789252378f9119caf4e6146eb77145ebeb5361b742e5c1e251829e
MD5 adcdeb3a3fc984415de7d3f1caa61d2c
SHA1 1fbc6be2d9f0f1e5bd467479e6af5d2fc277a13f
SHA512 41753833dd94357eab967a1c68616c5ece91eedb209b5aa53588e55d25a5a1588f5118808fefdca0a9452931522bc335226234eccaa5ad49453a2e9bb0090fae
SSDEEP 3072:6bd5rIaeZ3klz7BafdfFwtxVLpZLMCQNxWx4xP/UC325ey3n9XnsbntXnsSXnlmJ:6vrIz6zdafditxVLpZLMCQNx8/0Qz
TLSH
T1F8443111D2E44558F5BE4B34E8F53254A6EDFC53AAB3E27E0A88374D1571A808D20FBE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

vsthostx64/vsthostFRA.dll

SHA256 a97090229d03148b0838d9bd1693b4339a5401ad00adcae9b995275ee8759503
MD5 33c65933b64a6b50665e419283c3eaf7
SHA1 220454a3d66877da9553254a68d23721b2a0cd19
SHA512 af05262cc854fb97cbefcb675db82eef377f02be22fc2c815100c5abc1319ba494cc4771db01e765805f616eab7b275833cc2e5fe48a1982746c63f1912aff63
SSDEEP 3072:ynurIaeZ3k7z7BafdfFwtxVLpZLMCQNxWx4xP/UC325eUVoMFSPZmhTwWL:ynurIz4zdafditxVLpZLMCQNxgr
TLSH
T1AA542E11D3F45544F5BE6B34E8F531489AEEFC4399B7E27E0988774D1972A808C20BAE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

vsthostx64/vsthostregclean.exe

IMPHASH 57ed345338954d08266242542aede88f
SHA256 e5a96aa37e37d36efb079bafdc368aa32dbad89df53089c075841b0e000b12e3
MD5 bb42d7784925c4f7e51c1f95ce323364
SHA1 3d8500070fa98dea1dbe38b5c3cfa952c88faa8c
SHA512 36eb3de4f1f8a730f02c338dfb23f7c7fd4834f276c980d5ac19ca8800b4033a0cec3ffa84da82bbf6e29b2e5294eca462cd3b55deed8bc6dfdc0819d2520332
SSDEEP 6144:6jFIXicdRM4wFvQ21QOCMaENkYujp5wCjeRFlhz4bmI9lG94N15TzMW/cvD8Xc:6jFIzru+OCMaXjpYF3z4v9e2fMicrD
TLSH
T113847B11BBC0D076C26634724E82D3796AEAA6715F2567C77BD01F3DAF341C2A93930A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

192742

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsSetValue LocalReAlloc DeleteCriticalSection TlsFree GetModuleHandleW InterlockedIncrement GlobalGetAtomNameA FileTimeToSystemTime FileTimeToLocalFileTime GetFileAttributesA GetFileSizeEx GetFileTime GlobalFlags GetVersionExA lstrcmpW GlobalFindAtomA GetCPInfo GetOEMCP RtlUnwind RaiseException CreateDirectoryA TlsAlloc HeapAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc ExitProcess HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetACP IsValidCodePage GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW SetHandleCount GetStdHandle GetFileType GetStartupInfoA HeapCreate VirtualFree FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetTimeZoneInformation GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc SetErrorMode FreeResource GetCurrentProcessId GlobalAddAtomA GetPrivateProfileIntA InterlockedDecrement GetModuleFileNameW GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA LoadLibraryExA CompareStringA InterlockedExchange FreeLibrary lstrcmpA GetProcAddress CreateFileA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle CloseHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile LoadLibraryA GetThreadLocale GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv GetLastError SetLastError GetCommandLineA GetModuleHandleA GetPrivateProfileStringA lstrlenA GetModuleFileNameA WritePrivateProfileStringA MultiByteToWideChar Sleep GetFullPathNameA ExpandEnvironmentStringsA WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource GetTickCount HeapFree GetFileAttributesExA

advapi32

RegQueryValueA RegCreateKeyExA RegQueryValueExA RegDeleteValueA RegOpenKeyExA RegEnumValueA RegCreateKeyA RegSetValueExA RegEnumKeyA RegOpenKeyA RegDeleteKeyA RegCloseKey

ole32

CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CoTaskMemAlloc IIDFromString StringFromGUID2 CoTaskMemFree OleIsCurrentClipboard OleFlushClipboard CLSIDFromProgID CoInitialize CoRegisterMessageFilter

shlwapi

PathFindExtensionA PathFindFileNameA PathIsUNCA PathStripToRootA

oledlg

ord8

user32

CharNextA CopyAcceleratorTableA IsRectEmpty SetRect InvalidateRgn SetCapture ReleaseCapture GetNextDlgGroupItem GetNextDlgTabItem MessageBeep EndDialog CreateDialogIndirectParamA RegisterClipboardFormatA PostThreadMessageA LoadIconA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA SetPropA GetPropA RemovePropA SetFocus GetForegroundWindow SetActiveWindow GetDlgItem GetTopWindow DestroyWindow GetMessageTime GetMessagePos MapWindowPoints SetMenu SetForegroundWindow GetClientRect CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect DefWindowProcA CallWindowProcA GetMenu OffsetRect IsIconic GetWindowPlacement IntersectRect SetWindowLongA IsWindow InvalidateRect GetDesktopWindow GetDlgCtrlID GetWindowRect GetClassNameA PtInRect SetWindowTextA EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA GetWindowTextA LoadCursorA GetDC ReleaseDC GetSysColorBrush GetWindow SetWindowContextHelpId MapDialogRect SetWindowPos GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled EnableWindow MessageBoxA SetCursor SetWindowsHookExA CallNextHookEx GetMessageA ShowWindow MoveWindow IsDialogMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos UpdateWindow RegisterWindowMessageA GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState GetSystemMetrics CharUpperA CopyRect DestroyMenu SystemParametersInfoA GetSysColor PostQuitMessage PostMessageA UnhookWindowsHookEx CheckMenuItem EnableMenuItem ModifyMenuA SendMessageA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps ValidateRect

gdi32

ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx GetObjectA ExtTextOutA CreateBitmap SaveDC RestoreDC SelectObject ExtSelectClipRgn DeleteDC GetStockObject CreateRectRgnIndirect GetMapMode GetBkColor GetTextColor GetRgnBox Escape TextOutA RectVisible SetBkColor GetDeviceCaps GetWindowExtEx GetViewportExtEx DeleteObject GetClipBox SetMapMode SetTextColor PtVisible

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

comdlg32

GetFileTitleA

oleaut32

SysFreeString SysAllocStringByteLen SysAllocStringLen VariantClear VariantChangeType VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime VariantInit OleCreateFontIndirect SysAllocString SysStringLen

Sharing

General

Malware Config

Signatures

File Explorer

Sausage 2.zip

Resource/1.bmp

Resource/10.bmp

Resource/11.bmp

Resource/12.bmp

Resource/13.bmp

Resource/14.bmp

Resource/15.bmp

Resource/16.bmp

Resource/2.bmp

Resource/3.bmp

Resource/4.bmp

Resource/5.bmp

Resource/6.bmp

Resource/7.bmp

Resource/8.bmp

Resource/9.bmp

Resource/AboutBox.bmp

Resource/Background.bmp

Resource/BigKnob.bmp

Resource/Fonts.dat

Resource/GreenLight.bmp

Resource/OrangeLight.bmp

Resource/OverlayKnob.bmp

Resource/RedLight.bmp

Resource/Sausage Fattener 32.dat

user32

ole32

gdiplus

advapi32

shell32

kernel32

comdlg32

generic

Resource/Sausage Fattener 64.dat

user32

ole32

gdiplus

advapi32

shell32

kernel32

comdlg32

generic

Resource/SausageBottom.bmp

Resource/SausageBottomAlpha.bmp

Resource/SmallKnob.bmp

Resource/Wheel2.bmp

Sausage Fattener x64.dll

kernel32

user32

advapi32

generic

vsthostx64/Data/DefaultSkin/ChainOffOn.bmp

vsthostx64/Data/DefaultSkin/ChainSend.bmp

vsthostx64/Data/DefaultSkin/InnerKnob.png

vsthostx64/Data/DefaultSkin/OuterKnob.png

vsthostx64/Data/DefaultSkin/PluginFx.bmp

vsthostx64/Data/DefaultSkin/PluginIn.bmp

vsthostx64/Data/DefaultSkin/PluginMid.bmp

vsthostx64/Data/DefaultSkin/PluginShell.bmp

vsthostx64/Data/DefaultSkin/Skin.ini

vsthostx64/Data/DefaultSkin/Toolbar.bmp

vsthostx64/Data/DefaultSkin/ToolbarDisabled.bmp

vsthostx64/Data/DefaultSkin/abutton.bmp

vsthostx64/Data/DefaultSkin/backgnd.bmp

vsthostx64/Data/DefaultSkin/bbutton.bmp

vsthostx64/Data/DefaultSkin/bgdata.bmp

vsthostx64/Data/DefaultSkin/btnsolo.bmp

vsthostx64/Data/DefaultSkin/cbutton.bmp

vsthostx64/Data/DefaultSkin/ebutton.bmp

vsthostx64/Data/DefaultSkin/effect.bmp

vsthostx64/Data/DefaultSkin/effedit.ico

vsthostx64/Data/DefaultSkin/effinfo.ico

vsthostx64/Data/DefaultSkin/effmidiparm.ico

vsthostx64/Data/DefaultSkin/effparm.ico