DADALIFE[.]zip | Triage™

resource	yara_rule
static1/unpack001/DADALIFE/vsthostx64/VSTHost.pdf	pdf_with_link_action

resource
unpack001/DADALIFE/Sausage Fattener.dll
unpack001/DADALIFE/vsthostx64/VSTHostBridge32.exe
unpack001/DADALIFE/vsthostx64/VSTHostBridge64.exe
unpack001/DADALIFE/vsthostx64/vsthost.exe
unpack001/DADALIFE/vsthostx64/vsthostDEU.dll
unpack001/DADALIFE/vsthostx64/vsthostFRA.dll
unpack001/DADALIFE/vsthostx64/vsthostregclean.exe

DADALIFE.zip

SHA256 39473aba61d4025fda4c1bab957290b7c34831a6eb916ba8943d63ccc0ff8e21
MD5 1d9d5a7cbdf06d87f2d10d294e7b425a
SHA1 97384c9e49c0e3c8d2f88203a4150f2c1cfa12b0
SHA512 10f59fbf7ddffe98b4a45e9b4b314a1b31827e30eb14a7ce0c2a8b25fdf290de3f0015ef14e688e158e196268e9de24aea7953347181bb564f18a903d0e81cbf
SSDEEP 196608:995JN0o4zSEjRPkQ/ed+K/n61iwbNTwpKEYS8Whg0WIKPjWxVH8SiodGMm+yW:9P0u+k2edgdIA1PeV8ShdGMmc
TLSH
T151B633159B75CF83DA588E7E446A7604AFFB41270C61AA0B013F4BA7A79FF94213035E
MD5 SHA1 SHA512 SSDEEP TLSH

Password

asdasd

DADALIFE/Sausage Fattener.dll

IMPHASH a448b7a485ff83a573659c583be0040f
SHA256 0ef93a5bf330e9f40cc1686cd3f3781cfe91b98b9f9629a2045eaf1a26fc518a
MD5 4f00f525670b28becb0d5aa1497ea405
SHA1 68fa9f7445d376b19040b87994381186de239f9d
SHA512 739757ec6b3d68254af787b195835fd19e5f8ca90951d8fea7c018a1a5dbf56910628288ff09dee2196907a5bbf0ad2c01e5ff70452fa6f71b24ac1d3cb23ee7
SSDEEP 98304:OCEYJt1Fh6zMCMcb/4aH/wNDhAmm/Y+WyoJ2HoIRdBVkBCewUSR66KL:OTYbh6zvgafw/AjY+Wi/BVkBCewj66KL
TLSH
T16856F11B71A584A7D436A034A66BB92FE7723448076046EB3BEC040D5FFBBD44EF6621
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Password

asdasd

Minor OS version

0

Major OS version

6

Entry point

1140536

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Build\VMGenericPlugin\x64\Release\VMGenericPlugin.pdb

wininet

InternetReadFile InternetOpenUrlA InternetCloseHandle InternetSetOptionA InternetOpenA

user32

MessageBoxA ReleaseDC GetDC IsWindow DefWindowProcA UnregisterClassA RegisterClassExA CreateWindowExA DestroyWindow SetFocus SetCapture ReleaseCapture SetTimer KillTimer SetForegroundWindow InvalidateRect SetCursor ScreenToClient GetSysColorBrush GetWindowLongPtrA SetWindowLongPtrA LoadCursorA

gdi32

SetPixelFormat GetPixelFormat GetDeviceCaps DescribePixelFormat ChoosePixelFormat SwapBuffers

ole32

OleUninitialize OleInitialize

advapi32

RegOpenKeyExA RegQueryValueExA RegSetValueExA RegCreateKeyExA RegCloseKey

shell32

DragQueryFileA SHGetFolderPathA ShellExecuteA DragAcceptFiles DragFinish

opengl32

glViewport glShadeModel glOrtho glLoadIdentity glClearColor glBlendFunc wglShareLists wglMakeCurrent wglGetProcAddress wglDeleteContext wglCreateContext glVertexPointer glTranslatef glTexParameteri glTexParameterf glTexImage2D glTexEnvf glTexCoordPointer glBindTexture glScissor glScalef glRotatef glPushMatrix glPopMatrix glMatrixMode glGetString glGetIntegerv glGetError glGenTextures glEnableClientState glEnable glDrawArrays glDisableClientState glDisable glDeleteTextures glColor4f

kernel32

CreateDirectoryW GetFileAttributesExW CreateProcessW GetExitCodeProcess SetStdHandle DeleteFileW FlushFileBuffers HeapReAlloc ReadConsoleW GetTimeZoneInformation GetConsoleMode GetConsoleOutputCP WriteFile SetFilePointerEx FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA MoveFileExW GetFileSizeEx GetStdHandle EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree HeapAlloc GetModuleFileNameW ExitProcess GetEnvironmentStringsW FreeLibraryAndExitThread ExitThread CreateThread GetFileType CreateFileW ReadFile LoadLibraryExW FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc SetLastError InterlockedFlushSList RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent GetModuleHandleW CreateEventW WaitForSingleObjectEx FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap HeapSize SetEndOfFile WriteConsoleW ResetEvent SetEvent InitializeCriticalSectionAndSpinCount IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCPInfo GetStringTypeW LCMapStringEx WideCharToMultiByte DecodePointer EncodePointer InitializeCriticalSectionEx GetCommandLineW GetModuleHandleExW LocalAlloc FindResourceA SizeofResource LockResource LoadResource Process32NextW Process32FirstW CreateToolhelp32Snapshot SystemTimeToFileTime OpenFileMappingA CreateFileMappingA UnmapViewOfFile MapViewOfFile VirtualQueryEx GetSystemTime GetSystemInfo SetThreadDescription GetProcessId GetCurrentThread GetCurrentProcess Sleep GetCurrentThreadId MultiByteToWideChar GetLastError DeleteTimerQueueTimer GetProcAddress LoadLibraryA RtlUnwind LocalSize LocalFree FormatMessageA lstrlenA CreateFileA FindClose FindFirstFileA FindNextFileA GetFileAttributesExA GetFileSize GetTempPathA CloseHandle InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection WaitForSingleObject

comdlg32

CommDlgExtendedError GetOpenFileNameA GetSaveFileNameA

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

299KB

Virtual Size

299KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

23KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

49KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

4.2MB

Virtual Size

4.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

DADALIFE/vsthostx64/Data/DefaultSkin/ChainOffOn.bmp

SHA256 51b7775bc167cfb1c58b79f943f054e9c637fda193fac805b33a7f6bf66f6a49
MD5 df10d1aa2242f5995d7e3bbdb6d42781
SHA1 a45364727cc29ff770ea08984ef878733c4f42aa
SHA512 598724c28bc6d67832555819a2e685385fe47e5cdf0bb74cb5649ab33d2d667985f1b22e6a8d20947d12ff69a63c041203c9f0421cf5ec6581798c8012a43e3a
TLSH
T1093130291B00E880DD58C53089D57A390728F997C0F93462A2D44EAEAF27CF3E1601E8
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/ChainSend.bmp

SHA256 2a711533c94e3e8ce930f9d67419a71f867e0ddc3af9906323cb2aab7276b296
MD5 bf4db63f76826544f64db8277210c0d2
SHA1 90bf661bd7cc2edcf0ee2241a60eecc54cf3661b
SHA512 bbc6c18c30933cd95167ef43f382fbad7d6494b65c43f879bf2d4d112d14011adc3412388a83799ae90ad650f9c10a27ef1c47fb822e02fbc0889c06c850f0df
TLSH
T10B31CFFA26134C0BF8558034898679780579B7C7D0F734A953E02D5E9F37DA2A2A4214
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/InnerKnob.png

SHA256 71bc3345c2f6bca8b5b57fe3dfb24e6f08d42c0494b8ffb08eaf3d602371f7cf
MD5 cbf5594e4f8302edf3e985640448fb36
SHA1 d23a32581e52711bb76ed59692b9b14376ef4b8f
SHA512 7d649e5b1bb42645eb35b0efac6a06451dadcd254ba8a6862563f4423b1e0f7953825a247aa241ab472a87a68cb4be395d29922467d6416514f910c02185ee40
SSDEEP 192:/S4dttn3WFyK1Vb/fujM6aZIqU7RJ+dhxcK:K4jt3WFhR6aZI1udhxcK
TLSH
T1F7F19EA6FC0D1E44A5B7CC25D7B2996696CA2498BE8CD1F23CFF23131E096F8A1D1C11
MD5 SHA1 SHA512 SSDEEP TLSH

Password

asdasd

DADALIFE/vsthostx64/Data/DefaultSkin/OuterKnob.png

SHA256 108a1e8ed2b8f4c4a16c9abbd4b54ab7c148a31597fcbd05e9a9f668268906ff
MD5 6f624efe87f055bdf4f2eff09b91368f
SHA1 00a47f894b916eaa996282bc407eec1a895f87ba
SHA512 d2901376e5a23ba12a7aad4529a0281715d59b2a024aa0bff13336d49dee2feec57c97e9190236903c330a83bbb88e6b67b85f9f20e278081d42e982713bcab2
SSDEEP 384:Y6tVCnkIHsC1cIccyYb35tu+0lEx1KTutmeg:Y+CnkIMabcc375M1Cx8StM
TLSH
T1EC429EC3BD2F88AB0538CC550570369776432F1AEE8B011748A6663E5353DD0CA6AF2B
MD5 SHA1 SHA512 SSDEEP TLSH

Password

asdasd

DADALIFE/vsthostx64/Data/DefaultSkin/PluginFx.bmp

SHA256 ceed253f64408d25bcdb03b6bd62aae50ed640809365a8169e72f9a8829f7332
MD5 250a9a4e9a129d4fe1238d0184d4cdb6
SHA1 0f6013eacfb154ee511a2a5b6df8185f2ea1183b
SHA512 a84baba51039cbb175b254b42bff78628af6a4d5d484a22edfbd29ce3758bb973e79b3ce54bb92e179db5f9c0a5f008f6fc343c2bb7985798bc0ab33d8dd1009
TLSH
T176E0240A315AC688D84C0C70CC43C6F818D4DC02AC868137F2E4BBAFB835A056C0A0AE
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/PluginIn.bmp

SHA256 256d09a283889565511faa68e907ebec62416be9ac0c6f5dbe7be92ef6a70a6b
MD5 76b99d430ca6bf537a1595e3f52728c2
SHA1 6b54657a5e0e563d82193f334ee8591f520125f6
SHA512 fefbd85de954f4cbe141313ac5f9b3017efd96102f3fe735d27ebe10c1357b5ace173120dd6e2240462473b1f2f4353fc3b56040b517192eaa2b0003ed4f18a3
TLSH
T1E3E00B136117C45BD02010B2C8CABEFE2921BC429A4C0D6733A1BB8F6AF47075E4A0E6
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/PluginMid.bmp

SHA256 81a9450db656b0832ec8594063f1a8d0c8091f18809b79cf8d3294b76df8afb7
MD5 bfc8f21d87d3ca62a8b06f761d87ab14
SHA1 385fcc57bf80a5afe8890253a833bdb42ff62519
SHA512 7d23db1624d485e0026e5b933c20eb282ea3d7b4e5d43780bcdb629fd26faf69963fa0c025dfe2444490912cd342bf67067047c7e171669fe978655f4344098c
TLSH
T1B1E0240A3198C60DD45C9C30CC03C5F81880DC12AD0A8577F2E07BEF7C70A05680A05A
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/PluginShell.bmp

SHA256 203cad1dce13308e290c324b46ddfc00bc553f439e5076f560a6c5a2f14d30e0
MD5 97c1620aff983f5b2c20313add3c5a15
SHA1 a232019cdafd3b4bd862d3ec47a4176e6b47228f
SHA512 6e2c197f6b4bf52b68ec2f39ee6b71cc5fb640b63a31cd21abd0bb6c760cc2a99b243875ddbfb26dac08efa3a3146a6ec30fa03aa842ff720f3c2e268cc9ce2f
TLSH
T1DEE0920A719CC519E00C18B0CE07CAFC19E4AE06DCC4856B72E07FCF3E75E2C2009951
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/Skin.ini

SHA256 0665cc58fc8695af9a1c9e9024c0dd25edf560a0a957082a2671e30066f5e02e
MD5 37b925206428d0205a3cc55b02948636
SHA1 526e7f1d88516806fe4c5c442301c57f1f0f4c98
SHA512 4551760a72c953b3bcd45c10f3a65655ed21900d09fc54c3f447719920bb29fb5eec46aa4079fa7a81d073003ac50dfa0de771359cc5a4454ea5eee6d3805221
SSDEEP 384:IvWdHszjuf+OBLQUfseP3sjHEsbkbdlIF4hwxR1ujrj481DvN:IaU+MG93MEsbkRlIQ6Ss81DV
TLSH
T12AC2B9027E8A23B20433C109564EE9C5F31996B652B699D93C6F0D5D2E58C7BC1BF2F8
MD5 SHA1 SHA512 SSDEEP TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/Toolbar.bmp

SHA256 fe420c28ef5cb07909614678e469bb214dd7ede76d2bff70dede69565af8d0a6
MD5 c50db16e7d19fed5de3e08338b233e74
SHA1 0826f9c25d87a71f9c8ef067f7d89417cdb7700f
SHA512 2b7c45c15c8f1aa1c8d2f64872c3ba938153fcdc2a2eeabb93949c740d5c7c5a9eba4922ab1aa66fa07785ec7869cd29ff8adfa8bea6fcc3f85aac2cbe71ce54
SSDEEP 24:fIV0giqqqqfqCiqCiqyCiqqqqqqSD2qCiqCiq4iqIiqqqqqqqqqqg/YqfbqCiqCL:fk0J
TLSH
T1946206423D2EC9F0C4140434CC8ACBAC1A34BD42B800A107F3B6BFAFE8B8761E61664C
MD5 SHA1 SHA512 SSDEEP TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/ToolbarDisabled.bmp

SHA256 cb5f0caf93c7a3c7dfb1cd7a0dad7cd7b38c0922a0b1c1788051e49620bf23ff
MD5 ba91c1669274b3218710f89e02cb5cf6
SHA1 a2d13872e3f5a061596109698408325d31819112
SHA512 ddf1dfdaa612c774f664b78de7a1b6da0885a8f0b0d38ee200948283c8c812394ebe4af0d4e45c7bdab819702fb36c5e2f1d8faf4c045fbf570d7f3478537d6b
SSDEEP 48:fk0Vbvf0iv001F/eUV4XHiAY52gy3ncEKpqgbbFpwTzXLlhlp:fHWgfrwTDLDr
TLSH
T1B4629DE3CDA06C79A33091ABD7BEEFFD851015A69BDC10A62206DF8935227D05EF1718
MD5 SHA1 SHA512 SSDEEP TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/abutton.bmp

SHA256 475c996461d99abee5b6183e3de8221a23c937c711dbb9e79096be8e62ac8134
MD5 e9c20d265cdc3378c2adca071e870cf8
SHA1 b36988d085ab94c68cd03b63788b613dbbc4007f
SHA512 17f8f6ada173d67a9a78d733a3186c34f27a11db30dc1ed79759946a383c3848a5a2675e211ea2069068a27e69651b53da6c04cb3c737e349909a03e073fc67c
TLSH
T19B31EAC4D2261A1CDE7F8770906D3A07E926F12065E210D2B5F6F8D543017E713D0B89
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/backgnd.bmp

SHA256 74e2bef7fae49dc79c390024d4f99d40eb1d411c43372d322462c8f94c999d28
MD5 d619423937d9eb031715ab9b9d637efc
SHA1 6d9f87e734e76fa8374d507fe2a174328e4dafac
SHA512 7f7f7aef3e4cd06b056f670fbe60549361ae4bd4ceca3d1ae126aff4624fe02c11fff16358ecedd2857d45e1846970596a76cc34ed055b323bdd013fb7b37304
SSDEEP 96:DR/fZMpRooLRCw5wZH5jSAz9e5VGHjSAcYmvnMnfu03g7rfPucpM1dlM4mdyA1wG:tpIHCwsFSJ54HjovnUyWcV4Mydfe
TLSH
T10D3247184570B23EA5AB47F7FA1D70C6DAC4A4C3B6EE32A0855CC72163A12DBDE091C7
MD5 SHA1 SHA512 SSDEEP TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/bbutton.bmp

SHA256 6ffaafb77626eb01fcf51ca19011ec7598894776a855b9547971850779a04080
MD5 317772bfad081aeac522f4f2f571c33f
SHA1 817c9934f45de73e22010fa82c371c4007d737e2
SHA512 61965cca43676abe672780b260993205866dcee02f9662a322f285cf69a62e3f7f7b889521ff65580352da771bf62921bb30ac6b2401fa4cca3ee015569029d3
TLSH
T1471132048C0BF70DC9E3DDB092B6276BCEE68DF456CA14A9D209C46A58205F5AB4D10A
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/bgdata.bmp

SHA256 1ef053662df520ab257474b1eacf18a3fb1179bb13d2717b88dd5a0150ab6b2d
MD5 eb592b88f29c2b1deea881d4a0490b78
SHA1 184253ca2730c31f7876205023a1bdb0521112ef
SHA512 981ab869b3cd5753edeaed6642050f0a799da5cb7d159c6e93d93192f69a79cd9b51e5b41a54a38e5b071d8d3f0b0ef27420c4a2f76a2b851f9bd95cd089fdcf
SSDEEP 192:txgmfDy8mtweapFjap7aRI4+4xmkjh19vp4Vj:AmfDy8mtweQisjPDjhiVj
TLSH
T1CD323758453CE139A4ABC7A2FA1E708EF9C894C376EB33C8844D875246A55D7FE092C7
MD5 SHA1 SHA512 SSDEEP TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/btnsolo.bmp

SHA256 09953fd26be25c61bc7c41bc10eacb4d56a5f3c34b81bb81e1d6d0323c681b32
MD5 91e1a9a579d95abb1de0e0a734e62c81
SHA1 3007e24529c05d12aba484ccbcbbbbf52286db17
SHA512 0e90082cbaf3ce58a702da19c5a4935a949f64a4e1c85cb834191e22b3e153d040095214506aa30baf3e18bd76d47121ec6d249655597b40913e354a95a01264
TLSH
T14431AC9219741951CB614DF8BE7960AFF6307A91381DB517A712DBD23BBCF0192D0E1C
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/cbutton.bmp

SHA256 611c3b41fb364d0e1d0b99982cb0701f58bbc7e03ee14d3435dfe48c89ed954b
MD5 7af8c339448e97a79f80b688b08366cc
SHA1 bfed04a4b2d6eb2abac43241b8e96dc51179285c
SHA512 3c6fde6e6ac23495b93799b86d91e99fe976064222606cd3c059f9589d7ecac8922ac72bb97112a9cfaa926ff8e997e29dff436e98f25a12fe3345a71b76e75c
TLSH
T19F31C901D6E44FC1DFDD16F0CFCC5958073C964ACEB2915C36AE896AB071A289A1254E
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/ebutton.bmp

SHA256 37aa77769eb5bcde236f728d49333efbf45c095f482998da2af3249514d99993
MD5 f6b3cfa66f25037d2004f88b3c4c9fa5
SHA1 19618067f6f728dda19ea5883825bc40488adc07
SHA512 2d973369e760702e64ff1bf98d65676d38853313099ca2591c9c478f9e63b9aa566358ef36aa9351bd552f09290f18944edd92da583a6587e6f1eef2a87a0f6e
TLSH
T17D31A73579E78096FE69C2350158BCC95C935A7B0DBB5A4E6362109CAEE42F3801D82E
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/effect.bmp

SHA256 17308f1c9037a3dfcbec0ab84669faee06a3ff2b152efe3a74eeafed50222ab3
MD5 e6b7675d8295245f44e3a6a8436bcbc1
SHA1 5d90df158f86336e0693b42d98fa70f5a268314b
SHA512 cd495abd22261b57e5a230db0427fa20e48f027ad2d6859fc2f915ec0e83909ef6a2cc00ffd111d99920026348ceb7cfe2c8c17361a3a6dea98a1f6f21efbc0a
SSDEEP 192:7gNso8W86G64T64j6AhKi6Zab668Bl/0XOUiQnO7uqi/QkHpv+G6CKfOMk/026NL:7GtxVLpISLMCn
TLSH
T18612CB5EED5592C5CB6045FB1CF8C0D4C49F8E33FE875872B0A4A45ACA46E22E99323D
MD5 SHA1 SHA512 SSDEEP TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/effedit.ico

SHA256 bdace1d91207377e176b4ddc0cd67545df7286300b9ec47bd615eb9c4429eca6
MD5 02373f9972eecbaa4438b11c5b15787e
SHA1 0843a87651d519282ecc27f94a9351d6f88ccd7f
SHA512 a77a72acf1d04fd519cd5fe30f32699a6dbf50978af3b8d4756eac143b21ac76ea35750ea10ede0ffcd8c2d5f8469cf8022d09c2ebd19e2d7ac65ba6d7f086dc
TLSH
T1E751CA1616288D8DF9C6CD3C8453A9781628FC274B8139F767D05D5F2E33BE3EA215A8
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/effinfo.ico

SHA256 5fd963a5d711b205397ea5dbaf7a5fb2e2a512749a79696b5323d9f97ad81a2c
MD5 e8d5cfd8f6e1593dcf2609a3881a93c8
SHA1 6efe8575a077925496ed7da15d30c385cd327727
SHA512 11225bd7cbf20297c314d624348e493b7317918e2f6c290087653cc62fc3a9d38e10a422a94a2f4e3b03639dc2daae80ccc768bb957d594b900441f53a4ecede
TLSH
T110514B231624888DF6C6C93D888759741624FC5387527EE71BD09D5F1F33BCAD831199
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/effmidiparm.ico

SHA256 375d34972b86864ffdcad4ae47b6df9be5c0e90cb7a9635a08278d7a7d9dca8e
MD5 b59f3c98a5a02444aec31d430ab87f77
SHA1 f1fea340cac2da824329923d8ec46ce3e59487e6
SHA512 b0d99ed65a3d2fbf587e9f7240cbeb068f628e1d4e195f29d3e314ecc9893b765390563e35a128afdec32710cc332c6b2fefbc271d20a83a0aa4f22a5614f379
TLSH
T14E519C931565488EF6C2CD3D855396740228FC135B5139E717F09E4F1E73BD6D9342A8
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/effparm.ico

SHA256 d1919c2a4294f938305d4f5d96a09914a380cf8c5eaf4cb5b9e7b7e555f94b67
MD5 691779d4a0f2c026ecb88244a7f9eec3
SHA1 4bdbb0e834f7de05fd46d616e9b5b49bb74e13b5
SHA512 0243737707e50e383591e396545756e50d60652da8a8850b9963087233089a4991fc1f89350408dfaeeacbe30571344e51173117b097c12900007eebfb43bbc5
TLSH
T14F519D671199A884D5C888394D87597016F8BDB3E8A1667363F02E0F6F33EC1E96151D
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/fadercap.bmp

SHA256 1c1d8667a16092831ea2c00a2d61d6a5839a78d5ea3bb1e877978647c13a5688
MD5 ab10ad27d66cb06e13e6ef8880a7bd8a
SHA1 9e493a7d862148e1f383cf4e240aaa211d4256e5
SHA512 cc680716afbbf8ca255d64121a980ed5f5b0c7684fc4faa4afe4ba2102829cbf3fee6b05c841494de481ed6a80332c4f3f6c7fb4c5c63976888dd077954c9c81
TLSH
T16B216D2216B04886EB94DC36484F98AD0528F817A15EBDC933C39F273B03EDED56422B
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/iabutton.bmp

SHA256 81bcaf82bcc358bbc05f588fcd989c309494348ebe366b3ea9280e475301eb89
MD5 de8f7a34459fba1c54deaa03a4088251
SHA1 d884b6579a3c7c9fbd747ed6544a884412bd6433
SHA512 b9b0facc1a4af65b829dec93d648da5e2953d369f6af16d5d48856783548d46a55d53cb08de91ec0a34bb8800881ae457109426b690be012ce6f272906872102
TLSH
T177217412E1489C44EFC9DD389DDED7A70EE84430AD67C53DB1C95821B0CBEB1232A302
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/ibutton.bmp

SHA256 35b67d4f601cbd3335a0d6a035e0491fb1b5b7a0c1b9e2a13eaaa8786ecbda6d
MD5 b86748f5ba5bc9ba1ca9e22463a83f65
SHA1 bfe2fbe96b7840d70a09573cb5bc21aeb0a47496
SHA512 b32c42830b37065ed5219aff44ecf04e1510c349ed4ce747ccec2f703c81b8d3b8cac943478c3ddca46bfa60a2d32c66da73cf00732ec99b43d5da9e11c8c7ba
TLSH
T1EC31B93256278C90DED4D83249DA68748938FA9394EBBE7007C04E2F4F13CCBD15922E
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/idr_main.ico

SHA256 13cca568faf8bd5e8e2dbfcd648b61aedb7aee160c8c00385b40ccb648677e15
MD5 b681bf204bc8afe2105c52f3e76b7e5f
SHA1 08c45cca271410a463e3dd4aad64d323f959c461
SHA512 d1f8a76f36ea34054aa594b058282043c036525aba9b5b004864823e6183d03c125985e99e8f5554b9a31c97a2102144fb2005edd7c633552505862156e6dd94
TLSH
T19461F51AC2242CCEE9C180BD45574A282124BC93D3553DEBC7D0BD4F1F2ABE5E53629B
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/instrument.bmp

SHA256 177422b9a4fd5988501606fc3920a1daa55311110a9642af3c80954c66b6c19c
MD5 f5a3bd4feba2926d249fe8890a6d4bfb
SHA1 05c158db0afc44be76635c0c5f9d5097fb0a2119
SHA512 01983ffd4ede0ebeca1dfcd6a3f90a79515b3ad638b3652992e8b8c3c1a4a8bd116831a8f3cf7a017e2130dc970c1d1d77cd096f375b2e81cc55a50d460d870f
SSDEEP 384:t3kMvfIEeAQQ4gUUwEFcTrUo1B3XUiPBZfvHR8SLUAO2pL/4zBAGpvv:tNfIEeAQQ4gUUwEGrUcRXUiPnLUAO2RS
TLSH
T1087259BB653E39E6DDE8593980A5749923A2E0DFD40FE5A30198393074F3AD870CD62D
MD5 SHA1 SHA512 SSDEEP TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/kbd.ico

SHA256 91ff6079cddf311c9cf361ff1f6c21bdb190a4f51ef92571e66a6d3fe939d37a
MD5 0a0b8cffbe46e2dd0d3099ba658a5604
SHA1 4717238d8d92d3881fcf4372587d87e132affa5b
SHA512 fdd69a6f338744dc71e6df50d73bca501240a1c02319c42c4293d2eafa678aa0322881f63678fef450a9ca33818d8b4d814a2d55040830a63e545758a4508e41
TLSH
T170117501F81474C9D4C0067A44E7C57A96286E2BB6C3AC031798FB5EFC383206E4B9DB
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/masterfa.bmp

SHA256 b08d30fa3992c3853b0a765f92d23a0e9b21e098f2a02891fe2126569686b31a
MD5 19f059ec85972f08e297161f91b8d6d5
SHA1 cec41b970061f806d0a786a41c94ded3d242281b
SHA512 38d0acbe8676c950d8dd867b90fac6cd14e3c71abd53bdc8f8cbfa7eaa749eedf90573ded9c2986b621adab7ed98d6d2e53299fee2c699aa3587ef178555ed55
SSDEEP 96:FdfhHAJ1cDy9zQPyrvO+7Gdkpc/lcYsyeE2:3NADiy9zoyrvO+7GSc/BsyE
TLSH
T15D91A2CACFE837D5039885BE05541D0EAAB2C90598FEDCE7D4D0AD4B963CE31A4761C5
MD5 SHA1 SHA512 SSDEEP TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/mbutton.bmp

SHA256 2cf7944e2b947840b33aab561981f224a4a95fbccaf925be555f8b817b960e77
MD5 c4ea852ec524114ebcacbc3445380583
SHA1 be4363e83176b9a0dc1f51e22665f4171a56f74d
SHA512 50754b10cadc0c3a05b0869b7d5c45348f59adb0f11b244669c48e5891a16c5c24f0e9c265d47975d082fd8b92aa2d6af158289ace72e541099f49dcfe61c745
TLSH
T12A1112D53DD7108BFBE15F32CE8253741CE49823AC87629A567CE6C4C1993CA0A6CF66
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/midi_tb.bmp

SHA256 d393640968854b89c20e554268bb1d4fabee164e0630e3a96278b8d48a1d6cd8
MD5 17f332ba0f5285d58f807792b2afabe4
SHA1 3c12887f3dfbd3e6f8981ecf34283647986bb500
SHA512 50260919ecd48dea25b00f24db5af7e9d06475b99835b751f5dab69426049f4c6f413918c84ab3243e081be9e2449ed75563cdefd352c0e047644ecaa57648ac
SSDEEP 24:qLu0wYqqqqqqqYNiqqqqqqqGiqqqqqqqYiqqGiqqqqqqqgiqqqq0qqqQiqqq4Pi2:aV
TLSH
T1CBB12A843D2F8CF0C0180030CC8E8BAC053A3C82B840E483E3BA2EBFD8B9B40E20240C
MD5 SHA1 SHA512 SSDEEP TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/midi_tbDisabled.bmp

SHA256 a6e744588b87fe3bed091cc00a3f5ed3f31d0efe7628e7b84854a7c88123c746
MD5 6d326580864be0552bdfb2e74856dbc3
SHA1 caba56909604ac934c708cdbb84244a61ad9ba5b
SHA512 68d3eaf004154d3d01786a00491fd0c01fbd0e9bb3b0dde1d50ff531924c314a5fe51c637327b3e59d0c3a27707d0165c0b97d4a30ee28e97836341fc34d5021
TLSH
T139511DC25E9E7C26CBA28C3787801E11B9F1F900B3135E1FAE322C04C27CB819729236
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/mlbutton.bmp

SHA256 524cd685610b6d40a7c2ec4ba3db5d100bb8f27e90eb56ec99612ee5e57de6bd
MD5 ef9ef4be6acd54f24c9bee194a183ea3
SHA1 32b2c84bf0add613de2318e9da12f35ef75bd4f2
SHA512 66ba8d7bbfe0ab571c9f341a63e1dd333a65bab52c84214cc2509600ce85c29cde17b9c599a2611b95320e424b99a80b2ddc530459ee30df126b6b97435b11f7
TLSH
T1B53112A31A214884DFE0C8318AC59C709068F85B68CA767527D84E6F4F03DF7C5AD36C
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/oabutton.bmp

SHA256 2d16d747a058a2bdc4a5daefe01bcda7598ccccde5a3d151d0daf994e0a570af
MD5 6eae6752a3dccb0dcdd876afe97c1a13
SHA1 c6e1fc83ecef74c57f520e86957a2ca894e96484
SHA512 27dc80c0cfb5c96f2f526d7d6400dba873829e32845a3ea47ebb669abd5710329d2893acbdd5b20ee105cf2440216c12e4bc07a75bd32559f4ba89e2c26a9126
TLSH
T166214124E803ECC5EEF20971C982ABFE0ABC4C72E05AD50272687D1DF6236526229706
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/pbutton.bmp

SHA256 44b8e1dc98b3747b02bb62cff33b7877aa41a6e6fe59117da67de39e9788b1e6
MD5 305fe06e6a3b8713c0a924a5ab724cb2
SHA1 feb3148255dd1d254a81761219d3b2984bd0b6d7
SHA512 80a2a40cf058808df3ee4bf39bf12b91d874eef79aae2b7840aed0258a813193ef7c5187d889369bc84331470880d6e449b49e9c29550b8e8adbae1ee7e356fd
TLSH
T13021DD97C857EAABF6480A3D0A823456C74137CCF2B6D276286E3C1C96335C468A2D17
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/pfbutton.bmp

SHA256 e8fa76863e72a3b72af9c70aa8530d5e5b4bdeb21be97728a29fc36c69bbd3d3
MD5 b108b6b3da7e3861ac1dbc6904cf882b
SHA1 1a5b4573d112910e096136dd877e5655f224b0d2
SHA512 34ec9034257abbdffd4426e3caac6f0d76c9e32f12608fe0bba09040f75009eb06593694b052e70edac30a7bb180b02a4af2e190d6e87c65f86169100d021529
TLSH
T149319D2A301CECC8CFE10C320C4C16B9A22EB51715F6F7C426C56A8B8B8BD76C156B86
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/toolbar1.bmp

SHA256 642d34a09deffed0f8b4dc3f536e0b007ab99034b049f86efd1ad1816c1550f0
MD5 07a2fc857dcd2002d119f892ec626220
SHA1 b04cfa7791eae5ee2cc5afa791072bf66c3f9628
SHA512 d93f0640dade570676bf1052c4f201c94f824eb5dbd798d298a249822966b341c3a92d052411fea8ed28999aa6bc8b8a21211a87d6601f6625e23a00a54d3fa6
SSDEEP 24:SGOwYqqqqqqqaiqqiqqqqqqq4iqqqqqgiqqqqqqqKiqqqqqqiqqqqqqqYfiqqqqF:ae
TLSH
T1961205556D2FCDF0D0580430CC8E9BAC1A787D063941E513E3B26EBFC9B9B94E62644C
MD5 SHA1 SHA512 SSDEEP TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/toolbar1Disabled.bmp

SHA256 4316673b4706a42a56b1164fec9c31cac286e155e94290d0d2fd0944b783fd94
MD5 8d5b2c12595fbd76808ecc838c625e77
SHA1 a48925612a9f6627575dcd00b33b66da53b8aa89
SHA512 23c884692cd82ebed769a6749896f6dab4938e9715d29224e27df7774d94c57c238bbcf597017db4b015c11808dd2a41dd17965384215c3e7442eee709d6e157
SSDEEP 3:ClllDli/mlg0X3lllllllllllllllllllllllllllllllllllllllllllllllllF:C/GKg0f
TLSH
T1811202A85D0DC580D06C04304C4C5F3C155049063141362083524C04C6CD3E4E404848
MD5 SHA1 SHA512 SSDEEP TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/ubutton.bmp

SHA256 0f42c74323bee578fc60f1edc9a21269b13cd4bb6bb494e5a0aa7cb7c1c9fe2a
MD5 9141ad0f862acd41007922f9be8a765f
SHA1 2eaf2b64dbc41bf53dc06e5612e40457fe9dd0e7
SHA512 b9454355a62698bdabeabad97aef65493c7c9d9c1b035c8c3b3ee960beffb9e16d8a7f775106c8ae10e04f8c840e105bf80ae192de2b5035bfde5f7e17e9a0eb
TLSH
T177319703464FA951EEA24C74058AC2745650AA4E52C764F2EDD63E6BDB01D0A63097DB
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/vuoff.bmp

SHA256 86c9c24fe06c001fcb6fc98118e84019b9d895cf98d7e5372110a4112fa9fa7d
MD5 8a34297942e40d3212e66c7ffb00762e
SHA1 81291742829b740b7a4cf9a239157d48344dcf1f
SHA512 6fd546aff3c9a769950b318f8db894fe50f2d06f92c1fd617b21ab8d52847b9ffb4d6c3bdd9c51ff30888d40d94d1974b009dc0ccecadb228d42ef7135d56dd1
TLSH
T1254111110A229EC4EB80947944DD862224D4BE9F437AB0B40EFCCE173973897D7B146D
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/vuon.bmp

SHA256 cbe603444fef23009abea9122412637f74e19c23a7fd90c05129466cf0fffe8e
MD5 44ea5a5c393891635ac9af73291caec3
SHA1 a0889627e131de13060b3691c7116bdc098945af
SHA512 309c4097461dd494f84bbc76747fdbb4836ea9698807220f68a13443822a52a6e0e0857f4179cdaeb013902ad8d01d7d307561d06a86cf112a3c8a3e005ab294
TLSH
T1F44133364B253844FBA454334AC998ED55641113D37BB8A4CAA25F0F3F87CABFA88183
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/DefaultSkin/xbutton.bmp

SHA256 393d9c5ec5972fbb6cf8aa41c27494052ac9e202d1a44caf5e88155d39cea6e8
MD5 85cda279a31c53274b1ea3a8c2ceeb2d
SHA1 c2d2f3936b53334b59ae6f53bc4b77ce1e991e47
SHA512 5c5ef895d835b0e1bd2c90547bf69488f7b868ab4528095b14108df1da606859c4ed3b2f0f7c38d088f87105c65e553e7e8abc095ebd56344a0df1f0371cd207
TLSH
T19C31DE36411894C8DBE4D53144D958B42538BA6B90B5317137D3BE9F6F23DC3E620258
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/Data/effCanDos.ini

SHA256 5754544d0fdccbff996807e054af32f834db5294de449cc5d878e20b5b5ed592
MD5 04f97b8e643e3e2f9c8f73b2a489f722
SHA1 2666ffac05a11cf1d93f595df5aaa9116b71452d
SHA512 95ca57496c14f803cb6e2c02f3b8592b2e70e150c51e7f394ff2a3ff240f9ab8ec2e71c1b2b67ce86859f60421cf521477b76eed5a8e3acc4c64dd6e29d1c9af
SSDEEP 192:w1mMMs0FkpMaITG+pjwKO+Yd7GNy/pHIjzfaCWXwXlXGM:w8hjFxjEt5IjzfaCWgV2M
TLSH
T147D1533A3215036D4D3034B6634AD5F6F336466F41709A64B62E8E43AB2937BC5FE6B0
MD5 SHA1 SHA512 SSDEEP TLSH

DADALIFE/vsthostx64/Data/hostCanDos.ini

SHA256 f05c03dd7527924ad0df39baf67738896a1d3c6acb16475cee81f88a7c40f62d
MD5 edc18fee18c4f4814248b5d3b5a667ab
SHA1 5701e6109673bf52c9bb6cddeb80c2ebd1a2613e
SHA512 2c111930fc03305cd2bce6bc76858329ef4f29a79b1a2b2977cd5de9d7b5668ca8999a6f37bfea844bdcafa7c15f307c02f1bcb4b1baae76fe93c5a8b8504b0f
TLSH
T13051616A4E85937C9A3531C1A7AD42EBF31589FF133002D416345E246E9B393B2BA0F6
MD5 SHA1 SHA512 TLSH

DADALIFE/vsthostx64/VSTHost.pdb

SHA256 b8f2186f100f98f4c94d70a1e97446d87f2a7417984a494a4fd3394a0a5f09bb
MD5 278f2cc9e3f4b8facefbb1d0d63460b2
SHA1 a352eb989daf8b2cd96fce115346784c5b17ec60
SHA512 6b23977c7b4e153a8779b881061d5b31433e1da0fb9731dc74ba6462dcf75faa6f6f7af71f967693f532f05506a693846ee919b0ee4118832d44c93b80f98aa0
SSDEEP 98304:POZi5YkWi678MVNNaBZ/C1kKUmH01geqW/d9zMw+9SobPxcu7Ef3ZPmmj/LU+I+:P
TLSH
T1363682299B2B69E3C66DD3F604D60B5C32F8958013E39A6F411AB4313DB7372CC9B994
MD5 SHA1 SHA512 SSDEEP TLSH

DADALIFE/vsthostx64/VSTHost.pdf

SHA256 e86320861501f1e77b7ad34a349c30f956b975f3bccf20134d86d4186fa9aa97
MD5 1bde67a53c8dd5cdef477cbd404d10b4
SHA1 f00d17788842b12dfe9a0f59f18d5a31a4803f53
SHA512 3d96f1c624e6646bc02572d8a5927f72939684a3ccf91d27c8156cf87074ef634828f8bacdb38956b59185db2ad5371b7615bba86859fb8e94f9094c46df3ab0
SSDEEP 49152:HnvKSZUaE7/6FCuhkpvxzs28beKu85P/RpROGf2ED:iT7/6QoWQR1hV
TLSH
T133B5F178F5028C9CFC428BD5A0723A6C856E73673ACD7AB04475CB56E2D48894E83DE7
MD5 SHA1 SHA512 SSDEEP TLSH

HTTP links in PDF interactive object

Detects HTTP links in interactive objects within PDF files.

pdf link

Password

asdasd

Extracted URLs

file http://jstuff.wordpress.com/jbridge/
file http://opensoundcontrol.org/
file http://osw.sourceforge.net/
file http://vintage-sounds.freeforums.net/
file http://web.archive.org/web/20090309000041/http:/www.lionstracs.com/store/
file http://www.artvera-music.com/
file http://www.asio4all.com/
file http://www.dreampoint.co.uk/
file http://www.ijg.org/
file http://www.kvraudio.com/
file http://www.libpng.org/
file http://www.lionstracs.com/
file http://www.mpg123.org/
file http://www.mpg123.org/download/win32/mpg123-1.13.0-x86.zip
file http://www.mpg123.org/download/win64/mpg123-1.13.0-x86-64.zip
file http://www.steinberg.net/en/company/developer.html
file http://www.vigierguitars.com/
file http://www.waves.com/
file http://zlib.net/
file https://www.hermannseib.com/english/vsthost.htm
file https://www.hermannseib.com/programs/beta
file https://www.hermannseib.com/vsthost.htm
file mailto:[email protected]
Show all

DADALIFE/vsthostx64/VSTHostBridge32.exe

IMPHASH fc1c14bbe3f3a739b40a7785a9d6877f
SHA256 d1c4420366cc5c7029868d0b213f7e1f0239fb5193953ebff897e56ee8122b73
MD5 cee3e62101a9eb8a612d95fa332e7892
SHA1 ad37175908e74bb61b639dd5ac4398e60d5261cf
SHA512 ce0da60d87d3c7e0a4bdff73b5686cbd5729c0b33d0cb15fe8a378b11cfdc04154ebb32e38aed77b95bec05421142e87472b99c91a973bb7b9cf6b659551c680
SSDEEP 12288:wiCPdTBeO6m0SrQol9ozoyEuFp6NA3P9ucpqk/TE1Msz1E/vH77fne7OiZ:w5PCD1CXcpqk/TEq41ibD4
TLSH
T111E46C207BD5C1B3CB5230B10D6A976F5126F2661B285EC3F2952F2E4E392D13D3929E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

asdasd

Minor OS version

0

Major OS version

5

Entry point

427204

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

winmm

midiOutUnprepareHeader timeGetTime

kernel32

FindFirstFileA GetTempPathA GetUserDefaultLCID ExitProcess RaiseException SetPriorityClass SetUnhandledExceptionFilter InterlockedExchangeAdd SuspendThread LocalFree FormatMessageA LocalAlloc TlsGetValue GlobalReAlloc GlobalHandle TlsAlloc TlsSetValue LocalReAlloc TlsFree InterlockedDecrement lstrcmpW CompareStringA GlobalDeleteAtom GlobalFindAtomA GlobalAddAtomA GlobalGetAtomNameA SetFilePointer FlushFileBuffers LockFile GetLocalTime SetEndOfFile GetVolumeInformationA WritePrivateProfileStringA GetLocaleInfoA EnumResourceLanguagesA ConvertDefaultLocale GlobalFlags FileTimeToSystemTime GetCPInfo GetOEMCP FileTimeToLocalFileTime GetFileAttributesA GetFileSizeEx GetFileTime RtlUnwind UnhandledExceptionFilter VirtualProtect VirtualAlloc VirtualQuery GetCommandLineA GetStartupInfoA ExitThread CreateThread HeapSize SetHandleCount GetStdHandle GetFileType GetACP IsValidCodePage LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode GetStringTypeA GetStringTypeW VirtualFree FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetTimeZoneInformation SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW GetProcessHeap CompareStringW SetEnvironmentVariableA FindNextFileA DeleteFileA FindClose GetCurrentProcessId ReadProcessMemory MulDiv GetTickCount GetVersionExA GetSystemInfo IsDebuggerPresent lstrcmpA GlobalUnlock GlobalAlloc GlobalLock GlobalFree InterlockedExchange HeapCreate HeapReAlloc HeapAlloc HeapFree InterlockedIncrement SetErrorMode LoadLibraryExA GetEnvironmentVariableA lstrlenA lstrcpyA MultiByteToWideChar lstrlenW UnmapViewOfFile CreateFileA GetFileSize CreateFileMappingA MapViewOfFile ResetEvent GetCurrentDirectoryA SetCurrentDirectoryA LoadLibraryA CreatePipe DuplicateHandle CreateProcessA WriteFile ReadFile OutputDebugStringA GetModuleFileNameW SetLastError GetLastError LoadLibraryW WideCharToMultiByte GetExitCodeProcess TerminateProcess GetThreadPriority GetCurrentThread SetThreadPriority GetModuleFileNameA FreeResource FreeLibrary GetFullPathNameA FindResourceA LoadResource LockResource SizeofResource GetVersion GetFileAttributesW GetModuleHandleW GetCurrentThreadId ResumeThread GetCurrentProcess CloseHandle CreateEventA WaitForSingleObject SetEvent LeaveCriticalSection Sleep DeleteCriticalSection EnterCriticalSection GetProcAddress InitializeCriticalSection GetModuleHandleA UnlockFile

user32

GetClassLongA WinHelpA SendDlgItemMessageA SetDlgItemTextA IsDialogMessageA SetWindowTextA MoveWindow ShowWindow CharUpperA TabbedTextOutA DrawTextA DrawTextExA GrayStringA BeginPaint EndPaint EndDialog GetNextDlgTabItem CreateDialogIndirectParamA GetDesktopWindow WindowFromPoint SetCursor GetSysColorBrush UnregisterClassA GetDlgItem DestroyWindow GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenu SetMenu SetScrollPos CreateWindowExA GetClassInfoExA AdjustWindowRectEx GetScrollInfo SetScrollInfo GetDlgCtrlID CallWindowProcA GetMenu SetWindowPos GetWindowPlacement GetWindow DestroyMenu GetWindowThreadProcessId GetLastActivePopup IsWindowEnabled MessageBoxA UnhookWindowsHookEx GetSubMenu GetClassNameA GetMenuCheckMarkDimensions ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem SetWindowsHookExA CallNextHookEx GetMessageA GetActiveWindow IsWindowVisible GetKeyState GetCursorPos ValidateRect TranslateMessage DispatchMessageA PostQuitMessage OpenClipboard EmptyClipboard SetClipboardData CloseClipboard wsprintfA FrameRect GetMenuItemID DeleteMenu LoadImageA DestroyIcon GetSysColor GetAsyncKeyState GetClassInfoA DefWindowProcA RegisterClassA LoadCursorA GetParent GetFocus SetCapture LockWindowUpdate GetUpdateRect UpdateWindow ReleaseDC GetWindowRect DrawFocusRect LoadBitmapA EqualRect UnionRect IntersectRect OffsetRect InflateRect SetRectEmpty PtInRect IsRectEmpty CopyRect SystemParametersInfoA GetWindowLongA SetWindowLongA GetDC GetSystemMetrics LoadIconA IsIconic DrawIcon ReleaseCapture EnableWindow SetForegroundWindow IsChild GetCapture InvalidateRect ScreenToClient GetMenuItemInfoA GetTopWindow SetParent ClientToScreen GetClientRect SendMessageA SetMenuItemInfoA GetMenuItemCount AppendMenuA CreatePopupMenu RegisterWindowMessageA PostMessageA PeekMessageA SetPropA GetPropA RemovePropA IsWindow SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow SetActiveWindow SetMenuItemBitmaps RedrawWindow GetMenuStringA

gdi32

GetDIBits SetDIBits GetTextExtentPoint32A CreateBitmapIndirect CreateDiscardableBitmap SetBrushOrgEx DeleteDC SelectObject SetDIBColorTable DeleteObject CreateDIBSection ExtTextOutA GetClipBox SetTextColor SetBkColor SetMapMode LineTo MoveToEx RectVisible TextOutA Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetStockObject CreatePen CreateSolidBrush SetBkMode RestoreDC SaveDC StretchBlt BitBlt PatBlt GetDeviceCaps CreateCompatibleDC RectInRegion CombineRgn SetRectRgn CreateRectRgnIndirect CreateCompatibleBitmap CreateBitmap CreateFontIndirectA PtVisible GetObjectA SetStretchBltMode

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueA RegEnumKeyA RegDeleteKeyA RegSetValueExA RegOpenKeyExA RegCreateKeyExA GetUserNameA RegOpenKeyA RegQueryValueExA RegCloseKey

shlwapi

PathFindFileNameA PathFindExtensionA PathStripToRootA PathIsUNCA

ole32

StringFromGUID2 CreateStreamOnHGlobal CoInitialize

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit

gdiplus

GdiplusShutdown GdiplusStartup GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipCreateBitmapFromFileICM GdipGetImageGraphicsContext GdipGetImagePalette GdipGetImagePaletteSize GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipDisposeImage GdipDeleteGraphics GdipAlloc GdipFree GdipDrawImageI GdipCloneImage GdipCreateBitmapFromFile

DADALIFE/vsthostx64/VSTHostBridge64.exe

IMPHASH 30af88f3e4ed456c2bb1207bf3c730d7
SHA256 1de634ee36e4fac47540d8addb1666d341743fa5f31a3e570bf2dbb0249026f5
MD5 c4a78105240b110987febb25db23d075
SHA1 6210219004dd1b914273e3ddb65feba66480d5c7
SHA512 446e327428001a2acf669707618c79cfe01175216395db66336616a985fa4ee8cec299f1f19aef7b83331714e43050782e72a31c500d06c02c74f04b20430f93
SSDEEP 12288:5jUClMSJZLQuevLJXGeSqNrE+C92gb0NsPSb+DvspeNx/bO:5wC1JZ2vNhM92gKdb1KbO
TLSH
T1B7153A5DB67880F2D036C07EC9929686E7B2B4520B318BCB5162876F7F375E58D3A321
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Password

asdasd

Minor OS version

2

Major OS version

5

Entry point

498724

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

winmm

midiOutUnprepareHeader timeGetTime

kernel32

GetLocalTime FindFirstFileA GetTempPathA GetUserDefaultLCID ExitProcess RaiseException SetPriorityClass SetUnhandledExceptionFilter SuspendThread LocalFree FormatMessageA LocalAlloc TlsGetValue TlsAlloc GlobalReAlloc GlobalHandle TlsSetValue LocalReAlloc TlsFree lstrcmpW CompareStringA GlobalDeleteAtom GlobalFindAtomA GlobalAddAtomA GlobalGetAtomNameA SetFilePointer FlushFileBuffers LockFile UnlockFile SetEndOfFile GetVolumeInformationA WritePrivateProfileStringA DeleteFileA EnumResourceLanguagesA ConvertDefaultLocale GlobalFlags GetModuleHandleW FileTimeToSystemTime GetCPInfo GetOEMCP FileTimeToLocalFileTime GetFileAttributesA GetFileSizeEx GetFileTime RtlLookupFunctionEntry RtlUnwindEx RtlPcToFileHeader UnhandledExceptionFilter RtlVirtualUnwind RtlCaptureContext VirtualProtect VirtualAlloc VirtualQuery GetCommandLineA GetStartupInfoA ExitThread CreateThread HeapSize HeapQueryInformation EncodePointer DecodePointer FlsGetValue FlsSetValue FlsFree FlsAlloc SetHandleCount GetStdHandle GetFileType GetACP IsValidCodePage LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode GetStringTypeA GetStringTypeW HeapSetInformation FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetTimeZoneInformation SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW GetProcessHeap CompareStringW SetEnvironmentVariableA FindNextFileA FindClose GetCurrentProcessId ReadProcessMemory MulDiv GetTickCount GetVersionExA GetSystemInfo IsDebuggerPresent lstrcmpA GlobalUnlock GlobalAlloc GlobalLock GlobalFree HeapCreate HeapReAlloc HeapAlloc HeapFree SetErrorMode LoadLibraryExA GetEnvironmentVariableA lstrlenA lstrcpyA MultiByteToWideChar lstrlenW UnmapViewOfFile CreateFileA GetFileSize CreateFileMappingA MapViewOfFile ResetEvent GetCurrentDirectoryA SetCurrentDirectoryA CreatePipe DuplicateHandle CreateProcessA WriteFile ReadFile LoadLibraryA WideCharToMultiByte GetExitCodeProcess TerminateProcess GetThreadPriority GetCurrentThread SetThreadPriority GetModuleFileNameA FreeResource FreeLibrary GetFullPathNameA FindResourceA LoadResource LockResource SizeofResource OutputDebugStringA GetModuleHandleExW GetModuleFileNameW SetLastError GetLastError LoadLibraryW QueryActCtxW FindActCtxSectionStringW DeactivateActCtx ActivateActCtx CreateActCtxW GetCurrentThreadId ResumeThread GetCurrentProcess CloseHandle CreateEventA WaitForSingleObject SetEvent LeaveCriticalSection Sleep DeleteCriticalSection EnterCriticalSection GetProcAddress InitializeCriticalSection GetModuleHandleA GetLocaleInfoA

user32

SetPropA GetClassLongPtrA GetClassNameA GetClassLongA WinHelpA SendDlgItemMessageA SetDlgItemTextA IsDialogMessageA SetWindowTextA MoveWindow ShowWindow CharUpperA TabbedTextOutA DrawTextA DrawTextExA GrayStringA BeginPaint EndPaint EndDialog GetNextDlgTabItem CreateDialogIndirectParamA GetDesktopWindow WindowFromPoint SetCursor GetSysColorBrush UnregisterClassA GetWindowLongPtrA SetWindowLongPtrA GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenu SetMenu SetScrollPos CreateWindowExA GetClassInfoExA AdjustWindowRectEx GetScrollInfo SetScrollInfo GetDlgCtrlID CallWindowProcA GetMenu SetWindowPos GetWindowPlacement GetWindow DestroyMenu GetWindowThreadProcessId GetLastActivePopup IsWindowEnabled MessageBoxA UnhookWindowsHookEx GetMenuStringA GetPropA GetMenuCheckMarkDimensions ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem SetWindowsHookExA CallNextHookEx GetMessageA GetActiveWindow IsWindowVisible GetKeyState GetCursorPos ValidateRect TranslateMessage DispatchMessageA PostQuitMessage OpenClipboard EmptyClipboard SetClipboardData CloseClipboard wsprintfA FrameRect GetMenuItemID DeleteMenu LoadImageA DestroyIcon GetSysColor GetAsyncKeyState GetClassInfoA DefWindowProcA LoadCursorA GetParent GetFocus SetCapture RedrawWindow LockWindowUpdate GetUpdateRect UpdateWindow ReleaseDC DrawFocusRect LoadBitmapA EqualRect UnionRect IntersectRect OffsetRect InflateRect SetRectEmpty PtInRect IsRectEmpty CopyRect SystemParametersInfoA GetWindowLongA SetWindowLongA GetDC RegisterClassA GetSystemMetrics LoadIconA IsIconic DrawIcon ReleaseCapture EnableWindow SetForegroundWindow IsChild GetCapture InvalidateRect ScreenToClient GetMenuItemInfoA GetTopWindow SetParent ClientToScreen GetClientRect SendMessageA SetMenuItemInfoA GetMenuItemCount AppendMenuA CreatePopupMenu RegisterWindowMessageA PostMessageA PeekMessageA RemovePropA IsWindow SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow SetActiveWindow GetDlgItem GetSubMenu DestroyWindow GetWindowRect SetMenuItemBitmaps

gdi32

GetDIBits SetDIBits GetTextExtentPoint32A CreateBitmapIndirect CreateDiscardableBitmap SetBrushOrgEx DeleteDC SelectObject SetDIBColorTable DeleteObject CreateDIBSection ExtTextOutA GetClipBox SetTextColor SetBkColor SetMapMode LineTo MoveToEx RectVisible TextOutA Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetStockObject CreatePen CreateSolidBrush SetBkMode RestoreDC SaveDC StretchBlt BitBlt PatBlt GetDeviceCaps CreateCompatibleDC RectInRegion CombineRgn SetRectRgn CreateRectRgnIndirect CreateCompatibleBitmap CreateBitmap CreateFontIndirectA PtVisible GetObjectA SetStretchBltMode

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueA RegEnumKeyA RegDeleteKeyA RegSetValueExA RegOpenKeyExA RegCreateKeyExA GetUserNameA RegOpenKeyA RegQueryValueExA RegCloseKey

shlwapi

PathFindFileNameA PathFindExtensionA PathStripToRootA PathIsUNCA

ole32

StringFromGUID2 CreateStreamOnHGlobal CoInitialize

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit

gdiplus

GdiplusShutdown GdiplusStartup GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipGetImageGraphicsContext GdipGetImagePalette GdipGetImagePaletteSize GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipDisposeImage GdipDeleteGraphics GdipAlloc GdipFree GdipDrawImageI GdipCloneImage GdipCreateBitmapFromFile

DADALIFE/vsthostx64/history.txt

SHA256 923a250081534b091e3e3a136f12309169b1a8e89aff0b0242a32001d5e4d63e
MD5 2e31421b465649fe9952b98a3cfed028
SHA1 584fab77a10aadaf346c20a25a6c248307673bf6
SHA512 ddc37d3052e5f652002d6943a4d1ac4654d4338d27345c0c23bfec48a5edd4273c7fd9fef6b8fac560c042ab756968d255d493bcd3454d4f9dc38b799ff6066d
SSDEEP 768:LLtWFcRadpbtASmiDsLaAl4fC1mIDZIkWLXkTPMuBK1EwfSR:PtWFCadpCSXDsLai1s1rwPxBKbKR
TLSH
T1F0F21C57AA0583A314B31102620535E2F32A81FEF36D4256B16CD2DC774A43ED6FBAF9
MD5 SHA1 SHA512 SSDEEP TLSH

DADALIFE/vsthostx64/license.txt

SHA256 3e037510c32133d7fbcf87e052dc0cbd92f6c2327b6fddf84f67c89250517043
MD5 a786106f05f95dd8844433060f8056f5
SHA1 6d9d588f03b161558f4e2d1799158ff38ec6c6f6
SHA512 52a3ba142f0adcb038866b1a81104c173893446de075be7c5491976b1bd2193897693ca19fef9be70827d330fe20be56d899ef4c9224b97d80ae08eba235b25a
SSDEEP 192:JxM4xfSkMm8UlypK4XeV3OqYTlOr78N58O64c:JxM4tumVE0nOz5e8P8Ofc
TLSH
T131026469B70A13B3239203A6560B92D5F73BD9F8667E43417168C12A3381C3897FA9DC
MD5 SHA1 SHA512 SSDEEP TLSH

DADALIFE/vsthostx64/vsthost.exe

IMPHASH 2a789c3f66abb86750d63b07abf87dbe
SHA256 5e37f34953d4a4c4411179d36bf2ee666b3d46f514d85d79648806752e3577ad
MD5 d936ec401ee51fc6821da27a858cdf7a
SHA1 13f6dfafad1839acdb3666d25922d77ffdbaf8a7
SHA512 7ca6be0953639093b4c1984e5371fccebf54dc194dfd5fec96bb9fed3e3107bf2eb446664f3f1acc4b9043dcc3e0fd45c05adee7730d73b72f51f8cb007a9fef
SSDEEP 49152:PBvwOrOWdsWyneGKP/F3Yo0ySmYb6T0Onuxk4DV2547KIRWQHA1Vmfdz:J41eWPb6T0pQxQHSV2
TLSH
T1C536E759B96C81E1D133C1BFD1839E8DDAB274521B215BC7010ADBAA1E377D68C36B32
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Password

asdasd

Minor OS version

2

Major OS version

5

Entry point

2339940

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

e:\Dev\VSTHost\Release.08\x64\vsthost.pdb

winmm

mmioFlush mmioCreateChunk mmioWrite mmioDescend mmioRead mmioSeek timeEndPeriod timeKillEvent timeGetDevCaps timeSetEvent mmioAscend mmioClose mmioOpenA waveOutClose waveInClose waveInReset waveOutSetVolume waveOutGetVolume waveOutSetPlaybackRate waveOutGetPlaybackRate waveOutSetPitch waveOutGetPitch waveOutGetPosition waveOutWrite waveOutBreakLoop waveOutRestart waveOutPause waveOutReset waveInStop waveInStart waveOutUnprepareHeader waveOutPrepareHeader waveOutMessage waveOutGetNumDevs waveOutGetDevCapsA waveOutOpen waveInAddBuffer waveInMessage waveInGetPosition waveInUnprepareHeader waveInPrepareHeader waveInGetNumDevs waveInGetDevCapsA timeBeginPeriod joyGetPos joyGetNumDevs joySetThreshold joyGetPosEx joySetCapture joyReleaseCapture joyGetDevCapsA midiOutUnprepareHeader midiInGetDevCapsA midiInMessage midiInAddBuffer midiInPrepareHeader midiInUnprepareHeader midiInGetErrorTextA midiOutGetDevCapsA midiOutMessage midiOutGetErrorTextA midiStreamProperty midiStreamPosition midiStreamPause midiStreamRestart midiStreamStop midiInStart midiInStop midiInReset midiOutReset midiOutCachePatches midiOutCacheDrumPatches midiStreamOpen midiStreamOut midiOutPrepareHeader midiInClose timeGetTime midiOutClose midiOutLongMsg midiOutShortMsg midiStreamClose midiInOpen midiOutOpen midiInGetNumDevs midiOutGetNumDevs waveInOpen

kernel32

DeactivateActCtx FindActCtxSectionStringW QueryActCtxW LoadLibraryW GetLastError SetLastError GetModuleFileNameW GetModuleHandleExW OutputDebugStringA FreeResource lstrlenW MultiByteToWideChar FreeLibrary GetEnvironmentVariableA LoadLibraryA LoadLibraryExA SetErrorMode SetThreadPriority GlobalFree GlobalUnlock GlobalLock GlobalAlloc GlobalSize QueryPerformanceCounter QueryPerformanceFrequency GetFileAttributesExA GetTickCount ExpandEnvironmentStringsA DeviceIoControl lstrcpynA lstrcmpiA HeapFree HeapAlloc HeapReAlloc HeapCreate HeapCompact IsBadReadPtr GetThreadPriority GetCurrentThread lstrcmpA VirtualAlloc VirtualFree VirtualUnlock VirtualLock GetSystemInfo GetVersionExA DeleteFileA GetCurrentDirectoryA ReadProcessMemory GetCurrentProcessId FindClose FindNextFileA GetLocalTime FindFirstFileA GetTempPathA OpenEventA SetCurrentDirectoryA MoveFileA SetPriorityClass GetPriorityClass GetProcessAffinityMask GetUserDefaultLCID GetFileAttributesA ExitProcess RaiseException ActivateActCtx SetUnhandledExceptionFilter OpenFile lstrcmpW CompareStringA GlobalDeleteAtom GlobalFindAtomA GlobalAddAtomA GlobalGetAtomNameA LocalFree FormatMessageA CopyFileA SuspendThread GetStringTypeExA GetThreadLocale SetFilePointer FlushFileBuffers LockFile UnlockFile SetEndOfFile GetVolumeInformationA GetShortPathNameA VirtualProtect FileTimeToSystemTime FileTimeToLocalFileTime GetSystemDirectoryW LocalAlloc TlsGetValue TlsAlloc GlobalReAlloc GlobalHandle TlsSetValue LocalReAlloc TlsFree GetLocaleInfoA EnumResourceLanguagesA ConvertDefaultLocale GlobalFlags GetCPInfo GetOEMCP GetAtomNameA GetModuleHandleW SystemTimeToFileTime LocalFileTimeToFileTime SetFileTime SetFileAttributesA GetFileSizeEx GetFileTime FindResourceExA RtlLookupFunctionEntry RtlUnwindEx RtlPcToFileHeader UnhandledExceptionFilter RtlVirtualUnwind RtlCaptureContext GetSystemTimeAsFileTime VirtualQuery CreateDirectoryA GetCommandLineA GetStartupInfoA ExitThread CreateThread SetStdHandle GetFileType HeapQueryInformation HeapSize EncodePointer DecodePointer FlsGetValue FlsSetValue FlsFree FlsAlloc GetACP IsValidCodePage GetStringTypeA GetStringTypeW GetStdHandle LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode SetHandleCount SetEnvironmentVariableW FatalAppExitA HeapSetInformation HeapDestroy GetTimeZoneInformation SetConsoleCtrlHandler FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetDriveTypeA InitializeCriticalSectionAndSpinCount GetDateFormatA GetTimeFormatA EnumSystemLocalesA IsValidLocale GetLocaleInfoW WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW GetProcessHeap CreateActCtxW lstrlenA MulDiv lstrcpyA UnmapViewOfFile CreateFileA GetFileSize CreateFileMappingA MapViewOfFile GetFullPathNameA GetModuleFileNameA CreatePipe SizeofResource DuplicateHandle ResetEvent CreateProcessA WriteFile ReadFile GetExitCodeProcess TerminateProcess GetCurrentProcess GetCurrentThreadId GetProcAddress InitializeCriticalSection ResumeThread CloseHandle CreateEventA WaitForSingleObject SetEvent LeaveCriticalSection EnterCriticalSection DeleteCriticalSection GetModuleHandleA IsDebuggerPresent Sleep WideCharToMultiByte FindResourceA LoadResource LockResource SetEnvironmentVariableA

user32

GetClassLongPtrA EndDeferWindowPos BeginDeferWindowPos GetSysColorBrush IsWindow GetMenuStringA SetMenuItemInfoA MapWindowPoints ChildWindowFromPoint RegisterClassExA GetClassInfoExA CheckMenuItem RemoveMenu LoadAcceleratorsA CharLowerBuffA EndDialog GetNextDlgTabItem IsWindowEnabled GetDlgItem DestroyWindow CreateDialogIndirectParamA SetActiveWindow GetActiveWindow GetDesktopWindow GetWindowPlacement SetWindowPos GetMenu CallWindowProcA GetDlgCtrlID SetWindowPlacement SetScrollInfo GetScrollInfo DeferWindowPos AdjustWindowRectEx CreateWindowExA MessageBoxA GetScrollPos SetScrollPos GetScrollRange SetScrollRange SetMenu TrackPopupMenu TrackPopupMenuEx ScrollWindow GetMessagePos GetMessageTime UnhookWindowsHookEx SetWindowLongPtrA GetWindowLongPtrA GetTopWindow GetLastActivePopup GetForegroundWindow GetWindowTextLengthA SetFocus RemovePropA GetPropA SetPropA GetClassLongA CallNextHookEx SetWindowsHookExA WinHelpA SendDlgItemMessageA LoadIconA GetMenuCheckMarkDimensions CheckDlgButton CheckRadioButton GetDlgItemInt GetDlgItemTextA SetDlgItemInt SetDlgItemTextA IsDlgButtonChecked IsDialogMessageA SetWindowTextA MoveWindow ShowWindow ScrollWindowEx GetKeyNameTextA MapVirtualKeyA GetWindowThreadProcessId ValidateRect TabbedTextOutA DrawTextA DrawTextExA GrayStringA GetWindowDC BeginPaint EndPaint CharUpperA WindowFromPoint DefFrameProcA DefMDIChildProcA DrawMenuBar BringWindowToTop TranslateMDISysAccel TranslateAcceleratorA InsertMenuItemA SetCursor GetMenuBarInfo GetDCEx UnpackDDElParam MapDialogRect IsZoomed CharNextA ShowOwnedPopups SetWindowContextHelpId GetDialogBaseUnits CopyAcceleratorTableA InvalidateRgn GetNextDlgGroupItem MessageBeep PostThreadMessageA IsRectEmpty DrawFocusRect InvertRect LoadBitmapA SetWindowLongA LoadImageA GetWindowTextA SetMenuItemBitmaps GetCursorPos OpenIcon SetForegroundWindow IsWindowVisible ReleaseDC GetDC IsIconic GetSystemMenu ModifyMenuA GetMenuState GetMenuItemID GetMenuItemCount AppendMenuA CreatePopupMenu KillTimer SetTimer RegisterClipboardFormatA GetClipboardData DragDetect DestroyCaret EmptyClipboard SetClipboardData CloseClipboard IsClipboardFormatAvailable ShowCaret HideCaret SetCaretPos CreateCaret OpenClipboard SetCapture EnableScrollBar LoadMenuA GetSubMenu EnableMenuItem EqualRect UnionRect ReleaseCapture SetParent IsChild ChildWindowFromPointEx GetCapture GetMenuItemInfoA SetRectEmpty SetRect GetKeyState GetSystemMetrics GetWindow GetWindowRect RegisterDeviceNotificationA UnregisterDeviceNotification DestroyCursor LoadCursorA GetSysColor DefWindowProcA GetParent GetFocus InvalidateRect FrameRect FillRect InflateRect UnregisterClassA RegisterClassA GetAsyncKeyState PtInRect ScreenToClient ClientToScreen CopyRect RegisterWindowMessageA GetMessageA TranslateMessage DispatchMessageA PostQuitMessage PostMessageA PeekMessageA wsprintfA GetClientRect SendMessageA EnableWindow IsMenu InsertMenuA DeleteMenu DestroyIcon GetWindowLongA GetClassInfoA ShowScrollBar RedrawWindow LockWindowUpdate IntersectRect SystemParametersInfoA DestroyMenu GetClassNameA MonitorFromWindow GetMonitorInfoA GetUpdateRect ReuseDDElParam UpdateWindow OffsetRect

gdi32

CreateBitmapIndirect CreateDiscardableBitmap CreateEllipticRgn Arc Ellipse GetStockObject CreateRectRgnIndirect SetRectRgn CombineRgn RectInRegion PatBlt StretchBlt GetPixel SetPixelV GetCurrentObject GetDIBits SetDIBits SetBrushOrgEx SetPixel CreateFontIndirectW DeleteDC SelectObject SetDIBColorTable CreateBitmap CreateFontA GetDCOrgEx GetClipBox SetTextColor SetBkColor CopyMetaFileA CreateHatchBrush ExtCreatePen PlayMetaFile EnumMetaFile GetObjectType PlayMetaFileRecord SelectPalette CreatePatternBrush CreateDIBPatternBrushPt ExtSelectClipRgn PolyBezierTo PolylineTo PolyDraw ArcTo GetCurrentPositionEx ScaleWindowExtEx SetWindowExtEx OffsetWindowOrgEx GetTextMetricsA Rectangle SetBoundsRect GetCharWidthA GetTextColor GetBkColor CreateCompatibleBitmap BitBlt DeleteObject CreateSolidBrush CreatePen GetDeviceCaps CreateFontIndirectA GetTextExtentPoint32A CreateCompatibleDC CreateDIBSection StretchDIBits GetRgnBox EnumFontFamiliesExA DPtoLP GetMapMode CreateDCA SaveDC RestoreDC SetBkMode SetPolyFillMode SetROP2 SetStretchBltMode SetGraphicsMode SetWorldTransform ModifyWorldTransform SetMapMode ExcludeClipRect IntersectClipRect OffsetClipRgn LineTo MoveToEx SetTextAlign SetTextJustification SetTextCharacterExtra SetMapperFlags SetArcDirection SetColorAdjustment SelectClipRgn GetClipRgn CreateRectRgn SelectClipPath GetViewportExtEx GetWindowExtEx StartDocA PtVisible RectVisible TextOutA ExtTextOutA Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx GetObjectA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter OpenPrinterA DocumentPropertiesA

advapi32

RegEnumValueA RegCloseKey RegQueryValueExA RegOpenKeyA RegDeleteKeyA RegEnumKeyA RegSetValueExA RegCreateKeyA RegOpenKeyExA GetUserNameA RegCreateKeyExA RegSetValueA RegQueryValueA RegDeleteValueA

shell32

SHGetFileInfoA DragFinish DragQueryPoint DragQueryFileA Shell_NotifyIconA ShellExecuteA ExtractIconA DragAcceptFiles SHBrowseForFolderA SHGetPathFromIDListA

shlwapi

PathRemoveFileSpecW PathRemoveExtensionA PathStripToRootA PathIsUNCA PathFindExtensionA PathFindFileNameA

oledlg

ord8

ole32

WriteFmtUserTypeStg SetConvertStg CoTaskMemFree CoUninitialize CoInitialize CLSIDFromString WriteClassStg CoInitializeEx CreateStreamOnHGlobal StringFromGUID2 IIDFromString CoFreeUnusedLibrariesEx CoCreateInstance OleRegGetUserType ReadFmtUserTypeStg ReadClassStg StringFromCLSID CoTreatAsClass CreateBindCtx ReleaseStgMedium CoTaskMemAlloc OleDuplicateData CLSIDFromProgID CoDisconnectObject CoGetClassObject StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleRun OleUninitialize OleInitialize CoRegisterClassObject CoRevokeClassObject OleSetClipboard OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CoCreateGuid CoFreeUnusedLibraries

oleaut32

SysAllocStringLen VariantClear SafeArrayDestroy SysFreeString SafeArrayUnaccessData SafeArrayAccessData SafeArrayCreateVector SafeArrayGetUBound SafeArrayGetLBound SysAllocString VariantInit SafeArrayPutElement SafeArrayCreate VariantChangeType SysStringLen SysAllocStringByteLen SysStringByteLen OleCreateFontIndirect RegisterTypeLi LoadTypeLi LoadRegTypeLi SafeArrayGetElemsize SafeArrayGetDim SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayLock SafeArrayUnlock SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromDate GetErrorInfo SetErrorInfo CreateErrorInfo

gdiplus

GdiplusStartup GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStreamICM GdipCreateBitmapFromStream GdipCreateBitmapFromFileICM GdipCreateBitmapFromFile GdiplusShutdown GdipGetImagePaletteSize GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipDisposeImage GdipDeleteGraphics GdipAlloc GdipFree GdipGetImageGraphicsContext GdipDrawImageI GdipGetImagePalette GdipCloneImage

DADALIFE/vsthostx64/vsthostDEU.dll

SHA256 f52449109e789252378f9119caf4e6146eb77145ebeb5361b742e5c1e251829e
MD5 adcdeb3a3fc984415de7d3f1caa61d2c
SHA1 1fbc6be2d9f0f1e5bd467479e6af5d2fc277a13f
SHA512 41753833dd94357eab967a1c68616c5ece91eedb209b5aa53588e55d25a5a1588f5118808fefdca0a9452931522bc335226234eccaa5ad49453a2e9bb0090fae
SSDEEP 3072:6bd5rIaeZ3klz7BafdfFwtxVLpZLMCQNxWx4xP/UC325ey3n9XnsbntXnsSXnlmJ:6vrIz6zdafditxVLpZLMCQNx8/0Qz
TLSH
T1F8443111D2E44558F5BE4B34E8F53254A6EDFC53AAB3E27E0A88374D1571A808D20FBE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Password

asdasd

Minor OS version

2

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

DADALIFE/vsthostx64/vsthostFRA.dll

SHA256 a97090229d03148b0838d9bd1693b4339a5401ad00adcae9b995275ee8759503
MD5 33c65933b64a6b50665e419283c3eaf7
SHA1 220454a3d66877da9553254a68d23721b2a0cd19
SHA512 af05262cc854fb97cbefcb675db82eef377f02be22fc2c815100c5abc1319ba494cc4771db01e765805f616eab7b275833cc2e5fe48a1982746c63f1912aff63
SSDEEP 3072:ynurIaeZ3k7z7BafdfFwtxVLpZLMCQNxWx4xP/UC325eUVoMFSPZmhTwWL:ynurIz4zdafditxVLpZLMCQNxgr
TLSH
T1AA542E11D3F45544F5BE6B34E8F531489AEEFC4399B7E27E0988774D1972A808C20BAE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

DADALIFE/vsthostx64/vsthostregclean.exe

IMPHASH 57ed345338954d08266242542aede88f
SHA256 e5a96aa37e37d36efb079bafdc368aa32dbad89df53089c075841b0e000b12e3
MD5 bb42d7784925c4f7e51c1f95ce323364
SHA1 3d8500070fa98dea1dbe38b5c3cfa952c88faa8c
SHA512 36eb3de4f1f8a730f02c338dfb23f7c7fd4834f276c980d5ac19ca8800b4033a0cec3ffa84da82bbf6e29b2e5294eca462cd3b55deed8bc6dfdc0819d2520332
SSDEEP 6144:6jFIXicdRM4wFvQ21QOCMaENkYujp5wCjeRFlhz4bmI9lG94N15TzMW/cvD8Xc:6jFIzru+OCMaXjpYF3z4v9e2fMicrD
TLSH
T113847B11BBC0D076C26634724E82D3796AEAA6715F2567C77BD01F3DAF341C2A93930A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

192742

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsSetValue LocalReAlloc DeleteCriticalSection TlsFree GetModuleHandleW InterlockedIncrement GlobalGetAtomNameA FileTimeToSystemTime FileTimeToLocalFileTime GetFileAttributesA GetFileSizeEx GetFileTime GlobalFlags GetVersionExA lstrcmpW GlobalFindAtomA GetCPInfo GetOEMCP RtlUnwind RaiseException CreateDirectoryA TlsAlloc HeapAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc ExitProcess HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetACP IsValidCodePage GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW SetHandleCount GetStdHandle GetFileType GetStartupInfoA HeapCreate VirtualFree FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetTimeZoneInformation GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc SetErrorMode FreeResource GetCurrentProcessId GlobalAddAtomA GetPrivateProfileIntA InterlockedDecrement GetModuleFileNameW GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA LoadLibraryExA CompareStringA InterlockedExchange FreeLibrary lstrcmpA GetProcAddress CreateFileA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle CloseHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile LoadLibraryA GetThreadLocale GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv GetLastError SetLastError GetCommandLineA GetModuleHandleA GetPrivateProfileStringA lstrlenA GetModuleFileNameA WritePrivateProfileStringA MultiByteToWideChar Sleep GetFullPathNameA ExpandEnvironmentStringsA WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource GetTickCount HeapFree GetFileAttributesExA

advapi32

RegQueryValueA RegCreateKeyExA RegQueryValueExA RegDeleteValueA RegOpenKeyExA RegEnumValueA RegCreateKeyA RegSetValueExA RegEnumKeyA RegOpenKeyA RegDeleteKeyA RegCloseKey

ole32

CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CoTaskMemAlloc IIDFromString StringFromGUID2 CoTaskMemFree OleIsCurrentClipboard OleFlushClipboard CLSIDFromProgID CoInitialize CoRegisterMessageFilter

shlwapi

PathFindExtensionA PathFindFileNameA PathIsUNCA PathStripToRootA

oledlg

ord8

user32

CharNextA CopyAcceleratorTableA IsRectEmpty SetRect InvalidateRgn SetCapture ReleaseCapture GetNextDlgGroupItem GetNextDlgTabItem MessageBeep EndDialog CreateDialogIndirectParamA RegisterClipboardFormatA PostThreadMessageA LoadIconA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA SetPropA GetPropA RemovePropA SetFocus GetForegroundWindow SetActiveWindow GetDlgItem GetTopWindow DestroyWindow GetMessageTime GetMessagePos MapWindowPoints SetMenu SetForegroundWindow GetClientRect CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect DefWindowProcA CallWindowProcA GetMenu OffsetRect IsIconic GetWindowPlacement IntersectRect SetWindowLongA IsWindow InvalidateRect GetDesktopWindow GetDlgCtrlID GetWindowRect GetClassNameA PtInRect SetWindowTextA EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA GetWindowTextA LoadCursorA GetDC ReleaseDC GetSysColorBrush GetWindow SetWindowContextHelpId MapDialogRect SetWindowPos GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled EnableWindow MessageBoxA SetCursor SetWindowsHookExA CallNextHookEx GetMessageA ShowWindow MoveWindow IsDialogMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos UpdateWindow RegisterWindowMessageA GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState GetSystemMetrics CharUpperA CopyRect DestroyMenu SystemParametersInfoA GetSysColor PostQuitMessage PostMessageA UnhookWindowsHookEx CheckMenuItem EnableMenuItem ModifyMenuA SendMessageA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps ValidateRect

gdi32

ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx GetObjectA ExtTextOutA CreateBitmap SaveDC RestoreDC SelectObject ExtSelectClipRgn DeleteDC GetStockObject CreateRectRgnIndirect GetMapMode GetBkColor GetTextColor GetRgnBox Escape TextOutA RectVisible SetBkColor GetDeviceCaps GetWindowExtEx GetViewportExtEx DeleteObject GetClipBox SetMapMode SetTextColor PtVisible

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

comdlg32

GetFileTitleA

oleaut32

SysFreeString SysAllocStringByteLen SysAllocStringLen VariantClear VariantChangeType VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime VariantInit OleCreateFontIndirect SysAllocString SysStringLen

Sharing

General

Malware Config

Signatures

File Explorer

DADALIFE.zip

DADALIFE/Sausage Fattener.dll

wininet

user32

gdi32

ole32

advapi32

shell32

opengl32

kernel32

comdlg32

generic

DADALIFE/vsthostx64/Data/DefaultSkin/ChainOffOn.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/ChainSend.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/InnerKnob.png

DADALIFE/vsthostx64/Data/DefaultSkin/OuterKnob.png

DADALIFE/vsthostx64/Data/DefaultSkin/PluginFx.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/PluginIn.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/PluginMid.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/PluginShell.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/Skin.ini

DADALIFE/vsthostx64/Data/DefaultSkin/Toolbar.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/ToolbarDisabled.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/abutton.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/backgnd.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/bbutton.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/bgdata.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/btnsolo.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/cbutton.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/ebutton.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/effect.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/effedit.ico

DADALIFE/vsthostx64/Data/DefaultSkin/effinfo.ico

DADALIFE/vsthostx64/Data/DefaultSkin/effmidiparm.ico

DADALIFE/vsthostx64/Data/DefaultSkin/effparm.ico

DADALIFE/vsthostx64/Data/DefaultSkin/fadercap.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/iabutton.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/ibutton.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/idr_main.ico

DADALIFE/vsthostx64/Data/DefaultSkin/instrument.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/kbd.ico

DADALIFE/vsthostx64/Data/DefaultSkin/masterfa.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/mbutton.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/midi_tb.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/midi_tbDisabled.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/mlbutton.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/oabutton.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/pbutton.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/pfbutton.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/toolbar1.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/toolbar1Disabled.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/ubutton.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/vuoff.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/vuon.bmp

DADALIFE/vsthostx64/Data/DefaultSkin/xbutton.bmp

DADALIFE/vsthostx64/Data/effCanDos.ini

DADALIFE/vsthostx64/Data/hostCanDos.ini

DADALIFE/vsthostx64/VSTHost.pdb

DADALIFE/vsthostx64/VSTHost.pdf

Extracted URLs

DADALIFE/vsthostx64/VSTHostBridge32.exe

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shlwapi

ole32

oleaut32

gdiplus

generic

DADALIFE/vsthostx64/VSTHostBridge64.exe

winmm