vac4.65.zip
- SHA256 4f58393ae8abdc349323206b3c1e7f8f7d433c4a2818c306759c0f4b2215c74e
Static task
static1
Behavioral task
behavioral1
Sample
vac4.65/setup64.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
vac4.65/setup64.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
11 signatures
150 seconds
General
- Target vac4.65.zip
- Size 2.6MB
- Sample260721-vb6ebser31
- SHA256 4f58393ae8abdc349323206b3c1e7f8f7d433c4a2818c306759c0f4b2215c74e
- MD5 34e427196a7f5cc8f127c8bfcaf41350
- SHA1 0a3ac48a222ccf74e2503cf1ab2f5a5cb9a5c073
- SHA512 2d8ea91ba17b7223830a3111a45fe0ba43b2f40c0d95a225e1f841e31c0ee37ba78963649edddabf74be63844a2d681f59e5c6ab44faeb907d3ffc3effb5dd2a
- SSDEEP 49152:JAVX/tH97jz3rVly7N6i2zdo+HQTwel3XO4AMitBke:JO/tHJjTrVly7N/23QTjAMit5
- TLSH T187C58B5173F80C69F6F2BB74AAB856169A36FC811F39C2CF2214965D1D36BC09E34362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
vac4.65.zip.zip 2.6MB
-
file_id.diz676B
-
homepage.url52B
-
license.txt5KB
-
readme.txt2KB
-
setup.exe.exe 118KB
-
setup.ini1KB
-
setup64.exe.exe 136KB
-
tools/delservice.cmd626B
-
tools/delsettings.cmd589B
-
tools/restrictaff.cmd.cmd .vbs 542B
-
tools/restrictclientaff.cmd207B
-
tools/restrictkmixeraff.cmd207B
-
tools/setcablesigleveldisable.cmd437B
-
tools/setchecklevel.cmd262B
-
tools/setdebuglevel.cmd262B
-
tools/setformatattrpolicy.cmd373B
-
tools/setregdword.cmd.cmd .bat 2KB
-
tools/setstreamsigleveldisable.cmd438B
-
tools/settimerprecpercent.cmd270B
-
tools/settimerrespercent.cmd272B
-
tools/setvars.cmd.cmd .vbs 306B
-
tools/splitdpcproc.cmd236B
-
vac.chm.chm 306KB
-
vac4.65/file_id.diz676B
-
vac4.65/homepage.url52B
-
vac4.65/license.txt5KB
-
vac4.65/readme.txt2KB
-
vac4.65/setup.exe.exe 118KB
-
vac4.65/setup.ini1KB
-
vac4.65/setup64.exe.exe 136KB
-
vac4.65/tools/delservice.cmd626B
-
vac4.65/tools/delsettings.cmd589B
-
vac4.65/tools/restrictaff.cmd.cmd .vbs 542B
-
vac4.65/tools/restrictclientaff.cmd207B
-
vac4.65/tools/restrictkmixeraff.cmd207B
-
vac4.65/tools/setcablesigleveldisable.cmd437B
-
vac4.65/tools/setchecklevel.cmd262B
-
vac4.65/tools/setdebuglevel.cmd262B
-
vac4.65/tools/setformatattrpolicy.cmd373B
-
vac4.65/tools/setregdword.cmd.cmd .bat 2KB
-
vac4.65/tools/setstreamsigleveldisable.cmd438B
-
vac4.65/tools/settimerprecpercent.cmd270B
-
vac4.65/tools/settimerrespercent.cmd272B
-
vac4.65/tools/setvars.cmd.cmd .vbs 306B
-
vac4.65/tools/splitdpcproc.cmd236B
-
vac4.65/vac.chm.chm 306KB
-
vac4.65/vrtaucbl.cat11KB
-
vac4.65/vrtaucbl.inf2KB
-
vac4.65/vrtaucbl6x.cat8KB
-
vac4.65/vrtaucbl6x.inf2KB
-
vac4.65/x64/audiorepeater.exe.exe 99KB
-
vac4.65/x64/audiorepeater_ks.exe.exe 121KB
-
vac4.65/x64/vcctlpan.exe.exe 172KB
-
vac4.65/x64/vrtaucbl.sys.sys 219KB
-
vac4.65/x86/audiorepeater.exe.exe 85KB
-
vac4.65/x86/audiorepeater_ks.exe.exe 104KB
-
vac4.65/x86/vcctlpan.exe.exe 154KB
-
vac4.65/x86/vrtaucbl.sys.sys 188KB
-
vrtaucbl.cat11KB
-
vrtaucbl.inf2KB
-
vrtaucbl6x.cat8KB
-
vrtaucbl6x.inf2KB
-
x64/audiorepeater.exe.exe 99KB
-
x64/audiorepeater_ks.exe.exe 121KB
-
x64/vcctlpan.exe.exe 172KB
-
x64/vrtaucbl.sys.sys 219KB
-
x86/audiorepeater.exe.exe 85KB
-
x86/audiorepeater_ks.exe.exe 104KB
-
x86/vcctlpan.exe.exe 154KB
-
x86/vrtaucbl.sys.sys 188KB
file_id.diz
- SHA256 8a97cb1c4443318e2853ff305341c1c4cef177b94496f6ce83cb0ca4e14ca4b6
- MD5 5ede5376a59de3fcfeb8eea530a3c0f7
- SHA1 28c7d1ff4188cd370ec67ca5863f0dfb5986eb8e
- SHA512 d0f752f6b0687086248cfd70f690a90ad8749ccb89318fc4aea5e70d0d9c88a58469c31e2ad0901df561bf143d825a008bc91b6b693ebb848b59e821db2b88ad
- TLSH T18601024E411379D0856371D726C5C3A7E3B2801A3BBE180C7813E2A92F51B4E51632F8
- MD5 SHA1 SHA512 TLSH
homepage.url
- SHA256 88b9b45607a10c8175ebf51d230f8473372bf3cecd9a7dc704c548080f9f4f55
- MD5 4f40e51ff184a837186557091dad4676
- SHA1 45f0ddc2bde1ea669cb4d90fbeec0a5162985feb
- SHA512 9d4b800fdfc7b5bc5bbab580c957fc5f4afa9a517099b11441dac8ff562f27aba3809a4a4027b54d73152677e1e713994a56640faaa11fa2e2d8ed8132bbf5a3
- TLSH T1D2900256420980AA83420CDE4511D458CD02309445A7C49499848F183C8655099C6215
- MD5 SHA1 SHA512 TLSH
license.txt
- SHA256 eda173d3bc45fe1b163b99e49ca07625a5299e986f17b60a871f8f2a31e8e0ee
- MD5 0ecb9e39197f030445da144f59f39c7e
- SHA1 93e30dd16e7944f6bf6021603c112a356b4aac59
- SHA512 6738250e8a778764e63317bb5c1ce1bf26d6dee6ee90c75fd50af123dc4cceaabf204c26a6056cfb0a71a1554d7b31cf84cab56579f133f2631ed5b36c186706
- SSDEEP 96:/ydiHapi/MLmkJYm+DHojPvKMTwQuox324xQ06h0djVcvhUT8IJ:acHPMJYmGHyPvKMcD4R6hO8IJ
- TLSH T1B2C1642E7B4A437316A203513E4752DEFB1EA6B8976D43A0706C426C324A83E47F799C
- MD5 SHA1 SHA512 SSDEEP TLSH
readme.txt
- SHA256 f7f1bee29290a0c3f2aa4657b21b20b4e2f391bfebbc0d059fc28decc84c74aa
- MD5 f09fc3b4b75ae6a40a785728260fd8d6
- SHA1 2ab10313bf6c7cb8d63f779b24b46f39eff2e136
- SHA512 ccd60e69ed080954852390a5bf96b10047a40567fcaa9ed0d0708915cefa7a61d91f4e336b0a0ecf3085c52c9916a02cc29077f46529b81b7f686bc2d5132804
- TLSH T11D41D8CFE75313320A1243C9B747A114F735D06C6ABC4A5E357EC068710E85C96BA5D7
- MD5 SHA1 SHA512 TLSH
setup.exe
- IMPHASH 1bfd1f5e37bfbb7a2a6cca6d2c880a11
- SHA256 dd3c56f6e638a6656b352f4a78d16ebddd10aa1b213727165dd93ef8a368605a
- MD5 8f4de90db4093398b6199c5bae5fec8c
- SHA1 a99a349e4e9efe808d5571149e08ade42acf7084
- SHA512 153fa19ae426589cde71c37dc9ec6a22796ebfe6ba9a3fece6e07aa76b654aac7173d52d315b16bf960be8c8a8762e8bfa432de893e35e2f5e7f56e8d2124145
- SSDEEP 3072:S15UYrr64OEDU444m0Nl+TxwBSgmO4yOrj0Z:6I47hNl+dwQApXZ
- TLSH T17BC36061A7EC4269FAF73F70A9B852600D7ABC515F38D2CE8310899D6870E84E974773
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
46:4a:53:4e:95:82:14:4e:73:0b:63:fb:6e:12:aa:cd:60:71:9d:c0:62:24:71:2b:68:92:5c:4e:b2:a9:71:1a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Jan 21, 2021
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Revocation Status
Not revoked
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
5b:98:bb:1d:56:df:0c:02:5d:55:b7:5d
Issuer
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 26, 2020 - Aug 26, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Minor OS version
1
Major OS version
6
Entry point
96912
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
setup.pdb
advapi32
GetUserNameW
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegCloseKey
RegCreateKeyW
RegEnumValueW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegFlushKey
CloseServiceHandle
OpenSCManagerW
CreateServiceW
OpenServiceW
DeleteService
StartServiceW
QueryServiceStatus
ControlService
RegOpenKeyExW
RegQueryValueExW
kernel32
DeleteFileW
SetLastError
FlushFileBuffers
WriteFile
GetLocalTime
MultiByteToWideChar
GetACP
ReadFile
GetFileSize
SetEndOfFile
SetFileAttributesW
GetFileAttributesW
MoveFileExW
RtlZeroMemory
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetPrivateProfileStringW
lstrcatW
GetExitCodeProcess
WaitForSingleObject
ExitProcess
CopyFileW
GetCurrentDirectoryW
LocalFree
ProcessIdToSessionId
lstrlenW
GetVersionExW
GetSystemInfo
GetModuleHandleW
CompareStringW
GetWindowsDirectoryW
ExpandEnvironmentStringsW
GetTempPathW
GetModuleFileNameW
LoadLibraryW
FreeLibrary
GetProcAddress
FindVolumeClose
FindNextVolumeW
GetDriveTypeW
FindFirstVolumeW
GetCurrentProcess
GetSystemDirectoryW
OpenProcess
WaitForMultipleObjects
CreateEventW
OpenEventW
TerminateProcess
DuplicateHandle
GetProcessId
SetEvent
CreateThread
lstrlenA
GetTickCount
Sleep
GetLastError
GetCurrentProcessId
lstrcmpiW
GetProcessHeap
HeapAlloc
QueryPerformanceFrequency
FormatMessageW
GetCommandLineW
lstrcpyW
CreateFileW
CloseHandle
lstrcmpW
HeapFree
gdi32
SetTextColor
CreateSolidBrush
GetStockObject
DeleteObject
SetBkColor
user32
GetMessageW
CreateDialogParamW
SendDlgItemMessageW
DialogBoxParamW
IsDialogMessageW
BroadcastSystemMessageW
ExitWindowsEx
GetDesktopWindow
wsprintfW
RegisterWindowMessageW
TranslateMessage
DispatchMessageW
SendMessageW
GetMessagePos
GetDlgItemTextW
ShowWindow
IsDlgButtonChecked
CheckDlgButton
GetDlgItem
SetDlgItemTextW
SetFocus
EndDialog
MessageBoxW
GetSystemMetrics
SetWindowTextW
CharUpperW
wsprintfA
wvsprintfW
comctl32
ord17
ole32
CoCreateInstance
CoInitialize
shell32
SHFileOperationW
ShellExecuteW
SHGetSpecialFolderPathW
setupapi
CM_Get_DevNode_Status
CM_Locate_DevNodeW
psapi
GetProcessImageFileNameW
EnumProcesses
rpcrt4
UuidFromStringW
UuidCreate
Name
.text
Size
100KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=5, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=139, id=1, productName=Unmarked objects,
count=37, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
setup.ini
- SHA256 56bc1aa0bee24fb38689d8f7d6405828fedceb37390fe16aa1ffbf954a88fcef
- MD5 217d690d009a2cabdc8f1a67de581dfd
- SHA1 1641934a5608392a1cc181a21180bbed8efe86ec
- SHA512 0346c195679e8227ff8306587fb67365b9c9341608636f5681e7ce4d800118f05b6b2993def63ea3bac715f28f36f4d697669a96bdaaa2b4e4988e244070e3de
- TLSH T1D0311008428F8E72E54ACBF9BF4309A7B79794504E79430431DB748BAF5784521A7527
- MD5 SHA1 SHA512 TLSH
setup64.exe
- IMPHASH 8303371fb8050f18535b6c63f3469a85
- SHA256 d9ff7eb0f7536c199e9e6bccd5da2b7dd52e4894b03d22257518faf224b174b1
- MD5 c5f79a0e4c19a6beffc73da5285ed712
- SHA1 0e41f62ce7b5dec2f46b57f6d6e0a06e663b8012
- SHA512 c545198c04d7ca8501cdf46fb159374ba420908d2fdbab4c112e0afcd29b831e4065d888431d02b031631b8d0c5b105a38f6fb937d6996a7eef14855627b31bf
- SSDEEP 3072:r1JUYrr64PE7PEwkNBgHMcnL8zsHMOY4jb0r0Q:SAwkNSpL2sU4jxQ
- TLSH T19BD34F8077F80668F6B6AF75ADB401269A727C959F34C2CF1225C94E2D62BC4D874B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c2:18:ce:2e:d3:fc:ff:e7:5a:95:b2:07:e4:bf:4c:61:4e:44:54:6d:ac:e8:11:3d:81:b8:a4:4e:00:83:72:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Jan 21, 2021
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Revocation Status
Not revoked
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
5b:98:bb:1d:56:df:0c:02:5d:55:b7:5d
Issuer
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 26, 2020 - Aug 26, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Minor OS version
1
Major OS version
6
Entry point
111680
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
setup64.pdb
advapi32
GetUserNameW
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegCloseKey
RegCreateKeyW
RegEnumValueW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegFlushKey
CloseServiceHandle
OpenSCManagerW
CreateServiceW
OpenServiceW
DeleteService
StartServiceW
QueryServiceStatus
ControlService
RegOpenKeyExW
RegQueryValueExW
kernel32
DeleteFileW
SetLastError
FlushFileBuffers
WriteFile
GetLocalTime
MultiByteToWideChar
GetACP
ReadFile
GetFileSize
SetEndOfFile
SetFileAttributesW
GetFileAttributesW
MoveFileExW
RtlZeroMemory
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetPrivateProfileStringW
lstrcatW
GetExitCodeProcess
WaitForSingleObject
ExitProcess
CopyFileW
GetCurrentDirectoryW
LocalFree
ProcessIdToSessionId
lstrlenW
GetVersionExW
GetSystemInfo
GetModuleHandleW
CompareStringW
GetWindowsDirectoryW
ExpandEnvironmentStringsW
GetTempPathW
GetModuleFileNameW
LoadLibraryW
FreeLibrary
GetProcAddress
FindVolumeClose
FindNextVolumeW
GetDriveTypeW
FindFirstVolumeW
GetCurrentProcess
GetSystemDirectoryW
OpenProcess
WaitForMultipleObjects
CreateEventW
OpenEventW
TerminateProcess
DuplicateHandle
GetProcessId
SetEvent
CreateThread
lstrlenA
GetTickCount
Sleep
GetLastError
GetCurrentProcessId
lstrcmpiW
GetProcessHeap
HeapAlloc
QueryPerformanceFrequency
FormatMessageW
GetCommandLineW
lstrcpyW
CreateFileW
CloseHandle
lstrcmpW
HeapFree
gdi32
SetTextColor
CreateSolidBrush
GetStockObject
DeleteObject
SetBkColor
user32
IsDialogMessageW
CreateDialogParamW
SendDlgItemMessageW
DialogBoxParamW
TranslateMessage
BroadcastSystemMessageW
ExitWindowsEx
GetDesktopWindow
wsprintfW
RegisterWindowMessageW
DispatchMessageW
GetMessageW
SendMessageW
GetMessagePos
GetDlgItemTextW
ShowWindow
IsDlgButtonChecked
CheckDlgButton
GetDlgItem
SetDlgItemTextW
SetFocus
EndDialog
MessageBoxW
GetSystemMetrics
SetWindowTextW
CharUpperW
wsprintfA
wvsprintfW
comctl32
ord17
ole32
CoCreateInstance
CoInitialize
shell32
SHFileOperationW
ShellExecuteW
SHGetSpecialFolderPathW
setupapi
CM_Get_DevNode_Status
CM_Locate_DevNodeW
psapi
GetProcessImageFileNameW
EnumProcesses
rpcrt4
UuidFromStringW
UuidCreate
Name
.text
Size
118KB
Virtual Size
118KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
626B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=139, id=1, productName=Unmarked objects,
count=4, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=35, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
tools/delservice.cmd
- SHA256 e52bed787685a42517cd7c1c8e4c5b3b554e42e815e76fe674e634e8a952a300
- MD5 02e38d75fbd429e9f09be4f90594943b
- SHA1 cae36f15e19714e020c63cc3033df5f41f9cc858
- SHA512 9c56502055825b7187cdc8883e48ef3b06ca46705521605d53187bcc715fc4260ed613106fb184a1802089e7950180fe107d9487a5272b2a79ab57d25c7c781d
- TLSH T1A5F00253718B3E62AAF166857E2421C3BF8D491E12397AA03477553934CF3D865C870E
- MD5 SHA1 SHA512 TLSH
tools/delsettings.cmd
- SHA256 5c19674a018ad985bc43a2076e13f44a1f4b96e5787c3332805bcd858c8c79ff
- MD5 4f5e7127eb9bb41e4d7ef00e2059df75
- SHA1 5162d35d47138ce65eb5d707dd022d3c2511e326
- SHA512 85070e707b14eabb05bd3f9495c905aa48eae9d69618ed1b8349dade2e23a419213b92944e8520cbc5d5168cafe9ae607fc4b750d12769c0df72c91bc6abfdbe
- TLSH T1F0F0E75371572F469FF0B594FF2912437D4E854E05317B5470A31C39348D364268D25E
- MD5 SHA1 SHA512 TLSH
tools/restrictaff.cmd
- SHA256 f8f122398308eec5e69f3cfffe0394b25b34137c28f09e7e95a3c6c3cee5f2fc
- MD5 2534e5f5aeea040b163bf35ae463b331
- SHA1 f5463b80437b8880f82c1458e4491a642a4d2104
- SHA512 1ac35f784afb7b65fbd72b6edae568e6f3d6c6eec8e3371c4281a0148de8beaf2cd417e34cfb6f47a34fbc9f5a8efe8e496c45725ecb3855313c7cab81e67200
- TLSH T1F1F08B83744753C90370A7F1D901926EEB6DC5821307A16C7CA1727CB00A75404EE6CE
- MD5 SHA1 SHA512 TLSH
tools/restrictclientaff.cmd
- SHA256 76f074f58ea32837ddc9aad1034a91e42f588a3e6587548f68720639f8671450
- MD5 168e2e177c5be8bd56b740e98c4f8b19
- SHA1 984b15fd2ab236d46df47f2295fadfc6010540e4
- SHA512 8d9ff25bae82f8d0a70f4a079cbc76f24c069b02f98e03e6e9ac2ada1be3877e5ea9e10d9a935e2208cc8ada55d301a1f71e102ed82731a07e66522b2f05cd1c
- TLSH T1ECD02303500762461371BF65540181C9705E40071319F77C3031463C710596D04FF73D
- MD5 SHA1 SHA512 TLSH
tools/restrictkmixeraff.cmd
- SHA256 ef20c2262d867699b8da6aaaa8cd27b6acccaac46bddd0a6264028b33d060e13
- MD5 b85f49b506ad9400705d7611eb44eed6
- SHA1 7d66ac82ede4949aae06e3eb5476c132f0ee076d
- SHA512 d614a3b3d7fc8d529825a56ab9529af4fbb2d5b527d0562bb80f99b8fa64dd29eb28166774899e8125ec5e0840f1c5f6e31c4096fb484f8f33d9813296381223
- TLSH T102D02203A00B638627B2BE65280241CEB09E800B1318E7BC3031473CB14AAEC04FFB2E
- MD5 SHA1 SHA512 TLSH
tools/setcablesigleveldisable.cmd
- SHA256 ef9fb913da2c4c2295829c59858a70431af3ea10aedb177d3c86dc409bc9bbca
- MD5 d2bb5c12a8544317bb2ad552564dba4f
- SHA1 7563ded9d56aa876acbe57446d7982edee81dbaa
- SHA512 b84934243426c2462b90efb2bbe456b98d52565e12fee13bf95ee3d47979c58519ac6b313e8ff153e6ca726287eacae820f0c74fe58f58051b3fa19063d45969
- TLSH T1D1E02716A24B3B1E5376D3512A2408AEFF5A4506813997B4306145AC389F61485D9A3D
- MD5 SHA1 SHA512 TLSH
tools/setchecklevel.cmd
- SHA256 94fb76adbfcf5eb5303054920270a310424ec7b0587fae807f404698a21f5afb
- MD5 a84fc442e83154b1ff8ca1c84ad5d7b6
- SHA1 bd478ba010e5ec52c1e712c0e4a5e02d89eeac82
- SHA512 8583dadfa75679c892c89795f4d5913ad59a05b00a6b5ee2954b6343c7d79908334f06c1bac52fa8bcdc5952d22760bb412411d387edd330f2bf4e4e098633a2
- TLSH T1F4D02B73654F750D1A711A537219209BF47D048213159EDC30015D2C240CE480486A1E
- MD5 SHA1 SHA512 TLSH
tools/setdebuglevel.cmd
- SHA256 90f5dc91ba47df3f23ba4b5fa98e4c34301b594c6e06a498ec3994123a4621b3
- MD5 f39bacfc6bbd13ddb8f29a6f1b6d0bf8
- SHA1 ea8589f30eaf7cb937f40b8300f51e9c083aea48
- SHA512 d892f2c56e1bd869f5019abcc916398f512b962680e2756c628343e6cf6bb1674bb9a743944b2ce81eb9f1ee3568fbb0aeecd494fef52601279453d1436125bc
- TLSH T133D09573654F7D0D4AF11E53B219209BF83E44870225FFDC30130D2C240CA590485F1D
- MD5 SHA1 SHA512 TLSH
tools/setformatattrpolicy.cmd
- SHA256 43296f9be6c8dd7961af6ab0737944d52479cb41ecca758d2d6112cee3bfe33f
- MD5 a99135f6ed05eefdd83640e75b096162
- SHA1 9a00661a535eead1583411d06f9cb10b0e3be39e
- SHA512 439ea65a009da2007d23b2844fe5bed7919dac486be9a9fdef653c8492050c0695239c76e10f8c169d56e4e42e28d187eef72227b61f2e93a25585dd6a00cbcb
- TLSH T1A7E0611D1247D70647B26764A504069AFB5D587A2326E7603421D75D7088B1948FD35D
- MD5 SHA1 SHA512 TLSH
tools/setregdword.cmd
- SHA256 0663355f34f29c05130feeeacbfc21b02fc63fd4144bdbb32a2a1cdd7d7c4656
- MD5 b42364eeec999a42320688e16160c59c
- SHA1 a346109bc4894e7907fb80daa3742ebf1218f41a
- SHA512 e68a81ff6ca50fe18c12aa754ebb9abfff905d10d7f1e06ccb814b1e2d20f652e225b07c5eaad4965c087d5645b5a57e9bc2a896b1e584d3035bceacf41f2aac
- TLSH T1A951E2537157171E0338BBA4EE24848EAF9AB64F1A32E36870A11E58714B35419FE58C
- MD5 SHA1 SHA512 TLSH
tools/setstreamsigleveldisable.cmd
- SHA256 fe508e04687d799d96276b7936fe432f8c46c4e6b5186bb8797acffa86f0df7d
- MD5 0ab3b098271880c4ef9f4ff3fc802b60
- SHA1 c691ba318de498ab3109ed880cee35eb1c33ac09
- SHA512 69b21522848de3ce00f7a9dff88315a218f92f45c36c202579a22534728c87756bc153ca3e3323d1ac3b13cd46fcb1562bcbebe862378a614e1fa7e96d102318
- TLSH T1F2F02716664B3B1E5376D3512A2408EEFF5A050781399774306045AC3C9F61485E9A2D
- MD5 SHA1 SHA512 TLSH
tools/settimerprecpercent.cmd
- SHA256 0983599aa2c02fb07bf550022f5b36ecb30181dff67ffd19ea889a872482a7ea
- MD5 5703469cfa48fadafc9057ff19ee13ba
- SHA1 4e1d9c68272e85b9c2fd2a21435e40b10557247a
- SHA512 3e49730c6731f62a776afb44d67086c01b6184d5d1d43d57a22def56bfc482f314abf9f6e08d57b912d2cc716439461f99ad81a70c4c320d6cf879695f118aaa
- TLSH T10DD02B1B5803628F62AA572436422096B67C85CB0318F77035458FBCA2CCA8806A791C
- MD5 SHA1 SHA512 TLSH
tools/settimerrespercent.cmd
- SHA256 d9a6daf4956de6aab4df482134ee7ae87cf27de630d358f802734ecd9737ab39
- MD5 28657d97f6a36387482b638712fe1aa0
- SHA1 d7788332659dea62c023f96271362af6ee29b50b
- SHA512 deabbc72c5e27b18e8706a7bf78d4d7ffb5f19202332f36985100123a3f2b0ee4cee70b8b7f8474eed843d1c900f114b715c3bd5086c9294db173a53c3a3c51a
- TLSH T1EAD02B075843208A63A65B2436022456BA7C85C74315F73432464E3CB1CCFD817AF51D
- MD5 SHA1 SHA512 TLSH
tools/setvars.cmd
- SHA256 f49d3bfe2a143e95d78ab6e2bd672426bdf190c90752ae44cc6f203e9cdb5797
- MD5 869073747b866f9a36e284591a2849a0
- SHA1 69b09b940a062d0cf8f8a9562a19acc4aba21806
- SHA512 4d9a4e963762da1376ed7cc87791877dd7cbe546d565bf294a00003ae417e36783ae00d26165936717ca12b2edfd6c7827c66b13745e1006f6965f5a398b6066
- TLSH T1F9E07D0A12712FC0A5E81AEEBD5AA6D617AACC805B98D02E82B55D04C1C160874CB119
- MD5 SHA1 SHA512 TLSH
tools/splitdpcproc.cmd
- SHA256 0122f1d9af2eeb06a97f4b65f5f802bb962886a40418df1fb6a0f13ce6f13c52
- MD5 2c04485542a887c8f2cbc2aa6fd17ab2
- SHA1 0f5b13224b8bf461c5724a1be721d3d9dde5f361
- SHA512 a25330321932f6dfcdf3789bc3fb49600ea1a30652285cf7c49d80b762fadf4d686959356f8483f481148a36068df93805766f962879cfa28d2e0f721bcc31bd
- TLSH T18FD09703D00B810B63B01A59350180EBB90C420B1323AB2138218A7D300CAC801D6B2E
- MD5 SHA1 SHA512 TLSH
vac.chm
- SHA256 baa1bbd6ceb59903229cab2962c43e44a159ec14ca7bb53edf95751864b53b8e
- MD5 5a09b74483d34b36647147c70a8fa93a
- SHA1 83077144f54bf81a22f11d322ab75c7de7d73feb
- SHA512 54dd9c80416aa2f0e302f36b0b9a427d77ed3923172cffb36106b601fffe9093049432d367623ea2dfac14bb212fb163c1641d0935d38977adcc6985dc255ab8
- SSDEEP 6144:yWQFDvZIcwwzd6U7IydJRNUJ0CGjavh44SGCV4gIDvtVdZpe9mY+iZjyEM:qFDvXwwzY6IkLUJzvdCOgIhZImq4v
- TLSH T18D6423ED135F1E36D96B0D39F16D120364C36AE13DD8E45623794CF408329A4AF91AEE
- MD5 SHA1 SHA512 SSDEEP TLSH
vac4.65/file_id.diz
- SHA256 8a97cb1c4443318e2853ff305341c1c4cef177b94496f6ce83cb0ca4e14ca4b6
- MD5 5ede5376a59de3fcfeb8eea530a3c0f7
- SHA1 28c7d1ff4188cd370ec67ca5863f0dfb5986eb8e
- SHA512 d0f752f6b0687086248cfd70f690a90ad8749ccb89318fc4aea5e70d0d9c88a58469c31e2ad0901df561bf143d825a008bc91b6b693ebb848b59e821db2b88ad
- TLSH T18601024E411379D0856371D726C5C3A7E3B2801A3BBE180C7813E2A92F51B4E51632F8
- MD5 SHA1 SHA512 TLSH
vac4.65/homepage.url
- SHA256 88b9b45607a10c8175ebf51d230f8473372bf3cecd9a7dc704c548080f9f4f55
- MD5 4f40e51ff184a837186557091dad4676
- SHA1 45f0ddc2bde1ea669cb4d90fbeec0a5162985feb
- SHA512 9d4b800fdfc7b5bc5bbab580c957fc5f4afa9a517099b11441dac8ff562f27aba3809a4a4027b54d73152677e1e713994a56640faaa11fa2e2d8ed8132bbf5a3
- TLSH T1D2900256420980AA83420CDE4511D458CD02309445A7C49499848F183C8655099C6215
- MD5 SHA1 SHA512 TLSH
vac4.65/license.txt
- SHA256 eda173d3bc45fe1b163b99e49ca07625a5299e986f17b60a871f8f2a31e8e0ee
- MD5 0ecb9e39197f030445da144f59f39c7e
- SHA1 93e30dd16e7944f6bf6021603c112a356b4aac59
- SHA512 6738250e8a778764e63317bb5c1ce1bf26d6dee6ee90c75fd50af123dc4cceaabf204c26a6056cfb0a71a1554d7b31cf84cab56579f133f2631ed5b36c186706
- SSDEEP 96:/ydiHapi/MLmkJYm+DHojPvKMTwQuox324xQ06h0djVcvhUT8IJ:acHPMJYmGHyPvKMcD4R6hO8IJ
- TLSH T1B2C1642E7B4A437316A203513E4752DEFB1EA6B8976D43A0706C426C324A83E47F799C
- MD5 SHA1 SHA512 SSDEEP TLSH
vac4.65/readme.txt
- SHA256 f7f1bee29290a0c3f2aa4657b21b20b4e2f391bfebbc0d059fc28decc84c74aa
- MD5 f09fc3b4b75ae6a40a785728260fd8d6
- SHA1 2ab10313bf6c7cb8d63f779b24b46f39eff2e136
- SHA512 ccd60e69ed080954852390a5bf96b10047a40567fcaa9ed0d0708915cefa7a61d91f4e336b0a0ecf3085c52c9916a02cc29077f46529b81b7f686bc2d5132804
- TLSH T11D41D8CFE75313320A1243C9B747A114F735D06C6ABC4A5E357EC068710E85C96BA5D7
- MD5 SHA1 SHA512 TLSH
vac4.65/setup.exe
- IMPHASH 1bfd1f5e37bfbb7a2a6cca6d2c880a11
- SHA256 dd3c56f6e638a6656b352f4a78d16ebddd10aa1b213727165dd93ef8a368605a
- MD5 8f4de90db4093398b6199c5bae5fec8c
- SHA1 a99a349e4e9efe808d5571149e08ade42acf7084
- SHA512 153fa19ae426589cde71c37dc9ec6a22796ebfe6ba9a3fece6e07aa76b654aac7173d52d315b16bf960be8c8a8762e8bfa432de893e35e2f5e7f56e8d2124145
- SSDEEP 3072:S15UYrr64OEDU444m0Nl+TxwBSgmO4yOrj0Z:6I47hNl+dwQApXZ
- TLSH T17BC36061A7EC4269FAF73F70A9B852600D7ABC515F38D2CE8310899D6870E84E974773
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
46:4a:53:4e:95:82:14:4e:73:0b:63:fb:6e:12:aa:cd:60:71:9d:c0:62:24:71:2b:68:92:5c:4e:b2:a9:71:1a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Jan 21, 2021
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Revocation Status
Not revoked
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
5b:98:bb:1d:56:df:0c:02:5d:55:b7:5d
Issuer
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 26, 2020 - Aug 26, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Minor OS version
1
Major OS version
6
Entry point
96912
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
setup.pdb
advapi32
GetUserNameW
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegCloseKey
RegCreateKeyW
RegEnumValueW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegFlushKey
CloseServiceHandle
OpenSCManagerW
CreateServiceW
OpenServiceW
DeleteService
StartServiceW
QueryServiceStatus
ControlService
RegOpenKeyExW
RegQueryValueExW
kernel32
DeleteFileW
SetLastError
FlushFileBuffers
WriteFile
GetLocalTime
MultiByteToWideChar
GetACP
ReadFile
GetFileSize
SetEndOfFile
SetFileAttributesW
GetFileAttributesW
MoveFileExW
RtlZeroMemory
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetPrivateProfileStringW
lstrcatW
GetExitCodeProcess
WaitForSingleObject
ExitProcess
CopyFileW
GetCurrentDirectoryW
LocalFree
ProcessIdToSessionId
lstrlenW
GetVersionExW
GetSystemInfo
GetModuleHandleW
CompareStringW
GetWindowsDirectoryW
ExpandEnvironmentStringsW
GetTempPathW
GetModuleFileNameW
LoadLibraryW
FreeLibrary
GetProcAddress
FindVolumeClose
FindNextVolumeW
GetDriveTypeW
FindFirstVolumeW
GetCurrentProcess
GetSystemDirectoryW
OpenProcess
WaitForMultipleObjects
CreateEventW
OpenEventW
TerminateProcess
DuplicateHandle
GetProcessId
SetEvent
CreateThread
lstrlenA
GetTickCount
Sleep
GetLastError
GetCurrentProcessId
lstrcmpiW
GetProcessHeap
HeapAlloc
QueryPerformanceFrequency
FormatMessageW
GetCommandLineW
lstrcpyW
CreateFileW
CloseHandle
lstrcmpW
HeapFree
gdi32
SetTextColor
CreateSolidBrush
GetStockObject
DeleteObject
SetBkColor
user32
GetMessageW
CreateDialogParamW
SendDlgItemMessageW
DialogBoxParamW
IsDialogMessageW
BroadcastSystemMessageW
ExitWindowsEx
GetDesktopWindow
wsprintfW
RegisterWindowMessageW
TranslateMessage
DispatchMessageW
SendMessageW
GetMessagePos
GetDlgItemTextW
ShowWindow
IsDlgButtonChecked
CheckDlgButton
GetDlgItem
SetDlgItemTextW
SetFocus
EndDialog
MessageBoxW
GetSystemMetrics
SetWindowTextW
CharUpperW
wsprintfA
wvsprintfW
comctl32
ord17
ole32
CoCreateInstance
CoInitialize
shell32
SHFileOperationW
ShellExecuteW
SHGetSpecialFolderPathW
setupapi
CM_Get_DevNode_Status
CM_Locate_DevNodeW
psapi
GetProcessImageFileNameW
EnumProcesses
rpcrt4
UuidFromStringW
UuidCreate
Name
.text
Size
100KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=5, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=139, id=1, productName=Unmarked objects,
count=37, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
vac4.65/setup.ini
- SHA256 56bc1aa0bee24fb38689d8f7d6405828fedceb37390fe16aa1ffbf954a88fcef
- MD5 217d690d009a2cabdc8f1a67de581dfd
- SHA1 1641934a5608392a1cc181a21180bbed8efe86ec
- SHA512 0346c195679e8227ff8306587fb67365b9c9341608636f5681e7ce4d800118f05b6b2993def63ea3bac715f28f36f4d697669a96bdaaa2b4e4988e244070e3de
- TLSH T1D0311008428F8E72E54ACBF9BF4309A7B79794504E79430431DB748BAF5784521A7527
- MD5 SHA1 SHA512 TLSH
vac4.65/setup64.exe
- IMPHASH 8303371fb8050f18535b6c63f3469a85
- SHA256 d9ff7eb0f7536c199e9e6bccd5da2b7dd52e4894b03d22257518faf224b174b1
- MD5 c5f79a0e4c19a6beffc73da5285ed712
- SHA1 0e41f62ce7b5dec2f46b57f6d6e0a06e663b8012
- SHA512 c545198c04d7ca8501cdf46fb159374ba420908d2fdbab4c112e0afcd29b831e4065d888431d02b031631b8d0c5b105a38f6fb937d6996a7eef14855627b31bf
- SSDEEP 3072:r1JUYrr64PE7PEwkNBgHMcnL8zsHMOY4jb0r0Q:SAwkNSpL2sU4jxQ
- TLSH T19BD34F8077F80668F6B6AF75ADB401269A727C959F34C2CF1225C94E2D62BC4D874B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c2:18:ce:2e:d3:fc:ff:e7:5a:95:b2:07:e4:bf:4c:61:4e:44:54:6d:ac:e8:11:3d:81:b8:a4:4e:00:83:72:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Jan 21, 2021
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Revocation Status
Not revoked
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
5b:98:bb:1d:56:df:0c:02:5d:55:b7:5d
Issuer
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 26, 2020 - Aug 26, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Minor OS version
1
Major OS version
6
Entry point
111680
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
setup64.pdb
advapi32
GetUserNameW
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegCloseKey
RegCreateKeyW
RegEnumValueW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegFlushKey
CloseServiceHandle
OpenSCManagerW
CreateServiceW
OpenServiceW
DeleteService
StartServiceW
QueryServiceStatus
ControlService
RegOpenKeyExW
RegQueryValueExW
kernel32
DeleteFileW
SetLastError
FlushFileBuffers
WriteFile
GetLocalTime
MultiByteToWideChar
GetACP
ReadFile
GetFileSize
SetEndOfFile
SetFileAttributesW
GetFileAttributesW
MoveFileExW
RtlZeroMemory
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetPrivateProfileStringW
lstrcatW
GetExitCodeProcess
WaitForSingleObject
ExitProcess
CopyFileW
GetCurrentDirectoryW
LocalFree
ProcessIdToSessionId
lstrlenW
GetVersionExW
GetSystemInfo
GetModuleHandleW
CompareStringW
GetWindowsDirectoryW
ExpandEnvironmentStringsW
GetTempPathW
GetModuleFileNameW
LoadLibraryW
FreeLibrary
GetProcAddress
FindVolumeClose
FindNextVolumeW
GetDriveTypeW
FindFirstVolumeW
GetCurrentProcess
GetSystemDirectoryW
OpenProcess
WaitForMultipleObjects
CreateEventW
OpenEventW
TerminateProcess
DuplicateHandle
GetProcessId
SetEvent
CreateThread
lstrlenA
GetTickCount
Sleep
GetLastError
GetCurrentProcessId
lstrcmpiW
GetProcessHeap
HeapAlloc
QueryPerformanceFrequency
FormatMessageW
GetCommandLineW
lstrcpyW
CreateFileW
CloseHandle
lstrcmpW
HeapFree
gdi32
SetTextColor
CreateSolidBrush
GetStockObject
DeleteObject
SetBkColor
user32
IsDialogMessageW
CreateDialogParamW
SendDlgItemMessageW
DialogBoxParamW
TranslateMessage
BroadcastSystemMessageW
ExitWindowsEx
GetDesktopWindow
wsprintfW
RegisterWindowMessageW
DispatchMessageW
GetMessageW
SendMessageW
GetMessagePos
GetDlgItemTextW
ShowWindow
IsDlgButtonChecked
CheckDlgButton
GetDlgItem
SetDlgItemTextW
SetFocus
EndDialog
MessageBoxW
GetSystemMetrics
SetWindowTextW
CharUpperW
wsprintfA
wvsprintfW
comctl32
ord17
ole32
CoCreateInstance
CoInitialize
shell32
SHFileOperationW
ShellExecuteW
SHGetSpecialFolderPathW
setupapi
CM_Get_DevNode_Status
CM_Locate_DevNodeW
psapi
GetProcessImageFileNameW
EnumProcesses
rpcrt4
UuidFromStringW
UuidCreate
Name
.text
Size
118KB
Virtual Size
118KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
626B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=139, id=1, productName=Unmarked objects,
count=4, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=35, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
vac4.65/tools/delservice.cmd
- SHA256 e52bed787685a42517cd7c1c8e4c5b3b554e42e815e76fe674e634e8a952a300
- MD5 02e38d75fbd429e9f09be4f90594943b
- SHA1 cae36f15e19714e020c63cc3033df5f41f9cc858
- SHA512 9c56502055825b7187cdc8883e48ef3b06ca46705521605d53187bcc715fc4260ed613106fb184a1802089e7950180fe107d9487a5272b2a79ab57d25c7c781d
- TLSH T1A5F00253718B3E62AAF166857E2421C3BF8D491E12397AA03477553934CF3D865C870E
- MD5 SHA1 SHA512 TLSH
vac4.65/tools/delsettings.cmd
- SHA256 5c19674a018ad985bc43a2076e13f44a1f4b96e5787c3332805bcd858c8c79ff
- MD5 4f5e7127eb9bb41e4d7ef00e2059df75
- SHA1 5162d35d47138ce65eb5d707dd022d3c2511e326
- SHA512 85070e707b14eabb05bd3f9495c905aa48eae9d69618ed1b8349dade2e23a419213b92944e8520cbc5d5168cafe9ae607fc4b750d12769c0df72c91bc6abfdbe
- TLSH T1F0F0E75371572F469FF0B594FF2912437D4E854E05317B5470A31C39348D364268D25E
- MD5 SHA1 SHA512 TLSH
vac4.65/tools/restrictaff.cmd
- SHA256 f8f122398308eec5e69f3cfffe0394b25b34137c28f09e7e95a3c6c3cee5f2fc
- MD5 2534e5f5aeea040b163bf35ae463b331
- SHA1 f5463b80437b8880f82c1458e4491a642a4d2104
- SHA512 1ac35f784afb7b65fbd72b6edae568e6f3d6c6eec8e3371c4281a0148de8beaf2cd417e34cfb6f47a34fbc9f5a8efe8e496c45725ecb3855313c7cab81e67200
- TLSH T1F1F08B83744753C90370A7F1D901926EEB6DC5821307A16C7CA1727CB00A75404EE6CE
- MD5 SHA1 SHA512 TLSH
vac4.65/tools/restrictclientaff.cmd
- SHA256 76f074f58ea32837ddc9aad1034a91e42f588a3e6587548f68720639f8671450
- MD5 168e2e177c5be8bd56b740e98c4f8b19
- SHA1 984b15fd2ab236d46df47f2295fadfc6010540e4
- SHA512 8d9ff25bae82f8d0a70f4a079cbc76f24c069b02f98e03e6e9ac2ada1be3877e5ea9e10d9a935e2208cc8ada55d301a1f71e102ed82731a07e66522b2f05cd1c
- TLSH T1ECD02303500762461371BF65540181C9705E40071319F77C3031463C710596D04FF73D
- MD5 SHA1 SHA512 TLSH
vac4.65/tools/restrictkmixeraff.cmd
- SHA256 ef20c2262d867699b8da6aaaa8cd27b6acccaac46bddd0a6264028b33d060e13
- MD5 b85f49b506ad9400705d7611eb44eed6
- SHA1 7d66ac82ede4949aae06e3eb5476c132f0ee076d
- SHA512 d614a3b3d7fc8d529825a56ab9529af4fbb2d5b527d0562bb80f99b8fa64dd29eb28166774899e8125ec5e0840f1c5f6e31c4096fb484f8f33d9813296381223
- TLSH T102D02203A00B638627B2BE65280241CEB09E800B1318E7BC3031473CB14AAEC04FFB2E
- MD5 SHA1 SHA512 TLSH
vac4.65/tools/setcablesigleveldisable.cmd
- SHA256 ef9fb913da2c4c2295829c59858a70431af3ea10aedb177d3c86dc409bc9bbca
- MD5 d2bb5c12a8544317bb2ad552564dba4f
- SHA1 7563ded9d56aa876acbe57446d7982edee81dbaa
- SHA512 b84934243426c2462b90efb2bbe456b98d52565e12fee13bf95ee3d47979c58519ac6b313e8ff153e6ca726287eacae820f0c74fe58f58051b3fa19063d45969
- TLSH T1D1E02716A24B3B1E5376D3512A2408AEFF5A4506813997B4306145AC389F61485D9A3D
- MD5 SHA1 SHA512 TLSH
vac4.65/tools/setchecklevel.cmd
- SHA256 94fb76adbfcf5eb5303054920270a310424ec7b0587fae807f404698a21f5afb
- MD5 a84fc442e83154b1ff8ca1c84ad5d7b6
- SHA1 bd478ba010e5ec52c1e712c0e4a5e02d89eeac82
- SHA512 8583dadfa75679c892c89795f4d5913ad59a05b00a6b5ee2954b6343c7d79908334f06c1bac52fa8bcdc5952d22760bb412411d387edd330f2bf4e4e098633a2
- TLSH T1F4D02B73654F750D1A711A537219209BF47D048213159EDC30015D2C240CE480486A1E
- MD5 SHA1 SHA512 TLSH
vac4.65/tools/setdebuglevel.cmd
- SHA256 90f5dc91ba47df3f23ba4b5fa98e4c34301b594c6e06a498ec3994123a4621b3
- MD5 f39bacfc6bbd13ddb8f29a6f1b6d0bf8
- SHA1 ea8589f30eaf7cb937f40b8300f51e9c083aea48
- SHA512 d892f2c56e1bd869f5019abcc916398f512b962680e2756c628343e6cf6bb1674bb9a743944b2ce81eb9f1ee3568fbb0aeecd494fef52601279453d1436125bc
- TLSH T133D09573654F7D0D4AF11E53B219209BF83E44870225FFDC30130D2C240CA590485F1D
- MD5 SHA1 SHA512 TLSH
vac4.65/tools/setformatattrpolicy.cmd
- SHA256 43296f9be6c8dd7961af6ab0737944d52479cb41ecca758d2d6112cee3bfe33f
- MD5 a99135f6ed05eefdd83640e75b096162
- SHA1 9a00661a535eead1583411d06f9cb10b0e3be39e
- SHA512 439ea65a009da2007d23b2844fe5bed7919dac486be9a9fdef653c8492050c0695239c76e10f8c169d56e4e42e28d187eef72227b61f2e93a25585dd6a00cbcb
- TLSH T1A7E0611D1247D70647B26764A504069AFB5D587A2326E7603421D75D7088B1948FD35D
- MD5 SHA1 SHA512 TLSH
vac4.65/tools/setregdword.cmd
- SHA256 0663355f34f29c05130feeeacbfc21b02fc63fd4144bdbb32a2a1cdd7d7c4656
- MD5 b42364eeec999a42320688e16160c59c
- SHA1 a346109bc4894e7907fb80daa3742ebf1218f41a
- SHA512 e68a81ff6ca50fe18c12aa754ebb9abfff905d10d7f1e06ccb814b1e2d20f652e225b07c5eaad4965c087d5645b5a57e9bc2a896b1e584d3035bceacf41f2aac
- TLSH T1A951E2537157171E0338BBA4EE24848EAF9AB64F1A32E36870A11E58714B35419FE58C
- MD5 SHA1 SHA512 TLSH
vac4.65/tools/setstreamsigleveldisable.cmd
- SHA256 fe508e04687d799d96276b7936fe432f8c46c4e6b5186bb8797acffa86f0df7d
- MD5 0ab3b098271880c4ef9f4ff3fc802b60
- SHA1 c691ba318de498ab3109ed880cee35eb1c33ac09
- SHA512 69b21522848de3ce00f7a9dff88315a218f92f45c36c202579a22534728c87756bc153ca3e3323d1ac3b13cd46fcb1562bcbebe862378a614e1fa7e96d102318
- TLSH T1F2F02716664B3B1E5376D3512A2408EEFF5A050781399774306045AC3C9F61485E9A2D
- MD5 SHA1 SHA512 TLSH
vac4.65/tools/settimerprecpercent.cmd
- SHA256 0983599aa2c02fb07bf550022f5b36ecb30181dff67ffd19ea889a872482a7ea
- MD5 5703469cfa48fadafc9057ff19ee13ba
- SHA1 4e1d9c68272e85b9c2fd2a21435e40b10557247a
- SHA512 3e49730c6731f62a776afb44d67086c01b6184d5d1d43d57a22def56bfc482f314abf9f6e08d57b912d2cc716439461f99ad81a70c4c320d6cf879695f118aaa
- TLSH T10DD02B1B5803628F62AA572436422096B67C85CB0318F77035458FBCA2CCA8806A791C
- MD5 SHA1 SHA512 TLSH
vac4.65/tools/settimerrespercent.cmd
- SHA256 d9a6daf4956de6aab4df482134ee7ae87cf27de630d358f802734ecd9737ab39
- MD5 28657d97f6a36387482b638712fe1aa0
- SHA1 d7788332659dea62c023f96271362af6ee29b50b
- SHA512 deabbc72c5e27b18e8706a7bf78d4d7ffb5f19202332f36985100123a3f2b0ee4cee70b8b7f8474eed843d1c900f114b715c3bd5086c9294db173a53c3a3c51a
- TLSH T1EAD02B075843208A63A65B2436022456BA7C85C74315F73432464E3CB1CCFD817AF51D
- MD5 SHA1 SHA512 TLSH
vac4.65/tools/setvars.cmd
- SHA256 f49d3bfe2a143e95d78ab6e2bd672426bdf190c90752ae44cc6f203e9cdb5797
- MD5 869073747b866f9a36e284591a2849a0
- SHA1 69b09b940a062d0cf8f8a9562a19acc4aba21806
- SHA512 4d9a4e963762da1376ed7cc87791877dd7cbe546d565bf294a00003ae417e36783ae00d26165936717ca12b2edfd6c7827c66b13745e1006f6965f5a398b6066
- TLSH T1F9E07D0A12712FC0A5E81AEEBD5AA6D617AACC805B98D02E82B55D04C1C160874CB119
- MD5 SHA1 SHA512 TLSH
vac4.65/tools/splitdpcproc.cmd
- SHA256 0122f1d9af2eeb06a97f4b65f5f802bb962886a40418df1fb6a0f13ce6f13c52
- MD5 2c04485542a887c8f2cbc2aa6fd17ab2
- SHA1 0f5b13224b8bf461c5724a1be721d3d9dde5f361
- SHA512 a25330321932f6dfcdf3789bc3fb49600ea1a30652285cf7c49d80b762fadf4d686959356f8483f481148a36068df93805766f962879cfa28d2e0f721bcc31bd
- TLSH T18FD09703D00B810B63B01A59350180EBB90C420B1323AB2138218A7D300CAC801D6B2E
- MD5 SHA1 SHA512 TLSH
vac4.65/vac.chm
- SHA256 baa1bbd6ceb59903229cab2962c43e44a159ec14ca7bb53edf95751864b53b8e
- MD5 5a09b74483d34b36647147c70a8fa93a
- SHA1 83077144f54bf81a22f11d322ab75c7de7d73feb
- SHA512 54dd9c80416aa2f0e302f36b0b9a427d77ed3923172cffb36106b601fffe9093049432d367623ea2dfac14bb212fb163c1641d0935d38977adcc6985dc255ab8
- SSDEEP 6144:yWQFDvZIcwwzd6U7IydJRNUJ0CGjavh44SGCV4gIDvtVdZpe9mY+iZjyEM:qFDvXwwzY6IkLUJzvdCOgIhZImq4v
- TLSH T18D6423ED135F1E36D96B0D39F16D120364C36AE13DD8E45623794CF408329A4AF91AEE
- MD5 SHA1 SHA512 SSDEEP TLSH
vac4.65/vrtaucbl.cat
- SHA256 6d0e104d75eea33cd8137223ddbd92c9dff3eda2bec5d97e7b44214669ffe0f9
- MD5 a81b3326c2b4dd35e8d42dab377d8afa
- SHA1 fa4bf6db9bb980396bdce04313d3e512016b43e4
- SHA512 35051bcd059984a196c04a8532d5e05c2cd4c34431d7b15136e5dc67c0d4831ca410e16fa8af97bb3476b7ee0a14fee66054ebd5418dca3b9d090b2a11afd0e4
- SSDEEP 192:iS3bZgolwL+bJC4Gp5UEwQl/WGhYCMRXqCE0qnajTAMZZ:iElglM7Gpzlnh32aCl3A6
- TLSH T16232F7A249A84083E963ACB013E4F997BD3E77CB28104159346FF72A0DA37C1F71866C
- MD5 SHA1 SHA512 SSDEEP TLSH
vac4.65/vrtaucbl.inf
- SHA256 c8cc71ce2619a54517d3c990d6d7a2ddef4c24b05b8639c291fd6fb3d0d41da1
- MD5 81de14aa72f299354bd0f0a7f04dca41
- SHA1 22c139dce960c3efbffd5f57b5171d6650e7a711
- SHA512 b0c4eb9d9ec26520e9d9247fcf6b29e53100acd4a2035fc4941e2c3c1bee3f7ad7ef7652117e0cce5fe6e8747cca0842f58c64f8b43fad4f7434e8fb0d102e0e
- TLSH T1255122AE86A71A402307793D7E131D827BA12560DD3B1009BEEC4B48E9DCB8C95958FF
- MD5 SHA1 SHA512 TLSH
vac4.65/vrtaucbl6x.cat
- SHA256 1b7d8dc0914812dbc6e17cf75eb16b715a55e0d82aca422867046fcee0e155dd
- MD5 368653a4ef723eea4d643f64769d4275
- SHA1 2113468f91902562b6de5ce3780f86a957fcacf4
- SHA512 ac47bc3aeb1c8f55f1eef3bf04401e12aff22fb935ae04317250f6ed540d8bb9779eb22b4ea204c9d8c9095e6ec5ff9592fda4f166917dc480c0e566d33cb0fa
- SSDEEP 192:yPtKNRUMQVMeKazCKVHGzeZFt7Dp23+r/jL6Dhf2inc:SYSMQJK2CKVbFtPp23+r/jLN
- TLSH T12202E6AB0E3A16439F85CCADD6C8E42BADB5D2C37CDC059B902793542A457923BCA53C
- MD5 SHA1 SHA512 SSDEEP TLSH
vac4.65/vrtaucbl6x.inf
- SHA256 5820ced441f656160a5060897123c67ac52421d22a0d95974368315b80809bfa
- MD5 a6a5b416aa93c5498ae853305515d96e
- SHA1 a7787d64e4ed0e7b8885715298fa6ee5b11e6fdc
- SHA512 dac0920a7cd4590b700585154d4a0384cc108e2cce8d87aae98ea97d891b3346d7f3f194644202e3e19b61c0f862953c11ddef1e5831394166ff035c4c8f5c33
- TLSH T1E95122AE86A71A402307793D7E131D827BA12560DD3B1009BEEC4B48E9DCB8C95958FF
- MD5 SHA1 SHA512 TLSH
vac4.65/x64/audiorepeater.exe
- IMPHASH d4d39144788b9373b540f670af014ccf
- SHA256 adf08bea3680ecbb1132a1bf8e82039ce9b04a3f4588194032ba9d4c062262d3
- MD5 c4dc9646d5ba5eab7944dfe73fe692cc
- SHA1 a2aaff911d4692a9adfd352276998961cb10a878
- SHA512 6b21d51d8c264ea522cc81f57028a9af18bcd720c4649018c7ee821070ccb31c65f096fa3a006aa75b0412b6a0d431a8f4a474b2e4a5043be2590b33f0591cd4
- SSDEEP 1536:jFq1Mwqdl3VRwJW+ld9o4rcrFMCs8/1qU8/VP6xs/kpcb4sIOIq0a:ael3rYlHbomW1qn/gs/hb+Nq0a
- TLSH T137A3E55573E80059F6B396B99EB087568A76FC815B3AC3CF1261960E1E32BC19E35333
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ea:cf:19:61:99:87:67:96:77:a4:b3:b7:f6:0c:6b:a4:30:6c:55:36:28:a3:ff:cc:3c:b6:c3:3e:f2:df:5f:3e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Jan 21, 2021
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Revocation Status
Not revoked
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
5b:98:bb:1d:56:df:0c:02:5d:55:b7:5d
Issuer
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 26, 2020 - Aug 26, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Minor OS version
1
Major OS version
6
Entry point
64768
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
audiorepeater.pdb
kernel32
lstrcmpiW
GetACP
SetLastError
ReadFile
GetFileSizeEx
GetLastError
CreateFileW
lstrcatW
lstrcmpW
WriteFile
QueryPerformanceCounter
WaitForSingleObject
WaitForMultipleObjects
CreateThread
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
RtlMoveMemory
GetStartupInfoW
SetPriorityClass
lstrcpyW
lstrlenW
lstrlenA
GetCurrentThread
SetThreadPriority
CreateEventW
SetEvent
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LoadLibraryA
HeapFree
GetProcessHeap
HeapAlloc
QueryPerformanceFrequency
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
FormatMessageW
GetVersionExW
GetSystemInfo
GetCommandLineW
ExitProcess
CloseHandle
GetCurrentThreadId
GetCurrentProcessId
OpenProcess
GetModuleHandleW
GetModuleFileNameW
GetProcAddress
FreeLibrary
RtlCaptureContext
LoadLibraryW
RtlZeroMemory
gdi32
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
DeleteDC
user32
GetDesktopWindow
SetTimer
ShowWindow
GetWindowLongPtrW
SetWindowLongPtrW
EndDialog
GetCursorPos
SetDlgItemTextW
GetDlgItemTextW
PostMessageW
DialogBoxParamW
SendMessageW
LoadIconW
HiliteMenuItem
LoadMenuW
FindWindowW
MessageBoxW
wsprintfW
SetForegroundWindow
GetSubMenu
FillRect
SendDlgItemMessageW
EnableWindow
GetDlgItem
GetComboBoxInfo
GetWindowLongW
GetClassNameW
MapWindowPoints
GetWindowRect
SetWindowPos
TrackPopupMenuEx
DestroyWindow
CreateWindowExW
SetDlgItemInt
InvalidateRect
KillTimer
CloseClipboard
SetClipboardData
SetWindowTextW
GetDlgItemInt
OpenClipboard
EmptyClipboard
GetWindowTextW
comctl32
ord410
ord413
ord17
comdlg32
GetSaveFileNameW
GetOpenFileNameW
shell32
ShellExecuteW
Shell_NotifyIconW
ole32
CoCreateInstance
CoInitializeEx
msimg32
GradientFill
winmm
waveInGetDevCapsW
waveOutGetDevCapsW
waveInGetNumDevs
waveOutGetNumDevs
waveOutGetErrorTextW
waveOutOpen
waveInStop
waveInStart
waveOutRestart
waveInAddBuffer
waveOutWrite
waveInReset
waveOutReset
waveOutPause
waveInClose
waveOutClose
waveInOpen
advapi32
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
RegCloseKey
Name
.text
Size
74KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=110, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=3, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=142, id=1, productName=Unmarked objects,
count=2, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=38, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
vac4.65/x64/audiorepeater_ks.exe
- IMPHASH 70e5fb71272ced5bbaafdd4186f5f80c
- SHA256 8cd28152a506d7cb46a99163bca003c143f11eab1d69dfb09a2ba24dd41cb51d
- MD5 f8626397a5df343087aec02bc6652b53
- SHA1 39945ae42b66ebc0bbd09136aa176284bc015362
- SHA512 4e7905c1bc3135c72203df02266b70a2b04c3af053ba330203617979ec17eda7830458915d0f3eebbaa146a1344c7bf325c5a6bb86bc7db113568782706e44c9
- SSDEEP 1536:/q5t4wqql3n+duKoDYERuMFTmEaj0V+hJNxWvVGH/aYsIOzjjfX0C:uRl3nrsEPmxjw+hpW9GH/5yjjfX0C
- TLSH T1C1C3E641B3E80059F6B69B789EB087568A72FC515B39C3CF1664964E2E32BC08E35733
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ec:fc:3f:20:f6:a0:62:95:a2:53:a9:f4:6b:42:bf:f7:80:8e:41:17:a8:9f:35:7c:5b:af:46:09:7c:0e:b0:3b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Jan 21, 2021
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Revocation Status
Not revoked
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
5b:98:bb:1d:56:df:0c:02:5d:55:b7:5d
Issuer
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 26, 2020 - Aug 26, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Minor OS version
1
Major OS version
6
Entry point
79856
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
s:\music\software\win\audiorepeater\1xxks\objfre_wnet_amd64\amd64\audiorepeater_ks.pdb
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
kernel32
SetWaitableTimer
SetThreadPriority
GetCurrentThread
CreateWaitableTimerW
CreateEventW
RtlFillMemory
WaitForSingleObject
GetStartupInfoW
CreateFileW
CreateThread
SetPriorityClass
OpenProcess
GetCurrentProcessId
LoadLibraryW
Sleep
QueryPerformanceFrequency
GetModuleFileNameW
GetModuleHandleW
lstrlenA
lstrlenW
lstrcmpiW
SetLastError
WriteFile
GetACP
GlobalFree
GetFileSizeEx
GetOverlappedResult
FreeLibrary
DeviceIoControl
WaitForMultipleObjects
CloseHandle
GetLastError
GlobalAlloc
GlobalLock
GetProcAddress
GlobalUnlock
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LoadLibraryA
HeapFree
GetProcessHeap
HeapAlloc
GetVersionExW
GetSystemInfo
RtlMoveMemory
FormatMessageW
GetCommandLineW
RtlCaptureContext
ExitProcess
SetEvent
RtlZeroMemory
QueryPerformanceCounter
lstrcatW
lstrcpyW
ReadFile
gdi32
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
DeleteDC
BitBlt
user32
GetWindowLongW
GetClassNameW
MapWindowPoints
GetWindowRect
DestroyWindow
SetWindowPos
GetComboBoxInfo
SetWindowTextW
wsprintfW
LoadMenuW
SetWindowLongPtrW
SendDlgItemMessageW
EnableWindow
CheckDlgButton
CreateWindowExW
FillRect
SendMessageW
SetDlgItemInt
GetDlgItemInt
MessageBoxW
LoadIconW
FindWindowW
DialogBoxParamW
ShowWindow
SetTimer
GetDesktopWindow
EndDialog
GetCursorPos
GetSubMenu
HiliteMenuItem
SetForegroundWindow
TrackPopupMenuEx
OpenClipboard
EmptyClipboard
GetWindowTextW
SetClipboardData
CloseClipboard
CallWindowProcW
InvalidateRect
KillTimer
GetDlgItem
PostMessageW
GetDlgItemTextW
IsDlgButtonChecked
SetDlgItemTextW
comctl32
ord17
comdlg32
GetOpenFileNameW
GetSaveFileNameW
shell32
Shell_NotifyIconW
ole32
CoCreateInstance
CoInitializeEx
msimg32
GradientFill
setupapi
SetupDiGetDeviceInterfaceDetailW
SetupDiOpenDeviceInterfaceRegKey
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
Name
.text
Size
91KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=110, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=3, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=131, id=1, productName=Unmarked objects,
count=2, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=31, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
vac4.65/x64/vcctlpan.exe
- IMPHASH 2eb584188d01523f72c2052bc4b1101e
- SHA256 a47d6e5c619d2be6a4671fc09a127a00aeccd115f2bf0ecd2a9fca456aefcf17
- MD5 93f918a7834034de3d3be510c1ec35f7
- SHA1 676b4ec30051196e51670d59e966ec7e8bdfa378
- SHA512 e5646674802d791e958678776f4c2951614621d5fe1466ca8ea5e0ec00b7b22b8624ffd658c87049e2de131dead6d2836cb8f51a66064f347fd7946c732e36d8
- SSDEEP 3072:L2D0NUl3Mkz8SvwynpUsgFZO3QB9DNx1j50S:LDNUZMSvhpUsgFD5Nx8S
- TLSH T11604804573F90C68F5F2BBB099B54A554A72FC915B3EC6CF3210A10D1E3AAC09E79722
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a6:45:20:e7:d0:2b:57:12:08:d1:98:5e:cf:2e:24:f2:f1:09:3e:23:45:82:6e:52:da:0f:46:18:cd:47:9a:eb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Jan 21, 2021
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Revocation Status
Not revoked
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
5b:98:bb:1d:56:df:0c:02:5d:55:b7:5d
Issuer
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 26, 2020 - Aug 26, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Minor OS version
1
Major OS version
6
Entry point
93920
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
vcctlpan.pdb
advapi32
CloseServiceHandle
StartServiceW
QueryServiceStatus
ControlService
OpenServiceW
OpenSCManagerW
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegOpenKeyExW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExW
kernel32
RtlMoveMemory
QueryPerformanceFrequency
SetLastError
GetCurrentProcess
OpenProcess
LocalFree
GetProcAddress
DeviceIoControl
GetLocalTime
lstrcmpiW
lstrcmpW
GetModuleHandleW
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
GetTickCount
CreateFileW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryW
FreeLibrary
lstrlenA
FormatMessageW
GetSystemInfo
GetCommandLineW
ExitProcess
ExpandEnvironmentStringsA
LoadLibraryA
WriteFile
GetVersionExW
CloseHandle
Sleep
RtlZeroMemory
GetModuleFileNameW
SetUnhandledExceptionFilter
GetLastError
lstrcatW
lstrcpyW
lstrlenW
CreateMutexW
gdi32
ExcludeClipRect
RectVisible
MoveToEx
LineTo
CreateSolidBrush
CreateRectRgn
SetDCBrushColor
FrameRgn
SetBkMode
SetTextColor
SelectObject
GetObjectW
GetStockObject
CreateFontIndirectW
DeleteObject
GetTextExtentPoint32W
SetBkColor
user32
ReleaseDC
FillRect
GetFocus
GetDC
GetClientRect
SetFocus
GetClassNameW
IsWindowEnabled
EnableWindow
wvsprintfW
SendMessageW
DestroyIcon
CreateWindowExW
SetDlgItemTextW
MapWindowPoints
IsWindow
SendDlgItemMessageW
GetComboBoxInfo
GetShellWindow
GetWindowThreadProcessId
IsDlgButtonChecked
CheckDlgButton
GetDlgItemInt
wsprintfW
SetDlgItemInt
GetSystemMetrics
GetWindowLongW
SetWindowLongW
ShowWindow
SetTimer
GetMessagePos
GetDlgItemTextW
GetDesktopWindow
DialogBoxParamW
SetActiveWindow
SetWindowLongPtrW
GetDlgItem
ChildWindowFromPoint
SetCursor
GetWindowTextW
GetSysColorBrush
GetSysColor
SetWindowPos
EndDialog
SetWindowTextW
SystemParametersInfoW
LoadCursorW
GetParent
GetWindowRect
UnregisterClassW
GetPropW
RemovePropW
SetPropW
DefWindowProcW
MessageBoxW
DestroyWindow
CreateDialogParamW
LoadIconW
comctl32
ImageList_Create
ImageList_ReplaceIcon
ord17
ord413
ord16
comdlg32
GetSaveFileNameW
shell32
ShellExecuteExW
ShellExecuteW
ole32
CoInitializeEx
setupapi
SetupDiSetClassInstallParamsW
SetupDiCallClassInstaller
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstallParamsW
ntdll
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
Name
.text
Size
104KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
54KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=136, version=30729,
count=3, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=166, id=1, productName=Unmarked objects,
count=10, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=31, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
vac4.65/x64/vrtaucbl.sys
- IMPHASH 68977b7d7f9d5b027fe2e2ae911b36b0
- SHA256 d3b8219f346289cbe0bc09a7705e68c362e7523b4cc49f2e77ee91d3a5d10c7f
- MD5 1f497b2948eefa06c1838e0ff2f490a1
- SHA1 5b0e55ba72d8746ede0b1c99ed60db67d1f5a46d
- SHA512 7723ddb85bdcd870ed4ff17c62ce5bd5187c6ff559927da35aee50f273ee14c03dfe898e402950bad86436fd27731d900c2438e0961b2860be45c60f2cc98d83
- SSDEEP 3072:Wdck3CoSFZvrwpQK5+P23f20+VQOWrmAusmGe8WBX2tH3ya/S7F0u0l:7kyoVe24SHtkp8W29u0l
- TLSH T19F241A4572B90CA5F5F6B678CAA14A06FA71F480173993CF3310A7791E2FBD4AA35320
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d3:5f:83:53:23:ff:63:3d:a6:16:5a:c3:80:c7:4d:7a:c2:70:7a:54:ec:07:55:d2:07:64:a7:3e:90:0a:4c:1f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 21, 2021
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
d3:5f:83:53:23:ff:63:3d:a6:16:5a:c3:80:c7:4d:7a:c2:70:7a:54:ec:07:55:d2:07:64:a7:3e:90:0a:4c:1f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Jan 21, 2021
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Revocation Status
Not revoked
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Serial Number
61:29:15:27:00:00:00:00:00:2a
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 15, 2011 - Apr 15, 2021
Subject
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
5b:98:bb:1d:56:df:0c:02:5d:55:b7:5d
Issuer
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 26, 2020 - Aug 26, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Subject
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:3a:6a:e3:33:70:8f:da:7a:7b:00:00:00:00:00:3a
Issuer
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 11, 2020 - Mar 5, 2021
Subject
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 15, 2014 - Oct 15, 2029
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:462F-E319-3F20,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:24:cb:cd:02:a1:17:70:5c:9a:00:00:00:00:01:24
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 19, 2019 - Mar 17, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
1
Major OS version
6
Entry point
167952
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
vrtaucbl.pdb
ntoskrnl.exe
MmFreePagesFromMdl
MmUnmapLockedPages
wcschr
IoGetCurrentProcess
MmMapLockedPagesSpecifyCache
MmAllocatePagesForMdl
KeInitializeEvent
KeWaitForSingleObject
RtlFreeUnicodeString
IoRegisterDeviceInterface
ZwClose
IoSetDeviceInterfaceState
__C_specific_handler
wcsncpy
_wcsnicmp
srand
IofCompleteRequest
ProbeForRead
ProbeForWrite
wcsrchr
IoReleaseCancelSpinLock
ObfDereferenceObject
RtlTimeToTimeFields
ExSystemTimeToLocalTime
ZwOpenKey
ZwCreateKey
__chkstk
ZwQueryValueKey
ZwSetValueKey
ZwDeleteKey
IoOpenDeviceInterfaceRegistryKey
memcmp
KeCancelTimer
ExFreePool
KeSetTimer
KeSetEvent
KeInitializeDpc
KeInitializeTimerEx
wcsncmp
KeQueryPriorityThread
KeSetPriorityThread
ObReferenceObjectByHandle
PsCreateSystemThread
KeInitializeSemaphore
KeReleaseSemaphore
RtlCompareUnicodeString
RtlZeroMemory
RtlMoveMemory
KeSetSystemAffinityThread
PsInitialSystemProcess
MmGetPhysicalAddress
PsGetCurrentProcessId
PsGetCurrentThreadId
ZwQueryInformationProcess
ZwQuerySystemInformation
MmUnmapViewInSystemSpace
MmMapViewOfSection
MmUnmapViewOfSection
MmMapViewInSystemSpace
MmCreateSection
RtlFillMemory
KdDebuggerEnabled
KeNumberProcessors
ExAllocatePool
MmGetSystemRoutineAddress
KeClearEvent
KeWaitForMultipleObjects
ExSetTimerResolution
RtlInitUnicodeString
KeInitializeMutex
KeReleaseMutex
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
RtlGetVersion
hal
KeQueryPerformanceCounter
portcls.sys
PcNewServiceGroup
PcRegisterPhysicalConnection
PcNewPort
PcRegisterSubdevice
PcInitializeAdapterDriver
PcAddAdapterDevice
PcDispatchIrp
PcRegisterAdapterPowerManagement
ks.sys
KsAcquireResetValue
KsProbeStreamIrp
Name
.text
Size
110KB
Virtual Size
109KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
PAGE
Size
512B
Virtual Size
50B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
INIT
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=91, id=1, productName=Unmarked objects,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=57, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
vac4.65/x86/audiorepeater.exe
- IMPHASH 1145b68c9b3d8189167d458369dac662
- SHA256 50e76e025aac953b76080ed1887933512ca7ebc05bdb053a0e37c9382769debd
- MD5 48b364cc1994f7b33e120d004d50ba4a
- SHA1 8977d5f3ff8762f52bfd133d6814e6bdb35dd340
- SHA512 78e6ab852821e1a3a2dfc1ce2ae775d56705c277d0d11c460ef207cb6d6e1f9733f4eead1cd4a0d2c93d35abab665cb2f96c220df405a2a49e4ff5dc0f3a7853
- SSDEEP 1536:ZJSVqWMAhqWhlHxpnmKZSbrOnHO8ENSdfT+g2exsIOFhBB0DR:R4hlHxFuSOSdfTR9fuhBB0l
- TLSH T12583E751B7F84125F6F26AB4AE78A365493EBD511F39D3CF2260558E5930AC0AA303F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9b:58:35:c5:f9:52:92:6b:4d:e3:12:e6:43:c9:90:ca:2d:9c:3d:a7:e5:e3:f6:a2:e8:63:5d:34:00:3f:fe:b2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Jan 21, 2021
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Revocation Status
Not revoked
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
5b:98:bb:1d:56:df:0c:02:5d:55:b7:5d
Issuer
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 26, 2020 - Aug 26, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Minor OS version
1
Major OS version
6
Entry point
55744
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
audiorepeater.pdb
kernel32
lstrcmpiW
GetACP
SetLastError
ReadFile
GetFileSizeEx
GetLastError
CreateFileW
lstrcatW
lstrcmpW
WriteFile
QueryPerformanceCounter
lstrcpyW
WaitForMultipleObjects
CreateThread
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
RtlMoveMemory
SetPriorityClass
CloseHandle
lstrlenW
lstrlenA
GetCurrentThread
SetEvent
SetThreadPriority
CreateEventW
WaitForSingleObject
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LoadLibraryA
HeapFree
GetProcessHeap
HeapAlloc
QueryPerformanceFrequency
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
FormatMessageW
GetVersionExW
GetSystemInfo
GetCommandLineW
ExitProcess
GetCurrentThreadId
GetCurrentProcessId
OpenProcess
GetModuleHandleW
GetModuleFileNameW
GetProcAddress
FreeLibrary
LoadLibraryW
GetStartupInfoW
SetUnhandledExceptionFilter
RtlZeroMemory
gdi32
CreateCompatibleBitmap
BitBlt
CreateCompatibleDC
SelectObject
DeleteObject
DeleteDC
user32
SetTimer
EndDialog
ShowWindow
LoadMenuW
LoadIconW
GetDesktopWindow
SetWindowLongW
GetCursorPos
SetForegroundWindow
SetWindowTextW
GetDlgItemInt
OpenClipboard
PostMessageW
DialogBoxParamW
SendMessageW
GetSubMenu
HiliteMenuItem
FindWindowW
MessageBoxW
wsprintfW
SetDlgItemTextW
TrackPopupMenuEx
FillRect
SendDlgItemMessageW
EnableWindow
GetDlgItem
GetComboBoxInfo
GetWindowLongW
GetClassNameW
MapWindowPoints
GetDlgItemTextW
GetWindowRect
SetWindowPos
DestroyWindow
CreateWindowExW
SetDlgItemInt
InvalidateRect
KillTimer
CloseClipboard
SetClipboardData
EmptyClipboard
GetWindowTextW
comctl32
ord410
ord17
ord413
comdlg32
GetSaveFileNameW
GetOpenFileNameW
shell32
ShellExecuteW
Shell_NotifyIconW
ole32
CoCreateInstance
CoInitializeEx
msimg32
GradientFill
winmm
waveInGetDevCapsW
waveOutGetDevCapsW
waveInGetNumDevs
waveOutGetNumDevs
waveOutGetErrorTextW
waveInOpen
waveOutOpen
waveInStop
waveOutRestart
waveInAddBuffer
waveOutWrite
waveInReset
waveOutReset
waveOutPause
waveInClose
waveOutClose
waveInStart
advapi32
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryValueExW
Name
.text
Size
62KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=138, id=1, productName=Unmarked objects,
count=38, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
vac4.65/x86/audiorepeater_ks.exe
- IMPHASH cb0fba0663184c68645e16b852cb14d2
- SHA256 d371f8898012d9324a0707cf7be7687e8cdc7ffb8e766fa554c2cc4ce98a3704
- MD5 430012a090fbf4c8c0b842143b605098
- SHA1 afe8878461b4de159bc8bc2493c7ebe86815ff7c
- SHA512 52c161b36ea760dbc6998874b29c0345f951c2c543516e987f3727cde9b45b78c9c7c5b9222cba851680a146eef5b9ad4a2a7bbe2b695265af369b5266b262f8
- SSDEEP 1536:rOq9NYhqdhlHIMwQVpKt3kDSKZvOI1exSqqarYsIOzjsIbc40R:rD3hlHrqkGAvF1oSqqaKyjst40R
- TLSH T1C4A3E750B7F84526F6F26BB4AEB8A355493ABD411F39D3CF2750568E5930AC09E303A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8b:ce:3c:cd:2d:d9:a5:f3:e2:de:28:49:e8:9c:1e:d3:2f:de:2b:85:b7:fd:d9:9b:69:3b:40:2f:16:73:86:93
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Jan 21, 2021
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Revocation Status
Not revoked
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
5b:98:bb:1d:56:df:0c:02:5d:55:b7:5d
Issuer
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 26, 2020 - Aug 26, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Minor OS version
1
Major OS version
6
Entry point
68336
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
s:\music\software\win\audiorepeater\1xxks\objfre_wxp_x86\i386\audiorepeater_ks.pdb
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
kernel32
SetWaitableTimer
SetThreadPriority
GetCurrentThread
CreateWaitableTimerW
CreateEventW
RtlFillMemory
WaitForSingleObject
CreateThread
SetPriorityClass
GetStartupInfoW
CreateFileW
OpenProcess
GetCurrentProcessId
LoadLibraryW
Sleep
QueryPerformanceFrequency
GetModuleFileNameW
GetModuleHandleW
lstrlenA
lstrlenW
lstrcmpiW
SetLastError
GlobalFree
GetACP
ReadFile
GetFileSizeEx
GetOverlappedResult
FreeLibrary
DeviceIoControl
WaitForMultipleObjects
CloseHandle
GetLastError
GlobalAlloc
GlobalLock
GetProcAddress
GlobalUnlock
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LoadLibraryA
HeapFree
GetProcessHeap
HeapAlloc
GetVersionExW
GetSystemInfo
RtlMoveMemory
FormatMessageW
GetCommandLineW
ExitProcess
SetEvent
SetUnhandledExceptionFilter
RtlZeroMemory
QueryPerformanceCounter
lstrcatW
lstrcpyW
WriteFile
gdi32
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
DeleteDC
BitBlt
user32
wsprintfW
FillRect
GetComboBoxInfo
GetWindowLongW
GetClassNameW
MapWindowPoints
GetWindowRect
DestroyWindow
MessageBoxW
DialogBoxParamW
SetWindowTextW
GetSubMenu
HiliteMenuItem
SendDlgItemMessageW
EnableWindow
CheckDlgButton
SetWindowPos
FindWindowW
SendMessageW
OpenClipboard
SetDlgItemInt
GetDesktopWindow
LoadIconW
LoadMenuW
SetWindowLongW
ShowWindow
EndDialog
SetTimer
CreateWindowExW
GetCursorPos
SetForegroundWindow
TrackPopupMenuEx
SetDlgItemTextW
EmptyClipboard
GetWindowTextW
SetClipboardData
CloseClipboard
CallWindowProcW
InvalidateRect
KillTimer
GetDlgItem
PostMessageW
GetDlgItemTextW
IsDlgButtonChecked
GetDlgItemInt
comctl32
ord17
comdlg32
GetOpenFileNameW
GetSaveFileNameW
shell32
Shell_NotifyIconW
ole32
CoCreateInstance
CoInitializeEx
msimg32
GradientFill
setupapi
SetupDiOpenDeviceInterfaceRegKey
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
Name
.text
Size
75KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=6, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=128, id=1, productName=Unmarked objects,
count=31, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
vac4.65/x86/vcctlpan.exe
- IMPHASH 0cef3b1851f2bb8d27f07e5751c6574e
- SHA256 78762553241912602c9e32a0b325f1893a180e3c22523bd91e2c68c0a67dcb7a
- MD5 3c250521109de19f717a922fbeaa3ddd
- SHA1 b351691daae8f8fba4c190b72ca9829746283217
- SHA512 2f4c01b552aab60d29c0a199521d5ecb26c526df8ae604dc76f7a35e6d939ba63298952b2fa68aae82791545af4d80d9cc6d72887885b25a8b104188af71f2ae
- SSDEEP 3072:u4yU9/DhlHDrf3bvgpGlJP3zqV7xxBCvj8df01:l99J3ro17xxAL8G1
- TLSH T16BF3624163F94D29F6F27BB55AB86F500A2AFD915B3DC2CF3250654D483AAC09E343A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
62:d1:99:0e:d5:ad:84:12:20:95:8c:cd:ed:02:5f:4e:8a:02:f4:8c:9b:04:f4:86:6c:38:66:76:94:4a:5a:6e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Jan 21, 2021
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Revocation Status
Not revoked
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
5b:98:bb:1d:56:df:0c:02:5d:55:b7:5d
Issuer
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 26, 2020 - Aug 26, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Minor OS version
1
Major OS version
6
Entry point
79120
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
vcctlpan.pdb
advapi32
CloseServiceHandle
StartServiceW
QueryServiceStatus
ControlService
OpenServiceW
OpenSCManagerW
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryValueExW
kernel32
RtlMoveMemory
SetLastError
QueryPerformanceFrequency
GetCurrentProcess
OpenProcess
LocalFree
GetProcAddress
DeviceIoControl
GetLocalTime
lstrcmpiW
lstrcmpW
GetModuleHandleW
TerminateProcess
GetStartupInfoW
GetTickCount
CreateFileW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryW
FreeLibrary
lstrlenA
FormatMessageW
GetSystemInfo
GetCommandLineW
ExitProcess
LoadLibraryA
ExpandEnvironmentStringsA
WriteFile
GetVersionExW
CloseHandle
Sleep
SetUnhandledExceptionFilter
RtlZeroMemory
GetModuleFileNameW
UnhandledExceptionFilter
GetLastError
lstrcatW
lstrcpyW
lstrlenW
CreateMutexW
gdi32
SetBkColor
ExcludeClipRect
RectVisible
MoveToEx
LineTo
CreateRectRgn
SetDCBrushColor
FrameRgn
CreateSolidBrush
CreateFontIndirectW
GetStockObject
GetTextExtentPoint32W
SelectObject
SetTextColor
SetBkMode
DeleteObject
GetObjectW
user32
FillRect
GetFocus
GetDC
GetClientRect
ReleaseDC
MapWindowPoints
wsprintfW
IsWindowEnabled
EnableWindow
wvsprintfW
SendMessageW
SetFocus
SetDlgItemInt
CreateWindowExW
IsWindow
SendDlgItemMessageW
GetClassNameW
GetComboBoxInfo
GetShellWindow
GetWindowThreadProcessId
IsDlgButtonChecked
CheckDlgButton
SetDlgItemTextW
GetDlgItemInt
GetMessagePos
LoadIconW
DestroyIcon
GetSystemMetrics
GetWindowLongW
SetWindowLongW
ShowWindow
SetTimer
GetDesktopWindow
DialogBoxParamW
SetActiveWindow
GetDlgItem
EndDialog
SetWindowTextW
SystemParametersInfoW
LoadCursorW
GetParent
GetWindowRect
SetWindowPos
GetSysColorBrush
GetSysColor
GetWindowTextW
ChildWindowFromPoint
SetCursor
UnregisterClassW
GetPropW
RemovePropW
SetPropW
DefWindowProcW
MessageBoxW
DestroyWindow
CreateDialogParamW
GetDlgItemTextW
comctl32
ImageList_Create
ImageList_ReplaceIcon
ord17
ord413
ord16
comdlg32
GetSaveFileNameW
shell32
ShellExecuteExW
ShellExecuteW
ole32
CoInitializeEx
setupapi
SetupDiSetClassInstallParamsW
SetupDiCallClassInstaller
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstallParamsW
Name
.text
Size
85KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
54KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=19, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=162, id=1, productName=Unmarked objects,
count=32, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
vac4.65/x86/vrtaucbl.sys
- IMPHASH fa5c24a3900f8e99f3eea23504d75c74
- SHA256 4c04e377f8cf333a9bb1be7c09dd6b8de7d50182b14036a628e843cf8211fb0f
- MD5 a50d60de7499ac6c11d6ed656a49070c
- SHA1 b768fef2b16f149b0e377f846c400ae03d36b56a
- SHA512 bcffecbb6c3160c162421e754595caf58b8c1ebc11e8a9b248415d001c33df3b30066084849655326068f494f0f128e200c39254ce6f739694ab3cfe222f97c0
- SSDEEP 3072:DS1YilhNUxe+UPZp8pnNw56D02cj7bzKzU0s:QUxeHupiYcj7us
- TLSH T147142821AAB94C31F9F33BB05A7D7A2A592DF5D2033941C7335066E89C6D7C0AE34396
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
45:54:b2:14:52:d4:45:c0:f9:f5:30:a2:7c:3c:75:56:09:cb:ef:bc:ba:4b:5c:e6:7d:fb:37:8c:b8:31:50:51
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 21, 2021
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
45:54:b2:14:52:d4:45:c0:f9:f5:30:a2:7c:3c:75:56:09:cb:ef:bc:ba:4b:5c:e6:7d:fb:37:8c:b8:31:50:51
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Jan 21, 2021
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Revocation Status
Not revoked
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Serial Number
61:29:15:27:00:00:00:00:00:2a
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 15, 2011 - Apr 15, 2021
Subject
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
5b:98:bb:1d:56:df:0c:02:5d:55:b7:5d
Issuer
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 26, 2020 - Aug 26, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Subject
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:3a:6a:e3:33:70:8f:da:7a:7b:00:00:00:00:00:3a
Issuer
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 11, 2020 - Mar 5, 2021
Subject
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 15, 2014 - Oct 15, 2029
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:462F-E319-3F20,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:24:cb:cd:02:a1:17:70:5c:9a:00:00:00:00:01:24
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 19, 2019 - Mar 17, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
1
Major OS version
6
Entry point
135184
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
vrtaucbl.pdb
ntoskrnl.exe
MmFreePagesFromMdl
MmUnmapLockedPages
wcschr
IoGetCurrentProcess
memset
MmMapLockedPagesSpecifyCache
MmAllocatePagesForMdl
KeInitializeEvent
KeWaitForSingleObject
RtlFreeUnicodeString
IoRegisterDeviceInterface
ZwClose
IoSetDeviceInterfaceState
wcsncpy
_wcsnicmp
srand
IofCompleteRequest
ProbeForRead
ProbeForWrite
wcsrchr
InterlockedExchange
IoReleaseCancelSpinLock
ObfDereferenceObject
RtlTimeToTimeFields
ExSystemTimeToLocalTime
KeQuerySystemTime
ZwOpenKey
ZwCreateKey
ZwQueryValueKey
ZwSetValueKey
ZwDeleteKey
IoOpenDeviceInterfaceRegistryKey
KeCancelTimer
ExSetTimerResolution
KeSetTimer
ExFreePool
KeSetEvent
KeInitializeDpc
KeInitializeTimerEx
RtlFillMemory
wcsncmp
KeGetCurrentThread
KeWaitForMultipleObjects
KeQueryPriorityThread
KeSetPriorityThread
ObReferenceObjectByHandle
PsCreateSystemThread
KeInitializeSemaphore
KeReleaseSemaphore
RtlZeroMemory
RtlUnwind
KeSetSystemAffinityThread
PsInitialSystemProcess
MmGetPhysicalAddress
PsGetCurrentProcessId
PsGetCurrentThreadId
ZwQueryInformationProcess
ZwQuerySystemInformation
MmUnmapViewInSystemSpace
MmMapViewOfSection
MmUnmapViewOfSection
MmMapViewInSystemSpace
MmCreateSection
KdDebuggerEnabled
KeNumberProcessors
ExAllocatePool
MmGetSystemRoutineAddress
KeClearEvent
memcpy
RtlCompareUnicodeString
RtlMoveMemory
KeInitializeMutex
KeReleaseMutex
KeInitializeSpinLock
RtlInitUnicodeString
KeQueryInterruptTime
RtlGetVersion
hal
KfLowerIrql
KfAcquireSpinLock
KfRaiseIrql
KfReleaseSpinLock
KeQueryPerformanceCounter
portcls.sys
PcNewServiceGroup
PcRegisterPhysicalConnection
PcNewPort
PcRegisterSubdevice
PcInitializeAdapterDriver
PcAddAdapterDevice
PcDispatchIrp
PcRegisterAdapterPowerManagement
ks.sys
KsAcquireResetValue
KsProbeStreamIrp
Name
.text
Size
93KB
Virtual Size
93KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
PAGE
Size
512B
Virtual Size
49B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
INIT
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=98, id=1, productName=Unmarked objects,
count=9, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=58, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
vrtaucbl.cat
- SHA256 6d0e104d75eea33cd8137223ddbd92c9dff3eda2bec5d97e7b44214669ffe0f9
- MD5 a81b3326c2b4dd35e8d42dab377d8afa
- SHA1 fa4bf6db9bb980396bdce04313d3e512016b43e4
- SHA512 35051bcd059984a196c04a8532d5e05c2cd4c34431d7b15136e5dc67c0d4831ca410e16fa8af97bb3476b7ee0a14fee66054ebd5418dca3b9d090b2a11afd0e4
- SSDEEP 192:iS3bZgolwL+bJC4Gp5UEwQl/WGhYCMRXqCE0qnajTAMZZ:iElglM7Gpzlnh32aCl3A6
- TLSH T16232F7A249A84083E963ACB013E4F997BD3E77CB28104159346FF72A0DA37C1F71866C
- MD5 SHA1 SHA512 SSDEEP TLSH
vrtaucbl.inf
- SHA256 c8cc71ce2619a54517d3c990d6d7a2ddef4c24b05b8639c291fd6fb3d0d41da1
- MD5 81de14aa72f299354bd0f0a7f04dca41
- SHA1 22c139dce960c3efbffd5f57b5171d6650e7a711
- SHA512 b0c4eb9d9ec26520e9d9247fcf6b29e53100acd4a2035fc4941e2c3c1bee3f7ad7ef7652117e0cce5fe6e8747cca0842f58c64f8b43fad4f7434e8fb0d102e0e
- TLSH T1255122AE86A71A402307793D7E131D827BA12560DD3B1009BEEC4B48E9DCB8C95958FF
- MD5 SHA1 SHA512 TLSH
vrtaucbl6x.cat
- SHA256 1b7d8dc0914812dbc6e17cf75eb16b715a55e0d82aca422867046fcee0e155dd
- MD5 368653a4ef723eea4d643f64769d4275
- SHA1 2113468f91902562b6de5ce3780f86a957fcacf4
- SHA512 ac47bc3aeb1c8f55f1eef3bf04401e12aff22fb935ae04317250f6ed540d8bb9779eb22b4ea204c9d8c9095e6ec5ff9592fda4f166917dc480c0e566d33cb0fa
- SSDEEP 192:yPtKNRUMQVMeKazCKVHGzeZFt7Dp23+r/jL6Dhf2inc:SYSMQJK2CKVbFtPp23+r/jLN
- TLSH T12202E6AB0E3A16439F85CCADD6C8E42BADB5D2C37CDC059B902793542A457923BCA53C
- MD5 SHA1 SHA512 SSDEEP TLSH
vrtaucbl6x.inf
- SHA256 5820ced441f656160a5060897123c67ac52421d22a0d95974368315b80809bfa
- MD5 a6a5b416aa93c5498ae853305515d96e
- SHA1 a7787d64e4ed0e7b8885715298fa6ee5b11e6fdc
- SHA512 dac0920a7cd4590b700585154d4a0384cc108e2cce8d87aae98ea97d891b3346d7f3f194644202e3e19b61c0f862953c11ddef1e5831394166ff035c4c8f5c33
- TLSH T1E95122AE86A71A402307793D7E131D827BA12560DD3B1009BEEC4B48E9DCB8C95958FF
- MD5 SHA1 SHA512 TLSH
x64/audiorepeater.exe
- IMPHASH d4d39144788b9373b540f670af014ccf
- SHA256 adf08bea3680ecbb1132a1bf8e82039ce9b04a3f4588194032ba9d4c062262d3
- MD5 c4dc9646d5ba5eab7944dfe73fe692cc
- SHA1 a2aaff911d4692a9adfd352276998961cb10a878
- SHA512 6b21d51d8c264ea522cc81f57028a9af18bcd720c4649018c7ee821070ccb31c65f096fa3a006aa75b0412b6a0d431a8f4a474b2e4a5043be2590b33f0591cd4
- SSDEEP 1536:jFq1Mwqdl3VRwJW+ld9o4rcrFMCs8/1qU8/VP6xs/kpcb4sIOIq0a:ael3rYlHbomW1qn/gs/hb+Nq0a
- TLSH T137A3E55573E80059F6B396B99EB087568A76FC815B3AC3CF1261960E1E32BC19E35333
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ea:cf:19:61:99:87:67:96:77:a4:b3:b7:f6:0c:6b:a4:30:6c:55:36:28:a3:ff:cc:3c:b6:c3:3e:f2:df:5f:3e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Jan 21, 2021
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Revocation Status
Not revoked
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
5b:98:bb:1d:56:df:0c:02:5d:55:b7:5d
Issuer
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 26, 2020 - Aug 26, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Minor OS version
1
Major OS version
6
Entry point
64768
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
audiorepeater.pdb
kernel32
lstrcmpiW
GetACP
SetLastError
ReadFile
GetFileSizeEx
GetLastError
CreateFileW
lstrcatW
lstrcmpW
WriteFile
QueryPerformanceCounter
WaitForSingleObject
WaitForMultipleObjects
CreateThread
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
RtlMoveMemory
GetStartupInfoW
SetPriorityClass
lstrcpyW
lstrlenW
lstrlenA
GetCurrentThread
SetThreadPriority
CreateEventW
SetEvent
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LoadLibraryA
HeapFree
GetProcessHeap
HeapAlloc
QueryPerformanceFrequency
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
FormatMessageW
GetVersionExW
GetSystemInfo
GetCommandLineW
ExitProcess
CloseHandle
GetCurrentThreadId
GetCurrentProcessId
OpenProcess
GetModuleHandleW
GetModuleFileNameW
GetProcAddress
FreeLibrary
RtlCaptureContext
LoadLibraryW
RtlZeroMemory
gdi32
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
DeleteDC
user32
GetDesktopWindow
SetTimer
ShowWindow
GetWindowLongPtrW
SetWindowLongPtrW
EndDialog
GetCursorPos
SetDlgItemTextW
GetDlgItemTextW
PostMessageW
DialogBoxParamW
SendMessageW
LoadIconW
HiliteMenuItem
LoadMenuW
FindWindowW
MessageBoxW
wsprintfW
SetForegroundWindow
GetSubMenu
FillRect
SendDlgItemMessageW
EnableWindow
GetDlgItem
GetComboBoxInfo
GetWindowLongW
GetClassNameW
MapWindowPoints
GetWindowRect
SetWindowPos
TrackPopupMenuEx
DestroyWindow
CreateWindowExW
SetDlgItemInt
InvalidateRect
KillTimer
CloseClipboard
SetClipboardData
SetWindowTextW
GetDlgItemInt
OpenClipboard
EmptyClipboard
GetWindowTextW
comctl32
ord410
ord413
ord17
comdlg32
GetSaveFileNameW
GetOpenFileNameW
shell32
ShellExecuteW
Shell_NotifyIconW
ole32
CoCreateInstance
CoInitializeEx
msimg32
GradientFill
winmm
waveInGetDevCapsW
waveOutGetDevCapsW
waveInGetNumDevs
waveOutGetNumDevs
waveOutGetErrorTextW
waveOutOpen
waveInStop
waveInStart
waveOutRestart
waveInAddBuffer
waveOutWrite
waveInReset
waveOutReset
waveOutPause
waveInClose
waveOutClose
waveInOpen
advapi32
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
RegCloseKey
Name
.text
Size
74KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=110, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=3, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=142, id=1, productName=Unmarked objects,
count=2, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=38, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
x64/audiorepeater_ks.exe
- IMPHASH 70e5fb71272ced5bbaafdd4186f5f80c
- SHA256 8cd28152a506d7cb46a99163bca003c143f11eab1d69dfb09a2ba24dd41cb51d
- MD5 f8626397a5df343087aec02bc6652b53
- SHA1 39945ae42b66ebc0bbd09136aa176284bc015362
- SHA512 4e7905c1bc3135c72203df02266b70a2b04c3af053ba330203617979ec17eda7830458915d0f3eebbaa146a1344c7bf325c5a6bb86bc7db113568782706e44c9
- SSDEEP 1536:/q5t4wqql3n+duKoDYERuMFTmEaj0V+hJNxWvVGH/aYsIOzjjfX0C:uRl3nrsEPmxjw+hpW9GH/5yjjfX0C
- TLSH T1C1C3E641B3E80059F6B69B789EB087568A72FC515B39C3CF1664964E2E32BC08E35733
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ec:fc:3f:20:f6:a0:62:95:a2:53:a9:f4:6b:42:bf:f7:80:8e:41:17:a8:9f:35:7c:5b:af:46:09:7c:0e:b0:3b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Jan 21, 2021
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Revocation Status
Not revoked
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
5b:98:bb:1d:56:df:0c:02:5d:55:b7:5d
Issuer
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 26, 2020 - Aug 26, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Minor OS version
1
Major OS version
6
Entry point
79856
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
s:\music\software\win\audiorepeater\1xxks\objfre_wnet_amd64\amd64\audiorepeater_ks.pdb
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
kernel32
SetWaitableTimer
SetThreadPriority
GetCurrentThread
CreateWaitableTimerW
CreateEventW
RtlFillMemory
WaitForSingleObject
GetStartupInfoW
CreateFileW
CreateThread
SetPriorityClass
OpenProcess
GetCurrentProcessId
LoadLibraryW
Sleep
QueryPerformanceFrequency
GetModuleFileNameW
GetModuleHandleW
lstrlenA
lstrlenW
lstrcmpiW
SetLastError
WriteFile
GetACP
GlobalFree
GetFileSizeEx
GetOverlappedResult
FreeLibrary
DeviceIoControl
WaitForMultipleObjects
CloseHandle
GetLastError
GlobalAlloc
GlobalLock
GetProcAddress
GlobalUnlock
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LoadLibraryA
HeapFree
GetProcessHeap
HeapAlloc
GetVersionExW
GetSystemInfo
RtlMoveMemory
FormatMessageW
GetCommandLineW
RtlCaptureContext
ExitProcess
SetEvent
RtlZeroMemory
QueryPerformanceCounter
lstrcatW
lstrcpyW
ReadFile
gdi32
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
DeleteDC
BitBlt
user32
GetWindowLongW
GetClassNameW
MapWindowPoints
GetWindowRect
DestroyWindow
SetWindowPos
GetComboBoxInfo
SetWindowTextW
wsprintfW
LoadMenuW
SetWindowLongPtrW
SendDlgItemMessageW
EnableWindow
CheckDlgButton
CreateWindowExW
FillRect
SendMessageW
SetDlgItemInt
GetDlgItemInt
MessageBoxW
LoadIconW
FindWindowW
DialogBoxParamW
ShowWindow
SetTimer
GetDesktopWindow
EndDialog
GetCursorPos
GetSubMenu
HiliteMenuItem
SetForegroundWindow
TrackPopupMenuEx
OpenClipboard
EmptyClipboard
GetWindowTextW
SetClipboardData
CloseClipboard
CallWindowProcW
InvalidateRect
KillTimer
GetDlgItem
PostMessageW
GetDlgItemTextW
IsDlgButtonChecked
SetDlgItemTextW
comctl32
ord17
comdlg32
GetOpenFileNameW
GetSaveFileNameW
shell32
Shell_NotifyIconW
ole32
CoCreateInstance
CoInitializeEx
msimg32
GradientFill
setupapi
SetupDiGetDeviceInterfaceDetailW
SetupDiOpenDeviceInterfaceRegKey
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
Name
.text
Size
91KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=110, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=3, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=131, id=1, productName=Unmarked objects,
count=2, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=31, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
x64/vcctlpan.exe
- IMPHASH 2eb584188d01523f72c2052bc4b1101e
- SHA256 a47d6e5c619d2be6a4671fc09a127a00aeccd115f2bf0ecd2a9fca456aefcf17
- MD5 93f918a7834034de3d3be510c1ec35f7
- SHA1 676b4ec30051196e51670d59e966ec7e8bdfa378
- SHA512 e5646674802d791e958678776f4c2951614621d5fe1466ca8ea5e0ec00b7b22b8624ffd658c87049e2de131dead6d2836cb8f51a66064f347fd7946c732e36d8
- SSDEEP 3072:L2D0NUl3Mkz8SvwynpUsgFZO3QB9DNx1j50S:LDNUZMSvhpUsgFD5Nx8S
- TLSH T11604804573F90C68F5F2BBB099B54A554A72FC915B3EC6CF3210A10D1E3AAC09E79722
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a6:45:20:e7:d0:2b:57:12:08:d1:98:5e:cf:2e:24:f2:f1:09:3e:23:45:82:6e:52:da:0f:46:18:cd:47:9a:eb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Jan 21, 2021
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Revocation Status
Not revoked
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
5b:98:bb:1d:56:df:0c:02:5d:55:b7:5d
Issuer
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 26, 2020 - Aug 26, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Minor OS version
1
Major OS version
6
Entry point
93920
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
vcctlpan.pdb
advapi32
CloseServiceHandle
StartServiceW
QueryServiceStatus
ControlService
OpenServiceW
OpenSCManagerW
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegOpenKeyExW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExW
kernel32
RtlMoveMemory
QueryPerformanceFrequency
SetLastError
GetCurrentProcess
OpenProcess
LocalFree
GetProcAddress
DeviceIoControl
GetLocalTime
lstrcmpiW
lstrcmpW
GetModuleHandleW
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
GetTickCount
CreateFileW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryW
FreeLibrary
lstrlenA
FormatMessageW
GetSystemInfo
GetCommandLineW
ExitProcess
ExpandEnvironmentStringsA
LoadLibraryA
WriteFile
GetVersionExW
CloseHandle
Sleep
RtlZeroMemory
GetModuleFileNameW
SetUnhandledExceptionFilter
GetLastError
lstrcatW
lstrcpyW
lstrlenW
CreateMutexW
gdi32
ExcludeClipRect
RectVisible
MoveToEx
LineTo
CreateSolidBrush
CreateRectRgn
SetDCBrushColor
FrameRgn
SetBkMode
SetTextColor
SelectObject
GetObjectW
GetStockObject
CreateFontIndirectW
DeleteObject
GetTextExtentPoint32W
SetBkColor
user32
ReleaseDC
FillRect
GetFocus
GetDC
GetClientRect
SetFocus
GetClassNameW
IsWindowEnabled
EnableWindow
wvsprintfW
SendMessageW
DestroyIcon
CreateWindowExW
SetDlgItemTextW
MapWindowPoints
IsWindow
SendDlgItemMessageW
GetComboBoxInfo
GetShellWindow
GetWindowThreadProcessId
IsDlgButtonChecked
CheckDlgButton
GetDlgItemInt
wsprintfW
SetDlgItemInt
GetSystemMetrics
GetWindowLongW
SetWindowLongW
ShowWindow
SetTimer
GetMessagePos
GetDlgItemTextW
GetDesktopWindow
DialogBoxParamW
SetActiveWindow
SetWindowLongPtrW
GetDlgItem
ChildWindowFromPoint
SetCursor
GetWindowTextW
GetSysColorBrush
GetSysColor
SetWindowPos
EndDialog
SetWindowTextW
SystemParametersInfoW
LoadCursorW
GetParent
GetWindowRect
UnregisterClassW
GetPropW
RemovePropW
SetPropW
DefWindowProcW
MessageBoxW
DestroyWindow
CreateDialogParamW
LoadIconW
comctl32
ImageList_Create
ImageList_ReplaceIcon
ord17
ord413
ord16
comdlg32
GetSaveFileNameW
shell32
ShellExecuteExW
ShellExecuteW
ole32
CoInitializeEx
setupapi
SetupDiSetClassInstallParamsW
SetupDiCallClassInstaller
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstallParamsW
ntdll
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
Name
.text
Size
104KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
54KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=136, version=30729,
count=3, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=166, id=1, productName=Unmarked objects,
count=10, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=31, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
x64/vrtaucbl.sys
- IMPHASH 68977b7d7f9d5b027fe2e2ae911b36b0
- SHA256 d3b8219f346289cbe0bc09a7705e68c362e7523b4cc49f2e77ee91d3a5d10c7f
- MD5 1f497b2948eefa06c1838e0ff2f490a1
- SHA1 5b0e55ba72d8746ede0b1c99ed60db67d1f5a46d
- SHA512 7723ddb85bdcd870ed4ff17c62ce5bd5187c6ff559927da35aee50f273ee14c03dfe898e402950bad86436fd27731d900c2438e0961b2860be45c60f2cc98d83
- SSDEEP 3072:Wdck3CoSFZvrwpQK5+P23f20+VQOWrmAusmGe8WBX2tH3ya/S7F0u0l:7kyoVe24SHtkp8W29u0l
- TLSH T19F241A4572B90CA5F5F6B678CAA14A06FA71F480173993CF3310A7791E2FBD4AA35320
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d3:5f:83:53:23:ff:63:3d:a6:16:5a:c3:80:c7:4d:7a:c2:70:7a:54:ec:07:55:d2:07:64:a7:3e:90:0a:4c:1f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 21, 2021
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
d3:5f:83:53:23:ff:63:3d:a6:16:5a:c3:80:c7:4d:7a:c2:70:7a:54:ec:07:55:d2:07:64:a7:3e:90:0a:4c:1f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Jan 21, 2021
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Revocation Status
Not revoked
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Serial Number
61:29:15:27:00:00:00:00:00:2a
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 15, 2011 - Apr 15, 2021
Subject
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
5b:98:bb:1d:56:df:0c:02:5d:55:b7:5d
Issuer
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 26, 2020 - Aug 26, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Subject
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:3a:6a:e3:33:70:8f:da:7a:7b:00:00:00:00:00:3a
Issuer
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 11, 2020 - Mar 5, 2021
Subject
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 15, 2014 - Oct 15, 2029
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:462F-E319-3F20,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:24:cb:cd:02:a1:17:70:5c:9a:00:00:00:00:01:24
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 19, 2019 - Mar 17, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
1
Major OS version
6
Entry point
167952
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
vrtaucbl.pdb
ntoskrnl.exe
MmFreePagesFromMdl
MmUnmapLockedPages
wcschr
IoGetCurrentProcess
MmMapLockedPagesSpecifyCache
MmAllocatePagesForMdl
KeInitializeEvent
KeWaitForSingleObject
RtlFreeUnicodeString
IoRegisterDeviceInterface
ZwClose
IoSetDeviceInterfaceState
__C_specific_handler
wcsncpy
_wcsnicmp
srand
IofCompleteRequest
ProbeForRead
ProbeForWrite
wcsrchr
IoReleaseCancelSpinLock
ObfDereferenceObject
RtlTimeToTimeFields
ExSystemTimeToLocalTime
ZwOpenKey
ZwCreateKey
__chkstk
ZwQueryValueKey
ZwSetValueKey
ZwDeleteKey
IoOpenDeviceInterfaceRegistryKey
memcmp
KeCancelTimer
ExFreePool
KeSetTimer
KeSetEvent
KeInitializeDpc
KeInitializeTimerEx
wcsncmp
KeQueryPriorityThread
KeSetPriorityThread
ObReferenceObjectByHandle
PsCreateSystemThread
KeInitializeSemaphore
KeReleaseSemaphore
RtlCompareUnicodeString
RtlZeroMemory
RtlMoveMemory
KeSetSystemAffinityThread
PsInitialSystemProcess
MmGetPhysicalAddress
PsGetCurrentProcessId
PsGetCurrentThreadId
ZwQueryInformationProcess
ZwQuerySystemInformation
MmUnmapViewInSystemSpace
MmMapViewOfSection
MmUnmapViewOfSection
MmMapViewInSystemSpace
MmCreateSection
RtlFillMemory
KdDebuggerEnabled
KeNumberProcessors
ExAllocatePool
MmGetSystemRoutineAddress
KeClearEvent
KeWaitForMultipleObjects
ExSetTimerResolution
RtlInitUnicodeString
KeInitializeMutex
KeReleaseMutex
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
RtlGetVersion
hal
KeQueryPerformanceCounter
portcls.sys
PcNewServiceGroup
PcRegisterPhysicalConnection
PcNewPort
PcRegisterSubdevice
PcInitializeAdapterDriver
PcAddAdapterDevice
PcDispatchIrp
PcRegisterAdapterPowerManagement
ks.sys
KsAcquireResetValue
KsProbeStreamIrp
Name
.text
Size
110KB
Virtual Size
109KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
PAGE
Size
512B
Virtual Size
50B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
INIT
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=91, id=1, productName=Unmarked objects,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=57, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
x86/audiorepeater.exe
- IMPHASH 1145b68c9b3d8189167d458369dac662
- SHA256 50e76e025aac953b76080ed1887933512ca7ebc05bdb053a0e37c9382769debd
- MD5 48b364cc1994f7b33e120d004d50ba4a
- SHA1 8977d5f3ff8762f52bfd133d6814e6bdb35dd340
- SHA512 78e6ab852821e1a3a2dfc1ce2ae775d56705c277d0d11c460ef207cb6d6e1f9733f4eead1cd4a0d2c93d35abab665cb2f96c220df405a2a49e4ff5dc0f3a7853
- SSDEEP 1536:ZJSVqWMAhqWhlHxpnmKZSbrOnHO8ENSdfT+g2exsIOFhBB0DR:R4hlHxFuSOSdfTR9fuhBB0l
- TLSH T12583E751B7F84125F6F26AB4AE78A365493EBD511F39D3CF2260558E5930AC0AA303F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9b:58:35:c5:f9:52:92:6b:4d:e3:12:e6:43:c9:90:ca:2d:9c:3d:a7:e5:e3:f6:a2:e8:63:5d:34:00:3f:fe:b2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Jan 21, 2021
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Revocation Status
Not revoked
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
5b:98:bb:1d:56:df:0c:02:5d:55:b7:5d
Issuer
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 26, 2020 - Aug 26, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Minor OS version
1
Major OS version
6
Entry point
55744
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
audiorepeater.pdb
kernel32
lstrcmpiW
GetACP
SetLastError
ReadFile
GetFileSizeEx
GetLastError
CreateFileW
lstrcatW
lstrcmpW
WriteFile
QueryPerformanceCounter
lstrcpyW
WaitForMultipleObjects
CreateThread
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
RtlMoveMemory
SetPriorityClass
CloseHandle
lstrlenW
lstrlenA
GetCurrentThread
SetEvent
SetThreadPriority
CreateEventW
WaitForSingleObject
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LoadLibraryA
HeapFree
GetProcessHeap
HeapAlloc
QueryPerformanceFrequency
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
FormatMessageW
GetVersionExW
GetSystemInfo
GetCommandLineW
ExitProcess
GetCurrentThreadId
GetCurrentProcessId
OpenProcess
GetModuleHandleW
GetModuleFileNameW
GetProcAddress
FreeLibrary
LoadLibraryW
GetStartupInfoW
SetUnhandledExceptionFilter
RtlZeroMemory
gdi32
CreateCompatibleBitmap
BitBlt
CreateCompatibleDC
SelectObject
DeleteObject
DeleteDC
user32
SetTimer
EndDialog
ShowWindow
LoadMenuW
LoadIconW
GetDesktopWindow
SetWindowLongW
GetCursorPos
SetForegroundWindow
SetWindowTextW
GetDlgItemInt
OpenClipboard
PostMessageW
DialogBoxParamW
SendMessageW
GetSubMenu
HiliteMenuItem
FindWindowW
MessageBoxW
wsprintfW
SetDlgItemTextW
TrackPopupMenuEx
FillRect
SendDlgItemMessageW
EnableWindow
GetDlgItem
GetComboBoxInfo
GetWindowLongW
GetClassNameW
MapWindowPoints
GetDlgItemTextW
GetWindowRect
SetWindowPos
DestroyWindow
CreateWindowExW
SetDlgItemInt
InvalidateRect
KillTimer
CloseClipboard
SetClipboardData
EmptyClipboard
GetWindowTextW
comctl32
ord410
ord17
ord413
comdlg32
GetSaveFileNameW
GetOpenFileNameW
shell32
ShellExecuteW
Shell_NotifyIconW
ole32
CoCreateInstance
CoInitializeEx
msimg32
GradientFill
winmm
waveInGetDevCapsW
waveOutGetDevCapsW
waveInGetNumDevs
waveOutGetNumDevs
waveOutGetErrorTextW
waveInOpen
waveOutOpen
waveInStop
waveOutRestart
waveInAddBuffer
waveOutWrite
waveInReset
waveOutReset
waveOutPause
waveInClose
waveOutClose
waveInStart
advapi32
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryValueExW
Name
.text
Size
62KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=138, id=1, productName=Unmarked objects,
count=38, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
x86/audiorepeater_ks.exe
- IMPHASH cb0fba0663184c68645e16b852cb14d2
- SHA256 d371f8898012d9324a0707cf7be7687e8cdc7ffb8e766fa554c2cc4ce98a3704
- MD5 430012a090fbf4c8c0b842143b605098
- SHA1 afe8878461b4de159bc8bc2493c7ebe86815ff7c
- SHA512 52c161b36ea760dbc6998874b29c0345f951c2c543516e987f3727cde9b45b78c9c7c5b9222cba851680a146eef5b9ad4a2a7bbe2b695265af369b5266b262f8
- SSDEEP 1536:rOq9NYhqdhlHIMwQVpKt3kDSKZvOI1exSqqarYsIOzjsIbc40R:rD3hlHrqkGAvF1oSqqaKyjst40R
- TLSH T1C4A3E750B7F84526F6F26BB4AEB8A355493ABD411F39D3CF2750568E5930AC09E303A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8b:ce:3c:cd:2d:d9:a5:f3:e2:de:28:49:e8:9c:1e:d3:2f:de:2b:85:b7:fd:d9:9b:69:3b:40:2f:16:73:86:93
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Jan 21, 2021
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Revocation Status
Not revoked
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
5b:98:bb:1d:56:df:0c:02:5d:55:b7:5d
Issuer
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 26, 2020 - Aug 26, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Minor OS version
1
Major OS version
6
Entry point
68336
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
s:\music\software\win\audiorepeater\1xxks\objfre_wxp_x86\i386\audiorepeater_ks.pdb
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
kernel32
SetWaitableTimer
SetThreadPriority
GetCurrentThread
CreateWaitableTimerW
CreateEventW
RtlFillMemory
WaitForSingleObject
CreateThread
SetPriorityClass
GetStartupInfoW
CreateFileW
OpenProcess
GetCurrentProcessId
LoadLibraryW
Sleep
QueryPerformanceFrequency
GetModuleFileNameW
GetModuleHandleW
lstrlenA
lstrlenW
lstrcmpiW
SetLastError
GlobalFree
GetACP
ReadFile
GetFileSizeEx
GetOverlappedResult
FreeLibrary
DeviceIoControl
WaitForMultipleObjects
CloseHandle
GetLastError
GlobalAlloc
GlobalLock
GetProcAddress
GlobalUnlock
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LoadLibraryA
HeapFree
GetProcessHeap
HeapAlloc
GetVersionExW
GetSystemInfo
RtlMoveMemory
FormatMessageW
GetCommandLineW
ExitProcess
SetEvent
SetUnhandledExceptionFilter
RtlZeroMemory
QueryPerformanceCounter
lstrcatW
lstrcpyW
WriteFile
gdi32
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
DeleteDC
BitBlt
user32
wsprintfW
FillRect
GetComboBoxInfo
GetWindowLongW
GetClassNameW
MapWindowPoints
GetWindowRect
DestroyWindow
MessageBoxW
DialogBoxParamW
SetWindowTextW
GetSubMenu
HiliteMenuItem
SendDlgItemMessageW
EnableWindow
CheckDlgButton
SetWindowPos
FindWindowW
SendMessageW
OpenClipboard
SetDlgItemInt
GetDesktopWindow
LoadIconW
LoadMenuW
SetWindowLongW
ShowWindow
EndDialog
SetTimer
CreateWindowExW
GetCursorPos
SetForegroundWindow
TrackPopupMenuEx
SetDlgItemTextW
EmptyClipboard
GetWindowTextW
SetClipboardData
CloseClipboard
CallWindowProcW
InvalidateRect
KillTimer
GetDlgItem
PostMessageW
GetDlgItemTextW
IsDlgButtonChecked
GetDlgItemInt
comctl32
ord17
comdlg32
GetOpenFileNameW
GetSaveFileNameW
shell32
Shell_NotifyIconW
ole32
CoCreateInstance
CoInitializeEx
msimg32
GradientFill
setupapi
SetupDiOpenDeviceInterfaceRegKey
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
Name
.text
Size
75KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=6, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=128, id=1, productName=Unmarked objects,
count=31, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
x86/vcctlpan.exe
- IMPHASH 0cef3b1851f2bb8d27f07e5751c6574e
- SHA256 78762553241912602c9e32a0b325f1893a180e3c22523bd91e2c68c0a67dcb7a
- MD5 3c250521109de19f717a922fbeaa3ddd
- SHA1 b351691daae8f8fba4c190b72ca9829746283217
- SHA512 2f4c01b552aab60d29c0a199521d5ecb26c526df8ae604dc76f7a35e6d939ba63298952b2fa68aae82791545af4d80d9cc6d72887885b25a8b104188af71f2ae
- SSDEEP 3072:u4yU9/DhlHDrf3bvgpGlJP3zqV7xxBCvj8df01:l99J3ro17xxAL8G1
- TLSH T16BF3624163F94D29F6F27BB55AB86F500A2AFD915B3DC2CF3250654D483AAC09E343A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
62:d1:99:0e:d5:ad:84:12:20:95:8c:cd:ed:02:5f:4e:8a:02:f4:8c:9b:04:f4:86:6c:38:66:76:94:4a:5a:6e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Jan 21, 2021
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Revocation Status
Not revoked
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
5b:98:bb:1d:56:df:0c:02:5d:55:b7:5d
Issuer
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 26, 2020 - Aug 26, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Minor OS version
1
Major OS version
6
Entry point
79120
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
vcctlpan.pdb
advapi32
CloseServiceHandle
StartServiceW
QueryServiceStatus
ControlService
OpenServiceW
OpenSCManagerW
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryValueExW
kernel32
RtlMoveMemory
SetLastError
QueryPerformanceFrequency
GetCurrentProcess
OpenProcess
LocalFree
GetProcAddress
DeviceIoControl
GetLocalTime
lstrcmpiW
lstrcmpW
GetModuleHandleW
TerminateProcess
GetStartupInfoW
GetTickCount
CreateFileW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryW
FreeLibrary
lstrlenA
FormatMessageW
GetSystemInfo
GetCommandLineW
ExitProcess
LoadLibraryA
ExpandEnvironmentStringsA
WriteFile
GetVersionExW
CloseHandle
Sleep
SetUnhandledExceptionFilter
RtlZeroMemory
GetModuleFileNameW
UnhandledExceptionFilter
GetLastError
lstrcatW
lstrcpyW
lstrlenW
CreateMutexW
gdi32
SetBkColor
ExcludeClipRect
RectVisible
MoveToEx
LineTo
CreateRectRgn
SetDCBrushColor
FrameRgn
CreateSolidBrush
CreateFontIndirectW
GetStockObject
GetTextExtentPoint32W
SelectObject
SetTextColor
SetBkMode
DeleteObject
GetObjectW
user32
FillRect
GetFocus
GetDC
GetClientRect
ReleaseDC
MapWindowPoints
wsprintfW
IsWindowEnabled
EnableWindow
wvsprintfW
SendMessageW
SetFocus
SetDlgItemInt
CreateWindowExW
IsWindow
SendDlgItemMessageW
GetClassNameW
GetComboBoxInfo
GetShellWindow
GetWindowThreadProcessId
IsDlgButtonChecked
CheckDlgButton
SetDlgItemTextW
GetDlgItemInt
GetMessagePos
LoadIconW
DestroyIcon
GetSystemMetrics
GetWindowLongW
SetWindowLongW
ShowWindow
SetTimer
GetDesktopWindow
DialogBoxParamW
SetActiveWindow
GetDlgItem
EndDialog
SetWindowTextW
SystemParametersInfoW
LoadCursorW
GetParent
GetWindowRect
SetWindowPos
GetSysColorBrush
GetSysColor
GetWindowTextW
ChildWindowFromPoint
SetCursor
UnregisterClassW
GetPropW
RemovePropW
SetPropW
DefWindowProcW
MessageBoxW
DestroyWindow
CreateDialogParamW
GetDlgItemTextW
comctl32
ImageList_Create
ImageList_ReplaceIcon
ord17
ord413
ord16
comdlg32
GetSaveFileNameW
shell32
ShellExecuteExW
ShellExecuteW
ole32
CoInitializeEx
setupapi
SetupDiSetClassInstallParamsW
SetupDiCallClassInstaller
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstallParamsW
Name
.text
Size
85KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
54KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=19, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=162, id=1, productName=Unmarked objects,
count=32, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
x86/vrtaucbl.sys
- IMPHASH fa5c24a3900f8e99f3eea23504d75c74
- SHA256 4c04e377f8cf333a9bb1be7c09dd6b8de7d50182b14036a628e843cf8211fb0f
- MD5 a50d60de7499ac6c11d6ed656a49070c
- SHA1 b768fef2b16f149b0e377f846c400ae03d36b56a
- SHA512 bcffecbb6c3160c162421e754595caf58b8c1ebc11e8a9b248415d001c33df3b30066084849655326068f494f0f128e200c39254ce6f739694ab3cfe222f97c0
- SSDEEP 3072:DS1YilhNUxe+UPZp8pnNw56D02cj7bzKzU0s:QUxeHupiYcj7us
- TLSH T147142821AAB94C31F9F33BB05A7D7A2A592DF5D2033941C7335066E89C6D7C0AE34396
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
45:54:b2:14:52:d4:45:c0:f9:f5:30:a2:7c:3c:75:56:09:cb:ef:bc:ba:4b:5c:e6:7d:fb:37:8c:b8:31:50:51
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 21, 2021
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
45:54:b2:14:52:d4:45:c0:f9:f5:30:a2:7c:3c:75:56:09:cb:ef:bc:ba:4b:5c:e6:7d:fb:37:8c:b8:31:50:51
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Jan 21, 2021
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Revocation Status
Not revoked
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Serial Number
61:29:15:27:00:00:00:00:00:2a
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 15, 2011 - Apr 15, 2021
Subject
SERIALNUMBER=316547600105556,CN=Muzychenko Evgenii Viktorovich\, IP,O=Muzychenko Evgenii Viktorovich\, IP,L=Novosibirsk,ST=Novosibirskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c17736f667477617265406d757a796368656e6b6f2e6e6574,1.3.6.1.4.1.311.60.2.1.2=#13154e6f766f7369626972736b617961206f626c617374,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
5b:98:bb:1d:56:df:0c:02:5d:55:b7:5d
Issuer
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 26, 2020 - Aug 26, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Subject
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:3a:6a:e3:33:70:8f:da:7a:7b:00:00:00:00:00:3a
Issuer
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 11, 2020 - Mar 5, 2021
Subject
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 15, 2014 - Oct 15, 2029
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:462F-E319-3F20,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:24:cb:cd:02:a1:17:70:5c:9a:00:00:00:00:01:24
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 19, 2019 - Mar 17, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
1
Major OS version
6
Entry point
135184
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
vrtaucbl.pdb
ntoskrnl.exe
MmFreePagesFromMdl
MmUnmapLockedPages
wcschr
IoGetCurrentProcess
memset
MmMapLockedPagesSpecifyCache
MmAllocatePagesForMdl
KeInitializeEvent
KeWaitForSingleObject
RtlFreeUnicodeString
IoRegisterDeviceInterface
ZwClose
IoSetDeviceInterfaceState
wcsncpy
_wcsnicmp
srand
IofCompleteRequest
ProbeForRead
ProbeForWrite
wcsrchr
InterlockedExchange
IoReleaseCancelSpinLock
ObfDereferenceObject
RtlTimeToTimeFields
ExSystemTimeToLocalTime
KeQuerySystemTime
ZwOpenKey
ZwCreateKey
ZwQueryValueKey
ZwSetValueKey
ZwDeleteKey
IoOpenDeviceInterfaceRegistryKey
KeCancelTimer
ExSetTimerResolution
KeSetTimer
ExFreePool
KeSetEvent
KeInitializeDpc
KeInitializeTimerEx
RtlFillMemory
wcsncmp
KeGetCurrentThread
KeWaitForMultipleObjects
KeQueryPriorityThread
KeSetPriorityThread
ObReferenceObjectByHandle
PsCreateSystemThread
KeInitializeSemaphore
KeReleaseSemaphore
RtlZeroMemory
RtlUnwind
KeSetSystemAffinityThread
PsInitialSystemProcess
MmGetPhysicalAddress
PsGetCurrentProcessId
PsGetCurrentThreadId
ZwQueryInformationProcess
ZwQuerySystemInformation
MmUnmapViewInSystemSpace
MmMapViewOfSection
MmUnmapViewOfSection
MmMapViewInSystemSpace
MmCreateSection
KdDebuggerEnabled
KeNumberProcessors
ExAllocatePool
MmGetSystemRoutineAddress
KeClearEvent
memcpy
RtlCompareUnicodeString
RtlMoveMemory
KeInitializeMutex
KeReleaseMutex
KeInitializeSpinLock
RtlInitUnicodeString
KeQueryInterruptTime
RtlGetVersion
hal
KfLowerIrql
KfAcquireSpinLock
KfRaiseIrql
KfReleaseSpinLock
KeQueryPerformanceCounter
portcls.sys
PcNewServiceGroup
PcRegisterPhysicalConnection
PcNewPort
PcRegisterSubdevice
PcInitializeAdapterDriver
PcAddAdapterDevice
PcDispatchIrp
PcRegisterAdapterPowerManagement
ks.sys
KsAcquireResetValue
KsProbeStreamIrp
Name
.text
Size
93KB
Virtual Size
93KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
PAGE
Size
512B
Virtual Size
49B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
INIT
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=98, id=1, productName=Unmarked objects,
count=9, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=58, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,