f379e3d50007592e0077db9e9e5aafe0b6a89dad4efa85a10209fb19964d7809
- SHA256 f379e3d50007592e0077db9e9e5aafe0b6a89dad4efa85a10209fb19964d7809
Overview
overview
3Static
static
3مافيا...ng.exe
windows10-2004-x64
3مافيا...ng.exe
windows11-ltsc_2024-x64
3مافيا...I2.dll
windows10-2004-x64
1مافيا...I2.dll
windows11-ltsc_2024-x64
1مافيا...te.dll
windows10-2004-x64
3مافيا...te.dll
windows11-ltsc_2024-x64
3مافيا...64.dll
windows10-2004-x64
1مافيا...64.dll
windows11-ltsc_2024-x64
1Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
مافيا svt/سيرفر سوفيت svt/Creative EAX Setting.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
مافيا svt/سيرفر سوفيت svt/Creative EAX Setting.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
مافيا svt/سيرفر سوفيت svt/Guna.UI2.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
مافيا svt/سيرفر سوفيت svt/Guna.UI2.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
مافيا svt/سيرفر سوفيت svt/VoicemeeterRemote.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
مافيا svt/سيرفر سوفيت svt/VoicemeeterRemote.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
مافيا svt/سيرفر سوفيت svt/VoicemeeterRemote64.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
مافيا svt/سيرفر سوفيت svt/VoicemeeterRemote64.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target f379e3d50007592e0077db9e9e5aafe0b6a89dad4efa85a10209fb19964d7809
- Size 1.6MB
- Sample260802-tsjffscm8w
- SHA256 f379e3d50007592e0077db9e9e5aafe0b6a89dad4efa85a10209fb19964d7809
- MD5 de9bad29a718b451c3292f795d00a8e3
- SHA1 677b11fdd263d59336614d019e9d3005d82c6349
- SHA512 5c04b2f0ea71ad18b0b676f08f65724088e8c292fb2dfcbb34997417442d953e78380d7b15b7fa9f10852e1c490cf3e6b753bf39fb471570758890c6cb035fd2
- SSDEEP 49152:oeLKBRPtoLc+GXHXe+kkjMFvTBXX1g4XbyQuN:oDBRVoLcLXHXeOMFvTA4XmN
- TLSH T192853391DA1C6753C9958DB4519A384D15B38EA280B7707F68AFC34D7948E8BE0CEB0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/مافيا svt/سيرفر سوفيت svt/Creative EAX Setting.exe - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/مافيا svt/سيرفر سوفيت svt/Guna.UI2.dll
File Explorer
-
f379e3d50007592e0077db9e9e5aafe0b6a89dad4efa85a10209fb19964d7809.zip 1.6MB
-
مافيا svt/سيرفر سوفيت svt/Creative EAX Setting.exe.exe 1.6MB
-
مافيا svt/سيرفر سوفيت svt/Creative EAX Setting.pdb75KB
-
مافيا svt/سيرفر سوفيت svt/Guna.UI2.dll.dll 2.1MB
-
مافيا svt/سيرفر سوفيت svt/VoicemeeterRemote.dll.dll 156KB
-
مافيا svt/سيرفر سوفيت svt/VoicemeeterRemote64.dll.dll 188KB
مافيا svt/سيرفر سوفيت svt/Creative EAX Setting.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 de5673f509f9f6cc151543b9c308251c41f51c4fe39b04e9109494522d5d9a64
- MD5 6ae20e7f8be8e07accf4cd0e6889325f
- SHA1 1ba72328d14a60168eba9936ca45d4556bc95939
- SHA512 2415c457eae9202245da255547cf71f50c6390a38f49bbe076c0f52c87fbd7fa4f0d39121fb91e6d3c9fd34623c84590a7dfc9b3e0d431513b31a7a8ae880cf1
- SSDEEP 49152:0uxgaMj3XRD+uj3H2Cuk1+Lda3Wvho0o5KDe+WgnyOijCij:00DMj3XZ+ujX2Cuk1+Lda3WvhowDeSyD
- TLSH T120754AD2E94489D5F92D06B2A4269D7012A32D7EEDF4A49D68CABC2765B3343103FC1F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1418382
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Admin\Downloads\z726pwt (2)\حقوق سيرفر ADDONS (10) - نسخة\Creative EAX Setting.pdb
mscoree
_CorExeMain
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
266KB
Virtual Size
265KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
مافيا svt/سيرفر سوفيت svt/Creative EAX Setting.pdb
- SHA256 9ac8fd34136e5fe7555391cccb0c16613c25c4c1d340a5a4193cce75c5096850
- MD5 d1b6475fba09a3c537a99c1b273f2b99
- SHA1 bb6ef2ae3d765ab2ac6c255c07495542868428dd
- SHA512 311cbe504a212c34e100cf3b77416808d74f64bf109b7c7b7d32e7b5136ec810b91d153db5834fbedc9c2359c34ce0d23609c50fe9164091e0818d9c8bc50060
- SSDEEP 768:Rs5H2hfZIUepMW9JKri82RtlYsZUM9okQRmmG+duX6B0s+3N38pcmJ9pxDDoZ9:aMObRd8zomG+/X+3N3TmfpxDDoZ
- TLSH T1E8735167FB84C532C815853A9AFBAF19432CEE950A839B4F174DB06C3EB37955E85308
- MD5 SHA1 SHA512 SSDEEP TLSH
مافيا svt/سيرفر سوفيت svt/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bae60184a9514418d6a442549d2de35dcd753a79b7b57c018946fe8790f654cd
- MD5 bb8f806621637a5a6339bafa3be99238
- SHA1 74fc30dc004c6f64c0c9ce096d289ce6f0c0c1d5
- SHA512 fc3795048b59a67d24baa7e0dfe5e357ddb2e1d079feb8fff1f07f9bbaaa5011f18b5f92eb6c5174b320e7ee6dfb4a88bfa43fe4eeca84cc07a5e15001d964dd
- SSDEEP 24576:Wv9BnJMxNmwiDVobBJbUJ5A+I9Y8PglCdMPmBUVLqiraPNc2NX1fk8gLlyF9HQ/M:Ifm9PEJyFL
- TLSH T18BA5F8187DD5EA27C16BCE33D5E24011E2F1E4932EB1EB0E66D3576C18427867C863AE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
bc:27:fa:c6:5e:d5:ce:5a:48:33:16:91:d8:1a:e4:da:1e:93:8f:6f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
NO CERTIFICATE
Chains
Jan 1, 0001
Minor OS version
0
Major OS version
4
Entry point
2195694
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
مافيا svt/سيرفر سوفيت svt/VoicemeeterRemote.dll
- IMPHASH f88eca84e5bd78d6db1efaf50cfb9972
- SHA256 5d85a8e00c714a707a65671936fb49611f4e7751a9065c618804ed5ca47872cb
- MD5 79b4ef6b17d0a8bb825437773c1d8e3f
- SHA1 255fbeb8ad45faad93afeac2afa2cb7e7d78d079
- SHA512 0c76b45b3c311f34de0087755d63e7966edf24ad77360897475854ff66421ce55e93f35a78ea10f15cce8ccc505618d12dd6114eabc89b73a1e468f5b16799f9
- SSDEEP 3072:+cvA+X1yaikOLqMvbJl1rvVygoP5UG7GjSVX:PYH1rtyrQjS5
- TLSH T1E6F3AF1376D240F6D5813EBD14E7373BEF3AAA5648668E438B98DD521C31352BB2620F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
13:66:36:5a:25:0b:71:6a:b7:25:77:01:32:d2:54:d0:a9:df:36:cd:27:58:52:f7:07:15:6b:65:4f:68:9e:ae
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Dec 11, 2025
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
02:63:b9:b0:fb:b3:01:be:bb:d1:47:f4
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 21, 2025 - Jul 22, 2027
Subject
CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE
Serial Number
84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4
Issuer
CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 15, 2025 - Jan 10, 2037
Subject
CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE
Serial Number
83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f
Issuer
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 16, 2025 - Jul 16, 2041
Subject
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
76:53:fe:b9:3d:d9:e7:e9:26:32:ac:d6:0a:be:ac:38
Issuer
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2020 - Mar 18, 2045
Minor OS version
0
Major OS version
4
Entry point
58027
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
WideCharToMultiByte
MultiByteToWideChar
GetCurrentProcess
VirtualFree
VirtualAlloc
QueryPerformanceFrequency
DeviceIoControl
CreateEventA
GetModuleHandleA
GetProcAddress
LoadLibraryA
FreeLibrary
OpenFile
GetModuleFileNameA
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
TerminateProcess
RtlUnwind
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
CloseHandle
SetFilePointer
GetLastError
LCMapStringW
LCMapStringA
GetOEMCP
CreateFileW
WriteFile
GetCurrentThread
SetThreadPriority
CreateThread
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetTickCount
OpenFileMappingA
CreateFileMappingA
MapViewOfFile
Sleep
UnmapViewOfFile
GetACP
GetCPInfo
ExitProcess
GetVersion
GetCommandLineA
HeapFree
HeapReAlloc
HeapAlloc
InterlockedIncrement
InterlockedDecrement
user32
CharLowerBuffA
advapi32
RegEnumKeyA
RegOpenKeyExW
RegEnumKeyW
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyW
RegQueryValueExA
RegOpenKeyA
RegCloseKey
shell32
ShellExecuteA
ole32
CoInitialize
CoCreateInstance
CLSIDFromString
CoUninitialize
CoTaskMemFree
PropVariantClear
setupapi
SetupDiGetDeviceInterfaceAlias
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupDiOpenDeviceInterfaceRegKey
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
winmm
timeBeginPeriod
waveInGetDevCapsW
waveInGetNumDevs
waveOutGetDevCapsW
timeEndPeriod
waveOutGetNumDevs
VBVMR_AudioCallbackRegister
VBVMR_AudioCallbackStart
VBVMR_AudioCallbackStop
VBVMR_AudioCallbackUnregister
VBVMR_GetLevel
VBVMR_GetMidiMessage
VBVMR_GetParameterFloat
VBVMR_GetParameterStringA
VBVMR_GetParameterStringW
VBVMR_GetVoicemeeterType
VBVMR_GetVoicemeeterVersion
VBVMR_Input_GetDeviceDescA
VBVMR_Input_GetDeviceDescW
VBVMR_Input_GetDeviceNumber
VBVMR_IsParametersDirty
VBVMR_Login
VBVMR_Logout
VBVMR_MacroButton_GetStatus
VBVMR_MacroButton_IsDirty
VBVMR_MacroButton_SetStatus
VBVMR_Output_GetDeviceDescA
VBVMR_Output_GetDeviceDescW
VBVMR_Output_GetDeviceNumber
VBVMR_RunVoicemeeter
VBVMR_SendMidiMessage
VBVMR_SetParameterFloat
VBVMR_SetParameterStringA
VBVMR_SetParameterStringW
VBVMR_SetParameters
VBVMR_SetParametersW
Name
.text
Size
84KB
Virtual Size
83KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
32KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=24, id=14, version=7299,
count=1, productName=Unmarked objects (old),
count=19, id=19, version=8034,
count=207, id=1, productName=Unmarked objects,
count=2, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=143, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
مافيا svt/سيرفر سوفيت svt/VoicemeeterRemote64.dll
- IMPHASH 53fd8181186447ca1e6c4bc143b7736b
- SHA256 6c108f99c955ec963702dba37739d70c31c9ce4d77758b312c0233a1f435f4fb
- MD5 b16e2603eeee1099dfe97ecf987a1319
- SHA1 a4229d70f8471d2bf7df79c5d7b426aa0bb60b94
- SHA512 3c27ae44a7d9bd88c169721a963924901abecf30537582e44f9610054e19bb8cb6bed18fadf40d71391af84d327227ba9dac2785650dd4b664eef18659fee839
- SSDEEP 3072:aR8mc+AKYjdhTzhTq4UeT/AS5IGFM4W1CgmgReNA9KHVL:aRVXA/zhTWeT/AS5L6tTKAEHx
- TLSH T190149D8A329010FAE85B9238C9E76656FB73B45313755BCF166483761F173E22A3B321
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
cf:0d:69:d5:9c:53:eb:a2:21:1f:c8:0b:07:21:93:01:43:34:e4:af:f4:86:0c:a0:24:e0:6a:a6:95:d9:f4:ed
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Dec 11, 2025
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
02:63:b9:b0:fb:b3:01:be:bb:d1:47:f4
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 21, 2025 - Jul 22, 2027
Subject
CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE
Serial Number
84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4
Issuer
CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 15, 2025 - Jan 10, 2037
Subject
CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE
Serial Number
83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f
Issuer
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 16, 2025 - Jul 16, 2041
Subject
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
76:53:fe:b9:3d:d9:e7:e9:26:32:ac:d6:0a:be:ac:38
Issuer
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2020 - Mar 18, 2045
Minor OS version
2
Major OS version
5
Entry point
68104
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
H:\Travaux\VB_VAC\VoiceMeeter\Project\voicemeeterpro_vc2010\x64\Release\VoicemeeterRemote64.pdb
setupapi
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceInterfaceAlias
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsA
SetupDiOpenDeviceInterfaceRegKey
winmm
waveOutGetDevCapsW
timeBeginPeriod
waveOutGetNumDevs
waveInGetNumDevs
waveInGetDevCapsW
timeEndPeriod
kernel32
SetFilePointer
WriteFile
CreateFileW
CloseHandle
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThread
SetThreadPriority
QueryPerformanceFrequency
WaitForSingleObject
CreateEventA
DeviceIoControl
MapViewOfFile
UnmapViewOfFile
GetTickCount
CreateFileMappingA
OpenFileMappingA
CreateThread
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetStringTypeW
LCMapStringW
LoadLibraryW
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
SetLastError
FlsFree
FlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameW
ExitProcess
GetModuleHandleW
HeapDestroy
HeapCreate
GetVersion
RtlVirtualUnwind
HeapSetInformation
GetStartupInfoW
GetFileType
GetStdHandle
SetHandleCount
InitializeCriticalSectionAndSpinCount
RtlUnwindEx
EncodePointer
GetLastError
Sleep
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
OpenFile
WriteConsoleW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCommandLineA
HeapFree
HeapAlloc
HeapReAlloc
GetCurrentThreadId
HeapSize
DecodePointer
RtlCaptureContext
RtlLookupFunctionEntry
FlsSetValue
user32
CharLowerBuffA
advapi32
RegEnumKeyW
RegOpenKeyW
RegQueryValueExW
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
shell32
ShellExecuteA
ole32
PropVariantClear
CoInitialize
CoUninitialize
CoCreateInstance
CLSIDFromString
CoTaskMemFree
VBVMR_AudioCallbackRegister
VBVMR_AudioCallbackStart
VBVMR_AudioCallbackStop
VBVMR_AudioCallbackUnregister
VBVMR_GetLevel
VBVMR_GetMidiMessage
VBVMR_GetParameterFloat
VBVMR_GetParameterStringA
VBVMR_GetParameterStringW
VBVMR_GetVoicemeeterType
VBVMR_GetVoicemeeterVersion
VBVMR_Input_GetDeviceDescA
VBVMR_Input_GetDeviceDescW
VBVMR_Input_GetDeviceNumber
VBVMR_IsParametersDirty
VBVMR_Login
VBVMR_Logout
VBVMR_MacroButton_GetStatus
VBVMR_MacroButton_IsDirty
VBVMR_MacroButton_SetStatus
VBVMR_Output_GetDeviceDescA
VBVMR_Output_GetDeviceDescW
VBVMR_Output_GetDeviceNumber
VBVMR_RunVoicemeeter
VBVMR_SendMidiMessage
VBVMR_SetParameterFloat
VBVMR_SetParameterStringA
VBVMR_SetParameterStringW
VBVMR_SetParameters
VBVMR_SetParametersW
Name
.text
Size
110KB
Virtual Size
109KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
35KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=37, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=123, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=11, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=19, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=213, id=1, productName=Unmarked objects,
count=16, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,