初音ミク＿HatsuneMiku.zip
- SHA256 f4b9147dccb49fac03457172c5c5951cf532973ca0fb5e34aa84688a6f05b055
Overview
overview
7Static
static
7�...up.dll
windows11-21h2-x64
1�...up.dll
windows11-21h2-x64
3�...un.inf
windows11-21h2-x64
3�...a1.cab
windows11-21h2-x64
1�...a1.hdr
windows11-21h2-x64
1�...a2.cab
windows11-21h2-x64
1�...ut.bin
windows11-21h2-x64
3�...up.exe
windows11-21h2-x64
3�...up.ini
windows11-21h2-x64
3�...up.inx
windows11-21h2-x64
3Behavioral task
behavioral1
Sample
~NQHatsuneMiku/ISSetup.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral2
Sample
~NQHatsuneMiku/_Setup.dll
Resource
win11-20260513-en
windows11-21h2-x64
2 signatures
300 seconds
Behavioral task
behavioral3
Sample
~NQHatsuneMiku/autorun.inf
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
300 seconds
Behavioral task
behavioral4
Sample
~NQHatsuneMiku/data1.cab
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral5
Sample
~NQHatsuneMiku/data1.hdr
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral6
Sample
~NQHatsuneMiku/data2.cab
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral7
Sample
~NQHatsuneMiku/layout.bin
Resource
win11-20260513-en
windows11-21h2-x64
3 signatures
300 seconds
Behavioral task
behavioral8
Sample
~NQHatsuneMiku/setup.exe
Resource
win11-20260513-en
windows11-21h2-x64
2 signatures
300 seconds
Behavioral task
behavioral9
Sample
~NQHatsuneMiku/setup.ini
Resource
win11-20260513-en
windows11-21h2-x64
3 signatures
300 seconds
Behavioral task
behavioral10
Sample
~NQHatsuneMiku/setup.inx
Resource
win11-20260513-en
windows11-21h2-x64
3 signatures
300 seconds
General
- Target 初音ミク＿HatsuneMiku.zip
- Size 479.4MB
- Sample260708-w9vwxsf14t
- SHA256 f4b9147dccb49fac03457172c5c5951cf532973ca0fb5e34aa84688a6f05b055
- MD5 ad72f5fd379973dd7a8c39364330b01c
- SHA1 a5e445dfc92ecd8076274cecd3e975b47119dac5
- SHA512 44ce3721992c3b88aaec5cebdc25ed735ce3789f07a40830cf78067616d269dc4d7e60ed40bc8582bd8f776d47744dc1acdb47ff318c6485155e25f14bd4cfba
- SSDEEP 12582912:YnI/VxFqpB8XGlYG8lA70V5uY/3xef5z59Hsb1Uc:Yn6WpB+Y0Vnxef1MZUc
- TLSH T1373933D5555D3E8035B02C36FE68BE4C5448488B878EDF9FEDCA038B1AA16AD0CD2E5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule static1/unpack001/~NQHatsuneMiku/ISSetup.dll acprotect -
resource yara_rule static1/unpack001/~NQHatsuneMiku/ISSetup.dll upx - Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/~NQHatsuneMiku/ISSetup.dll - Untrusted Codesign Signers 2 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/~NQHatsuneMiku/_Setup.dll unpack001/~NQHatsuneMiku/setup.exe
File Explorer
-
初音ミク＿HatsuneMiku.zip.zip 479.4MB
-
~NQHatsuneMiku/ISSetup.dll.dll 480KB
-
~NQHatsuneMiku/_Setup.dll.dll 160KB
-
~NQHatsuneMiku/autorun.inf25B
-
~NQHatsuneMiku/data1.cab3.9MB
-
~NQHatsuneMiku/data1.hdr16KB
-
~NQHatsuneMiku/data2.cab471.5MB
-
~NQHatsuneMiku/layout.bin473B
-
~NQHatsuneMiku/setup.bmp284KB
-
~NQHatsuneMiku/setup.exe.exe 444KB
-
~NQHatsuneMiku/setup.ini448B
-
~NQHatsuneMiku/setup.inx282KB
-
~NQHatsuneMiku/user_manual/VOCALOID2_Japanese_Manual.pdf.pdf 4.2MB
~NQHatsuneMiku/ISSetup.dll
- SHA256 7deb4c7e37fe9429e64b0eb3d17beb711b16876c5dac90ebf057802f69f40c3c
- MD5 aba37cd7fe50ee3d51bba1884ab32011
- SHA1 96f1dbf8666c080454161ae28455b0de7fdac7d3
- SHA512 7d27cefc60dad740865d7c9eb08531ecbf9837ddd547467995bc98516cffd812f249dcd436a7620f0fffd5c37a44bb2f7cc12a557493317daf169a6237f321f8
- SSDEEP 6144:c4SLQQ6n135yxvCI056f65Zx43+hymOB7F7n9Z1Cn70729fIErFNaWK:c4SMpJcv7N0Zx4OXkXZ1g4KN
- TLSH T1A3A4CF42FB42C6B2C50C0535485BA3DA4BB1FC5A6E03B7173798B76EADB33C17A85258
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1517840
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProductSKU
InstallEngineTypelib
RemoveEngineTypelib
Name
UPX0
Size
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
351KB
Virtual Size
352KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
128KB
Virtual Size
132KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=4, id=12, version=7291,
count=32, id=14, version=7299,
count=121, id=10, version=8047,
count=15, id=11, version=8047,
count=3, id=11, version=8798,
count=2, id=37, version=8755,
count=5, id=28, version=9178,
count=19, id=25, version=9210,
count=424, id=1, productName=Unmarked objects,
count=8, id=10, version=8966,
count=117, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
~NQHatsuneMiku/_Setup.dll
- SHA256 8802e54ce01babf7bb22d0da5c83bebc5c05d0ccd73566a5f836690e9278a696
- MD5 30ebd4e80b1dda05eac709a1dc5965b4
- SHA1 2418232370026574baabc84b105f6dd9e458ad86
- SHA512 5115afea66734fe53c9479a6569b7fbc1ef395432781367cd68c7f4878ca3884bad0a960f76db2a40314484f329c4288a6ecf4a93cc49642c5e412448c5a2557
- SSDEEP 3072:Eb9YfMX0E9QsJB9cWe7Ka2coNfCp5CzQQfnlS6LlwYKU7:EKlua8NfCp5CcS7
- TLSH T1C4F3A4419A9B858FF3AFEA34C8B22EF88FD13D9EDB7145747895B12C24786605806F0D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
71:42:63:c0:8c:8b:dc:e9:b1:9f:e5:06:03:fa:23:ec:e3:ee:77:a5
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Macrovision Corporation,OU=ENGINEERING,O=Macrovision Corporation,L=Schaumburg,ST=Illinois,C=US
Chains
May 17, 2006
CN=Macrovision Corporation,OU=ENGINEERING,O=Macrovision Corporation,L=Schaumburg,ST=Illinois,C=US
Subject
CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA
Serial Number
0a
Issuer
CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Aug 6, 2003 - Aug 5, 2013
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=Macrovision Corporation,OU=ENGINEERING,O=Macrovision Corporation,L=Schaumburg,ST=Illinois,C=US
Serial Number
03:69:39:c4:75:d5:3c:1d:70:99:2d:b8:a8:7e:b7:d3
Issuer
CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning
Timespan
Feb 10, 2006 - Feb 20, 2008
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
4KB
Virtual Size
6B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
144KB
Virtual Size
140KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
~NQHatsuneMiku/autorun.inf
- SHA256 78567402ae24b71bf351d4443df346ab0294978ff3686ffcdf686a2c273d8aac
- MD5 7da9bde910800620bc4975dde1998b56
- SHA1 4ee61820067065bc11ab7a939c757a936f8fa4f1
- SHA512 69415b0e93eb69779809482c96b2fa521719261f0127027d1fe8039ca58ab0ad831077aac202dcf217b57b66b620f2e6e543b44ee718610056115bdb7a054102
- MD5 SHA1 SHA512
~NQHatsuneMiku/data1.cab
- SHA256 d28a46b4c259299360ee801b5298a45602313e8440e3d5658ece26b38c610a13
- MD5 61cfecbe80592d6c403b34a1756c9034
- SHA1 51bb048265b6a00b1d42ed00ec0ca6a9ee07ef02
- SHA512 a7b77a7c4ca1d3dcf6b5ca90b65e8720269e82ab59cb067c7d0f169749fe0619b35133bbfbbdbca825e6715f667a37e7ec1e29363f3aabdc573ca2c7b55de5c9
- SSDEEP 98304:EhC/MWEnjDvS3ON2KFTe35mX5J6EL7SW2uNX+lyV13KM:EaMWEnHS3ONeJEeEL7Yw1aM
- TLSH T1E91633C478679AC69E2D07B09B268798751EA91B409CD80476E774C277F2F8F862CCCD
- MD5 SHA1 SHA512 SSDEEP TLSH
~NQHatsuneMiku/data1.hdr
- SHA256 a692448b853ce3253a164f3b1d7ec05050407f6fd513683e04c1d75c11d3380d
- MD5 917c7623e020c518bddaf69a28ede500
- SHA1 62b49b015d9a7a362c7f98aebe295f57c1b6e227
- SHA512 82e1e64392eb5e0a98099b8fb4055c1240d58cf96af1615c7047349c022de2efe4b0d6aa92d0d4d311a4fcd8e5598d546d654aa144ee04fe1167b025e4d616c0
- SSDEEP 192:l79Z4OgrhQC45eVh5LfE3bKXfGjFx3iCSQsM50nbQaLkZf1cr:Z/rCPVToeqn7jcr
- TLSH T175723061EB2AAF2EE44D933441BF5F1ABBB0D0889F3387B61E0557B23DC7700495A294
- MD5 SHA1 SHA512 SSDEEP TLSH
~NQHatsuneMiku/data2.cab
- SHA256 e244a02d9bf3a13c3c5886127f44252c0ec93f63d47b83c422688862ea39554c
- MD5 d62b13ee4c88ca58f8b72826eea86912
- SHA1 f91997822e82c2ec751337579c212c456967ef5e
- SHA512 50df754666fd8801e9fd1661db5287e8fb809ffeb1dcb1a75f90831397a4f08f4e4d0f676bdcbcf03cfd18f1b1613c5c848a16e98d0242ad21a3fb73433d0b93
- SSDEEP 12582912:0LfYhJJtkH3mRuhoauZaN4YpgYVr9idZrVbXC7x3X:0bgAH3Y44Yr9idfyl3X
- TLSH T17E3933D615AD3D9078B03C39ADB8BA5DA444484B85CEDE1FFEC9019F13A166C0CE6E9C
- MD5 SHA1 SHA512 SSDEEP TLSH
~NQHatsuneMiku/layout.bin
- SHA256 e557470d17f3e644b6e25ee3f77160e7f29bc68273f7f3fafa41cef944a7cbb8
- MD5 13c03cfef1c076003ee0b463cba59611
- SHA1 97b15561fe6be32db095047875f39f01374ab28a
- SHA512 b98a8503123c90575b9a5490c81aac25adb232a67b638d6f6f026f4c32dc828059194227bf2d2321f1c532b54b5a15b3b6ac6e2132065f98c9c424691a84e5c7
- TLSH T1D2F0121728275808C12BD97B187F041E0ED17DE00022D69B734160572C6D748EE481F6
- MD5 SHA1 SHA512 TLSH
~NQHatsuneMiku/setup.bmp
- SHA256 9b80ef66e708e21410f4a63daebf817a012d950e7b5808ca0f1a26ac5baff272
- MD5 fd359089051aac9b31df1e55f25ef5ef
- SHA1 1c66fb59c4143949706a70fa33a86e986b1e39ab
- SHA512 73ee04c8721dc3ef19a345d0c1b6d5b264a038a86ffb4ea641c5e7414e693ce2767b19694462cc3f2ad3fab76396dd6e1b304a772127bebd608f5cc1b26a977e
- SSDEEP 6144:otinn2hQzZ2BarIrlirFLcEI5wclLK+KTJHiONqY+UnpUki3zCEZYvMPzb:rnn1ZoXlmFLcl5wcJK+KTJHiONqY+UnY
- TLSH T16354768B075730AA89A9637560D793FD2B98AD971835127733F5359086FFC48C80F2AB
- MD5 SHA1 SHA512 SSDEEP TLSH
~NQHatsuneMiku/setup.exe
- IMPHASH a5fd4def1510f7b3943f9807bf555a4d
- SHA256 52b032521b4cd24a4268472bcff3be42fd8166a5cc5993b89f79575aa0279666
- MD5 1108b166160d6023af76435b074052b6
- SHA1 7538372af2b7dc03f908a94cba7d046d301c805e
- SHA512 f12dea253197375dbbe06d9c51d4016abdbe4f8f5cdd756880e53c211412ae19a2d23f2cc8cd0c39b6b2675cc4085d64070569c23e7c411b859dca073973797b
- SSDEEP 6144:YBqBcLb+Vb3aZfhQuSZa5z42qGjZy2D+a48g4vKGggHSawol8Utv55DHt5Fsp6Yb:G8cveb3aVhQxsURG7gLZV
- TLSH T122A44A12B7EA4025F6F36B70AA7A17B15E7FFE625A38C00F1394594C1D71AA1DA30723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
e0:21:01:78:b3:d4:61:95:de:96:92:a8:76:12:64:bb:74:39:de:75
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Macrovision Corporation,OU=ENGINEERING,O=Macrovision Corporation,L=Schaumburg,ST=Illinois,C=US
Chains
Jan 20, 2007
CN=Macrovision Corporation,OU=ENGINEERING,O=Macrovision Corporation,L=Schaumburg,ST=Illinois,C=US
Subject
CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA
Serial Number
0a
Issuer
CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Aug 6, 2003 - Aug 5, 2013
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=Macrovision Corporation,OU=ENGINEERING,O=Macrovision Corporation,L=Schaumburg,ST=Illinois,C=US
Serial Number
03:69:39:c4:75:d5:3c:1d:70:99:2d:b8:a8:7e:b7:d3
Issuer
CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning
Timespan
Feb 10, 2006 - Feb 20, 2008
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Minor OS version
0
Major OS version
4
Entry point
142697
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
comctl32
ord17
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
kernel32
GetShortPathNameA
SetEvent
HeapDestroy
GetDriveTypeA
GetExitCodeProcess
CopyFileA
lstrcpynA
GetFileAttributesA
FindClose
FindFirstFileA
CreateDirectoryA
GetCurrentThreadId
LoadLibraryA
SetFilePointer
LoadLibraryExA
GetTickCount
GetVersion
GetWindowsDirectoryA
FormatMessageA
LocalFree
SetFileAttributesA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
SizeofResource
GetTempPathA
GlobalSize
FreeResource
GetLocalTime
GetCurrentProcessId
SearchPathA
FindNextFileA
GetTempFileNameA
TerminateProcess
IsBadReadPtr
VirtualQuery
VirtualProtect
ResetEvent
QueryPerformanceCounter
SystemTimeToFileTime
lstrcmpA
GetCurrentThread
MoveFileExA
GetDiskFreeSpaceA
GetSystemDirectoryA
GetSystemInfo
GetPrivateProfileStringA
GetPrivateProfileIntA
MultiByteToWideChar
lstrcpyA
lstrcmpiA
lstrlenA
GetSystemDefaultLangID
lstrcatA
SetLastError
GetLastError
WideCharToMultiByte
CompareStringA
CompareStringW
GetVersionExA
GetProcAddress
MulDiv
GetPrivateProfileSectionNamesA
FlushFileBuffers
SetStdHandle
IsBadCodePtr
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapSize
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetEnvironmentVariableA
TlsGetValue
TlsAlloc
TlsSetValue
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
GetCommandLineA
GetStartupInfoA
RaiseException
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
DeleteCriticalSection
InterlockedExchange
GetModuleHandleA
GetModuleFileNameA
Sleep
CloseHandle
InitializeCriticalSection
ReleaseMutex
CreateMutexA
ReadFile
WriteFile
CreateEventA
QueryPerformanceFrequency
InterlockedDecrement
InterlockedIncrement
CreateFileA
CreateThread
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
SetErrorMode
FindResourceExA
FindResourceA
LoadResource
LockResource
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
WaitForSingleObject
ExitProcess
GetCurrentProcess
DuplicateHandle
GetThreadContext
VirtualProtectEx
WriteProcessMemory
FlushInstructionCache
SetThreadContext
ResumeThread
DeleteFileA
RemoveDirectoryA
AddAtomA
WritePrivateProfileStringA
GetAtomNameA
lstrlenW
CreateProcessA
user32
MoveWindow
EndDialog
LoadIconA
GetDlgItem
SendMessageA
SetDlgItemTextA
SetWindowLongA
DialogBoxIndirectParamA
CharUpperA
WaitForInputIdle
wsprintfA
GetWindowRect
GetWindowLongA
ShowWindow
IntersectRect
SetWindowTextA
RegisterClassExA
CreateWindowExA
GetClassNameA
GetDialogBaseUnits
EnumChildWindows
CallWindowProcA
CharLowerBuffA
GetDlgItemTextA
SetFocus
IsDlgButtonChecked
CheckDlgButton
BeginPaint
EndPaint
FillRect
ScreenToClient
GetParent
GetWindow
SystemParametersInfoA
MapWindowPoints
SetWindowPos
GetWindowTextLengthA
GetWindowTextA
GetWindowPlacement
SendDlgItemMessageA
DefWindowProcA
GetPropA
EnableMenuItem
SetPropA
RemovePropA
IsWindow
GetSysColor
IsDialogMessageA
TranslateMessage
LoadImageA
CreateDialogParamA
GetDC
ReleaseDC
MessageBoxA
GetMessageA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
CharNextA
PostThreadMessageA
LoadStringA
SetActiveWindow
DestroyWindow
CreateDialogIndirectParamA
SetForegroundWindow
GetClientRect
EnableWindow
IsWindowEnabled
GetDesktopWindow
SetWindowRgn
GetWindowDC
UpdateWindow
InvalidateRect
DrawIcon
MapDialogRect
DrawFocusRect
InflateRect
DrawTextA
CopyRect
PostMessageA
gdi32
CreateCompatibleBitmap
CreateDCA
GetStockObject
GetTextExtentPoint32A
CreatePatternBrush
DeleteMetaFile
SetMetaFileBitsEx
SetStretchBltMode
SelectClipRgn
SetPixel
PatBlt
PlayMetaFile
StretchBlt
CreateBitmap
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
CreateDIBitmap
SaveDC
SetBkMode
SetTextColor
TextOutA
RestoreDC
GetTextExtentPointA
CreateFontIndirectA
SetBkColor
CreateRectRgn
DeleteObject
CreateSolidBrush
GetDIBColorTable
GetSystemPaletteEntries
CreatePalette
CreateHalftonePalette
GetDeviceCaps
GetObjectA
CreateCompatibleDC
UnrealizeObject
SelectPalette
RealizePalette
SelectObject
BitBlt
DeleteDC
SetMapMode
advapi32
RegCloseKey
OpenThreadToken
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
RegQueryValueA
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
shell32
ShellExecuteExA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetMalloc
ole32
StringFromGUID2
CoTaskMemAlloc
CoMarshalInterThreadInterfaceInStream
CoReleaseMarshalData
CoInitialize
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoCreateGuid
StringFromCLSID
CoTaskMemFree
GetRunningObjectTable
CoRegisterClassObject
CoRevokeClassObject
CoUninitialize
oleaut32
SysAllocStringLen
SysAllocString
SysStringLen
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayGetUBound
SysFreeString
VariantChangeType
GetErrorInfo
LoadTypeLi
RegisterTypeLi
LoadRegTypeLi
VariantClear
VariantCopy
SysReAllocStringLen
lz32
LZCopy
LZOpenFileA
LZClose
rpcrt4
RpcStringFreeA
UuidCreate
UuidToStringA
Name
.text
Size
276KB
Virtual Size
274KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
24KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
24KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
112KB
Virtual Size
109KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=12, version=7291,
count=31, id=14, version=7299,
count=124, id=10, version=8047,
count=1, id=10, version=8966,
count=13, id=11, version=8047,
count=5, id=28, version=9178,
count=2, id=37, version=8755,
count=353, id=1, productName=Unmarked objects,
count=21, id=25, version=9210,
count=42, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
~NQHatsuneMiku/setup.ini
- SHA256 19b555d4bfcd6bf495c764225865da30b20a488e93ad5be2bc97541cd67927b4
- MD5 d839ba8bd83824cdec39e2cdbd1421d3
- SHA1 881818bda85b4285f3828ca88cd67ba787fb2063
- SHA512 7e3cac5c086033c39b311f91f2377f9f590486e9fa2b3263cfc44eb3774d080935d5c2c37f6f8aa4fb3d266a972312b51886d19ec89a1cd488b0907794edb1a6
- TLSH T13BF02336C30CD43B209D4F767871434427D05E088584C488C7C421261FB9F08F519906
- MD5 SHA1 SHA512 TLSH
~NQHatsuneMiku/setup.inx
- SHA256 8ba6ce345486b1a05a98d4d53176063112af1e577a1ef77bac710f51fff794e0
- MD5 c9be4804c3c784f1a6fdc7380ea6916f
- SHA1 ca3d5dbc5828fa2373fde0bc66be3f8c07c655cb
- SHA512 e63affe112f7dbf8c3422ca74f1a4f48ecd8ffc0055dd9dbd02d5247e512231b36ebbdf5851b191388336f7928706443d1fb21b6cbc29110fc9fcda4698d0009
- SSDEEP 3072:jxE0nes2nEJP1rJxhw2sLTMZ3hRHamuUafZIEaz6Rn7BS7uVjs499ubRNQUsMw1h:jSlZEfsBUeIMACVjp92Rm10u3M0saPr
- TLSH T17654B0AD4D960FCEB7288AEAE83708D035C5EC4DA1E55697D3A2C5D0CF794FA40DD08A
- MD5 SHA1 SHA512 SSDEEP TLSH
~NQHatsuneMiku/user_manual/VOCALOID2_Japanese_Manual.pdf
- SHA256 1f3b104484b9fee464ef13208c536f1115acc60a740a18d93953c4892b60c389
- MD5 0f33f1d1c18225c7c96d5fd8dc68631d
- SHA1 21194b91d00b0a776701caf6ac07812772ee29aa
- SHA512 11ff92454adbd8a682183be7535e8cd9ead6c5aebcc2aade741a8a556c4213783882eccaef3cb8302414570c600f11ed7ba7c023e24f887fbde6eca50ce8f5bb
- SSDEEP 98304:/C/yOn1731Cgw/RdmXkVYO0jIsHDT/F6ttTYEUy:/Ofn1731jaXGO0jHT/F6tW+
- TLSH T12626C039963EDA5BC1CF232AB5AA338B2D774D6899D0C0C0BEDD4C1B771494817A394E
- MD5 SHA1 SHA512 SSDEEP TLSH