VoiceChanger64f(2[.]04)[.]exe

resource
unpack001/$PLUGINSDIR/KillProcDLL.dll
unpack001/$PLUGINSDIR/LockedList.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll

VoiceChanger64f(2.04).exe

IMPHASH 61259b55b8912888e90f516ca08dc514
SHA256 d6a53bdfaf4016cc91ee5b844004893c700f4e270563311d0d41555cd40a4e83
MD5 a39ffabbc2bea08cf3306082cacde23a
SHA1 98aba3f5dcc0020eb38dd7f57ab08123dd8f36ec
SHA512 c2a960f0189d2272773ae5833b98ee0da571e78f7fde9c9dee6bb9d2f50e6a8a088757aa394e5a171e16583514001697f7d49992e991b45964b3e84fbece066d
SSDEEP 24576:pYD9YJJU0TUtLtvvKukmEZm8pDJVkj8uXqRIU+RonxU8f3gdu0430baa:WaJJUVLtahmEZJpQgu6/88U8fZybaa
TLSH
T1B7552331B4ACC559D892C631BEBFA06A8E7DAF4B1217864F23108FD4AD75B117D0B683
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

0f:3d:25:7c:eb:69:36:6b:f5:7e:48:a9:06:75:b6:71:53:77:6e:45:2a:58:41:b8:f3:66:c5:30:e8:f6:5e:30

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Bogdan Blagoev Sharkov,O=Bogdan Blagoev Sharkov,L=Sofia,C=BG

Chains

Jul 21, 2026

CN=Bogdan Blagoev Sharkov,O=Bogdan Blagoev Sharkov,L=Sofia,C=BG

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Bogdan Blagoev Sharkov,O=Bogdan Blagoev Sharkov,L=Sofia,C=BG

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Subject

CN=Bogdan Blagoev Sharkov,O=Bogdan Blagoev Sharkov,L=Sofia,C=BG

Serial Number

53:76:34:0a:02:d7:1b:41:2c:8e:8e:b9:41:7d:44:1c

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 11, 2024 - Jun 11, 2027

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Timestamp 2026,O=Asseco Data Systems S.A.,C=PL

Serial Number

28:f0:77:c1:1c:36:bd:fe:5f:74:32:47:70:27:2e:03

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 11, 2026 - Feb 27, 2036

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Serial Number

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

May 31, 2021 - Sep 17, 2029

Minor OS version

0

Major OS version

4

Entry point

13888

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize CreateFileW GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

$8/$8/uninstall.exe.nsis

SHA256 bc9870d70f3e21a2ee59f8bc503579e1e67853d1d1c4f2c4056dcac572d1766d
MD5 e73253ed0dcf2f71aeb710ef1c58ed4d
SHA1 8b67ed55cd2b4f61295113971d8f2f07d06c6d26
SHA512 32b91867b7f9c50da77a8cbf92f9cccc6894e835220bfeaa294ddeec49d3f690bcb4dff598d73247f01e0d33181046e3cb47cee3c5dc040c2c843f12f207e9bf
SSDEEP 768:md1X32bLt5rBazZOAcvWJNmrIOeIbJccFz6ZQ3xts8UsqTfdu7y:mHiXBc0ZQAHpbJccFz6ZqDs881u7y
TLSH
T169E2F19CE3B06194BC52944D0ABDFCA81537A93F8AACC81495C649F24F7703F1E11367
MD5 SHA1 SHA512 SSDEEP TLSH

$8/APOConfig.exe

IMPHASH a3867a6612c34ced3e91ca9ea263265b
SHA256 51d70cde3987044a44ebc852a58471bbdec07134724fba3df4747b32687eaa0e
MD5 f04c8bbfb8d2252ccab3f1d56438b038
SHA1 bef233a4a22eb3b5e651a5f061375cec92652742
SHA512 17c2be26245a5dfca67400f381a33180ebcde8815cc6497263a564d05dc1dbbc34b34370dc1277dab146bccafafe39e2ae14f00d4ca6317d6087fc980024ed30
SSDEEP 6144:hXtzpxJqoyk6H9APPQZLFlejj85JL7gfq:TpPK9A8LH5N7gi
TLSH
T127146D25BDC2D073E666097069E8CA759A2DF8B10F609CDB63840FFA4D346D19734B3A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

66:bf:e7:81:83:0a:34:70:ed:de:2a:5d:35:66:e2:5c:3e:87:42:8e:b4:b9:72:11:a0:ac:58:ba:ef:97:1c:2f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Bogdan Blagoev Sharkov,O=Bogdan Blagoev Sharkov,L=Sofia,C=BG

Chains

Jul 21, 2026

CN=Bogdan Blagoev Sharkov,O=Bogdan Blagoev Sharkov,L=Sofia,C=BG

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Bogdan Blagoev Sharkov,O=Bogdan Blagoev Sharkov,L=Sofia,C=BG

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Subject

CN=Bogdan Blagoev Sharkov,O=Bogdan Blagoev Sharkov,L=Sofia,C=BG

Serial Number

53:76:34:0a:02:d7:1b:41:2c:8e:8e:b9:41:7d:44:1c

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 11, 2024 - Jun 11, 2027

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Timestamp 2026,O=Asseco Data Systems S.A.,C=PL

Serial Number

28:f0:77:c1:1c:36:bd:fe:5f:74:32:47:70:27:2e:03

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 11, 2026 - Feb 27, 2036

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Serial Number

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

May 31, 2021 - Sep 17, 2029

Minor OS version

0

Major OS version

6

Entry point

31737

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Bobo\GIT\APOConfig\Release\APOConfig.pdb

shlwapi

PathRemoveFileSpecW PathFileExistsW

kernel32

CreateFileW FormatMessageW MultiByteToWideChar GetProcessHeap LocalFree HeapAlloc LocalAlloc GetCurrentProcess HeapFree GetModuleFileNameW HeapSize WriteConsoleW GetStartupInfoW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW GetStringTypeW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetModuleHandleW RtlUnwind RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect CompareStringW LCMapStringW GetFileType CloseHandle WaitForSingleObject GetExitCodeProcess CreateProcessW GetFileAttributesExW FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx HeapReAlloc FindClose

advapi32

FreeSid LookupPrivilegeValueW SetSecurityDescriptorDacl AdjustTokenPrivileges GetSecurityDescriptorDacl RegGetKeySecurity RegCloseKey RegDeleteKeyExW RegQueryInfoKeyW SetSecurityDescriptorOwner AllocateAndInitializeSid SetEntriesInAclW RegCreateKeyExW RegQueryValueExW RegDeleteValueW RegOpenKeyExW InitializeSecurityDescriptor RegSetKeySecurity OpenProcessToken RegSetValueExW RegEnumKeyExW

shell32

ShellExecuteW

ole32

CoUninitialize CLSIDFromString StringFromCLSID CoTaskMemFree CoCreateInstance CoInitializeEx PropVariantClear

Name

.text

Size

119KB

Virtual Size

119KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

54KB

Virtual Size

53KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

488B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$8/AudioChanger.exe

IMPHASH 56183be51ede472f606c0de4379f8af3
SHA256 4650d9d765d696247f3ee5e8e46a50df7eaa6fb8c4c787f29725b3ddec14e4f8
MD5 f387eab3029c382e51af4298b7798ee2
SHA1 477116da32d279f868c0f609183d4cb4a0ed5639
SHA512 d74427414ac544b0ab7576ab78f27acfa6952e9a2310e5385bd28dc14977f893485022a9fdbe767b0c1dcbbf37603eedc3a3f89972a9e37b738c593982fb8c0e
SSDEEP 3072:t65PxKAHTGwJyEDsUIzw69Ms9R7aXVR6+KPEqH9fSSoV:t6SAHTGIxw7DasraKMqdpoV
TLSH
T15BF37D5773A430F9E5278239C8A15A46F772B87617209B9F13A8477A1F133D09E3EB60
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

ad:f2:f7:b4:56:01:72:09:19:9a:16:66:01:5b:1e:eb:e4:70:93:c1:58:32:9b:aa:05:ed:01:c6:c9:31:7b:cf

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Bogdan Blagoev Sharkov,O=Bogdan Blagoev Sharkov,L=Sofia,C=BG

Chains

Jul 21, 2026

CN=Bogdan Blagoev Sharkov,O=Bogdan Blagoev Sharkov,L=Sofia,C=BG

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Bogdan Blagoev Sharkov,O=Bogdan Blagoev Sharkov,L=Sofia,C=BG

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Subject

CN=Bogdan Blagoev Sharkov,O=Bogdan Blagoev Sharkov,L=Sofia,C=BG

Serial Number

53:76:34:0a:02:d7:1b:41:2c:8e:8e:b9:41:7d:44:1c

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 11, 2024 - Jun 11, 2027

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Timestamp 2026,O=Asseco Data Systems S.A.,C=PL

Serial Number

28:f0:77:c1:1c:36:bd:fe:5f:74:32:47:70:27:2e:03

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 11, 2026 - Feb 27, 2036

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Serial Number

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

May 31, 2021 - Sep 17, 2029

Minor OS version

0

Major OS version

6

Entry point

13420

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Bobo\GIT\AudioChanger\x64\Release\AudioChanger.pdb

kernel32

GetLastError LoadLibraryW GetProcAddress FreeLibrary WriteConsoleW CreateFileW CloseHandle HeapReAlloc HeapSize SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetStringTypeW SetStdHandle GetProcessHeap QueryPerformanceCounter GetSystemTimeAsFileTime GetModuleHandleW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW

ole32

PropVariantClear CoInitializeEx CoUninitialize

mfplat

MFShutdown MFCreateMemoryBuffer MFCreateMediaType MFCreateAttributes MFStartup MFCreateSample

mfreadwrite

MFCreateSinkWriterFromURL MFCreateSourceReaderFromURL

propsys

PropVariantToInt64

Name

.text

Size

92KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

46KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$8/ClownfishVoiceChanger.exe

IMPHASH 83e791da41e9d8212b2098e29c451a67
SHA256 257bea54a955cae08765505e09f1583151df29d534b052dc347ebb361ff80077
MD5 a64d695c0409f23bd01d72c11d3e4c7f
SHA1 d53d9c52691f9668356d6cec4177573be1c63e9c
SHA512 6265359cd23ce96cc8924db1591d67eb6d220e4134a06b9d820c04970094bc511fa030532df6269bbd052e2c15924f15946711b89c3cd5ce5c04768baec07924
SSDEEP 24576:u79tdN9tdN9tdN9tdmg/EILuSUfOkcbMpXJ99:u79tdN9tdN9tdN9tdd/JUf5zpZ99
TLSH
T1E3256B1D6EE502B9F1F7D770C9A16402D6717C86873D99EF02C182894E729FACA39F21
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

d2:8a:ef:e3:2a:79:9e:25:c2:62:77:55:d7:f7:82:73:a6:12:8f:4a:bf:09:41:14:c0:26:67:40:0c:d0:54:73

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Bogdan Blagoev Sharkov,O=Bogdan Blagoev Sharkov,L=Sofia,C=BG

Chains

Jul 21, 2026

CN=Bogdan Blagoev Sharkov,O=Bogdan Blagoev Sharkov,L=Sofia,C=BG

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Bogdan Blagoev Sharkov,O=Bogdan Blagoev Sharkov,L=Sofia,C=BG

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Subject

CN=Bogdan Blagoev Sharkov,O=Bogdan Blagoev Sharkov,L=Sofia,C=BG

Serial Number

53:76:34:0a:02:d7:1b:41:2c:8e:8e:b9:41:7d:44:1c

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 11, 2024 - Jun 11, 2027

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Timestamp 2026,O=Asseco Data Systems S.A.,C=PL

Serial Number

28:f0:77:c1:1c:36:bd:fe:5f:74:32:47:70:27:2e:03

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 11, 2026 - Feb 27, 2036

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Serial Number

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

May 31, 2021 - Sep 17, 2029

Minor OS version

0

Major OS version

6

Entry point

447680

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Bobo\GIT\APOConfig\x64\Release\ClownfishVoicechanger.pdb

bcrypt

BCryptOpenAlgorithmProvider BCryptFinishHash BCryptCloseAlgorithmProvider BCryptDestroyHash BCryptHashData BCryptCreateHash BCryptGetProperty

wininet

InternetQueryOptionW HttpOpenRequestA HttpQueryInfoW HttpAddRequestHeadersA InternetOpenA InternetCloseHandle HttpSendRequestA InternetConnectA InternetSetOptionW InternetReadFile InternetQueryDataAvailable

shlwapi

PathFileExistsW

ws2_32

WSAGetLastError WSACleanup __WSAFDIsSet closesocket gethostbyname select shutdown getaddrinfo WSAStartup inet_addr gethostbyaddr send socket connect WSAAddressToStringW recv htons freeaddrinfo

kernel32

GetConsoleMode GetConsoleOutputCP FlushFileBuffers UnhandledExceptionFilter RtlVirtualUnwind GetStdHandle TerminateProcess GetModuleFileNameW HeapFree GetCurrentProcess LocalAlloc HeapAlloc LocalFree GetProcessHeap MultiByteToWideChar FormatMessageW CreateDirectoryW ReadFile FindFirstFileW CreateNamedPipeA EnterCriticalSection FindNextFileW lstrlenW WriteFile lstrcpynW WaitForMultipleObjects GetUserDefaultUILanguage LeaveCriticalSection InitializeCriticalSection CreateMutexW InitializeCriticalSectionEx FindClose GetLocaleInfoW WaitForSingleObject CreateFileW GetCurrentThreadId GetVersionExW DisconnectNamedPipe CreateEventW Sleep GetLastError SetEvent GetCurrentThread LoadLibraryA DeleteFileW CloseHandle LoadLibraryW CancelIoEx ResetEvent GetOverlappedResult SetFilePointerEx GetProcAddress DeleteCriticalSection GetCurrentProcessId GetModuleHandleW FreeLibrary CopyFileW WideCharToMultiByte ConnectNamedPipe SetUnhandledExceptionFilter GetExitCodeProcess GetModuleFileNameA SetLastError RtlCaptureContext OutputDebugStringA GetEnvironmentVariableW GetEnvironmentVariableA GetFileAttributesW SuspendThread GetCurrentDirectoryA ResumeThread GetVersionExA GetThreadContext ReadProcessMemory CreateEventExW CreateThread QueryPerformanceCounter GetCPInfo GetStartupInfoW GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent OutputDebugStringW RaiseException RtlLookupFunctionEntry RtlUnwindEx RtlPcToFileHeader FlsAlloc FlsGetValue FlsSetValue FlsFree ExitThread FreeLibraryAndExitThread GetModuleHandleExW IsProcessorFeaturePresent GetFileType VirtualProtect LoadLibraryExW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW WakeAllConditionVariable GetStringTypeW EncodePointer ReleaseSRWLockExclusive AcquireSRWLockExclusive HeapReAlloc ReadConsoleW IsValidCodePage GetACP GetOEMCP GetTimeZoneInformation FindFirstFileExW GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetFileSizeEx SetEnvironmentVariableW SetStdHandle HeapSize WriteConsoleW SetEndOfFile DecodePointer ExitProcess

user32

CreateWindowExW SendMessageW CallNextHookEx EndDialog SetWindowTextW MessageBeep GetWindowLongPtrW RegisterClassExW GetWindowPlacement LoadAcceleratorsW TrackPopupMenu LoadStringW GetSubMenu ShowWindow IsWindow GetAsyncKeyState OffsetRect DispatchMessageW SetTimer DestroyIcon CopyRect SwitchToThisWindow SetMenuItemInfoW PeekMessageW GetWindowTextA RegisterClassW SetWindowPlacement SetMenuInfo SetWindowTextA SendDlgItemMessageW MessageBoxA DialogBoxIndirectParamW GetMenuItemCount SetMenu IsDlgButtonChecked UnhookWindowsHookEx DestroyMenu SetFocus TranslateAcceleratorW TranslateMessage FindWindowW LoadCursorW MessageBoxW SendMessageA SetWindowsHookExW wsprintfW RemoveMenu CheckMenuItem GetClientRect GetDlgItem AppendMenuW PostThreadMessageW SetRect KillTimer PostQuitMessage GetDesktopWindow GetParent DialogBoxParamW UpdateWindow SetForegroundWindow LoadImageW GetCursorPos BeginPaint EndPaint SendInput EnableWindow GetWindowTextW GetWindowLongW GetMessageW GetMenuItemInfoW DefWindowProcW SetWindowLongPtrW ModifyMenuW AdjustWindowRectEx ShowScrollBar LoadMenuW PostMessageW GetWindowRect DestroyWindow AdjustWindowRect SetWindowPos MoveWindow

gdi32

GetStockObject SetTextColor SetBkMode GetObjectW DeleteObject CreateFontIndirectW CreateSolidBrush

comdlg32

GetOpenFileNameW GetSaveFileNameW

advapi32

GetUserNameA SetEntriesInAclA CryptAcquireContextW CryptCreateHash CryptHashData CryptDestroyHash RegQueryValueExW RegDeleteValueW RegOpenKeyExW InitializeSecurityDescriptor RegSetValueExW RegEnumKeyExW AllocateAndInitializeSid RegCloseKey SetSecurityDescriptorDacl CryptReleaseContext CryptGetHashParam RegCreateKeyW

shell32

SHGetKnownFolderPath SHFileOperationW SHGetPathFromIDListW SHGetFolderPathW Shell_NotifyIconW ShellExecuteW ShellExecuteExW SHBrowseForFolderW

ole32

CoTaskMemAlloc CoInitializeEx PropVariantClear OleInitialize CoUninitialize OleUninitialize CoTaskMemFree CLSIDFromString CoCreateInstance

oleaut32

VariantClear VariantInit

winhttp

WinHttpReceiveResponse WinHttpOpen WinHttpAddRequestHeaders WinHttpReadData WinHttpOpenRequest WinHttpSetOption WinHttpCloseHandle WinHttpSendRequest WinHttpConnect WinHttpQueryDataAvailable

version

GetFileVersionInfoSizeA VerQueryValueW GetFileVersionInfoA

Name

.text

Size

633KB

Virtual Size

632KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

272KB

Virtual Size

272KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

105KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

27KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$8/ClownfshAPO64.dll

IMPHASH 9c573bbf85cc62bf87f905b8ebca5934
SHA256 2ee8484d4f7e33adbe93fc9cc4f19300adef13942aba7b2772efd8156ea12994
MD5 fa307e9967a35faa6f6c44c9ae912cb6
SHA1 c29198490611a37673ac74238a2039f1b2deb98b
SHA512 91809cebe80a3d4af727d34f53b850efac16209d9ce07b483a0b26ba4b3e02334df090dd05ae4409349c008d1948be966d9bfd2eb1e8e90697ab54ad4e2ca4dd
SSDEEP 6144:tvbxZ1gPPNcOemnk+j8edhyQ7BsX4m9V5CIiRpKsVgWooz188T:9dgPFcFIR4gyksX78UCeob
TLSH
T12C84BF05FAA500F9E177917C85BBA607F3B2385D0370CAEB03A446692F277D45ABB721
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:6 windows x64 arch:x64

Digest

e6:50:ac:60:e0:35:77:e6:9b:bf:69:e4:12:95:84:d7:05:03:3d:b5:83:74:2d:7c:22:be:54:bb:62:35:9d:20

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Bogdan Blagoev Sharkov,O=Bogdan Blagoev Sharkov,L=Sofia,C=BG

Chains

Jul 21, 2026

CN=Bogdan Blagoev Sharkov,O=Bogdan Blagoev Sharkov,L=Sofia,C=BG

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Bogdan Blagoev Sharkov,O=Bogdan Blagoev Sharkov,L=Sofia,C=BG

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Subject

CN=Bogdan Blagoev Sharkov,O=Bogdan Blagoev Sharkov,L=Sofia,C=BG

Serial Number

53:76:34:0a:02:d7:1b:41:2c:8e:8e:b9:41:7d:44:1c

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 11, 2024 - Jun 11, 2027

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Timestamp 2026,O=Asseco Data Systems S.A.,C=PL

Serial Number

28:f0:77:c1:1c:36:bd:fe:5f:74:32:47:70:27:2e:03

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 11, 2026 - Feb 27, 2036

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Serial Number

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

May 31, 2021 - Sep 17, 2029

Minor OS version

0

Major OS version

6

Entry point

75888

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Bobo\GIT\ClownfishAPO\x64\Release\ClownfshAPO.pdb

kernel32

InitializeCriticalSection WaitForSingleObject CreateEventW Sleep GetLastError CreateFileA SetEvent CloseHandle LeaveCriticalSection CreateThread ResetEvent GetOverlappedResult DeleteCriticalSection GetProcessHeap HeapAlloc HeapFree WriteConsoleW WaitForMultipleObjects WriteFile EnterCriticalSection WaitNamedPipeA CancelIo TryEnterCriticalSection ReadFile CancelIoEx GetModuleFileNameW CreateFileW HeapReAlloc HeapSize SetFilePointerEx QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW RtlLookupFunctionEntry RtlUnwindEx RtlPcToFileHeader RaiseException InterlockedFlushSList SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer InitializeCriticalSectionEx GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetProcAddress IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter GetStdHandle GetFileType VirtualProtect LoadLibraryExW LCMapStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW GetStringTypeW SetStdHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode

advapi32

RegOpenKeyExW RegCloseKey RegDeleteKeyExW RegCreateKeyExW RegSetValueExW

ole32

CoTaskMemFree StringFromCLSID StringFromGUID2 CoTaskMemAlloc

Name

.text

Size

173KB

Virtual Size

172KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

RT_CODE

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

161KB

Virtual Size

161KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

RT_CONST

Size

512B

Virtual Size

304B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$8/res/Alien-Off.ico

SHA256 9d68b4ce0995e03fa5a623c36ac00d2641697f9c2120b2d4acc24b371037a729
MD5 3f7b046b32d33fa1db6d801326c84c92
SHA1 f267a3236f46e5160fbda29bfc0e628ab24f2d35
SHA512 e5e1f723e41c9f4ee324883b7d2746f89b8333b17172b1dcd05e8e070caa200e184d12382140986a0ab852312878e9c1d9e6253accc558af246f69f4598ae347
SSDEEP 192:uD10D/av2EfZsnYlMNluw/l5K4kidr+QJWQ16Ti5Y:I10DSeEfZWgMNUmloi1Eiu
TLSH
T1C4722D3B0A2DE813DD8064B1AB62D4FB67306D5D0665890239F63E3BF7ACA17BC0C156
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Alien.ico

SHA256 99d1d4618d0ac84f70b30334c94208c617c76f8f1604f665f8dc5c424e638f4d
MD5 b4912b4e5ac58c1da8deb5834e3c366b
SHA1 4d3470a065095f6498e45f7303a8630063eb658c
SHA512 aaa10258b02e41eb13e45ad5746ef5dce249020a973a83e2532bc2d20de0cba6d92d3f4bb3716f871b9eb4db633863763a087769054f9b832cd308b1e7865139
SSDEEP 384:9S7e222222222222Rw+2u8wexKUluUvaFPd7:9Ie222222222222W9ANa7vI5
TLSH
T14D727DB42601A1A9D6A48C718FD4C1310B203D6EA486ED963EF8BD1F79FE2674C064D7
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Atari-Off.ico

SHA256 6df6a6464c72af219094cf3787cf0d1f858e2fd3b6c5cc213deecabd911769af
MD5 6f984a4938ba524ba9657d3c63845790
SHA1 0b1789655b8139fa9975aea26860674a5b4fd4de
SHA512 f7c403fbf0e3436eae86e141078db563ca7b75ee157eaac4bfd239c5a42227680598a3cf76e4f30760232f71dc3b4fffe7a5bab8d6106854be9eabc7c43298b4
SSDEEP 96:f08opGfmdCRtijpfChf2h5hTAOPcEmvV+WAiPgopg44ld:eCRtijpkuhvTAgxgVLRSld
TLSH
T1217215222639BC16D46225B97503F272BB02AF631647B1A676E3DC777463DE61FE0340
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Atari.ico

SHA256 3874c8be3dc907e0f26b658fec2a551e9651933a819bc15bf9f93b578e8b5284
MD5 b5c428102274914255a1c7f4876e2dcd
SHA1 03c76804698ac954d950b6a7dc334fa9ae6db45d
SHA512 daabe89489aa3f6089e05a2d96f149211d4b4338d19e68497b5531d45a8580979dea303b95bdd93f14a349c743e18e120eedabcad7a472b9dd8032f5db42aeee
SSDEEP 96:fF4MmcfBDUD3inWmrMuxutZu2uJOu6wzYgadpbcqe9Mwc2OAPuaY8E5rFbcnjXn4:yeRrGOYe9yYuaVLLAHdRI+ld
TLSH
T1F772EB1DA728AD42C5653AB9C463D3F04722EF1052E186CB2EE5BDF33D266636C3D058
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Cave-Off.ico

SHA256 671d371f7b2f07fc7b1e8ea9f0ab1bdf2a9055e79f3c859b19b6f579fc17987f
MD5 fc40dfade66ab7cf24962bca246834c0
SHA1 9f5c5dae7824afd92ae3dacc9bd72f814bb5e776
SHA512 e0bcd0d37c1b1a4db6dec33d9b3f6471612a7e266349b744bc1e3664e908cb737304af77f3d6f91c7e44ed561b86ff4e686625301fbef4a24919df765d105efc
SSDEEP 48:SeeBxuMtMkqCvNbvaKFqhsA5OpFIVgi1V0KDBlYXtEwRwXtWAm78O3LoYk27fxYS:aDthq0NbZFUsA5OxtK8dDRmOFtzxYOt
TLSH
T15A725EB2EA675F4BF759F3B0FC1A40956F273A444808621AC97E648209A201FF4FF15C
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Cave.ico

SHA256 716cc28267dcdafd13ca183d11fd74394f7e55063874d5c19a088ec40e225590
MD5 f8b303268883f3500b9723c5f82843d2
SHA1 805cd035ae00e0fb37f3afbac9cffdd5c3b12014
SHA512 0d4b0873c42ff4da2b908bb458c59adba5765c48c4b2168ff7749fa58bd637b483001615532ca4a4158b9e43ac6881ccf4f372d9faf29f136bd473741a975e9a
SSDEEP 96:wTdrWLDwKJdeQYXcq9LCqh8Y86k5KRmbARaj/8AN5tmgnUYLYtp2pcX5YOt:wTGD5J0QYs9yCLsI+aoCclbsaX5dt
TLSH
T1CF72CAAC31044AC9EF503672D0E25386EAAC4C692864A067DFF63467367348F7EC5E31
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Chorus-Off.ico

SHA256 e472affc0a16978628ae05ddff151eb0e4fe2892989e55d3bc3e2715d9679448
MD5 87eafaceec081d8d2bad823ec42d8372
SHA1 515545777b7805a4ff74bfcdee79d9237a11c669
SHA512 6957e54e9fd29ec607821ad451727cc76ab04e8ffb99b6b0fea8dcc821b4e579beb4ec4f7cad1f9e90fb638601a3752720931be1a0e3e287b5a12ac3e3d472d1
SSDEEP 384:cNnoaGapKaVa1a3azPa6a8Fafamaxtk0XcGUa2aeWxrI:2EfBt4a2aeWE
TLSH
T15672F8262B68BC03D314A1B29191D6FF57343E545A4DE21334E6B9BFF914B2FE808318
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Chorus.ico

SHA256 b6e3c53bb48c2898ea96955a8df633c78035cf071842e84e31a6b265f86ed49a
MD5 afefd408c6dff3dbb1217c497aacd33d
SHA1 ba1439c6d07e450b16ee1326d648ded9d3c8aec3
SHA512 205c5c0d9b1b0f4f5e844c5abee168e7d3b64da0914b70f5470d7635f68f1d2bd5eee2343017a0c4961c2c78bd4ca2f70cd5594ef99b0ba91ce5250e0f3a4ca5
SSDEEP 384:cNnoaGaDGKaNacabaGca4aOea/aVasdaQFpHwgrwxO3hTzRRLQ:2PCw5pQOR6
TLSH
T1C572F8B627A8DA87D202613081CDD2390B38AE492C9FF26339EA7D6FF5347671409375
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/CityHall-Off.ico

SHA256 2b04ea3f81189ce4a22abe6eb620dc65cf6bd44a2f152303096e3013068778ee
MD5 822ce582243adb560d3a6f5b87884cf6
SHA1 92fb5a5a4a81293cabba2b9e55fa03f0c51f0d1d
SHA512 27208641135e35d100de11b2de6d7f808d35ede3cfad8630b7cbd366e0a750aeb634392f4905bb9c65f9477927e3ea6447bedbe59447ec24cf511cce16eb2b50
SSDEEP 24:rnnnnnnnnGs0scsUHvel6HtY0cQMYKdkyI2fSHo6666666666666666alKPlV22K:wnKd3jS4T2
TLSH
T11A720AF36595B73CEA0734B24B9382F92E943848D774800DABB26F0A02273D158EB617
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/CityHall.ico

SHA256 e1bca0ca6c4acc6b946d9486dea1ae89a8fa36715fc80f3a70d70d60689f0bff
MD5 b8a844f428b535a1dfc17aac4a247041
SHA1 c6ff6d1ddfaedf589cc0e541f159ca6e97b4d907
SHA512 52655bfc21a68ca6e00dd21e2f5123707a7e0f51d318f86c6b33bd4ccd3d0a36f9f01123eeeaa23f48d232617919f88ff68b9b082852c0137bd27d32f2b9fd4a
SSDEEP 48:5jjjjjjjjDNv/xUFPw+ahykOSwlka35Ukasaka4faka4akayaWakayaWakazUawI:UbOykOTpUT7TXTXTJdTJdTzDvAsTy2
TLSH
T1D8720CE67309EC60CD06A9F43F67A18CEC3A6CFC951BD4C9A6A1B71E153091C2AF44D6
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Clone-Off.ico

SHA256 e899579042c65ee392700daf59d07252d9a4241fd70cc56a00075d2be5ce5609
MD5 252a8304468aa4d67cdc654959f72ac5
SHA1 4cdabf4f34cd8a27991ee08d7d0d366ce1060723
SHA512 78854112f576c3ab88a43d1ded442361d32a4f3a5ccfe72f1317b6c0bc0b697cb6f492f5c18053667466eeb37f278c2aac9b54079ff04302c9a2862f704807ec
SSDEEP 96:s+iN0u0u0u0u0u0u0uIXuku1hTed+Up4KgJ+/n5sss6hhhhhhhhhasChhhhhhJH:s+Q3333333IenjTed+w437D
TLSH
T11672EF7D7409902DD5B03038C7229AD7FEE93CAF5364B10122F66E4B95ADF42AB18287
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Clone.ico

SHA256 d5e17286741825c832a92ff8eca5aa1a11a3873cf825e76d549a06d7527cf437
MD5 818e9c0e411979071778221ef3e64ecb
SHA1 6e9f0e72c0d0dd8d4c6208cc65ce643464c2fc60
SHA512 1cc1202620add273cd1e6eedd4cd01b01457725e2ff798107959f6c4f9dea9aafc068ed8a77e366b01ce2fa4bd92a8c6e8a52d86f5209eacb17924a25f7b3b1a
SSDEEP 96:04eVYumijdVfw5PhI0PI7MS2/uvsss6hhhhhhhhhasChhhhhhJH:GVPJ0/jD
TLSH
T11E7298273116BC53ECB06834BB6682E8BEEE2FE97750F4267080794A557B00CA8737D4
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Denoise-Off.ico

SHA256 bb153cd62ed62a09586261d70751c51d97df9fb767b877c00f0b8b2a881e9af6
MD5 858d2eb360c027803b72b32c17039911
SHA1 09918012226a356e715c7524cca18ec5a600f237
SHA512 87e4999018393823615f616a9aef03d0328cbb43efe9c16f9769bd2a315a43907d6fcaa7a62ae054fc0ad426c05f5fb7db24bd3dd470cd4615721f1b62751e74
SSDEEP 96:AQMy6xcKAhuixUaN1gS8Cgg+ggKggAKggptdmT/o:b6xcK413tdy/o
TLSH
T11B722CD1952AC28FFB7817387BB796E01A5D2DD28605C53631B0AA06DC6D1906CC2FBF
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Denoise.ico

SHA256 7e2fdc9d5c24d1603c5e2a8df1451e69fad62a680bea9de6260a56ae460788bc
MD5 8eb0b7285d65d173888513d0aa958889
SHA1 15544cd856122a8db4b4da8a8bb95edcfa59dfc6
SHA512 55f11314875ff9b8a4f65e005228fc41a637257f8808f1a62b33084d01ea8f3e8fddb0497a578f90060bd486636e0a49aa471a385cbe40d4993c084a3cc03e76
SSDEEP 96:42E7Uxk5ZA/UWj+Yw192Lk1fw4mEFoIueyTPl/DjmI6dSliGh6o:V05e/rYULyfjZocsl/DjmLQOo
TLSH
T100723A94AD11E127C0FD507C3B6A8EC417682E6B708496E6A0C1FAF765AA6D13079F3C
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Ghost-Off.ico

SHA256 bad408756d828fc4e22c57a121a75a8f9614991e83e97921610186216defcb9f
MD5 643d096436c385792760aef98a89db20
SHA1 0813ffab627cf8ab07bfdb62e7a9bc0a204e605c
SHA512 4b954efb23200777ed9134daefc3d7ea76cd66c7ed18dcde769fb4df80e007c7dd5cd103409b5902c4b349958b193cd1a6b0f0ae35c4952a81f8c4a26bee23c3
SSDEEP 96:zge8ckXmSuW6If2oibDfqIyS5Iqo/ztx3Oyox5+ThunnX:hRIknw0ho/PeyoxcVunX
TLSH
T17472DA793921E08BE76C5BF1F857C5F206603CDD859503BD7AEABE8B7CA721214C2609
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Ghost.ico

SHA256 1802ac52cf0e1b406467b21680caf06d992311a242f4d6fc279d8b16c2f1ddb0
MD5 c6d7ff48826361fb32b8009e0f627266
SHA1 9b48a55738a712a7b7cb666457125436962c73e9
SHA512 5b6402c6a259aa22a4d1740986f8468a312ed5bd96020f64ea29c9a017e309ea7c1d3ab2c5a5e53fac3bbd4acffd5a3a2231a4af62640b759fe9bcc9adf25715
SSDEEP 192:ZvXzAoJ4MLkiPGtTp9Idi5Icy43n1pEtX4+dixMbZN2XbkYKex8X:ZvXxYBIdihXXEtI+di+lNgbZxx8X
TLSH
T1A272D989788152A4CC19C2347207C5FB833B6F3EAF312C6D26A7BE16B7936509CCA11D
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Microphone-Off.bmp

SHA256 56014e25ab2a2e1ae0b3cdc5fbd899cb9571e89f97c0a1a6b66f3cfa9d93a525
MD5 971940a0d1831de2f7108b117102d9fd
SHA1 072eed33f8dec4e3318be35ef3232dbd6ed7b85c
SHA512 a615e5cc1251d1c6f4c09ca5803488d54439b3c793d362e621a308eb892592e719f070b67e7c049d74453f11b066bed254ee27144faddd12f043eb89f7eee9a4
TLSH
T1DE0125B538F7A8D6CB634E316D77C1102505F4167FC94312580D43A1BA31D369C31F02
MD5 SHA1 SHA512 TLSH

$8/res/Microphone-Off.ico

SHA256 0c39e36374122bec7f62f2008971630aab77acb842a8227414aa8efd41b875db
MD5 7a4eae69fa8bbcecd7d1c5c26cbf0f57
SHA1 d4bc72f9954fa58f624718d68dcfa8df4ef43867
SHA512 a1edd33ffbb0cc97952dffbaf87cd813cf6f80fb4a1c27dfbf1e642c8b2ea17076af84fcb674a737fcd9ed7f5d62ae604a777ca10900a01fda7a85cbee5628be
SSDEEP 96:+XDKha7Ozha7DbuzhbtajKEa1WHuY8Z//8dL:apOda7DbuzttamEEWHnm//A
TLSH
T1CC91C833292698D1EE1C5272B4974D92292138EECBD0AD4835AFF7778613233520BB79
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Microphone.bmp

SHA256 a60621c95d5c0198b2b2f88614716832a46d4923b3ed8023bf136f5e3b4cdf75
MD5 3ee0b594a2590956d5e495bab976e7a7
SHA1 97a4de0930f7acbfcd1ac8363abfd7255b111971
SHA512 ce43ae253eb5b777b0eb8d5f3d1d99485e7af1747dc93e2564fc42433ba3a0550f489e8d19d73d615446af53c81d5ed617c838f127b24a7b055b1174d62ae487
TLSH
T1EA01758B2F126A62CDB70838EFD9E51A44D488D64AF1BBB824E70D4C13125C33039DCB
MD5 SHA1 SHA512 TLSH

$8/res/Microphone.ico

SHA256 a8992375ccda029017fb09cf9f404bb7c7364f6b226dd3c082ad30cfb0897e1f
MD5 ac87badf42c18d9b85e9927553934a22
SHA1 12c52083ceec0b8e02c7df852cd866ae902c5355
SHA512 cd8541c9f9b76b0223e9b323fe0dc8b4d24b18779e876c558fc4d512a2e3807b813941d0033dd32f3b3e7941522b7e2c28e27e25a05a8186b6222065ab666062
SSDEEP 48:h9PzuVTiHY1wUica2VAHonMkr17xG4I961BDkC4DkDMCEPiBCLZZgKI54MhskJI5:h9P5+VSHOy4I9GBQ32PykkL
TLSH
T14091E8516EFE16D9D1ABA43EC1DE5533842FEB942A2C1C2050A9190583F3A8771BA15F
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Mutation-Fast-Off.ico

SHA256 9d5d274595493a116342d0773e33743f2c8b08dc4c5857fce3467b993428fd2e
MD5 fbf41565033ad19d2248a78cc799f2f5
SHA1 4c60e313038a57b86f2239c50ec7ccc99127ee88
SHA512 3973cddef018e61ac8c25b5bd4af32ecaf12c2281dc452bca7c120a92ac769ab5ce45b123f26a679291a194a8292880affdd86ba35916792a0bcbc3d456530c2
SSDEEP 96:0K4p5TZsT3iUrBF6L2+PIPxG+D6lVfuSSUJVrS+v7x/aMuYAssr6UpW2aNh2Et:H4p7YiUg2+J+elVfbN/u+vFWr6NNNhJ
TLSH
T1A472D76BB545D40BC90012FCDF75E9BEB2B1ED6029548B403AE2BE7FB67C3939916204
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Mutation-Fast.ico

SHA256 253a04575aabec843f6f4ab9d0fdd874d526f7a0f8c45922bd7bfa9242f2bac9
MD5 4c38f648467f86b0b76cb3bb9913270a
SHA1 1c7abe04aed779f9932f1d518e65e6a24657cf56
SHA512 a16efffddb1813f1fe599b3d7b93b13886640a4b18eaa6e08597c36c0a51aa376fd2587b4842ed3728b56bcfdd7bd1888424cc0f8655b9f83d29579907d76625
SSDEEP 192:HJTxtRje9EmxqwR2fip95+s8YF36PSzbyh4gjRcSJAqG3k9:CWm5rT5DTUKfyhfsq19
TLSH
T132720A70F605D544E61F82F68FF9D6BE4B70AC1919101EDCA5ECBF9B3A792E2C600618
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Mutation-Normal-Off.ico

SHA256 e108093b0a2897652c3646c58be076fa0f6fea8099858429d4430cefeb2370ff
MD5 68dfefeae93b257db46fcaf0f101c8c6
SHA1 a4c9c364878bbf4192c222be65d0303ad6d13afd
SHA512 e59c53ba2ac469f37ba6f39359d9f62418fc255876820cc0cbc75c6559abd7487c01fd6cb15c54e91622fa7bab5e040dd21b5ffac0d005f66bdc88c0dda62f3e
SSDEEP 192:H2ztALUoI0ZUF9Ij2lk+KCMnLM5mnGEaldiZJdlhbfHbC:KtALTUF9zl6MjEazi3XVHbC
TLSH
T11C72FA6A266CF413C78090B97F53C5FBD734AD083909860279F27E37B5BC25B6A51219
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Mutation-Normal.ico

SHA256 8176921000f89a71e8719ed20b77ffb380f87bbfe5a59f073c841c61d9a877b8
MD5 6e4004a72a3fea06f4ddedf1a349c54d
SHA1 683937023167f7571dd67398f2bbecde2c7f7cca
SHA512 b1bbda78d27d727fc768d56065773d70918e0f15d8860011de0aba007562ea6985268978858568f631e695f8a4729393c342c0c944280e3e94fe5fe000dc455a
SSDEEP 192:H2cuh0Nb5xpkkQaAjXBhspi5RzwuXXQ+9wAyyIUokFnENHbC:Wcuh0NxkCAlhswg6QswAyyokqHbC
TLSH
T1BD7209AD3629B91BC38050751FB0C4B5D3A2BD0C39014561AAF1BE0F3AFD687DE651AA
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Mutation-Slow-Off.ico

SHA256 76f2e1f2dcb7ef4a532d3ed539e8e5eea900ecfd24b84da91b6d7a6201453aaf
MD5 9212061a50c0a464fc9a23ba2b642402
SHA1 38e063b9d901855295ba27468d386fb19c264610
SHA512 25591857a02bb78bbe1f7e2ae621920cbae65d2ff270d1549acf3aae2a4d59970bf9c9364b9b543dac63fd8d97f0e18708e1f71bdcf76a22c3d9af73c8d34800
SSDEEP 192:/CwLptgd5lGZ7t2wAo+SBBm0imCbg3KIl:JLpElGXAo+T0iWKy
TLSH
T16772B66B6B29D906D31031F89F50E0B59BB4AC0C3A1A9BA16DF23C5F7AFC6535C89017
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Mutation-Slow.ico

SHA256 06cae75f238e989d3df868fcaa8529c614c3804fd57c6a7fa26f83fa892d26e3
MD5 a3b4f287362f6128ee9c1647af52b0a5
SHA1 de1c96252d1b867089704bb4ad617ff169575fc4
SHA512 0b8541b43f6eb688abe8607c9adb76987238bd724d3b64ebdb46b661deb143765e6a425943b1ec80e09d6e8584859fb639078e3d7bebd72c23c39131d51d8fc1
SSDEEP 384:DEXlwzcFAb/pT9999999H9999999deQKD/715:DEKzcFArpT9999999H9999999dRI/T
TLSH
T11672089A7915A61BC30616398FD0F7B0936C5E9C2F510542ABF7BE077EFC82B5A09428
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Pitch-Baby-Off.ico

SHA256 8656ab19d7393e74a6e486dfa7c99f6ece46b1a479c6459356d8b9a2493c5af6
MD5 f1df374917d3f8f9ed76f195a95fc69e
SHA1 a0011da872fc603b91b64333db8431b1215dd357
SHA512 f18ad61d77b902113a50361cab2eb549b636fadfaa49b64cd0bb8815d79494e1bf27393d2b3737d77c103c58bf2f323b601b508ca24f873bb1864dc7ea11ff67
SSDEEP 192:vnwyQnnGUJaBo9+uiiiiiiiiiE9iiiiiiiiiik/r31HrrHHPWQKK:vwxJiAWb1rrnuQH
TLSH
T12C7298C27C1CC9C6F51029FD78539B98A484ED9B62D9315AA64FE7DE80E434202BD7CB
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Pitch-Baby.ico

SHA256 1b4852f4cdac1a50f802b0590cd615cb41b0dc4cbb2760abfbc7998edc0529e1
MD5 e3fd1405f464a7a805d81082f68e7e9f
SHA1 351b37806e40734e5808929cd25fbe5fe4620f1f
SHA512 e41b022af71f7f7f5a5b42fc75867db4236ef94b15cdf333495da7eab90d89ea5071110ec28b562132f7ab0bafd692fa70d9889c62d736dd1b7e931b05bf6c44
SSDEEP 96:5hnwHoTASy+Md5MpmEjVdCHGVZj0u000AVgWdwbnZVD6CniQKQQQQQQQHQQQQQQz:vnwIJgWpdw6Z4kwTnvVPMdDZyYM
TLSH
T1247294C56D4841E3F572FE77640388EA115328BAF4159CA26644FFBF938EC674BA1113
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Pitch-Female-Off.ico

SHA256 9e14fa6d74fcfa6aff3f7d8f7dd3b56af1487d759059e5905ab5020f3b231345
MD5 93adf3488c6445baaf58722b824cef92
SHA1 493dbddffdd665be4bbff73710ed6be48f8b5fc5
SHA512 b6fe5dcb7d7c81cb26d0720339466707084ca3d29f6558fc74fecc0f9f6043040e2b6bbccbeb66fd772305be92ed95a9eed703ad2f3adcae8edb55a2c5e0bc25
SSDEEP 192:Vsy/Z0Ka/i/irkkpiZii0qeZo10h+jDycY+1OiVRRwvMcJvJF:VsQaDUeZ20h+PycROiivMcJvJF
TLSH
T112725710B44448DEF73B15B6A653C5D64DA4FC9BEB51203F26DAEA9724F4303482ED2E
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Pitch-Female.ico

SHA256 161de208a3aec64dccd1351be3f0cfb31f4fa144a6fcb6776437613bc36d6074
MD5 9df98607c8c803b39f1f31e1865bbe65
SHA1 1bd4eb1bc6eaaa3036f45bae64c0d091c158f3ff
SHA512 b89b772fef928cbc0990331f4d30bd21cfd519fd45b0fe02114bf8da41134e205dd43ea1dc7ee0744233008183c132f4745eb2fe27712ad7f0928dbadccd7997
SSDEEP 192:GKwpljqcstJ54RLpJKJSVZJZL5irUAannnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnm:GKwplqyJFFLUUAzesF
TLSH
T12972A11076C05189D1198ABB9B3BF063051F2D1A133A99392AF07F0B27AAD875E3EB50
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Pitch-Helium-Off.ico

SHA256 2c639ac60a864b592ec054da4a07d11bb4d6cdb1066ea698cef5d3e59b71704d
MD5 7594baf2728dfdc8f8c55456f5f5f932
SHA1 bc8d54bf277dff6a3f73b3d7643bf43db403d2fa
SHA512 7392ef4431edf3e316f1f2bfa37ce58ba4987f26af9f9023dc7e820473890be5fcee27a8c8536cc4a627ae49040f480bf0d9ab2d751808b0e7f10b7f931f856b
SSDEEP 48:5eAGUYilHGcmSf3IB22T66666666667p3C7KYfrypTHPDGvXP1OK94LBa8Ym1fa:sA1YXcpfa22XQeLPDGPP1O+3rm1fa
TLSH
T1CE72A48AE243D1C9B49416A8CF369BF2C621AD52CB043123FE1F3EF9767A312462455F
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Pitch-Helium.ico

SHA256 57c4be5d556f6b4c787586728f75edf5f2f29fe405eb362ec400ea7d19159cee
MD5 14d45e43dfe60e6a24bb73dee4f617e3
SHA1 4f2ba51c9c0e3eb0b83fa3401ed2fa737cf67e3c
SHA512 ae50ede1a98eec82ee53aa82f7be4e1fd994ed41d321ec6274f423b0bd19ad9d595d3f9f20c498490af5dd26a7783936016a8795e1b96acf64758588d6279f98
SSDEEP 48:ClHYZTdOiG20hC2R780tJ6Jp0cmzj/dUd/XO6oIcHnnnnnnnnnnnweUApELj+GWy:CaJdOthFR78OJm0Jj/dWeusEjsRNfa
TLSH
T16272275CA1D8D1808A440E2EEF3292F80830AFFDC8D4415BE570BED9B67971FB8C5689
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Pitch-Male-Off.ico

SHA256 3743770e30f2e35187794c0f765d3313ffca4257d5f54579ec6f49c799a113d5
MD5 ec5bf36ef0d5a9d98b174eae13e053d6
SHA1 c060e8aa6aff84662e25794a86b7e29c15bfbf32
SHA512 9e230ed7ab209ea98ca53a7a639b0ca2f8df3046c8964bb2956d207b5a677c92c01e3b79cd87ddc1d386006b33cbec67250cac28beadb525ac80c971df3427cf
SSDEEP 192:llqzjF+5mmQJ3kSUvY2b8QUOk0n4IsybhirO5q:HMjF+5wJ3nUA2b8QUOk0n4Isy1q
TLSH
T1F3726E52237CC48AD55502BB7956F667EDC36C2D096F8006A9FEBE2B21E56C2340F21F
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Pitch-Male.ico

SHA256 69c3129ac103c9b5c7bf0203d79911a195c52f849b8cb51ea2a72a22ae0e5db3
MD5 4f722d42b679c3137e0ec5d0380b5c2e
SHA1 30f9554ac568321f10ac08346ec5fd9094fc65f5
SHA512 b64d35d1f14449a0b3ce2097324a577101e576d0151ee938cd76124392e75bf6bf650aea3a2654a2436be47d8b93c46d0353eeb048fcc730057a3285c2f5d2a6
SSDEEP 192:m2FBaR89rlv3FD4g0+8MgJ2pzyJYXG2UrOwiuRq:LaR8vug0+8MgJBJYWmmRq
TLSH
T1BC722B733E8098C7E15DB972DEB1DFF03E522D7D1800F20620A17E8B2BA7475AAD8558
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Pitch-Manual-Off.ico

SHA256 3eca94615a2ca4f29cdc0a3104fd84b6b01dc19415381c32e31edcc1073cfcb9
MD5 a46db4094f28a4548446e255b3b8f6c5
SHA1 b4fbc2baee8d82b38cc4b3af4f76f83acda1cdae
SHA512 a398d136284b7692a6159a2373f52f5658170b3219c08d9f8156b2b612e4b103bd3eab21d6a01b7750fb35995572f7ae1fe41c358819d8c388a660cba406ef50
SSDEEP 192:on8iS575Ovh6jEUNXokcaXEBgNIQDna0icvkcL6QI:oaVOdU0SiQDnaZ8kcLhI
TLSH
T109720993DB29D49EFD2031F0A1D3817B9DF42D352B50968D9F26B44AEEA030B784F519
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Pitch-Manual.ico

SHA256 d872545106e8e899c1e340e992e7a22cefcbe62eb1aada04fd2089d629043716
MD5 cd5e5ffbece346671f78bf2add304a73
SHA1 cae262814cede831b21a8d2756778d408ae55511
SHA512 d26873abcfc65e7899c6ecc4be47f342a5280e733afe03ab528c5743022a91e0c292823afa699d8044480fb78c0f4ff41cecaf8e0c2ca09d99a5f58fa10f2638
SSDEEP 192:x54DZyK7su/bJvK0lMsJGt+ERNR0duGDuLqEos0YFTUlq9ycX/w8dw+f+u4QD:xmEK7Hv2sot+ERnGDVcLFh3vw8Ou7vD
TLSH
T12B722AC32614D58FEB59737033A7119E93301E242912D25BD26FBE0DBFBA762B849D48
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Radio-Off.ico

SHA256 3dd0c14f58f5e386a5351067444709b2ffe4c5af7076abc301c642d75f9bd49d
MD5 d86fedd0bd1d19b0dcd1ba34f29d08d9
SHA1 0887b15268146436037262b9eea36a29edc535df
SHA512 52cfabb25ce0de3f7ff23163de2fcd9e5fcd749d84f1427307955aae3eff74f163ce7d2339a7501321da2142fcd48efe4e7b432742bbd35ef07271e7b258d994
SSDEEP 192:h2tn/HIuTRjg6IAe0mUx7dSchvTZTlPJ3+SqkyYtkhrjrfL:h2N/HKl0KchFTlB3NqkOhjz
TLSH
T1887284692F9CDE20E29638F463B0A14DE9B4DC1116FFC611EE6A387AC37CB42AD5D105
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Radio.ico

SHA256 383986e6129a7fa4659787bf5159a03f9b2e0f1ecd8e90d018a326d4f80523b1
MD5 f2214783b072e29992dddf5702b80df8
SHA1 f5cf7b5a1ab07350a6cc8329ff59090b0008c60c
SHA512 ef1afd460324f30e57b9eb25ab0b44ff217052c4d965a1f6617bb3be761f9646e60fa74ab454c269e22808b24f18af8d546c8b4be7142d07440d8990d3e694f3
SSDEEP 384:4oTl5YCj9xL3y9zV6thsifpqpcxLXXtrDPY33QUESZ:V0Cj9x1lDPagUEA
TLSH
T158722B282F9DCD2DE3057D78A6B0C2944AFC8E617D2FD147AF17B8ED88B5688B840574
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Robot-Off.ico

SHA256 16a4d7c4bb8e9985454f48b5694dcc5e915681b6900ecd0dcfd30970617195b3
MD5 49f703b6b44a50cb8446e93ddb5e3e6b
SHA1 f63de1e09be9bbc2e465ed91d0a41cf2878be5c5
SHA512 3608583c4866d3096f3b311a661fbed96cb817a01f296421ec35b665647d4f28ee21b19004a3e75f5e1237d6fc3ae1ed1a5848262786ace9e9071394efb3a9df
SSDEEP 96:8zAJUC5z5mUUnTIMdGZsk3IHUEoRDtlrZVR44U9dAUu0a9clE:8EJUKz5mVn34OOrltpZV7U9do6lE
TLSH
T16272F8623A39D532CD4E28F49D93C88A64B32F657CE85A05B5667B3FC5781629C0E30F
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Robot.ico

SHA256 f4b31cc68ab44252953dfd7ba9ed190904a2855a187c5eb9b2d1865af6b4925a
MD5 dc21021665efc0d91a3c023349e0088d
SHA1 a9db1ccf0293442e171af55dff9b305da26ed551
SHA512 3d797a568390992805f5a0ad3d247afce0fca4a399c439cd68f2496c4b49491fb216554fe940512c984371083771f73136ec013921bd5184dbc276676a269b16
SSDEEP 192:1VPbSWXUICKM4v3Bi14ucAHtXs2FbWY7btq+pKa7R+hwyBqI:HB5EdHRxb17R6d2ux
TLSH
T1EF725B223236528AD8D1BC3B1E54C4868C2D3D779EF9C2C1FD837B9E2A355139848768
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Silence-Off.ico

SHA256 a5a127fafc661c60ab71a91a3af1e75757dc8f769814886ec1385be491d0bee5
MD5 15b678e256892c094819e9adee6931c0
SHA1 af96f5f1f0ba441cb27fc92ec84bcf64ace578a9
SHA512 4d0f5cc19ace20534c2b88325cb7f1482e444b14628eb2c5d02ba2d89c1f53d4a14033b23f714fab6f5fbe9d2e5d286bdd8d9735b0f343cb156e287506c2998f
SSDEEP 48:csIvV3gtu3B+seAg8UQ2oYbyLbk1Pbofcj3tJXrAAAAAAAAAA9:csGV3YuQRAg8UdoYbfPboEj9z
TLSH
T1BF72963564C7A440F92E1CB00676BA7AB424FE999A7BECB0A21CBF5D14328D19F0770D
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Silence.ico

SHA256 174cf35498ac34dbc791179f2eae97421df96566788d10774cd119da236b86c7
MD5 d182f6d36f07ce8c87ab7c3a5b63c660
SHA1 ccb3953c3de04823f64674069b8fd8fdf2d47290
SHA512 849e074ab63223361664fff2a667d13e89de642a877e8c7baf28f3a8580f5cfe32754a750d9fb46cda290daba3cd8887ab6e9824dbca2597d01555e0968724b6
SSDEEP 384:shgBsm+T0t38R1GlgrdxLuHBEACTAJRtQHJny:nJgg
TLSH
T19C72B8F439C38411E92D24FC3AADD99215B23C63C2E3199DFCDE769A12B901E641BB43
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Vocoder-Off.ico

SHA256 0382305edaf7ce50bc7846a83b7bc5164861e457cb7f306b663c3e8f06b25a7f
MD5 956d2f04d6c2a1d56c7650c3371137c9
SHA1 1f9eb18797a0bbe781f23f562d3fb03d8dae0a2b
SHA512 5fcda40274733c52e808b7e246bcc2992b66d377d14ba36626cb0b6434fb966a57429a3384d41b9f000a6f5e9ef0d15e3a62223d80db123790b4b9047a1481a1
SSDEEP 96:Nw2coSOw3mShDIcNacLtoBaSjUoySQMoMJbJOEkJSSSSXS:Nw22OO9RNag6aSjByvMoMJ9OJg
TLSH
T12C72B9387B3C914FEF2C09BE786E8D69404D2E1624BD7E94158132928DBD1D22E871DF
MD5 SHA1 SHA512 SSDEEP TLSH

$8/res/Vocoder.ico

SHA256 5f3e34cb9bf37640f7d6f60fcb847b3a26a7d68cc8df4cf54803203d8a93e516
MD5 6ea776011dcb4d8f94b5ac28b002f754
SHA1 1fec375d48c434b2c478fe8253c9ba78ab79dcac
SHA512 c2e4ff69322bcce6ab4c6a095cdd5adf2be3e37238b494bcf5d8821c8427a0f4b12262deb028c297d33b57e11de76a7027f9c27b6dd34f289cd79da68bf76425
SSDEEP 96:dlZV9++00hVmvwB5b9PeyXJOEkJSSSSXS:rZV9+AhVmveV4OOJg
TLSH
T14E721EE869C46C95C45384384D6C8A7847FEEFCE8C0C1BE7A8C379011AF39E6741164B
MD5 SHA1 SHA512 SSDEEP TLSH

$8/sounds/Applause.mp3

SHA256 589edcfaa281f4bdff1732894cbb8c888dda43616fef3dd250f67a4be1bd1a88
MD5 1189ab8fd9a94f757740daec4f0445b6
SHA1 044e87203e5e6f2d191527d53a49169c46e5d333
SHA512 ef2b4319b3666b30ff3c259ed308c4911bdab07f369210a48519db0836ba5b66e5b76b9940bcb1c379fa4b6a0319d06de5c38162fdf329b0ce7eaa424faabc35
SSDEEP 384:jI3aB+s/7dVD0pI65L93ujl63g1naf6ncHUjvG3:9BLPDQI6/3ujRhs
TLSH
T19172C0A4B9C15284DADC21BEE71419E50623FC2489DB01C01EB2788AB5BE273FE43B55
MD5 SHA1 SHA512 SSDEEP TLSH

$8/sounds/Bicycle bell.mp3

SHA256 26360ef2053eaadd9d3b6e39173354549bf3f9a36bacd1748ec79d563f1220c8
MD5 ab7ac50e62e667a12d74860335caf6e1
SHA1 6cfff7504879b827ecf9537dd1492ad3f2363002
SHA512 778c6b7b078cca345aae1043f88e1a913e02f904b0a8e605c3a01a8b108e07c09687af4184996f5b511acb83cc12e05d5cd3d95b69d4cd24e477a5e19ad12cde
TLSH
T10651E916D798F121F0614EB4A20ACFCBDBC8CD5F965CC0D2BA63BF164EF241B2551496
MD5 SHA1 SHA512 TLSH

$8/sounds/Boooooo.mp3

SHA256 89c8d7c0f35ffac0b595e89a4eaca7544b4e36cb7c9657b5099e7798591395c6
MD5 7804107f2426f0f1882d4942728b4ba7
SHA1 be8a0205bca7b1e1c314f6af47662d159c82c772
SHA512 30ee43ffdfe1da939a3f7ac9c425d1b1e499d41f9f930a051f01cb69c54647a30e7d3a6cab4246a35da731c69fabaf6338c6379ee8647bedcfcfd798a5c6daa0
SSDEEP 192:jP082LXZyBIOCyDlmxTP7oJm6n2c4dACf0+n1cN97tjobeE5+:bZ2XZyBr9D8T52TC821cz7tkKM+
TLSH
T163029E27C61AA403F64C71BEE6BE2FC0C85E5DF0EEA44981C25E92A20513B25837CDCD
MD5 SHA1 SHA512 SSDEEP TLSH

$8/sounds/Cheering.mp3

SHA256 6ec074ce1e574d280391b651a2514a09b3973a989a34a2f953db13efb4fda429
MD5 28ddffce6296d9d20de2719e655cf326
SHA1 1346d72b6947e302f953d41d0fd18a2893be50ac
SHA512 6a3bcc501a65f7530e2b5c15efc2f98c67b910b2a6c4f77e7d6ad0bc04c9270ede0ba0995ac69f99046a79c4725278f37bd1c6892345e8778efd30c62ed5cdf3
SSDEEP 192:mTB33vtrLr5ZV3krgVTGOGNtt80l1DDnVDcXLZQ1:Ad3vlLr5333BGNM0HfnJcXG
TLSH
T1B6128D0B88583E9BF6129179C97D0708D2655CCD31DBA4A0257C36AB7F074178FC6B8E
MD5 SHA1 SHA512 SSDEEP TLSH

$8/sounds/Duck.mp3

SHA256 7422492e182ba543eb1799724ff14f39754ea5198a057a522ca43188f95926a7
MD5 c2329ac63003bf6c679020676ec0a8a9
SHA1 6848582af285bf21660f86fa89d4fd2a16dc43e3
SHA512 13dd71a9f2f80da421649b89f4cab8226e937675b243bd8f95685ec992183e568ef5dc3e9d11637ca631ef167debf0d44f8951fddd1c80a9079af33a2a785bf4
SSDEEP 48:QlfA9aAc4hKCtMoRXNYdgK48DUqIYZBspShbbWEkkk7:6A9/1hKC+de8D40BCJ
TLSH
T1F4A150079A82AA5FF4522F75BAABB368E3C42DE4855494D1DC61B3130DB3A06E702983
MD5 SHA1 SHA512 SSDEEP TLSH

$8/sounds/Fanfare.mp3

SHA256 7bb230e1edd9136759b25fad68ef874d1f93ff7e601b9745b52c1ae1a915cbbf
MD5 4ab5b6644bf653392da12c316e3982b8
SHA1 3c1df53c2208dd4ccaebd76733158aeaff975336
SHA512 2b6f6b5d39d94d72df17d26a37ea2e84e8030ff3cef785f6ef81f40df4149957c23172459db024f4056c86155b27629f5f6b03e09f259d9eb0a854ddd354a968
SSDEEP 192:R79ZhQw88ugCls3noQLbcn4+N5kigiNmpCeqzLBY8J/0yBiL/xMG2:p9LJ8wms3op4OkOApC3lY8J/CMj
TLSH
T1B722AF6C712555DDFA3A13B5368DD430DE6EBC7AE265502536D8DCDA00F2CC1BA9A420
MD5 SHA1 SHA512 SSDEEP TLSH

$8/sounds/Gong.mp3

SHA256 89da4228ff8ab5a73c650cf69aa95670bc259cfc23c1ca70c14b0a15fc4f6a56
MD5 ec5999bb1642933250cfd972c9ab40fd
SHA1 7715ba48b1a5e24a5127c880f8534057e3e2a2d2
SHA512 6ec85099611b252201717420932554d0c4ca502482c84d2cb0bfdb4b4898d3d26389c63a510d2bd895db8e8ca2f6e815bc71ff5b7aeecb8a31bfdfd2cb85bf11
SSDEEP 192:3jbJ2gd4n+lR99pzlMoV0hY9tT1zPzgxh/S2oF:3Pni+797KxhYvJPzcQ
TLSH
T1D102AF2486B70A28FD33DD36EA090C28D1DDD721694AEA8B554E8F5C15E3EF023B45CB
MD5 SHA1 SHA512 SSDEEP TLSH

$8/sounds/Gunshot.mp3

SHA256 62c28bfb933c21a34fc4d230273191666097fa1dc64a723bf603026a40e503fb
MD5 3b6df9885a6c348baec0cf35c21ac8df
SHA1 54132090272c8640bf4c9452da9f335ebcdfa1d0
SHA512 30cf5e2d913377c86dfb66004ea8784d8592b4c90f8f1924df6a01d0317c5bcb70548ad5c77d8879be0b7ca55f9656d77820d8da0d93f4b4b3f6ad6d64cb7f73
SSDEEP 96:mYpE377//bj56f9BC7cSl4TKvJdLU3tmG4LlRhRTd:mc+7jfUPC7mwC3/4Ljnh
TLSH
T13B917E21042BA913F48A223428B291CDA9325DDE83D65AD404EF73C704359AD1756FBC
MD5 SHA1 SHA512 SSDEEP TLSH

$8/sounds/Hail to the king.mp3

SHA256 f9d2b3112839c2c4dea819e0694edd429d16e0b9eb8d8e7f5367960e0bcbc91f
MD5 1d7c41af5f1ecfa82ec0bb36e0bc2485
SHA1 dca0a7622f8b519f3a0760f13ef89b1038b9c200
SHA512 93dfe90f03665441abb0225a98b5588009d93bda076dcb6dcf33929245556ca53fbbc43d1cc797bc765377f51f01d2e951fb39bbb9c3b20eb9ab5b2fd2782ae3
SSDEEP 96:osohijFTIAuz6ybvAeUI5/zuDsVI1s3VufDAm6HdM7Iw:ovi5T+z6yj55/zuZ1oVAN6+j
TLSH
T1DBB18F498B201195F0011375FBD94390C0AAECF1245A8EFD41BCB19C23B7B2EACAAD9D
MD5 SHA1 SHA512 SSDEEP TLSH

$8/sounds/I feel good.mp3

SHA256 95d0bc30e27a406c77166402662f17bf686ae68b2e75995cc2bf8039781f369d
MD5 d24e16c7318a8f41d38a9b97c5a965e9
SHA1 099d60bcc2cf573a39b50c3c3ed0e4a71a86f399
SHA512 54967735b39e411d5833a9b2c83712183bac4c4f2bfdbe7dc33a957a2dcf7c03adad9d64fef90da6037dcc5929a9b17bfbbc89b15a818142676d60730249e9eb
SSDEEP 384:mAb6MiRCP5folRwSUyPEXImXlLm4PRIOc4wc4cxR3Eiwo:mcP5folRwSUyPcXlL56OcVc4KH
TLSH
T1EA82CF18ADA3069AF0D921B9F362DADACDC73C180D1C2AC97B34F8E731175D35B06A19
MD5 SHA1 SHA512 SSDEEP TLSH

$8/sounds/Laugh.mp3

SHA256 33eaeb93d80198878884fc3b6c32eb7c6ec2e48124710f2fb9f633675d8aa93a
MD5 1c2b8e396f57f7502210e6a2672a8fad
SHA1 0a247c01923196e98070a80a25d0160d9e2dd23b
SHA512 8000522aac734e5e61dd542e9fac59bf3b7ab76b69c1feb51f358c7f1f14e9ea2b00077dbf6943ee900dd50c65ea6fffdc306c81ad826d0775e3ab5b3e56aa2e
SSDEEP 192:MeZ2iZMqnbSUuoMMekRz37CCN+gHsfcqzfiDNJhkZE0Db6iPR7sBpv:sq+UjnRX9QgHofMJhB0f6iPGz
TLSH
T17A22BF6823778B8FF01D0739185C83A9E83C5ED729209F8A1B5DF8451ADB1A03B693DD
MD5 SHA1 SHA512 SSDEEP TLSH

$8/sounds/Ricochet.mp3

SHA256 e6a8d83227f1df0bf5c7735aa4d8f7c042e4b230c4cdc8529a29a3f05a16bab6
MD5 c8afc365322b6a8702eaba98e707cda1
SHA1 9c91c0575a6e8ee8c125d37cbe08df4fa6e321c7
SHA512 8d3c7894e1e6ca7bbd52f46d7187b2fe955ef672755f4e44a14ef91816d09fc2e35ebd62741fe4d124741a35aea447cd465d598f481552e69c3f3fb9c7127824
TLSH
T115717C58E69D27EFC55EC071BC052939448AACEA81C52AC4EA7C77E55178A51103BCCE
MD5 SHA1 SHA512 TLSH

$8/sounds/Sheep.mp3

SHA256 846f554784a4990d963dd468b93fcc714dda88547e25be65981fcf76f62b3252
MD5 b4b90b126d1864b667a446961353d9a7
SHA1 a509b38e9a4bc5214222bfe083a36ac7976a682c
SHA512 692dc81c128ae1b087e278effa5bf4b376e30a32de9cabec2c403487dec99951d0e95bdc1b9076432e857c440a10ebfce60276b23107cb888a98d93b2df2af37
SSDEEP 96:y3mohTK+uU83715LojUyzMdnAb3xR5IDlLBtu9bZA8kD0:GZhT1edojUyYAbhR5YLBtaZA8M0
TLSH
T19BB17DBC7A13E0FCD2839D36D98019C03A8845290D67E1E970E9737149FDEEA97C4694
MD5 SHA1 SHA512 SSDEEP TLSH

$8/sounds/Smoke weed everyday.mp3

SHA256 390629d99fd29f76a4b0e0d283d9013507ba064fb66aa368387d0a7d96d2112a
MD5 36407a4133f21dbdfc143b9abcaa44ac
SHA1 811e10e42fa760649a42dfc493e03287f83eaa9d
SHA512 6349a64cdef0c2f57259c4b5c6345fb29ecefaf41dad39576dae466489d2d1e82113d8f2f0846b856104ee5a9ccccefc184c12155cc6ba3bec2f933c4e83b30e
SSDEEP 192:031MU+KD7HhcoBUJcwGWDqMbmL+9ebBAF:0TZgJGWDfbmL+2AF
TLSH
T16ED18EE12988594BC895C373A84ECAF482929C86504505CFB36C39ECB139B2318BDF4B
MD5 SHA1 SHA512 SSDEEP TLSH

$8/sounds/You guys suck.mp3

SHA256 7cfe4d8803fe16557290bc7d63939a290f0776042d290b73de6774a5ae6dba76
MD5 8092a2ce653c49d5571d69a4667de889
SHA1 509300512ec1a93a3e6d54c52a59c8950f4756a5
SHA512 8d5fda0aae8340ac114955bf1230a09428b132b896012cef9877adf7be5841b78c7383725388a88c1acc0d9a1c660ae23b338bf54175960e6a8f09035e9c7ead
SSDEEP 96:NhZptQXtxqoj73uUxRi42/hbAeULOdqOzi/MWr4A9ODo:NhKt4o/PI/hEROWkWj9ODo
TLSH
T12A817D098C696BFFFB448631E112C6B2E1679A5A308604C12C6D358CEA37FD4E721C3A
MD5 SHA1 SHA512 SSDEEP TLSH

$8/sounds/You suck.mp3

SHA256 af8cdd33019a1e420ddf67f7bf18bd10a2e5330c9d3e15e2ee4271e4b0fa21da
MD5 5d9e92b1747219f512ee047c1260a5ff
SHA1 8c2d9ad5fd3ad86371a9a7b0e1085484702232f7
SHA512 b3f81e252036d9a5e092d5150006218ee6a977ab6492a2e0f8280683e2ddb3b8832b44bef33c0186ff7ae01ee0c16562eb0dba057230328beaf3216c26e1b143
TLSH
T106816C573600283DE2A3747E5266CA1045A60DD6349D89CDAC4CB3A204F3ECD75B3C5F
MD5 SHA1 SHA512 TLSH

$8/vocoders/Bell.mp3

SHA256 1464deef6d60995f18c19c537b6864b5423c17573c1dd62f94f3707e043d8591
MD5 55eadc265a335efee36b6f076c850c4c
SHA1 8a3e05a5e4382afe20c14761368b3ffbbe2bfc8b
SHA512 93fc57087e9ddfba27916e58f5b1264688df3cb377dbc85689c0d764643f100e56897dbf840db09040662dfe6f318d2ad37dcb4d0a69d34daa7f66665abc6b2e
SSDEEP 192:sbwSaQE2hhIy9luFgWaSzzYMkgE4Lh0mJB1SDFZCPgml6ZayafWj7obU:scSaQVLIybmaczYMQ4LhHByZCPjl6AWx
TLSH
T14D32AF18FAF10270F58CB73936079198FE86D66A1D3C5A6BA34B9B03119B44C37077D6
MD5 SHA1 SHA512 SSDEEP TLSH

$8/vocoders/Church_Melody.mp3

SHA256 0695f5a5d4cda049a523f5a1f922f894f06df15820a0033477b135542d0aa243
MD5 0c19af6e8b7dc06dc3f1d9de29935435
SHA1 cb353aba1cbc77d9ba0f73c7550fb13ffa672f9f
SHA512 53ccce15a8d3ddefa5a0b7dfa6bd4ca45e637495295ba70520d2cdf209d66a4fd9711313939771968189ed6b58fb8e0cebec9e6111d250b9384f56ac9be07400
SSDEEP 1536:Lx8L3LjfR/2ONj4WdV6iADtMQ+n6ZoCLdCZD0kigZSDgUfc2l1CPFraaGCZijUsZ:WDLjpeONj4Wb6i8tmn6OCLxkigufcFaB
TLSH
T1C29302DBBB8CCF1AC01F2F35A6434B46F4C5D55A399FE5D365D2A24325202096C262FE
MD5 SHA1 SHA512 SSDEEP TLSH

$8/vocoders/Creepy.mp3

SHA256 1216af1ccc436a7fd3ecb9455d6d9ee1c70905273ef8bd66eec7151e6bc5d655
MD5 35cc84e50d7dc379a7c7c9d2fef73bdc
SHA1 ada44bb7a7c288dd00b9cfc2ea677d5e81aec2b4
SHA512 a4ab5bef4f6258d79b63470d5c81c76388345c6546e2e40224cc5ac165fce59cb712f5ee919da71a0dfed8530896a0c975039aae7fd3f41bb9592ec4576ccf03
SSDEEP 1536:Kml+C9ybm8BRr5ezGUSW3rmSdnB6qnx68ZE4:7l4Lly4W36Sdsqnx68m4
TLSH
T13D53F15B387C8203B4A92F3C35838857F6B8D652E8524DDF1DE375A9AD2BD01CB5284B
MD5 SHA1 SHA512 SSDEEP TLSH

$8/vocoders/Fire.mp3

SHA256 b35820fcfeeeb735a3a188d46224c89cca9cf92e4176013dfca1658febc796ab
MD5 28312a1abb8e1b4a524d0caf2ba13fe8
SHA1 d6a4ce6924fba5b653b8084225aa84100f5211fd
SHA512 c23e79ff8731474e5e6fe0d7315a85b818582afe04e880c4cb29a077b972595d56007816d1755248ad025b3908a965d5536a5054f433000d5f77537a9dda83be
SSDEEP 384:i/nYmfeUYK0wTHx1tFrtbGG7d8Qcimc3hjCtS9wVt3:iAmGUYDwbx1tFpbGGWtcRj8tZ
TLSH
T12C72CF8A36E46A4DCC3C23307FB88BF6F969D41E727644D16ACE9050380C8D345969FB
MD5 SHA1 SHA512 SSDEEP TLSH

$8/vocoders/Flute.mp3

SHA256 4013ac6cf7f7a99303b5f4edc018c8eeacc87c492a91588cf9f29510405c9c42
MD5 1d0b0d18fd0e65efaab7d3747d30fd52
SHA1 e04f8d69c0fdcd3e0bac6a1478585c7d1bf89fb9
SHA512 fd0a92ea455e8d297a6b29b61c14c39e1486acce5c435a3b3f8fbebd0ca0e492c7dd4c44b25fe80a9e245e1b38024f10064ee8ebb8bb9675ddd4ad1fa74374b7
SSDEEP 384:4ZR8XMy8MgxMEkg3QGjsIowJN2icaHT4axlaTjwsw:mR8cj9tQYwicOs+aT5w
TLSH
T18A62B099353D9FACF31E0F7312E910D1F57C80C6655A66E3AA82F2C026836D62B2D9D4
MD5 SHA1 SHA512 SSDEEP TLSH

$8/vocoders/Ghost.mp3

SHA256 36f0aef9a4f2f61a8e28572a79755df47a967f57d81583b69b9d646c47b99259
MD5 527cf77c464e3ce70e1e93ebe948c18f
SHA1 82e8bccca69cc183729ee36f8d3fb138e80bd96b
SHA512 4ef9e34f0c3dd1d41d3b508853209e8a1b6bd1ab7ea1302daefae111fa97b75039c80ca9ecbad17cc4459da9695827564eb4abdb0a5badf068e6f50d306cd821
SSDEEP 384:4U78ZJpeiaxs+GHu2Dorpd9bzcPmQdr9YRuejmYpl6YWkZw9:xsJ5es3lDorpd9XGxmzOX
TLSH
T146B29D0B23B041BAF1977A7DB2C62902F485EC5D7A20E8C98828FB815537C23AF5F595
MD5 SHA1 SHA512 SSDEEP TLSH

$8/vocoders/Melody.mp3

SHA256 4d659b6eedce1506a3eafe93e0bd8c4bddf0708da293f9f93e794a0f31566b54
MD5 39d546be2ddae91d110c93b3f9ae6cde
SHA1 087d5c7978f64d1cae57fabe8146b5be402869a1
SHA512 c3198138b8672f2b2436c57119359a5a3d10d1c7674ca0bac54eb259b0bccbb07ba8ee3e109ec128a048c727d0e68946a132796d5f7a4f0aa10d3e1c33117282
SSDEEP 384:FwTyBb5XBnP5dTy5MWEmjnpC+40fB6csswn+L9aXiQKijJ0MGOxkTZbGtuec5cXq:Fd55NP5dHWEN+U0ejF6itlcyXKZ5
TLSH
T1EAB2D06565658E68D01C7F75E633F0E3F4AAAC4572CF21F226024C805E94F6ADB35B28
MD5 SHA1 SHA512 SSDEEP TLSH

$8/vocoders/Melody2.mp3

SHA256 74fb90e51adc37102df0b7734279dce60af39ed2dd9ed47c7a0edb5933b0b039
MD5 f49a4a295983e300ccd8f038651a125b
SHA1 0f56d85ff32787db0ea39518c8d1ebaca8bbcd1c
SHA512 fd9e2ac86bbb3561a9d956d293657b112aca0508cee158f45fb00819366567d30c99493d267c9bb38f166b60bd75ffb3f8cde700818bc278b8a719fcaf6651c4
SSDEEP 768:shFI9DuOyv/MWQsQWnXY6OL6lx12+jNOCeT0A6UoV4R660L5WrZhlHiSwQ:+Oe/MJsVnQuGYOtIfkwa/iSwQ
TLSH
T19613F1EAB13E4347F895B3FF78D3B65DF83A3462960D61E00A4CE691C8383679E56052
MD5 SHA1 SHA512 SSDEEP TLSH

$8/vocoders/Melody3.mp3

SHA256 b742c60f5e5e2d7f3228a7e553f554e1cdb50f2ee68762a4643e97a92e66051d
MD5 898377f5a1638e73eeff7be2dc34d42f
SHA1 7f06b19c09834c6944b2912e6fec226166e79e4e
SHA512 b48aa9693de33cf97462ddd92499b9e75da0c885e788f53f7442f56d787e9521ab119b7f3ed8dee79aa8b29620527963f0d133bb50ec7846ca8fe54ec81e6be8
SSDEEP 384:bTzEgE4RknLjcXP5DClhuNW6NmRAFbvLMkv6Cp+Y1Wd:bTzEfdLYxis/NmAFbgkv6i11u
TLSH
T1A862BF522C916357E8FF1BF43CBF3230F6529620EA5EA2C77E9F4D35648804C8550AB9
MD5 SHA1 SHA512 SSDEEP TLSH

$8/vocoders/Melody4.mp3

SHA256 968be6ea6125614a127d7a811cc7e7573516e66e308cda3b78049d6ff971452c
MD5 596ba6d0e64d3657bf0eca3db5f58202
SHA1 4233957eb06b9610e5df4b168857461eec7b79a2
SHA512 552f468c7c6ba832d741b5cd208d11dd6529104aa6b2db0a9f73f0add544c9e27975a22c3fe7ccb255f55bf79b8ed72686fbccc52d6330575bfc63432edb14c5
SSDEEP 384:n+wyUNjYn8/TNMthtmsDeO3+GeJXZ6fwe:n+TqjY87NMtX6E+3ze
TLSH
T1C642C0107687A353F528133D7227B499F20993069FD95DB64CC8DBBA282F75D073A4E4
MD5 SHA1 SHA512 SSDEEP TLSH

$8/vocoders/Metal.mp3

SHA256 c93881f02ecf856610006f1a611f18682f3a57ee9b13befe3b76f2d1c5b7e563
MD5 d4b3c83e92fcae386ff02c152cb50e4f
SHA1 2a5871a6f5c3c6872d12077154612fb436d4c348
SHA512 064c850a8cecaf49d912600fc34805601eb1d285773f956f1a7eaad25207e57f8648e58c0ea120769f335f580538719654489a255e5530241cc529185999bddd
SSDEEP 96:Re174XDWIwa0xcFG8vy6B2Hdc8hOeTbVq3WiECdtWzfkSLUjVsJzt4ehTgP4pz7S:nQ7xgGQyg2HdZhOugVECebhTgPof+n
TLSH
T149024CAB9721846FF36AA17D70179514F14128893973B0DBFE31BB90146BC45DF2B848
MD5 SHA1 SHA512 SSDEEP TLSH

$8/vocoders/Metal2.mp3

SHA256 3d70c83a1d048aa248c2bf79755d598f11028283113a0cad8128266d46b57057
MD5 24beeda2f8d856a5c94c3cb37cbbe5ba
SHA1 6125712a9f6ccdc0d1c09527bb35b4177d546fe4
SHA512 e88c176a482600aee8bc144346583148f228ad049989b6ee76390cec04539490646aebb1df82d18ed2d1438ccdc0ea713c9a59e0851e19fe653889ce89d75ef4
SSDEEP 192:EE1q1ihG+KVw6d+fdFjoTKQGwikuJJ2AKptWQIbi1:EEA1ihpNdRpku72Auj
TLSH
T137F19E5AB0D0144BFE6E7B3D9626298EF0BBD122784E34B31BD8372E445261953D47E4
MD5 SHA1 SHA512 SSDEEP TLSH

$8/vocoders/River.mp3

SHA256 2d7ea2fa74971c2503079a84f177dee9ca9571d841bbf8c6ead6ff3c8c5d58d4
MD5 45bd100322ecf66a312e0837e431ef37
SHA1 8cc6cfa67a3fa7cd4dda82fa8aa67c800cf8c327
SHA512 a3477709f8df379bc9a1d4ad2d1aeee54a7e57ea81d52c4325d3cf9cdca107fa77d8f3ba3e5580d6393dbd243c15f31e9ddd10659b3a06ec3eb2c3acc62c8323
SSDEEP 384:QdsRcVHlNJIRXknpqtspbibJWyF0wH6MuvRIjj0LL+XEjHiL:Ta/vIRXrCdUWyFE1ajjXXEDiL
TLSH
T10562CFC9301D0F25F4FDF5B4A8A23B11F52886050FEBEA2C4546DBDE89574028B2BE75
MD5 SHA1 SHA512 SSDEEP TLSH

$8/vocoders/Robot.mp3

SHA256 af12d9f1ba98104cf585ca495c367f88f24dc682959e7680e9fdf8a755eb8ffd
MD5 a25aa8246d3d84c001d656517d073ad3
SHA1 93a52b28912676a7bb0a101776ec92dce587f4f4
SHA512 75c18f1a528d27775c69f9f9fba168e67a19629902fb126fd5640ec5b093885e0471476309f9914c450ceea279688b57f2035bcd4ec5975823aa4bd3263a9276
SSDEEP 192:ukEF4kYrWyptKMt7K9d8sEDGLcXEq0xEglOKrs0B1MDYvNwiQtCfmWa712oIdOAp:ukEF4PxtdK9drnocEgl5BB15v6wC7Uld
TLSH
T10622AFACE12902C3F35DA1313A47F022F80A629FC916790B886997ED10AB55FA751767
MD5 SHA1 SHA512 SSDEEP TLSH

$8/vocoders/Robot2.mp3

SHA256 6985e289fffb53152c09209b4cd56f0a00da0be295958ec7741796200c8d7d36
MD5 9521247cf9886d457d43d35422f05cee
SHA1 448c19e7b7d87f2176bde4a17035e311bb9320b5
SHA512 ff5ce1fa2efae6d4963395cd17d100cfda8c6fc2145695df12a4eddeab70565d09cddb94267525f22a52a4d08a670bf8fdb847eb003bbbe0d6dce00571845b2a
TLSH
T16B614D46D631D1E3D98D26BA30BD3418F982DC9A709445D787D1BB2877561BA3E35808
MD5 SHA1 SHA512 TLSH

$8/vocoders/Rusty.mp3

SHA256 641d5c13ee526807e8c9b979feaf9da5b67789480b36c3775e90737a9513c27d
MD5 49ddb1525295d6b3a1be93b0ffb9c19c
SHA1 350c2950b60b48c2eeac7e05f46de101e8ef97fe
SHA512 42fbac53973170c21cdea543de7bfcde6f59ff84b2604d7ead33765bd3581df9d2057054fbda84b30b190619abb60eaed76f313c2bed0edbcbd61f1738370364
SSDEEP 192:lv4hvDVf78r9Y0Gb/PlDBSXpY9GeinNOSqibjIsA69rS74IE+vvTP4FqOP9g0ei:U8r9YZzdwcGhnNO8En69rS74BOz44C9B
TLSH
T1A722BF3C72989CC9E479CB317AC94710FCBAF135CA011AEBA3DB02564447BBE52D52E9
MD5 SHA1 SHA512 SSDEEP TLSH

$8/vocoders/Singer.mp3

SHA256 7d379025d8b1b38a83bfd2b4c050e83bd3e6622e09828e5ae99d33ed3b75f289
MD5 2fc2dfd613065c38e9e959a0f3f4f60a
SHA1 c6c4f493f4ee86178f71452a445f409d278e1ca6
SHA512 a9cb4d2884c3ceba949acee533f94bf1edbffbbbd1f801724c06cb45600d87d7f74b19fe0b41a90c8a7d56c726641ed018878b66b3097e60061698512a3bcf28
SSDEEP 768:aKG/v2MKj+mK2q9Y6PN9PE8AUB1aL+Sg6:aKi+MKjUQ6PN9LAU66Sg6
TLSH
T113C2D1C355480F8ACA5C6FB12792E800F935A41578A0EAEF3A09B1FB3474AC30E5F4D1
MD5 SHA1 SHA512 SSDEEP TLSH

$8/vocoders/Useless.mp3

SHA256 9169c1d4436cade26de36de9637812c49325b0121357539db250bfe7b927b0de
MD5 1174b8bd68d932d9c544e86ea1ef5f33
SHA1 aae4c20be6acc4d13589fbb1ec54575a27faa5a8
SHA512 028d822ca2a1ef43a73448204f9c2a477f392dc09ed884fd1c58b0d193167e97901e97a23b8bb429e3acb00aaff83d390989fd8e5143bb41b45296a9e00513d3
SSDEEP 192:NT42qXdAaI5PyQ5eBFz3q1VCx+Hs/8/2ZSth///xIzuC:N6XJQwDe1VCsMhgrsuC
TLSH
T149F1AEA13299D0F7CE653C732016202FF908F73C088F6DDB58F49BA198D0D5E46A1A9A
MD5 SHA1 SHA512 SSDEEP TLSH

$8/vocoders/Vader.mp3

SHA256 a67cf8f6686bb00562ec478feaf105cb3f53ec98c96ef3936cd306cb5bd1a735
MD5 8404718fee9cf91d211b014d7b401cfd
SHA1 2cb13e7b4ed01ac4396938eb8a4dd13038eae36a
SHA512 0b0a7212a07e004783d61ca3732a5e363b428bd79f063570867830ea11d6043e7f6fb85c1deb7c990d821b48b0006bd6898afa2ec4fbe38318631a208ec623f4
SSDEEP 384:GJa+gYQz3UDZ5vpl1NYNN4Im6ORK67S0G5l:GJa+QTUDrvpCNJm5R9Zml
TLSH
T1F962BF0B20D45454FA4AB27D4F7AF84CFD1D8053AAD55ABD05F6938306D3D3A839F8A2
MD5 SHA1 SHA512 SSDEEP TLSH

$8/vocoders/Weird.mp3

SHA256 d5e81975bf2467edc269ef31f7da27fc6b7c036973b14fb3ab8b6055e86632e6
MD5 db9cca91b1e893d24a5e1c5682e052e8
SHA1 de7c00e152f873da8751980322c1db2a70a5c91c
SHA512 8db781559ca84ebfabeba77ff78aece669d9b57f3f3940eb71443a540b4c6c829bb8f007670361553caf1d1ca8ba1ed5b5ab05b4160c1618ce31d08f876346dc
SSDEEP 192:dRqOAKcV8mUQNmu79tWA8KcpUeXM7M/SlbacUhRh/vE5A3NsBT6:dLAKzsIxMgKlbmL/vXT
TLSH
T15302AE42384008F2E6E67B7B10C2A312B454A6A43AEC60FB85D114E42DB73D04B076FB
MD5 SHA1 SHA512 SSDEEP TLSH

$8/vst/howto.txt

SHA256 dcc815648943384a7d90f5c75aa30e8b5b824557ae85e9684fc368d28af553eb
MD5 22840de40be3dad93d5f2b22912d0421
SHA1 01fb523b38a37fac47bb462875c992386e1c54c9
SHA512 3c0ce67760d55b4e30728bedb0423a9bc7ce789dbf73d8c197ed71844dd4f5bd095f78ce73319b966ea5d6cd75317b3b2a035b03303dc85585ebb71da194e4e8
TLSH
T1ADF09E6B7D0242C26841190836444DA0D359758DA1958612219AC45BDADECE4EEAA26B
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/KillProcDLL.dll

IMPHASH 62734a8f9e9c1184cf5a30c332ae53cb
SHA256 0fe15b023e21b7054fabb3d47b6084d60f8e474d8f9ca3a0a25dcb2097d6f0b8
MD5 586270250a1acce8126a0877fd5bb981
SHA1 9f5645b37b3af04004697639855da5c99a41aca1
SHA512 a1994b91337385ab153860a013912f9cacdf9c233395868bf8eedfbe6dd13841619a8048c1d8407ee4b77c466fd8f31fc5cac2c779a2ef58c3a2a02caeded055
SSDEEP 192:/BZa4DYIcJ4nS1ejJThugw4LBs4TJjdjqJVQXS3p16ZGntrefncWCV:JZ8IcJ4nSkJlums4TJJjsVh3pwZs/
TLSH
T15852F79EF117F6F6D4CB46B045E2FF3B443E29028836A8B4DF50EA207D1789E6529047
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5136

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

28B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1024B

Virtual Size

792B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

75B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

628B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/LockedList.dll

IMPHASH c26621761683a926589c7f7a96aa5d75
SHA256 671570118024c9132f12999e198cebc87b3bf1846695553bf478c5a42efec226
MD5 2ee096682cc84f5fd44fb5291c00596c
SHA1 8dccebf054abe13e5b324dfdfbe6605553971396
SHA512 1ffdc3a5256b8eb62aff82c6429dcdf582009a908d43ab30d3fad84770b012be59c972323b6ae2b8d7ea2ae29d8ab3a99913205a0b33582e95dc813c31507d3d
SSDEEP 768:Mne3kAZoxbRX66y11T9vBD3fNUHeBuf6qW:MnnTZyX9vBDvNU+UZ
TLSH
T107D2194457E000F7F7BE1AB079A92B0A5ABEF91868F195AB4F3754CA1D61112F628343
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

16437

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

comctl32

ImageList_ReplaceIcon ImageList_Create

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

shlwapi

PathFileExistsW PathRemoveFileSpecW PathAppendW

kernel32

QueryDosDeviceW DuplicateHandle CreateEventW GetCurrentProcess WaitForSingleObject GetModuleHandleW OpenProcess GlobalAlloc Sleep TerminateProcess GetModuleFileNameW CreateFileW lstrcmpW lstrlenW GetLastError GlobalFree LocalAlloc GetExitCodeThread WaitForMultipleObjects lstrcmpiW lstrcatW CloseHandle GetCurrentProcessId LocalFree lstrcpyW CreateThread lstrcpynW SetEvent LoadLibraryW TerminateThread GetProcAddress ResetEvent GetVersion

user32

DestroyIcon SetWindowTextW CallWindowProcW SetClipboardData EnableWindow MapWindowPoints SendMessageW GetSystemMetrics MessageBoxW OpenClipboard CreateWindowExW IsWindow CreateDialogParamW SendMessageTimeoutW CreatePopupMenu ShowWindow GetCursorPos SetWindowPos SetWindowLongW GetDlgItem EmptyClipboard GetClassNameW MoveWindow GetWindowTextW AppendMenuW SetCursorPos IsDialogMessageW TranslateMessage wsprintfW CharLowerW GetClientRect MsgWaitForMultipleObjects PostMessageW LoadImageW TrackPopupMenu GetMessageW SetActiveWindow GetWindowRect ScreenToClient CloseClipboard SetCursor DestroyWindow GetWindow GetWindowThreadProcessId GetWindowLongW EnumWindows DispatchMessageW PeekMessageW DestroyMenu

advapi32

AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken

shell32

ExtractIconExW ShellExecuteExW

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
TLSH
T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
TLSH
T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/nsDialogs.dll

IMPHASH 6b5c4f7d679059f68f1269aad3a5cecd
SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
MD5 6c3f8c94d0727894d706940a8a980543
SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355
SSDEEP 96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
TLSH
T17012F992E6A450B3C5D6533B35AA2F2DCBBD5325B0926C00C7738E4D39395B66E38353
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

VoiceChanger64f(2.04).exe

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$8/$8/uninstall.exe.nsis

$8/APOConfig.exe

shlwapi

kernel32

advapi32

shell32

ole32

generic

$8/AudioChanger.exe

kernel32

ole32

mfplat

mfreadwrite

propsys

generic

$8/ClownfishVoiceChanger.exe

bcrypt

wininet

shlwapi

ws2_32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

winhttp

version

generic

$8/ClownfshAPO64.dll

kernel32

advapi32

ole32

generic

$8/res/Alien-Off.ico

$8/res/Alien.ico

$8/res/Atari-Off.ico

$8/res/Atari.ico

$8/res/Cave-Off.ico

$8/res/Cave.ico

$8/res/Chorus-Off.ico

$8/res/Chorus.ico

$8/res/CityHall-Off.ico

$8/res/CityHall.ico

$8/res/Clone-Off.ico

$8/res/Clone.ico

$8/res/Denoise-Off.ico

$8/res/Denoise.ico

$8/res/Ghost-Off.ico

$8/res/Ghost.ico

$8/res/Microphone-Off.bmp

$8/res/Microphone-Off.ico

$8/res/Microphone.bmp

$8/res/Microphone.ico

$8/res/Mutation-Fast-Off.ico

$8/res/Mutation-Fast.ico

$8/res/Mutation-Normal-Off.ico

$8/res/Mutation-Normal.ico

$8/res/Mutation-Slow-Off.ico

$8/res/Mutation-Slow.ico

$8/res/Pitch-Baby-Off.ico

$8/res/Pitch-Baby.ico

$8/res/Pitch-Female-Off.ico

$8/res/Pitch-Female.ico