Purity_Setup[.]exe

resource
Purity_Setup.exe
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$_4_/Purity.dll
unpack001/Purity.dll
unpack001/Purity.exe
unpack001/uninst Purity.exe
unpack003/$PLUGINSDIR/InstallOptions.dll
unpack003/$PLUGINSDIR/LangDLL.dll

resource
unpack001/$R0
unpack001/msvcr80.dll

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/uninst Purity.exe	nsis_installer_1
static1/unpack001/uninst Purity.exe	nsis_installer_2

Purity_Setup.exe

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 5a346e16df8a4e5b3af84833fac97469a3a268375b7181cfa61e5a2155e64adf
MD5 aac0c1284f826f64b438fd548545c2f6
SHA1 2d2c2b660fa3d956ee0ab3d1157458a736264b4b
SHA512 0526c2065641a7289995c7027d1e57308eaf9664ee24589ea9720cef67bad07f7ab27a5b98939160a9d619b689986b87a86070df80b7c223161e7fae883874e1
SSDEEP 786432:sz/s4XCJrQXhuHnYvw6rbMtmHcZ3oiqB6hyGBC3Ig4UTKVgEWkoG6ef3+yv:uD2EXIHhCQo8FoiAZ4UuVgEW/Gtv
TLSH
T1EDC73330112FC842D0B6687E242BB911B7AE3C997647BB66F1787039427B7D6CDE9213
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12491

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/InstallOptions.dll

IMPHASH b1cd0d78f652ce5fc63f0879371af012
SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
MD5 325b008aec81e5aaa57096f05d4212b5
SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
TLSH
T1ED622A11778888F3DBD2013EB4533707AF9D5126B4929ED2CA271ECA6D2B05D7EB2346
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryA GetCurrentDirectoryA MultiByteToWideChar GetPrivateProfileIntA GlobalLock GetModuleHandleA lstrcmpiA GetPrivateProfileStringA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalUnlock GlobalAlloc

user32

MapWindowPoints GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard PtInRect SetWindowRgn LoadIconA LoadImageA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA LoadCursorA SetCursor DrawTextA GetWindowLongA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA GetClientRect

gdi32

SetTextColor CreateCompatibleDC GetObjectA GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderA SHGetDesktopFolder SHGetPathFromIDListA ShellExecuteA

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/LangDLL.dll

IMPHASH 9b6b6a7858e17fb0b17e1c1428330343
SHA256 60a964095af1be79f6a99b22212fefe2d16f5a0afd7e707d14394e4143e3f4f5
MD5 9384f4007c492d4fa040924f31c00166
SHA1 aba37faef30d7c445584c688a0b5638f5db31c7b
SHA512 68f158887e24302673227adffc688fd3edabf097d7f5410f983e06c6b9c7344ca1d8a45c7fa05553adcc5987993df3a298763477168d4842e554c4eb93b9aaaf
SSDEEP 48:iV6pAvmNC6iMPUptxEZK65x/AmvycNSmwVsOYJyvrpXptp/JvR0Jlof5d2:2811GED5ZTvycNSmwVsTJuftpZR0Sd2
TLSH
T129C18333B3C24AF5D6950633252373C366539E342359804F9B6712AA69208FBDD6E793
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5526

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
MD5 c17103ae9072a06da581dec998343fc1
SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
TLSH
T1CA325C5993A0C1F3D5A0823C0D973A7B1779722016B14FA3CFA35842AE196D7AC7D227
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
TLSH
T1D3D0C9C9501A802944208642A97A2FA263E03E210B1725FAF5724C87EB4CDE79C9D682
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/modern-header.bmp

SHA256 9be91a9c0aac1f429bca0500af3d656e9a3b8eeb1c953af799c2c3160d290d0a
MD5 a9fab50dc9481b8816c4ca5bfef3bc5e
SHA1 8f5c50a80d1f8047392550da13c06b7880c737eb
SHA512 176b37fac1b45d0fe6ecdd246360d6b4f614a313d730931ea2a57a342b0c23bdc66f005a27ea154deeabd1716ca0c76136d5b97b2b555f2723e1dc80ff219164
SSDEEP 768:OB5VCb+02JyZ2ybrDGf7Vf0WG20q0ib5CEp:OBDCb+0/2kDGJ89w0y
TLSH
T1E1C27DB1ED5C3CC40AE2593747B2B6476A116EDBD974F87CA97F300213B618CA440C79
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 b327ff3e5c3a88b785f2084cc6bcf6b49fa8f2a3f87e7f0fa7b359e2e71cbb1b
MD5 990c32c42e6a316738ea1d7f380d8440
SHA1 c42978831035f45b9f575725ed26aac452aa3f3f
SHA512 8ecff4892906686136aaa36452150f174318990cd20bed1bc3387ce78aa45088ef8148f990b6cb7d4ddee865dd0102a1fb021b4e491f1598fbb133bcb3a5eff1
SSDEEP 3072:ucBrAfhHIUx8OI5lyd3V5/B1KFko4YL5fFG:HBrAfho6I5lOHB1Sb4eU
TLSH
T1FBE39E0AFE5834E4065861968FADE097AF138FA2C388C7F9756E745043FF4D8B84A1D6
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$R0

IMPHASH 7fecbc4a16a5dc85a5394a1df6217680
SHA256 9382aaed2db19cd75a70e38964f06c63f19f63c9dfb5a33b0c2d445bb41b6e46
MD5 1169436ee42f860c7db37a4692b38f0e
SHA1 4ccd15bf2c1b1d541ac883b0f42497e8ced6a5a3
SHA512 e06064eb95a2ab9c3343672072f5b3f5983fc8ea9e5c92f79e50ba2e259d6d5fa8ed97170dea6d0d032ea6c01e074eefaab850d28965c7522fb7e03d9c65eae0
SSDEEP 12288:bxzh9hH5RVKTp0G+vjhr46CIw+0yZmGyYCj:bph9hHzVKOpXwymGyYo
TLSH
T196D4CF51B5E3C472D0B201B5490ADB3A9A3BB9504638A8737BE60FCE4E787D1FB17252
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

33:c3:5f:8b:90:a4:1a:da:8a:31:e2:15:e8:8b:ff:62:ff:95:6b:8d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2009

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

2e:ab:11:dc:50:ff:5c:9d:cb:c0

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 22, 2007 - Aug 25, 2012

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:06:27:81:00:00:00:00:00:08

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2008 - Jan 22, 2010

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 16, 2006 - Sep 15, 2019

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:06:94:2d:00:00:00:00:00:09

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 25, 2008 - Jul 25, 2013

Minor OS version

0

Major OS version

4

Entry point

9003

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvcr80.i386.pdb

msvcrt

_getdrives

kernel32

GetStringTypeA GetLocalTime GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetProcAddress ExitProcess WriteFile GetStdHandle GetSystemDirectoryW GetLongPathNameW GetCurrentThreadId TlsGetValue DebugBreak OutputDebugStringA GetCommandLineA HeapFree GetVersionExA HeapAlloc GetProcessHeap DeleteCriticalSection LeaveCriticalSection EnterCriticalSection ExitThread CloseHandle GetLastError ResumeThread CreateThread TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement GetCurrentThread FindNextFileA FindFirstFileA FindClose FindNextFileW FindFirstFileW FileTimeToSystemTime FileTimeToLocalFileTime Sleep GetEnvironmentVariableA HeapDestroy HeapCreate VirtualFree HeapReAlloc VirtualAlloc HeapSize SetHandleCount GetFileType GetStartupInfoA GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetConsoleCtrlHandler FreeLibrary InterlockedExchange LoadLibraryA InitializeCriticalSection MultiByteToWideChar FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW WideCharToMultiByte QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW SetLocalTime GetStringTypeW LoadLibraryW GetLocaleInfoA GetLocaleInfoW SetEnvironmentVariableA SetEnvironmentVariableW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale RtlUnwind GetTimeFormatA GetDateFormatA GetTimeZoneInformation GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer WriteConsoleA GetConsoleOutputCP SetStdHandle CreateFileA CompareStringA CompareStringW Beep GetDiskFreeSpaceA GetLogicalDrives SetErrorMode GetFileAttributesA GetCurrentDirectoryA SetCurrentDirectoryA SetFileAttributesA GetFullPathNameA GetDriveTypeA CreateDirectoryA RemoveDirectoryA DeleteFileA GetFileAttributesW GetCurrentDirectoryW SetCurrentDirectoryW SetFileAttributesW GetFullPathNameW CreateDirectoryW DeleteFileW MoveFileW RemoveDirectoryW GetDriveTypeW MoveFileA RaiseException GetExitCodeProcess WaitForSingleObject CreateProcessA CreateProcessW HeapValidate HeapCompact HeapWalk VirtualProtect GetSystemInfo VirtualQuery IsDBCSLeadByteEx ReadConsoleA ReadConsoleW SetConsoleMode SetEndOfFile DuplicateHandle GetFileInformationByHandle PeekNamedPipe ReadConsoleInputA PeekConsoleInputA GetNumberOfConsoleInputEvents ReadConsoleInputW LockFile UnlockFile CreatePipe ReadFile CreateFileW SetFileTime LocalFileTimeToFileTime SystemTimeToFileTime

$I10_OUTPUT ??0__non_rtti_object@std@@QAE@ABV01@@Z ??0bad_cast@std@@QAE@ABV01@@Z ??0bad_cast@std@@QAE@PBD@Z ??0bad_typeid@std@@QAE@ABV01@@Z ??0bad_typeid@std@@QAE@PBD@Z ??0exception@std@@QAE@ABQBD@Z ??0exception@std@@QAE@ABQBDH@Z ??0exception@std@@QAE@ABV01@@Z ??0exception@std@@QAE@XZ ??1__non_rtti_object@std@@UAE@XZ ??1bad_cast@std@@UAE@XZ ??1bad_typeid@std@@UAE@XZ ??1exception@std@@UAE@XZ ??1type_info@@UAE@XZ ??2@YAPAXI@Z ??2@YAPAXIHPBDH@Z ??3@YAXPAX@Z ??4__non_rtti_object@std@@QAEAAV01@ABV01@@Z ??4bad_cast@std@@QAEAAV01@ABV01@@Z ??4bad_typeid@std@@QAEAAV01@ABV01@@Z ??4exception@std@@QAEAAV01@ABV01@@Z ??8type_info@@QBE_NABV0@@Z ??9type_info@@QBE_NABV0@@Z ??_7__non_rtti_object@std@@6B@ ??_7bad_cast@std@@6B@ ??_7bad_typeid@std@@6B@ ??_7exception@@6B@ ??_7exception@std@@6B@ ??_Fbad_cast@std@@QAEXXZ ??_Fbad_typeid@std@@QAEXXZ ??_U@YAPAXI@Z ??_U@YAPAXIHPBDH@Z ??_V@YAXPAX@Z ?_Name_base@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z ?_Name_base_internal@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z ?_Type_info_dtor@type_info@@CAXPAV1@@Z ?_Type_info_dtor_internal@type_info@@CAXPAV1@@Z ?_ValidateExecute@@YAHP6GHXZ@Z ?_ValidateRead@@YAHPBXI@Z ?_ValidateWrite@@YAHPAXI@Z ?_inconsistency@@YAXXZ ?_invalid_parameter@@YAXPBG00II@Z ?_is_exception_typeof@@YAHABVtype_info@@PAU_EXCEPTION_POINTERS@@@Z ?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z ?_open@@YAHPBDHH@Z ?_query_new_handler@@YAP6AHI@ZXZ ?_query_new_mode@@YAHXZ ?_set_new_handler@@YAP6AHI@ZH@Z ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z ?_set_new_mode@@YAHH@Z ?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZH@Z ?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z ?_sopen@@YAHPBDHHH@Z ?_type_info_dtor_internal_method@type_info@@QAEXXZ ?_wopen@@YAHPB_WHH@Z ?_wsopen@@YAHPB_WHHH@Z ?before@type_info@@QBEHABV1@@Z ?name@type_info@@QBEPBDPAU__type_info_node@@@Z ?raw_name@type_info@@QBEPBDXZ ?set_new_handler@@YAP6AXXZP6AXXZ@Z ?set_terminate@@YAP6AXXZH@Z ?set_terminate@@YAP6AXXZP6AXXZ@Z ?set_unexpected@@YAP6AXXZH@Z ?set_unexpected@@YAP6AXXZP6AXXZ@Z ?swprintf@@YAHPAGIPBGZZ ?swprintf@@YAHPA_WIPB_WZZ ?terminate@@YAXXZ ?unexpected@@YAXXZ ?vswprintf@@YAHPA_WIPB_WPAD@Z ?what@exception@std@@UBEPBDXZ @_calloc_crt@8 @_malloc_crt@4 @_realloc_crt@8 _CIacos _CIasin _CIatan _CIatan2 _CIcos _CIcosh _CIexp _CIfmod _CIlog _CIlog10 _CIpow _CIsin _CIsinh _CIsqrt _CItan _CItanh _CRT_RTC_INIT _CRT_RTC_INITW _CreateFrameInfo _CxxThrowException _EH_prolog _FindAndUnlinkFrame _Getdays _Getmonths _Gettnames _HUGE _IsExceptionObjectToBeDestroyed _NLG_Dispatch2 _NLG_Return _NLG_Return2 _Strftime _XcptFilter __AdjustPointer __BuildCatchObject __BuildCatchObjectHelper __CppXcptFilter __CxxCallUnwindDelDtor __CxxCallUnwindDtor __CxxCallUnwindStdDelDtor __CxxCallUnwindVecDtor __CxxDetectRethrow __CxxExceptionFilter __CxxFrameHandler __CxxFrameHandler2 __CxxFrameHandler3 __CxxLongjmpUnwind __CxxQueryExceptionSize __CxxRegisterExceptionObject __CxxUnregisterExceptionObject __DestructExceptionObject __FrameUnwindFilter __RTCastToVoid __RTDynamicCast __RTtypeid __STRINGTOLD __STRINGTOLD_L __TypeMatch ___fls_getvalue@4 ___fls_setvalue@8 ___lc_codepage_func ___lc_collate_cp_func ___lc_handle_func ___mb_cur_max_func ___mb_cur_max_l_func ___setlc_active_func ___unguarded_readlc_active_add_func __argc __argv __badioinfo __clean_type_info_names_internal __control87_2 __create_locale __crtCompareStringA __crtCompareStringW __crtGetLocaleInfoW __crtGetStringTypeW __crtLCMapStringA __crtLCMapStringW __daylight __dllonexit __doserrno __dstbias __fpecode __free_locale __get_app_type __get_current_locale __get_flsindex __get_tlsindex __getmainargs __initenv __iob_func __isascii __iscsym __iscsymf __iswcsym __iswcsymf __lc_clike __lc_codepage __lc_collate_cp __lc_handle __lconv __lconv_init __libm_sse2_acos __libm_sse2_acosf __libm_sse2_asin __libm_sse2_asinf __libm_sse2_atan __libm_sse2_atan2 __libm_sse2_atanf __libm_sse2_cos __libm_sse2_cosf __libm_sse2_exp __libm_sse2_expf __libm_sse2_log __libm_sse2_log10 __libm_sse2_log10f __libm_sse2_logf __libm_sse2_pow __libm_sse2_powf __libm_sse2_sin __libm_sse2_sinf __libm_sse2_tan __libm_sse2_tanf __mb_cur_max __p___argc __p___argv __p___initenv __p___mb_cur_max __p___wargv __p___winitenv __p__acmdln __p__amblksiz __p__commode __p__daylight __p__dstbias __p__environ __p__fmode __p__iob __p__mbcasemap __p__mbctype __p__osplatform __p__osver __p__pctype __p__pgmptr __p__pwctype __p__timezone __p__tzname __p__wcmdln __p__wenviron __p__winmajor __p__winminor __p__winver __p__wpgmptr __pctype_func __pioinfo __pwctype_func __pxcptinfoptrs __report_gsfailure __set_app_type __set_flsgetvalue __setlc_active __setusermatherr __strncnt __swprintf_l __sys_errlist __sys_nerr __threadhandle __threadid __timezone __toascii __tzname __unDName __unDNameEx __unDNameHelper __uncaught_exception __unguarded_readlc_active __vswprintf_l __wargv __wcserror __wcserror_s __wcsncnt __wgetmainargs __winitenv _abnormal_termination _abs64 _access _access_s _acmdln _adj_fdiv_m16i _adj_fdiv_m32 _adj_fdiv_m32i _adj_fdiv_m64 _adj_fdiv_r _adj_fdivr_m16i _adj_fdivr_m32 _adj_fdivr_m32i _adj_fdivr_m64 _adj_fpatan _adj_fprem _adj_fprem1 _adj_fptan _adjust_fdiv _aexit_rtn _aligned_free _aligned_malloc _aligned_msize _aligned_offset_malloc _aligned_offset_realloc _aligned_offset_recalloc _aligned_realloc _aligned_recalloc _amsg_exit _assert _atodbl _atodbl_l _atof_l _atoflt _atoflt_l _atoi64 _atoi64_l _atoi_l _atol_l _atoldbl _atoldbl_l _beep _beginthread _beginthreadex _byteswap_uint64 _byteswap_ulong _byteswap_ushort _c_exit _cabs _callnewh _calloc_crt _cexit _cgets _cgets_s _cgetws _cgetws_s _chdir _chdrive _chgsign _chkesp _chmod _chsize _chsize_s _clearfp _close _commit _commode _configthreadlocale _control87 _controlfp _controlfp_s _copysign _cprintf _cprintf_l _cprintf_p _cprintf_p_l _cprintf_s _cprintf_s_l _cputs _cputws _creat _create_locale _crt_debugger_hook _cscanf _cscanf_l _cscanf_s _cscanf_s_l _ctime32 _ctime32_s _ctime64 _ctime64_s _cwait _cwprintf _cwprintf_l _cwprintf_p _cwprintf_p_l _cwprintf_s _cwprintf_s_l _cwscanf _cwscanf_l _cwscanf_s _cwscanf_s_l _daylight _decode_pointer _difftime32 _difftime64 _dosmaperr _dstbias _dup _dup2 _dupenv_s _ecvt _ecvt_s _encode_pointer _encoded_null _endthread _endthreadex _environ _eof _errno _except_handler2 _except_handler3 _except_handler4_common _execl _execle _execlp _execlpe _execv _execve _execvp _execvpe _exit _expand _fclose_nolock _fcloseall _fcvt _fcvt_s _fdopen _fflush_nolock _fgetchar _fgetwc_nolock _fgetwchar _filbuf _filelength _filelengthi64 _fileno _findclose _findfirst32 _findfirst32i64 _findfirst64 _findfirst64i32 _findnext32 _findnext32i64 _findnext64 _findnext64i32 _finite _flsbuf _flushall _fmode _fpclass _fpieee_flt _fpreset _fprintf_l _fprintf_p _fprintf_p_l _fprintf_s_l _fputchar _fputwc_nolock _fputwchar _fread_nolock _fread_nolock_s _free_locale _freea _freea_s _freefls _fscanf_l _fscanf_s_l _fseek_nolock _fseeki64 _fseeki64_nolock _fsopen _fstat32 _fstat32i64 _fstat64 _fstat64i32 _ftell_nolock _ftelli64 _ftelli64_nolock _ftime32 _ftime32_s _ftime64 _ftime64_s _ftol _fullpath _futime32 _futime64 _fwprintf_l _fwprintf_p _fwprintf_p_l _fwprintf_s_l _fwrite_nolock _fwscanf_l _fwscanf_s_l _gcvt _gcvt_s _get_amblksiz _get_current_locale _get_daylight _get_doserrno _get_dstbias _get_errno _get_fmode _get_heap_handle _get_invalid_parameter_handler _get_osfhandle _get_osplatform _get_osver _get_output_format _get_pgmptr _get_printf_count_output _get_purecall_handler _get_sbh_threshold _get_terminate _get_timezone _get_tzname _get_unexpected _get_winmajor _get_winminor _get_winver _get_wpgmptr _getch _getch_nolock _getche _getche_nolock _getcwd _getdcwd _getdcwd_nolock _getdiskfree _getdllprocaddr _getdrive _getdrives _getmaxstdio _getmbcp _getpid _getptd _getsystime _getw _getwch _getwch_nolock _getwche _getwche_nolock _getws _getws_s _global_unwind2 _gmtime32 _gmtime32_s _gmtime64 _gmtime64_s _heapadd _heapchk _heapmin _heapset _heapused _heapwalk _hypot _hypotf _i64toa _i64toa_s _i64tow _i64tow_s _initptd _initterm _initterm_e _inp _inpd _inpw _invalid_parameter _invalid_parameter_noinfo _invoke_watson _iob _isalnum_l _isalpha_l _isatty _iscntrl_l _isctype _isctype_l _isdigit_l _isgraph_l _isleadbyte_l _islower_l _ismbbalnum _ismbbalnum_l _ismbbalpha _ismbbalpha_l _ismbbgraph _ismbbgraph_l _ismbbkalnum _ismbbkalnum_l _ismbbkana _ismbbkana_l _ismbbkprint _ismbbkprint_l _ismbbkpunct _ismbbkpunct_l _ismbblead _ismbblead_l _ismbbprint _ismbbprint_l _ismbbpunct _ismbbpunct_l _ismbbtrail _ismbbtrail_l _ismbcalnum _ismbcalnum_l _ismbcalpha _ismbcalpha_l _ismbcdigit _ismbcdigit_l _ismbcgraph _ismbcgraph_l _ismbchira _ismbchira_l _ismbckata _ismbckata_l _ismbcl0 _ismbcl0_l _ismbcl1 _ismbcl1_l _ismbcl2 _ismbcl2_l _ismbclegal _ismbclegal_l _ismbclower _ismbclower_l _ismbcprint _ismbcprint_l _ismbcpunct _ismbcpunct_l _ismbcspace _ismbcspace_l _ismbcsymbol _ismbcsymbol_l _ismbcupper _ismbcupper_l _ismbslead _ismbslead_l _ismbstrail _ismbstrail_l _isnan _isprint_l _ispunct_l _isspace_l _isupper_l _iswalnum_l _iswalpha_l _iswcntrl_l _iswcsym_l _iswcsymf_l _iswctype_l _iswdigit_l _iswgraph_l _iswlower_l _iswprint_l _iswpunct_l _iswspace_l _iswupper_l _iswxdigit_l _isxdigit_l _itoa _itoa_s _itow _itow_s _j0 _j1 _jn _kbhit _lfind _lfind_s _loaddll _local_unwind2 _local_unwind4 _localtime32 _localtime32_s _localtime64 _localtime64_s _lock _lock_file _locking _logb _longjmpex _lrotl _lrotr _lsearch _lsearch_s _lseek _lseeki64 _ltoa _ltoa_s _ltow _ltow_s _makepath _makepath_s _malloc_crt _mbbtombc _mbbtombc_l _mbbtype _mbbtype_l _mbcasemap _mbccpy _mbccpy_l _mbccpy_s _mbccpy_s_l _mbcjistojms _mbcjistojms_l _mbcjmstojis _mbcjmstojis_l _mbclen _mbclen_l _mbctohira _mbctohira_l _mbctokata _mbctokata_l _mbctolower _mbctolower_l _mbctombb _mbctombb_l _mbctoupper _mbctoupper_l _mbctype _mblen_l _mbsbtype _mbsbtype_l _mbscat_s _mbscat_s_l _mbschr _mbschr_l _mbscmp _mbscmp_l _mbscoll _mbscoll_l _mbscpy_s _mbscpy_s_l _mbscspn _mbscspn_l _mbsdec _mbsdec_l _mbsicmp _mbsicmp_l _mbsicoll _mbsicoll_l _mbsinc _mbsinc_l _mbslen _mbslen_l _mbslwr _mbslwr_l _mbslwr_s _mbslwr_s_l _mbsnbcat _mbsnbcat_l _mbsnbcat_s _mbsnbcat_s_l _mbsnbcmp _mbsnbcmp_l _mbsnbcnt _mbsnbcnt_l _mbsnbcoll _mbsnbcoll_l _mbsnbcpy _mbsnbcpy_l _mbsnbcpy_s _mbsnbcpy_s_l _mbsnbicmp _mbsnbicmp_l _mbsnbicoll _mbsnbicoll_l _mbsnbset _mbsnbset_l _mbsnbset_s _mbsnbset_s_l _mbsncat _mbsncat_l _mbsncat_s _mbsncat_s_l _mbsnccnt _mbsnccnt_l _mbsncmp _mbsncmp_l _mbsncoll _mbsncoll_l _mbsncpy _mbsncpy_l _mbsncpy_s _mbsncpy_s_l _mbsnextc _mbsnextc_l _mbsnicmp _mbsnicmp_l _mbsnicoll _mbsnicoll_l _mbsninc _mbsninc_l _mbsnlen _mbsnlen_l _mbsnset _mbsnset_l _mbsnset_s _mbsnset_s_l _mbspbrk _mbspbrk_l _mbsrchr _mbsrchr_l _mbsrev _mbsrev_l _mbsset _mbsset_l _mbsset_s _mbsset_s_l _mbsspn _mbsspn_l _mbsspnp _mbsspnp_l _mbsstr _mbsstr_l _mbstok _mbstok_l _mbstok_s _mbstok_s_l _mbstowcs_l _mbstowcs_s_l _mbstrlen _mbstrlen_l _mbstrnlen _mbstrnlen_l _mbsupr _mbsupr_l _mbsupr_s _mbsupr_s_l _mbtowc_l _memccpy _memicmp _memicmp_l _mkdir _mkgmtime32 _mkgmtime64 _mktemp _mktemp_s _mktime32 _mktime64 _msize _nextafter _onexit _open _open_osfhandle _osplatform _osver _outp _outpd _outpw _pclose _pctype _pgmptr _pipe _popen _printf_l _printf_p _printf_p_l _printf_s_l _purecall _putch _putch_nolock _putenv _putenv_s _putw _putwch _putwch_nolock _putws _pwctype _read _realloc_crt _recalloc _recalloc_crt _resetstkoflw _rmdir _rmtmp _rotl _rotl64 _rotr _rotr64 _safe_fdiv _safe_fdivr _safe_fprem _safe_fprem1 _scalb _scanf_l _scanf_s_l _scprintf _scprintf_l _scprintf_p _scprintf_p_l _scwprintf _scwprintf_l _scwprintf_p _scwprintf_p_l _searchenv _searchenv_s _seh_longjmp_unwind _seh_longjmp_unwind4 _set_SSE2_enable _set_abort_behavior _set_amblksiz _set_controlfp _set_doserrno _set_errno _set_error_mode _set_fmode _set_invalid_parameter_handler _set_malloc_crt_max_wait _set_output_format _set_printf_count_output _set_purecall_handler _set_sbh_threshold _seterrormode _setjmp _setjmp3 _setmaxstdio _setmbcp _setmode _setsystime _sleep _snprintf _snprintf_c _snprintf_c_l _snprintf_l _snprintf_s _snprintf_s_l _snscanf _snscanf_l _snscanf_s _snscanf_s_l _snwprintf _snwprintf_l _snwprintf_s _snwprintf_s_l _snwscanf _snwscanf_l _snwscanf_s _snwscanf_s_l _sopen _sopen_s _spawnl _spawnle _spawnlp _spawnlpe _spawnv _spawnve _spawnvp _spawnvpe _splitpath _splitpath_s _sprintf_l _sprintf_p _sprintf_p_l _sprintf_s_l _sscanf_l _sscanf_s_l _stat32 _stat32i64 _stat64 _stat64i32 _statusfp _statusfp2 _strcoll_l _strdate _strdate_s _strdup _strerror _strerror_s _strftime_l _stricmp _stricmp_l _stricoll _stricoll_l _strlwr _strlwr_l _strlwr_s _strlwr_s_l _strncoll _strncoll_l _strnicmp _strnicmp_l _strnicoll _strnicoll_l _strnset _strnset_s _strrev _strset _strset_s _strtime _strtime_s _strtod_l _strtoi64 _strtoi64_l _strtol_l _strtoui64 _strtoui64_l _strtoul_l _strupr _strupr_l _strupr_s _strupr_s_l _strxfrm_l _swab _swprintf _swprintf_c _swprintf_p _swprintf_p_l _swprintf_s_l _swscanf_l _swscanf_s_l _sys_errlist _sys_nerr _tell _telli64 _tempnam _time32 _time64 _timezone _tolower _tolower_l _toupper _toupper_l _towlower_l _towupper_l _tzname _tzset _ui64toa _ui64toa_s _ui64tow _ui64tow_s _ultoa _ultoa_s _ultow _ultow_s _umask _umask_s _ungetc_nolock _ungetch _ungetch_nolock _ungetwc_nolock _ungetwch _ungetwch_nolock _unlink _unloaddll _unlock _unlock_file _utime32 _utime64 _vcprintf _vcprintf_l _vcprintf_p _vcprintf_p_l _vcprintf_s _vcprintf_s_l _vcwprintf _vcwprintf_l _vcwprintf_p _vcwprintf_p_l _vcwprintf_s _vcwprintf_s_l _vfprintf_l _vfprintf_p _vfprintf_p_l _vfprintf_s_l _vfwprintf_l _vfwprintf_p _vfwprintf_p_l _vfwprintf_s_l _vprintf_l _vprintf_p _vprintf_p_l _vprintf_s_l _vscprintf _vscprintf_l _vscprintf_p _vscprintf_p_l _vscwprintf _vscwprintf_l _vscwprintf_p _vscwprintf_p_l _vsnprintf _vsnprintf_c _vsnprintf_c_l _vsnprintf_l _vsnprintf_s _vsnprintf_s_l _vsnwprintf _vsnwprintf_l _vsnwprintf_s _vsnwprintf_s_l _vsprintf_l _vsprintf_p _vsprintf_p_l _vsprintf_s_l _vswprintf _vswprintf_c _vswprintf_c_l _vswprintf_l _vswprintf_p _vswprintf_p_l _vswprintf_s_l _vwprintf_l _vwprintf_p _vwprintf_p_l _vwprintf_s_l _waccess _waccess_s _wasctime _wasctime_s _wassert _wchdir _wchmod _wcmdln _wcreat _wcscoll_l _wcsdup _wcserror _wcserror_s _wcsftime_l _wcsicmp _wcsicmp_l _wcsicoll _wcsicoll_l _wcslwr _wcslwr_l _wcslwr_s _wcslwr_s_l _wcsncoll _wcsncoll_l _wcsnicmp _wcsnicmp_l _wcsnicoll _wcsnicoll_l _wcsnset _wcsnset_s _wcsrev _wcsset _wcsset_s _wcstod_l _wcstoi64 _wcstoi64_l _wcstol_l _wcstombs_l _wcstombs_s_l _wcstoui64 _wcstoui64_l _wcstoul_l _wcsupr _wcsupr_l _wcsupr_s _wcsupr_s_l _wcsxfrm_l _wctime32 _wctime32_s _wctime64 _wctime64_s _wctomb_l _wctomb_s_l _wctype _wdupenv_s _wenviron _wexecl _wexecle _wexeclp _wexeclpe _wexecv _wexecve _wexecvp _wexecvpe _wfdopen _wfindfirst32 _wfindfirst32i64 _wfindfirst64 _wfindfirst64i32 _wfindnext32 _wfindnext32i64 _wfindnext64 _wfindnext64i32 _wfopen _wfopen_s _wfreopen _wfreopen_s _wfsopen _wfullpath _wgetcwd _wgetdcwd _wgetdcwd_nolock _wgetenv _wgetenv_s _winmajor _winminor _winver _wmakepath _wmakepath_s _wmkdir _wmktemp _wmktemp_s _wopen _wperror _wpgmptr _wpopen _wprintf_l _wprintf_p _wprintf_p_l _wprintf_s_l _wputenv _wputenv_s _wremove _wrename _write _wrmdir _wscanf_l _wscanf_s_l _wsearchenv _wsearchenv_s _wsetlocale _wsopen _wsopen_s _wspawnl _wspawnle _wspawnlp _wspawnlpe _wspawnv _wspawnve _wspawnvp _wspawnvpe _wsplitpath _wsplitpath_s _wstat32 _wstat32i64 _wstat64 _wstat64i32 _wstrdate _wstrdate_s _wstrtime _wstrtime_s _wsystem _wtempnam _wtmpnam _wtmpnam_s _wtof _wtof_l _wtoi _wtoi64 _wtoi64_l _wtoi_l _wtol _wtol_l _wunlink _wutime32 _wutime64 _y0 _y1 _yn abort abs acos asctime asctime_s asin atan atan2 atexit atof atoi atol bsearch bsearch_s btowc calloc ceil clearerr clearerr_s clock cos cosh div exit exp fabs fclose feof ferror fflush fgetc fgetpos fgets fgetwc fgetws floor fmod fopen fopen_s fprintf fprintf_s fputc fputs fputwc fputws fread fread_s free freopen freopen_s frexp fscanf fscanf_s fseek fsetpos ftell fwprintf fwprintf_s fwrite fwscanf fwscanf_s getc getchar getenv getenv_s gets gets_s getwc getwchar is_wctype isalnum isalpha iscntrl isdigit isgraph isleadbyte islower isprint ispunct isspace isupper iswalnum iswalpha iswascii iswcntrl iswctype iswdigit iswgraph iswlower iswprint iswpunct iswspace iswupper iswxdigit isxdigit labs ldexp ldiv localeconv log log10 longjmp malloc mblen mbrlen mbrtowc mbsrtowcs mbsrtowcs_s mbstowcs mbstowcs_s mbtowc memchr memcmp memcpy memcpy_s memmove memmove_s memset modf perror pow printf printf_s putc putchar puts putwc putwchar qsort qsort_s raise rand rand_s realloc remove rename rewind scanf scanf_s setbuf setlocale setvbuf signal sin sinh sprintf sprintf_s sqrt srand sscanf sscanf_s strcat strcat_s strchr strcmp strcoll strcpy strcpy_s strcspn strerror strerror_s strftime strlen strncat strncat_s strncmp strncpy strncpy_s strnlen strpbrk strrchr strspn strstr strtod strtok strtok_s strtol strtoul strxfrm swprintf_s swscanf swscanf_s system tan tanh tmpfile tmpfile_s tmpnam tmpnam_s tolower toupper towlower towupper ungetc ungetwc vfprintf vfprintf_s vfwprintf vfwprintf_s vprintf vprintf_s vsprintf vsprintf_s vswprintf_s vwprintf vwprintf_s wcrtomb wcrtomb_s wcscat wcscat_s wcschr wcscmp wcscoll wcscpy wcscpy_s wcscspn wcsftime wcslen wcsncat wcsncat_s wcsncmp wcsncpy wcsncpy_s wcsnlen wcspbrk wcsrchr wcsrtombs wcsrtombs_s wcsspn wcsstr wcstod wcstok wcstok_s wcstol wcstombs wcstombs_s wcstoul wcsxfrm wctob wctomb wctomb_s wprintf wprintf_s wscanf wscanf_s

$_4_/Purity.dll

IMPHASH ce7da5e1ba536d27d800607464d6f723
SHA256 53e68f8db449580fb51eddb573bdef21901065eb4df9f31ba4747072160d33cc
MD5 be6178ac796756340d892abc423ad21c
SHA1 e8adf475efc25eea4abd4e41cb26b34724a8abc7
SHA512 64a0a3de69c1c13442be5c9fbd8396223b2a8392de3fa62ae93f04cd63e15e79878e800f6c357e66ff484f68ddc3a87ad65c265c51243d296573c52405703371
SSDEEP 49152:bgUWXEvPLfjI8f10Szr78O+hzi48MJxNHeLV2F2JvPZmLklaBfg:bgUWUvPLfjI8fLzX8dzi48MJxReVb2
TLSH
T17416D758E93D1EC8FA78693C5174F1808A914E5DA301E56FB8ACFA918D373903678F9C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

437556

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GlobalUnlock GetProcAddress GlobalFree FreeLibrary LoadLibraryA CompareStringW CompareStringA SetEndOfFile GetTimeZoneInformation WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA InitializeCriticalSection GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA VirtualAlloc VirtualFree GetVersionExA HeapDestroy SetFilePointer GetConsoleMode GetConsoleCP GetStartupInfoA GetFileType GetStdHandle SetHandleCount IsValidCodePage GetOEMCP GetACP GetCPInfo ExitProcess HeapSize InterlockedDecrement SetLastError InterlockedIncrement TlsFree TlsSetValue TlsAlloc TlsGetValue GetModuleHandleA RtlUnwind GlobalLock GlobalSize GetTickCount Sleep LocalFree GetFileSize LocalAlloc SetUnhandledExceptionFilter VirtualQuery GetModuleFileNameA IsBadWritePtr SystemTimeToFileTime SetLocalTime FileTimeToSystemTime GetSystemTimeAsFileTime ReadFile DeleteCriticalSection EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount TryEnterCriticalSection WideCharToMultiByte MultiByteToWideChar GetLocalTime OutputDebugStringA FindClose FindFirstFileA FileTimeToLocalFileTime FindNextFileA SetFilePointerEx MoveFileA CreateDirectoryA DeleteFileA GetFileAttributesA WriteFile CloseHandle CreateFileA GetLastError GetFileSizeEx RaiseException GetProcessHeap GetCommandLineA GetCurrentThreadId HeapReAlloc HeapAlloc HeapFree IsDebuggerPresent UnhandledExceptionFilter GetCurrentProcess TerminateProcess FlushFileBuffers HeapCreate SetEnvironmentVariableA

user32

SetForegroundWindow SetMenuDefaultItem TrackPopupMenu PostMessageA AppendMenuA GetWindowRect DestroyMenu GetMenuItemInfoA GetFocus GetWindowTextA ReleaseDC CreateWindowExA GetDC SetMenuItemInfoA CheckMenuItem PeekMessageA EnableMenuItem CreatePopupMenu RegisterClassA MapWindowPoints FillRect DefWindowProcA LoadCursorA GetCursorPos EndPaint DrawTextA GetKeyState BeginPaint SetCursor GetSysColorBrush BringWindowToTop GetClassNameA LoadBitmapA GetParent GetUpdateRect GetCursor UnregisterClassA GetDoubleClickTime DispatchMessageA MessageBoxA MonitorFromWindow SetWindowPos ShowWindow GetSystemMetrics UpdateWindow GetMonitorInfoA GetAsyncKeyState DestroyWindow SetWindowLongA SetFocus SendMessageA CallWindowProcA GetWindowLongA

gdi32

CreateSolidBrush SelectClipRgn GetCurrentObject SetBkColor CreatePenIndirect SetROP2 CreateCompatibleDC LineTo MoveToEx DPtoLP GetStockObject CreateBitmap SetTextColor SetBkMode BitBlt CreateCompatibleBitmap SelectObject CreateBrushIndirect CreateRectRgn DeleteDC CreateFontIndirectA DeleteObject GetObjectA

comdlg32

GetSaveFileNameA CommDlgExtendedError GetOpenFileNameA

advapi32

RegCloseKey RegOpenKeyExA RegCreateKeyExA RegQueryValueExA RegSetValueExA

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA DragQueryFileA ShellExecuteExA

ole32

RegisterDragDrop CoCreateInstance RevokeDragDrop OleInitialize OleUninitialize

wininet

HttpSendRequestExA HttpEndRequestA InternetConnectA HttpOpenRequestA HttpAddRequestHeadersA InternetAttemptConnect InternetReadFile HttpQueryInfoA InternetCloseHandle InternetOpenA InternetWriteFile HttpSendRequestA

comctl32

ord17

000 GM Normal.pth

SHA256 18c2e3c0ed69e3b2bf19cdff71d6a404606c4ceb9185ad6ab647014d77362f85
MD5 b786f758eae203bd531920c58c46d15c
SHA1 ba220a563da9a0d07398c19664f6347c5869549c
SHA512 707b9deb57c516dd209322012f731d1aab40e2f8c9794e81cc929a24f0dba2f5aa26043f6130abbf201b5fbde392db834f7babab098f88ab55064f6e3a60f995
SSDEEP 192:GbBBBBvBBBBABBBBzBBBBhBBBBZBBBBEBBBBGBBBBLBBBBpBBBBMBBBBVqBBBBS4:PN1Oeb/VAC0ZfPy
TLSH
T12F8499DA9A8374AED673B3B710575F08E0B8E0169EBC4AB3373095AC8DE776C6815341
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

000 GM Normal.smp

SHA256 b0b3955abf25fbd9fd3fdd9a945f87c5fe13e970658fb98f7a16c8ddfb06d99c
MD5 43450d39b0ba3c48e8b3e1126c762126
SHA1 890710386c64e9362b225ec4619e6236da9dfcba
SHA512 3354b16307ef8377c75e9c7df19c3cc1a7b17de68d39c17065b0804f9f7fe63e0cf9ae3bf0f06165282a986ebe48720e99993deb05c1ac6ecbced5a5bdff0a6d
SSDEEP 786432:AzbGa9F1J3Hm5xAVatU7jtSrzZcUesrZnaiBKCF:A2q3GIVaAsr1hrlZk
TLSH
T185470162F4C34601A6BBC7369E9118400DEAF54DFD69252F714ACF94F283310FA6A7AD
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

000 GM Normal.wvt

SHA256 41d3f1a5fa4861bcdb0fec0c6c6c6ad8145d064a093b8174d36d0da9687f1556
MD5 7d232f4b50acc62c9eaab34a61ed4be0
SHA1 b6be51f62bf9011d2c2938c0583953ea8243bac8
SHA512 ea1fbe2efee9d18783e381bafd368e4415a02db1ef21a61276eab98214293e5ac65bd2c63fffd3fe21fa0b434d10d6fc57859f33615719dd1ce5cf0814bb54e5
SSDEEP 96:sn+JH49D80nR5He+x2j4N/IFvAmwlXVyHgdFSr+D05WKsVfGU/:sn+CDxXHe+x2jI/CIXVyHAw+D0jsF
TLSH
T164E166FBEF501D25E7335D3646F247438B26E2BC0A264C6B10A902C56E1B6D20FE766D
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

001 GM Rhythm.pth

SHA256 dcc789142b45f2ce2c2c789d8150319942d3dee0148a0a08aea6b47bdd4d070d
MD5 822bd645d56d3bc352e4573c0b0c6ccd
SHA1 bf520c87f13db48d1ca638960da10f6554bb4f23
SHA512 ab1349449dafb1d8753d8d0efda484e9a406905d288772047d32f318b1bddf324ba018a5101f9437fb925204c45d6ff6568c9c3f69af53625a67e11837849468
SSDEEP 192:GpBBBBpsvJBBBBHDsvzBBBBTsvVBBBBisvhBBBBafFnBBBBlsvlBBBBD5v4+XBBB:L
TLSH
T145535186022EB9ADD930F37755771FA9D0EAC4884DBE39739770857EDDE276C8812280
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

001 GM Rhythm.smp

SHA256 2e885b96c731751f13cfce91937b299111b0a589a797741023b80eba50791156
MD5 1d434d82660df481c21c50093d665caf
SHA1 3b90f64aa2125a11459244dfef1f544300c60bdc
SHA512 26625d429390ba946fe1ae70296c601e0dd7e41b2333efce12541f54ed33813dfffe45df7ad62a7d4b36063a0fd18cf63a66dae2c67c37ca58263e5dfb614ea9
SSDEEP 98304:MNfY4cHWZNQxNhOVTNIFKt1eV2QvZ2HhV0FfrKCzshIycwmAEbfH+zH2:MN/c2PQMV+DQQhS70pKThIycwpEbP+72
TLSH
T1A416C092F0438A10C4364E3A8D63AA6107727C5EFF16471B30C5FF1A79E73E1AA26795
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

001 GM Rhythm.wvt

SHA256 2bd7490dcd842aa7a4a52664dfb4c2f296b7fb792d82d0e926665661181eb829
MD5 8d8b675bb8ef49d8846c7e7140dfd015
SHA1 d7b8d3177f112c16daa0e9d2872228f0b42d4985
SHA512 1debbc588fecfe640b37675fafa9bcee79959cf7c19484e95ce36b1a09f97f68a2457a522a9d9c3c3601a54deb1726371368370505590cf07fa7f87a428695ab
SSDEEP 48:z48yLJaRejo45u717NolX1Tex0msfjjBjzBeWZ3y9laWtqkQ4ITAfy0sY:sfto917elX1Tex0Nfjlj9lZiU44Af4Y
TLSH
T15491F4B7AF202D50F1253D77501213561570E190822E8DC36EE0AE883FCC6F5BDB6B9A
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

010 Factory Melody.smp

SHA256 977811e4cf853f2c196cf8f0a024f5b05b75a47a0efc4fc24269e6021aab64a0
MD5 12055682a696529cdcb726c067be7224
SHA1 b5ef5c821fbaf4fe3cd3c1e5d4eedfef165fb2a8
SHA512 00621fd3c37d70a4b93e5f219f13a04f0f032dede44e4e6f88b367d532945ca4ff67866ee04f2f22ba05fce1da3bfb9e46fdf3d72161b7599ee42febb945406c
SSDEEP 786432:buTuf8R2XJgzHjROJZEDEd3P/hauuumbs9:bXkGIFOJZEDEdB0s9
TLSH
T155470261F8D3464333BFC3669BE01A5088FBB548EE64151F718ACF90B2CB710B96975A
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

010 Motive.pth

SHA256 42d7394d8fca0f3ff0c1ae36ea2c847552480351f29c951130c4f1747e5e2616
MD5 c835ea84b5256a41cdf5c363f4068706
SHA1 88ae3a1c28bf3e1ca74c3965652637fd2abec9bb
SHA512 18bf4a6f9fdd03b2330183b6b0956352a674bfb78cd534dfd1dce2e5a93eed7582aa94d7bff3f9383f8100a0685c7f0d208581fdf12cad74b4a7b7e27ad1dfaa
SSDEEP 1536:CHhWuh7x+UQ/Vu4DE2RzLMeqRvyodqsQHh/:u7x+7/Vu4D/tLMemvyodTy
TLSH
T1D3C4C9A6054A6AADEC31B7372473DF96D0B5E465CDBE393357B0C27E8ED239C980A140
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

010 Piano.wvt

SHA256 6ef0f2c819b83d0e2468d1d80148d9c5a8e92cde4068aff679b6295c1b2349c7
MD5 e2631326b56f1fa9f578bf8252991bcc
SHA1 ff56b2dbadd5ff8cee74f0248d0885071c9a4ba6
SHA512 640bd9805ffedbeadf78a1de9389d4e4308d2682087af3b6acba26aa67d07b7a3c3064b336e427c81cba505d10ed0a030bb8e1871502a74b6169992e37e8cff0
TLSH
T1C401ACB71F615400E6606F7226F191E0031CA5655F19B82363EA30C0BAF6B95DE7C979
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

011 Factory Drum.smp

SHA256 fda31e31be1e999425778157c41f636b48532282b0c0734479aa68a3371e3395
MD5 d9e4ad431608cf98383a6eae4eacccfc
SHA1 027e810908464624644b8d2cf8aa7e30a310f475
SHA512 fce5d01d3b50cd88e1b1e566ae5923e51c7bc73196ae85328f49ec632a39cd6640a0481dfee0d84bcb8ce81a828eeb6153b05dd80ee62a0a978b9f6954ba0e23
SSDEEP 98304:FPNnxvMW6kdOvYWl+Q0A1e7Fph0Km2OXgsVGVLE1d5Zie5rYINwdw19lRutmEBXO:FPNRt6kMvNl30xh9vwRVyEb+eZYINp1l
TLSH
T16256E092F0838A00D9778E368D626D9107B27D1EFF06461F3089FF1675E3391BA26796
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

011 Organ.wvt

SHA256 3938f45badd1d19ff00d8b281eceb0e51bf455c90ca7194326d80d76afaefb75
MD5 307e6edd33179398df8bca17635bf6d4
SHA1 33ae5937094bbb0d9226c17b589ca28ff6519d38
SHA512 5b0bfc83282b9706d6cff91e64d012e980c0dee18b2deba3c7d37efb1491597a99a14264ead1b8d539e2275060ecbcb5eac03e7c39e2cd13e75518c304212f4f
TLSH
T1F9F09A03CB36AABAC2214C38A1F54BA8037280058609306313F064A26FFB2C0CEDDDB8
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

012 Percussive.wvt

SHA256 37ff381604bec32617369fc6f9c7a590f28c4733bd3d390d3245662d41844973
MD5 d9b1c9f4d3b2c0067aacf6e0478395de
SHA1 b1cafbc733bb5ddad2874fd181d251a185824b61
SHA512 12f3ced8b8cc4f2177fac378b788117ee69803b21bd9de22f5ca167bf5c204ff9a03ed97867767b5d58c3165b88280a110b47fb1a6491a0754cff4570be48626
TLSH
T12C1146231F201996D06E1D763AF208C407A8F17E1B7E556383D282882FCA7C21C2CB49
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

013 Guitar & Plucked.wvt

SHA256 e7c36842b3841a6ead971e06def03611e2ddf5e12a38df20c20ff5427f585a0a
MD5 ac85725ed6831843f38478eabde3ee10
SHA1 b03c01aa8d598230ed54c0d4ab301331ce810bf4
SHA512 5bd4f0dc4ff022ee32c63e947f31781f092184793d4eceddca7aaa1c80cd3e8f4b4589860a430ba7c0e3da5ec3a13eb9633c4feb58b14c1e3aacab4f6f5915fd
TLSH
T16D11AC53DF911672C16BA8FA5EF201C43721C0694C85AC7B33D951E17AD23A81D2A9C1
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

014 Bass Guitar.wvt

SHA256 533ea9f7b6c67cfe95be8d9fa3082272b22bcb55938392211bce97857b123481
MD5 032a8fb856b1c9f1842e80f2f1b9ca8c
SHA1 e0381a675c46210297601320a566778ab243ebbf
SHA512 d95981a20714f6ee0c99df7eadec27a40aa8013cf124f57e5269bc671a49cf5ec05e991af088679236c091d94093a3b37f5c4875c75d3beaa6cd241d93cf2a49
TLSH
T13301CDE52F600615C885DF3E11F919D94362D0894BC3A86F13F8A1942ECF2CA2DADF52
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

015 Strings.wvt

SHA256 eb28bc960ab3447388dc068fc3a380a4a14de3353f0660931a1166c5bde4f35a
MD5 d9671c7e88c9f2b25e7983b206e1b903
SHA1 5f5f28f5d5584bdf0a7070b5be7a7b32d91c6005
SHA512 844d470c7b25c40c6e534401255a24a516e8538bbe16b0b34b22c6150a509b712157b272e1f59299e6c83e50703a2127a5cba4c9a6191343be510c88ddbdff2b
TLSH
T164119C391B488750C8CAFAFA95F3654473668235CF29BE63A3C80A8051C31202C52A5D
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

016 Brass.wvt

SHA256 451d636b9059abe6a113443ddf0d0ed95a135c8e866fee237e1830ec1474cc3c
MD5 3f66972d621ccde424feee54130d6b34
SHA1 6f22af62c53284fa00e5007791c207f6f53a02ca
SHA512 69182b101d45b22b4a24fd1b7de2a57053651f0dddef29b01c04cc32a16f1ef6125f004dd3a6146d40b783067fb9563541c4fdbbc84950d58cce2cede4a66580
TLSH
T159F07D140B8134A4D1614FB797E245D44723E2735E6CA627F3D88999BFDB2E22D09109
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

017 Woodwind.wvt

SHA256 9878cb01ebe332dd0d8b82fdfd0f969249b089609c325304fe53666f96b79a4a
MD5 ff80a51384bc325e0203518154481fcc
SHA1 a6660c16b0c5e90a55479e75594d1b59319d4f91
SHA512 ec91950a50917cd78973f21300c09384362b4429b19398e602a8f655f1be30c733bcacc780939912d48a514f6238f753a2467c37c3f8acc93806fb5758548e27
TLSH
T14B2112154F6914E2D653BD748BF684827B3192BE14A025E733D1E3515FF35814C689B0
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

018 Synth.wvt

SHA256 e252d055739963af648614a41ed03affec636aa43d46fb727f9d748bb0cf386f
MD5 92051f5f9d1505029ae474ff9e166efd
SHA1 3900fae00c25e05ec05008a5265290252f252d05
SHA512 062627039f1523e1d5a62f1d76d56097eff939e35ea0b2704e300174fd00c2fb258fda1a1aef6d5e4ebce21d734131aa11c7a6d038417247b9c2d75989953f9a
TLSH
T120F0E5914F866828D6B5AC3953E184C41B40C89D8841B45317ECF4C42EC22DC1CCDB08
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

019 VOX.wvt

SHA256 d551b1151c89f6a26ce5c2b12c99597e31f157e60ba8cd012f38997e08454ae3
MD5 d39931fccc2660c929c875be31cc5b23
SHA1 4087cd78c160b103097112ce77a2dde610cb131d
SHA512 c9f291baae16624f0ffa07fae01961b5ad19752e7dce1e71952d363ae122ed96cf03516058128ab2d032e86244b2d1c9a977c264f709da21d2b3f83854007d55
TLSH
T106E0A7632F000604DCD15D3202F010C49360E3B5044465B377C598823FCA3D41E2C401
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

020 Phrase.pth

SHA256 aa81d4e8fefaae9914710d0c0e28637542e959744205057e0ecc29b3a36fd44d
MD5 67a65d50620bdec39c461783a30c8512
SHA1 aa12981cb71fd680b637d1a20d17e9782c8b11a0
SHA512 43512a842126326dd09449c111a00366eb22a200347aab860a240a3f4d433a2feb8572e31ac2cc9a7930c330b65cee3a8a2134b9442fada6982d2c1eb667d5f2
SSDEEP 768:FWnmNSYVADrADPdADdqADmAfavHhhkxQ+zADrADPdADdqADmOgY3iHhFgADrADP5:FsmfEoAfavHh6pTE3IHhYEaAREstU
TLSH
T179D4DFC418062A6EE4737BB71863CFA6F5B0E43689BE18339FF1E29C5EC138D2815655
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

020 SFX.wvt

SHA256 4378abc914355c879195bd4aa38d295577c6b3a9edaaf294ee10ef6b8d3f6417
MD5 61ea7364ede4452c71e97741f193ec0f
SHA1 13bcb4fd6ebf0ef9870560b4e9ed64d007f2e7d7
SHA512 2814587b21e7bfbfd0a97dfb7bd790da254dd45c37035e8c89997e5b48d9697ba98e9efb87b9a9221c8b7289f49ce67baaebf3358bd5738ccfdaf824382c6647
TLSH
T1EF113C872F080A48E085CE7292F437C72B60E39A06195E5766C89844BFD76FF0C2C60E
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

021 Basic Waveform.wvt

SHA256 2fb57c4f50fbac801da74ac7164f87e607113add7148d89dc6c27fa990a4ad56
MD5 ff5886cd32597543424041dbded6e940
SHA1 1c687ee2ee44042d69d10851424ab40ed799d436
SHA512 9d37b80b555e8eb9d14c6666a642feee899e2eba81af3f1e9e7dd174a94a07ecd55e0a2f00b0a48e70736d4bff3251d6f3602d194fb80fa4e93e935ec52093fc
TLSH
T15921B0BE079014ECF9B419F1D681AA5903D5F2323E5B402706D479C28BE41A3CBBCE17
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

030 Drum Loop.pth

SHA256 0a64bd60fa7d86d4e7d42de18e4d026df9fd8f43b2bcc5114e4aab829764adb1
MD5 e391e41f83248bfbd1f231bec829f156
SHA1 a18ef8d01bfa7f5f3ff14c0d89f8cd3eca279eba
SHA512 7aa0c89aa84d17ccb9aafddb71d1e01493bb01054de12d0e96fdca58f8003f84adeb3595def746c259cf0ff5139dcc470212889f441b4361a2286bfbf89025c5
SSDEEP 3072:tMxJo/VJemo63nP7xQ/VeLT/V+/VWC9L/VT3oOMoyJnrd3w3odP:B3ld3L
TLSH
T17DD469A6155A6AACEC70B73768B3DF99C0B5D444CDBE35379374C23E8EE276C890A140
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

030 Kick.wvt

SHA256 db64a0bd87d33d273d1076c911d699663b49fd70cbfe60aaf42aed2a0eeb1912
MD5 69c8267c8c85a508a393072fa48b76ba
SHA1 bd86922b683a88fae58c1319baa7a61ce6021ada
SHA512 474c5728e6dda6be704bfeb60c34ae80c6e7167a37401bc5b92eaeb6473f7e8852b45dd5ef5d8d3e023b51302addf2aedbb6f71da94c900ed121c546f7cdab62
TLSH
T19C21F07E9F081888E1D93E72507983431E04FEE1C40882975DD4B5C4BE0B1C85F23A74
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

031 Snare.wvt

SHA256 f92853a8df3439823bcb46bbac43ac15ce0f274d2ca919a889e6e9a3968dad94
MD5 968be2db2fcf704225383a2f23ed67b4
SHA1 94268f47e3d17925ce22603dd3f18aee770a8b2b
SHA512 945e5d1457aedde9a549b199d61b3e2ade62de2f7f35b14b438d4614436c42b9c59d1199d366e8271d8e642a4d7f97c349777b79c9a4cff0cb8f49445fe3015f
TLSH
T16821D4EC9F2048ADF2203D77499592190930EEA188148F8B259037057D1F4F66E60E2B
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

032 Tom.wvt

SHA256 80d2ddca7a415cb80b5b766bb1a0f1e0c4887a45e52ea3a66904ea606b6f8c6a
MD5 1b79bf4aca4d0456c9e54d59668898a8
SHA1 190f3293df1e65d94e1949566a9ca8896226372d
SHA512 453f42f9f6e64ea880ea82245041e8d27441c5ae3b76dcbe910a41e8eee39ae600ac6bb60b17f6e50402b7df5ae57d609f36a107b330f042ebf48b0e45e6014b
TLSH
T126F0EC7D5F624514F7943C37B19B92322015FDA1848C23733C94FA503E932C51C9266D
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

033 Hat.wvt

SHA256 6368bd0bd85c1b88aa0a4596f3c4c43f7a77f979aeaaddaaaa48bcf06a26ac9d
MD5 4a411ce344ae2d268c635fe8603e9f29
SHA1 68936fdb0fcd4f32f93ddc0ec66bffe88cfc9e17
SHA512 6efc54fa39a7635d4ca4ee0ac7bbd475aa1f954477e57c2d5bc452aa73c4c419911a3dae010d23b2338075860e15203c8914245d6ad97a0dad2e29c3b2d8aa45
TLSH
T1E2F04F7EDFF50205E4927E3561A817249482DEC1A820A0A325C27DD17F937E97C54E1E
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

034 Cymbal.wvt

SHA256 915eacde8a7711b61e2af20105c02b01d082a86b030593cf1fd61e463c262fb4
MD5 0274e714f462474a4669a16ca1c2c8cf
SHA1 988e55dddf59858abaf8b997ff04412e306ec056
SHA512 384f6c581a189f9a99ba2a5a980d12a2c3b1bb5ed6880fcada10635ad0ada60114d9771bf6f1b97a02b13b963e532a72ff48ddabec2eef14d720bf18c3d5a4d5
TLSH
T135E05EFD1F11A748F4007D367591068110B0CE1240AA2663208470C43E8F5CF0C88A87
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

035 Perc.wvt

SHA256 c2fdd85e2c75c2bbd80b65525cd1f27858c0a978943456a38917e70aef04eb72
MD5 041e96c95a9dbdf0ad57bb7ccc7f0f46
SHA1 3e9b7ebefb0de380d6e52a250e4bba1e56f1162d
SHA512 94b32e8411e5e3d6b6e567b8fe36f3bb5681dee65399292cf05b59b1c7adba8142236ba322296ab73355e98251e0e09a230409d3a958df4dc03e0fc0c6b0df7f
TLSH
T16A4121BEBFF00675E8043D36551995472620FE71A22425A71CC4B0893F0F6E63D79B12
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

036 FXSound.wvt

SHA256 9516bc69bf7b13be7200c4de98dbc81e8a7ebfd59228283e77b1ff937eab6bd0
MD5 5ecc7c5be371b03cdfce200eb0edc98d
SHA1 c9429c2862c5b282dd940a2e1cd4191b5a2bd2f2
SHA512 8a02c7b87cf18a17fd315ad0b6ad10cae70a3b97c85d5764cd4bec619d72cc5dc47c031240a5d26638128767098c85b1b3b14c47e4d27dc4c093551632a00201
TLSH
T1F7E0A73D7F90004AD1917D7171E0431621B5FC12881D15D330D473803E0F3C52D3420E
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

040 Drum.pth

SHA256 1c09d38ec25a86171fa7b2b1eb64f617e3e79cf84a2a2d387d320b37178b7c9a
MD5 91085b549918e77ba7c2d51361d1d9ef
SHA1 5b733a5fd8f39bea1684abd75e0ebb18abd356dc
SHA512 9f70c128862441425c32d7e0beaaf9586487b3565efae0b51c540ec165486e35ccb5f53be369a96336d2302fa622454426dac5bbd37e8e6fed3e14268c8c5df2
SSDEEP 384:Yti2scj5qPhfN/3i7hpZ7xib8HLDBwkjYijh6PpW7LUi:Yti7c8N/S7hpZ7xib8rDBYXg7Ai
TLSH
T119749786126EB9ADD871F77350332FA8D0B9C4884DBE39775770856EDDE23AC8D12680
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

050 Piano.pth

SHA256 61b09546d1765d98782aa0b40032d293ad947018c9947bcdf0208f5be186b91c
MD5 6fb9fa68c92f147c399ef698293ca76b
SHA1 a1155ae2893309eb2963522565a44808ab388916
SHA512 6252baeb77e220eef982bdb88f424d84d2146ea03d2f793e86d3e074a1399ff2de5e27c6fbe9621bc5a5695bad95a3c34111adddd66ecdd4fdf1da42d85b45a4
SSDEEP 384:A29bG8nszp1XIkpI88Lssb+6d2Lgn8Yuic/y3O:A0bGkKp1XD8Qsi6d2cuicq3O
TLSH
T1E5941DD9868238AED57377F711A34F48E1B8E0229EBC5A337B31965C8ED734C9895381
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

051 Organ.pth

SHA256 882daf8b4d1a622b463f2e799675f958ea8ebb37e68923573561afc9d5c9361a
MD5 4849f53bd8c173c2193a1014d087f6b3
SHA1 6c0e479d7a1f4fc4c1836c943830038de1046fbd
SHA512 7a53f0c141ffee1fb5a94bd142c40e7fbadfca69fd68a977e6d4d2292780da813ef90b236cfcf104619e7f998e20711953a1b1886ece80c391a9a15104ca93d9
SSDEEP 768:JuWbEVAJWNANPgYgA+c4dKM7ZMFXT8/MiuNDCnJLluJse0sQsuaZAuo6xoEwT8ua:3sGWNFHc4dgh
TLSH
T19F74AACA8592386ED172B7F300636F85D179E5224EBC5A33BB31E65C5EC734CA899381
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

052 Bell & Perc.pth

SHA256 c0b0b8df26719c42c5be7ea77eec8f28f826646e79d9a3af2cbdd065c0a6bf17
MD5 98f9db538208b7903b49507f4bfe0c06
SHA1 5e534b59524601bd7a489f4bdfdc287acf56460d
SHA512 d5cb4e2343f82d949aad4cc791cef0678be5a6c545bfbe9f301d251b36c0abf2ea9ea8bfec319c5280cf151623f080a8ac67fc5a457a45262e84e45a3f62669f
SSDEEP 192:GPBBBBMBBBBrBBBBOPhBBBB1NBBBBmBBBBpBBBBXFtBBBBOPMBBBB6BBBB0BBBBH:m3SFUaFNWtDT0xH+TYEVa3
TLSH
T1D63431DA868638AED67377F710630F88D0B8E0265EBC4A73B771A55CADC738C5895380
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

053 Bass Guitar.pth

SHA256 9b966c18288b5c5427b7655d6c1a842c8996e8480aa17b397a01e3c364df834f
MD5 11535f7079ed779f04c7051851b69f67
SHA1 778e8d06cc4d0d4e8b02738574f41fe67dfd9173
SHA512 55a867484686d98b1e568bd860dad5626816dc8c5a7f705139e4ba52221ff727dc519ceec49d0679506550ca75465ee6b7e68640972ed941f766d130cec0692d
SSDEEP 192:GwBBBBNBBBB8BBBBJBBBB8BBBBpBBBBABBBBiLBBBBLBBBB9BBBBmBBBBWBBBB53:EdIGNzdWAA4fiDk8
TLSH
T1AB841FCA454238AFC172B7BB01630F46D179E4065EBC0A73BB31D99C9DD739CA896782
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

054 Guitar & Plucked.pth

SHA256 a9759ebe15f94950c45450a88d5e269e8805ae7e93a8c5b5c0f9eca7202c4a43
MD5 d5628c1888f9d98b04fdfce69098867a
SHA1 90ac522118483fa1a3d00077621b17973e2fd848
SHA512 4a9306d8763dec4aac5891f27fcce09cad6e16814082a2222191fb5e0d81366f539b47eee4953f71505eb0d7840e925464028d4a6224df2233d4569e2236b71d
SSDEEP 192:G9BBBBsBBBBOBBBByYBBBBfQzBBBBRBBBBrybBBBBaBBBBSBBBBJBBBBHTBBBB8M:qQ8tEO3M1G9+2ZZA3adSD7q
TLSH
T1315461C9828678AFD57377BB10634F88D0B8E4225EBC5AB33B319A5D9DD738C5895380
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

055 Strings.pth

SHA256 88d8ae7a60c0b2a94bcff503b3d8f71d9c7c1ad68fd1c2d24fdc774c5bf33e48
MD5 f035db3a8c9d6343163a617f419ac3a6
SHA1 bcfd8f1b381ac61951a5f4c4f4de32984348b388
SHA512 885f138391b932e6dd867428c06d888fcb7906d8fef5a3c26cff132cfc2af316063339ec205f8d636d7d8ba37da3b7393473847199d4bbb56c0f826025fb0d9c
SSDEEP 192:GiBBBBIBBBB9BBBBlBBBBFBBBBIaBBBBX2BBBB3pBBBBBYBBBBOBBBBKBBBBgBB4:vb6J2QAPLRbInxx
TLSH
T1B6F3EBC9898234AEC5B273F700A34F48D1B8E4266EBC9AB3B770D95C9EC674C5895391
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

056 Brass.pth

SHA256 d0076448d772e15a3f8af19aeba98149a2223fe21466e7a35631e1bfd40013fb
MD5 0fd3f79050261c3715ee191591c42a4f
SHA1 f1195c165aa2e8c8daa15e9666bad9679d6a5ddc
SHA512 67dca991be33863287baa33f74053afd806a08dc302c417d06b9a823d5453ed53abbfbc365b822a2cb1b5a0c1b8b6aa9c1be733954590d310bbd39f31f87d720
SSDEEP 192:GBBBBBp5BBBBqfBBBB/BBBBHBBBBrBBBBWBBBBzQ8BBBBSBBBBLBBBBABBBByBBl:mYuU1jmL3G
TLSH
T1EAE30FC98A8334AED9B377F700635F49D178E0229EBD6A737730995C9EC630C9C68291
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

057 Woodwind.pth

SHA256 f5448a95252692554694c1be53bf4157f7a31006f845884e710b9e9a5d2b140c
MD5 3d96a488baff5188937499fe9280705e
SHA1 4d0af807044f79f6d25aaab7fe0c7ce4d1a4e490
SHA512 0f1a7a278b0fbd4fea1405dea20a497d578271afd00ed9902f42d9ea6d9cbc9242acec64e80492ce98e0816c5e179cf05df8bf5237e1e762aa282b4320899d2a
SSDEEP 192:G+dBBBBJBBBBm7BBBB9BBBBnBBBB7BBBBWVBBBB+BBBBABBBBuIBBBBaBBBBYBBM:Xz6jZwDpE
TLSH
T1B3B320C98682B4AEE9B3B7FB00635F08D1B8E4129EBC1A73677199AC9DD731C4C55380
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

060 Lead Synth.pth

SHA256 e2bd7574da80a09a26fa6d728f77677b6b61a9cd2decb87a12cb1bac295441f4
MD5 f193a4c0930eb50212a83290b5c46385
SHA1 325d9882d0d6b42fbb81f380226807504a56347f
SHA512 697a5033fb19aed1cbaa8f8957664049fb645429ec16107f23c4bdbc3ce378d8c60c12eb66c3e8af60fa82d73a34e6f7c1204373eb5ad239958ac495a23084e1
SSDEEP 192:GGPBBBBgBBBBDLyBBBBS9BBBB+BBBB7BBBBMwBBBBvnNBBBBLBBBBFBBBBkBBBBP:AFg8cPyj8pl7ZkrT5692FTM6
TLSH
T112341FC9818678AEDA7377B710634F48D1B8E0269EBC1A33BB71D69D9DC678C2C54384
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

061 Bass Synth.pth

SHA256 8a4d0051feae6532e0aefeec570bf284985a11cf77fbcf27c4c44dca8add0586
MD5 d5d159dd6a257071c7e70d46954ab2f3
SHA1 443cc48eebaa97cc0ab4c432d6e9f403f4bafb85
SHA512 8f8ef900ef45bc3286ed1634d22fd80fe84a47c5f16045f82bc9e837b082a3f1991c45f200fd43fe484d0f8e09de7e25c567484882d53445ffee5badf088ed4e
SSDEEP 192:G8BBBB0X7BBBBQBBBBuBBBBuDBBBBcBBBB4BBBB5BBBBJQBBBBRxBBBB0BBBB9B0:OAhxiBf5wW
TLSH
T18B241CCA814778AED673B3BB00634F48D1B8D4265EBC4A737730EA5C9ED678C6854391
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

062 Fast Synth.pth

SHA256 da5f7f0cd4f0fa7a7809ccfc4d0c39d5e141ed07667a77ffa41ce04820a13699
MD5 ad5561a8ae41fbb29845e19832420253
SHA1 6c1d9232414c5ff1fa443913dfaa64e62bed239a
SHA512 7fc76f9124a660e3b98bcaac173756395123d85badfe618e3f66bf3471403ecca56a8e95d8818ab44bba8c13f7292b743ca13c87360ee1242e57698fcbe9279c
SSDEEP 384:2CJYOaNpD/7K2srqC2XGZFT+8DIP7WzWy2z4okXiyx5trepI8t5YpUkmIUQ2:5JY62srqC2kFT+8Dk+WPLyFCy8j8UQ2
TLSH
T11FB43FCA818238AED973B3F710635F48D1B8E4269EBC1A33BB30995D9DC775C6858391
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

063 Slow Synth.pth

SHA256 af96ff9ffbeef3919163f68c94ee6c3480d091851280234519ba785158529e1a
MD5 0097bc932afbe8a1adc38e96c3d62cdf
SHA1 353a58112756400a1add66d710a9f758b7a09edf
SHA512 7915ad0448d6e2c52798901dd6536ff28cf61b9d06c23e87e651c912d196c6c69dcf9f2d62f501b11b94461df877ab377cfa7fed52ecfd71bf486342af591b7e
SSDEEP 384:XzpEfFqbYGUKikuLncsxBTMV3UOrOH7+Y3d5e6q1BDsDVetXZzzsFsISmgThYxiI:e9lGScw65rKBt5obtdY/mTHL/0
TLSH
T19DC4FBCA818638AED5B3B3F710635F48D1B8E4269EBC4A337B70DA5D9ED674C5858380
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

064 Arpeggiator.pth

SHA256 0b004b1c7a9e7912f0ab27d97ec21174f157302fcaf579fd379a815c008ac4f7
MD5 e79054c8ab2e5da5a3997b51bc4b1987
SHA1 5fc9abb73edab987bed314ae5276da95a622ecc2
SHA512 34ac929e66b0e5b22c72270a9064efc5505fc9830ba009de10cf9425613fdacda04d7f824df9ec348a17e52521e447cf37694212c8287e198297aede6cf3e881
SSDEEP 768:ApT5AwP63D5eeUbPqGfQWwd6KB7ppnggW7CEdED5:AP6QbiGPKB7ppgrCWe
TLSH
T1E6E4D8CA808238AFC9B3B7F711634F05E1B8D4265EBC5533AB31DA5E9EC774C5889290
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Microsoft.VC80.CRT.manifest

SHA256 a50941352cb9d8f7ba6fbf7db5c8af95fb5ab76fc5d60cfd0984e558678908cc
MD5 d34b3da03c59f38a510eaa8ccc151ec7
SHA1 41b978588a9902f5e14b2b693973cb210ed900b2
SHA512 231a97761d652a0fc133b930abba07d456ba6cd70703a632fd7292f6ee00e50ef28562159e54acc3fc6cc118f766ea3f2f8392579ae31cc9c0c1c0dd761d36f7
TLSH
T102317B908D896C169302D5D8FDF1E92674463F2704BE46EF6CE11EBF6D8248892823F6
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

Purity.dll

IMPHASH ce7da5e1ba536d27d800607464d6f723
SHA256 53e68f8db449580fb51eddb573bdef21901065eb4df9f31ba4747072160d33cc
MD5 be6178ac796756340d892abc423ad21c
SHA1 e8adf475efc25eea4abd4e41cb26b34724a8abc7
SHA512 64a0a3de69c1c13442be5c9fbd8396223b2a8392de3fa62ae93f04cd63e15e79878e800f6c357e66ff484f68ddc3a87ad65c265c51243d296573c52405703371
SSDEEP 49152:bgUWXEvPLfjI8f10Szr78O+hzi48MJxNHeLV2F2JvPZmLklaBfg:bgUWUvPLfjI8fLzX8dzi48MJxReVb2
TLSH
T17416D758E93D1EC8FA78693C5174F1808A914E5DA301E56FB8ACFA918D373903678F9C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

437556

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GlobalUnlock GetProcAddress GlobalFree FreeLibrary LoadLibraryA CompareStringW CompareStringA SetEndOfFile GetTimeZoneInformation WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA InitializeCriticalSection GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA VirtualAlloc VirtualFree GetVersionExA HeapDestroy SetFilePointer GetConsoleMode GetConsoleCP GetStartupInfoA GetFileType GetStdHandle SetHandleCount IsValidCodePage GetOEMCP GetACP GetCPInfo ExitProcess HeapSize InterlockedDecrement SetLastError InterlockedIncrement TlsFree TlsSetValue TlsAlloc TlsGetValue GetModuleHandleA RtlUnwind GlobalLock GlobalSize GetTickCount Sleep LocalFree GetFileSize LocalAlloc SetUnhandledExceptionFilter VirtualQuery GetModuleFileNameA IsBadWritePtr SystemTimeToFileTime SetLocalTime FileTimeToSystemTime GetSystemTimeAsFileTime ReadFile DeleteCriticalSection EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount TryEnterCriticalSection WideCharToMultiByte MultiByteToWideChar GetLocalTime OutputDebugStringA FindClose FindFirstFileA FileTimeToLocalFileTime FindNextFileA SetFilePointerEx MoveFileA CreateDirectoryA DeleteFileA GetFileAttributesA WriteFile CloseHandle CreateFileA GetLastError GetFileSizeEx RaiseException GetProcessHeap GetCommandLineA GetCurrentThreadId HeapReAlloc HeapAlloc HeapFree IsDebuggerPresent UnhandledExceptionFilter GetCurrentProcess TerminateProcess FlushFileBuffers HeapCreate SetEnvironmentVariableA

user32

SetForegroundWindow SetMenuDefaultItem TrackPopupMenu PostMessageA AppendMenuA GetWindowRect DestroyMenu GetMenuItemInfoA GetFocus GetWindowTextA ReleaseDC CreateWindowExA GetDC SetMenuItemInfoA CheckMenuItem PeekMessageA EnableMenuItem CreatePopupMenu RegisterClassA MapWindowPoints FillRect DefWindowProcA LoadCursorA GetCursorPos EndPaint DrawTextA GetKeyState BeginPaint SetCursor GetSysColorBrush BringWindowToTop GetClassNameA LoadBitmapA GetParent GetUpdateRect GetCursor UnregisterClassA GetDoubleClickTime DispatchMessageA MessageBoxA MonitorFromWindow SetWindowPos ShowWindow GetSystemMetrics UpdateWindow GetMonitorInfoA GetAsyncKeyState DestroyWindow SetWindowLongA SetFocus SendMessageA CallWindowProcA GetWindowLongA

gdi32

CreateSolidBrush SelectClipRgn GetCurrentObject SetBkColor CreatePenIndirect SetROP2 CreateCompatibleDC LineTo MoveToEx DPtoLP GetStockObject CreateBitmap SetTextColor SetBkMode BitBlt CreateCompatibleBitmap SelectObject CreateBrushIndirect CreateRectRgn DeleteDC CreateFontIndirectA DeleteObject GetObjectA

comdlg32

GetSaveFileNameA CommDlgExtendedError GetOpenFileNameA

advapi32

RegCloseKey RegOpenKeyExA RegCreateKeyExA RegQueryValueExA RegSetValueExA

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA DragQueryFileA ShellExecuteExA

ole32

RegisterDragDrop CoCreateInstance RevokeDragDrop OleInitialize OleUninitialize

wininet

HttpSendRequestExA HttpEndRequestA InternetConnectA HttpOpenRequestA HttpAddRequestHeadersA InternetAttemptConnect InternetReadFile HttpQueryInfoA InternetCloseHandle InternetOpenA InternetWriteFile HttpSendRequestA

comctl32

ord17

Purity.exe

IMPHASH 19bdea19191dd6329a241730115cfed1
SHA256 1d790e0fb5e574eb496bc674044b74d6b3c555f95bec238be37c7f118b30c929
MD5 5cec7e66b017cf0cadf9b8eb2e3adac3
SHA1 ec713a689f001e934258aa8c3fbae1502a279fd1
SHA512 b7dbf45ce6db4e0df6c87cdafd677c7afa374db6e16d5b3073099536616c2757ad39b8b8b5d884046c674351569232762132673683c335931845349a7c3f7f82
SSDEEP 6144:6DnLrJIyIzJXgJPLk88wbbXz6uU2yZAOeMVUYVhnkgbM9t:6LXSOH9UbZgMqYVhngt
TLSH
T18564AD3036E6C8B3C4A6413590EA8B1A6BBEBC56573455DB23A0BE1F8A357C04C773B5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

93802

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection DeleteCriticalSection SetThreadPriority SuspendThread ResumeThread LoadLibraryW GetProcAddress FreeLibrary GetCurrentProcess GetVersionExW OpenFile DeviceIoControl SetEndOfFile GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA WriteConsoleW TryEnterCriticalSection WriteConsoleA SetStdHandle CreateFileA LoadLibraryA InitializeCriticalSection GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetCommandLineW GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings IsValidCodePage GetOEMCP GetACP GetCPInfo SetFilePointer GetStartupInfoA GetFileType SetHandleCount GetConsoleMode GetConsoleCP RtlUnwind InterlockedDecrement SetLastError InterlockedIncrement TlsFree MultiByteToWideChar WideCharToMultiByte Sleep GetLocalTime OutputDebugStringW WriteFile GetConsoleOutputCP TlsSetValue TlsAlloc TlsGetValue GetModuleFileNameA GetStdHandle GetLastError FormatMessageW FlushFileBuffers CreateFileW ReadFile WaitForMultipleObjects CreateEventW ResetEvent ExitProcess GetModuleHandleA HeapSize VirtualAlloc VirtualFree HeapCreate HeapDestroy IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess RaiseException GetStartupInfoW GetProcessHeap GetVersionExA SetEvent WaitForSingleObject CreateThread GetCurrentThreadId ExitThread HeapFree HeapAlloc HeapReAlloc CloseHandle GetModuleFileNameW WritePrivateProfileStructW GetPrivateProfileStructW FreeEnvironmentStringsA

user32

DispatchMessageW TranslateMessage RegisterClassExW CreateDialogParamW LoadIconW SendMessageW DestroyWindow SendDlgItemMessageW FillRect TrackPopupMenu PostQuitMessage GetMessageW GetClientRect GetDlgItem ShowWindow DefWindowProcW EndDialog SetWindowLongW PeekMessageW LoadCursorW CharLowerBuffW AppendMenuW SystemParametersInfoW GetMonitorInfoW CheckMenuItem EnableMenuItem MonitorFromWindow GetSystemMenu SetMenu GetMenu GetSystemMetrics SetWindowTextW GetDC ReleaseDC SetWindowPos SetCursor CreateWindowExW MessageBoxW PostMessageW InvalidateRect KillTimer SetTimer GetKeyState SetForegroundWindow GetWindowLongW UpdateWindow EnableWindow GetDlgCtrlID

gdi32

RealizePalette GetDeviceCaps BitBlt CreatePen CreateCompatibleBitmap Rectangle DeleteDC StretchBlt GetStockObject DeleteObject SelectObject CreateSolidBrush CreateCompatibleDC SelectPalette

comdlg32

GetOpenFileNameW ChooseColorW

advapi32

RegOpenKeyExW RegCloseKey RegOpenKeyW RegEnumKeyW RegQueryValueExW

ole32

CoUninitialize CLSIDFromString CoCreateInstance CoInitialize

oleaut32

OleLoadPicturePath

setupapi

SetupDiDestroyDeviceInfoList SetupDiGetDeviceInterfaceAlias SetupDiGetClassDevsW SetupDiEnumDeviceInterfaces SetupDiGetDeviceInterfaceDetailW SetupDiOpenDeviceInterfaceRegKey

comctl32

ord17

winmm

midiOutGetDevCapsW midiInUnprepareHeader midiInClose midiInGetDevCapsW midiInReset midiInPrepareHeader midiInStart midiInAddBuffer midiInOpen midiInGetNumDevs

dsound

ord1 ord8 ord3 ord6

Purity.ico

SHA256 44fb814a1ba0a110d7b230656fb7110b8c436ac43a951f49da2272973aa3406d
MD5 95150842a0840065d13c3dc73876b58f
SHA1 2857f32ee1ad71643b49bfb392dc81ffcfc276ae
SHA512 7b854d60aa3c8842e4d7a376e0c669a0213fef885a38d1effbaad62a6a230cd39ec8c001950d96a0fa66001dcabb4f60bfeeab7d87e022538d76976b0e67047b
SSDEEP 1536:gXxX3XslcfkAt5j95GdwlKoxbPZzdmNR+gyWWOa2RaaO7EK:ghnkdwlKobMNR+gyWWOa2RaaF
TLSH
T1DC933AB4226AC613D869C53ED082D705377E2C6DD914209E32F5FE27537DB828C4B5BA
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Purity.jpg

SHA256 0b81844653589156c0054b7c881558e334deb178a6e3fb2f024d9ffeef031cde
MD5 74ded677b20541e15847c5e32ab2ffc9
SHA1 282ff76f3a3136b147d24e859e9f5778b2467e96
SHA512 61c8d5f8abbadb16e0b439b2f42440e271d0610ff992a2c325256bbab497412975e8cbfc0159d6a1a33564561152ff6cf5184e133ae6f243e919b2d2b89c87bf
SSDEEP 6144:5N1VysFkTbdG3cfdIIxEqk8dsa7Rfoyy05fq90QUOpByHYoVCelNH:zesFkTbAsfdRnpDQX0lqrpsb3H
TLSH
T14784F1B4FBCBE7848F635B6C887D3C33676852D421D9981F44B60C1AA188B7683177AD
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Purity.pdf

SHA256 030fc6fa8d631a33b5ba7cb8e6b87ebd32078eb59a41046f65129fa5dd9125bd
MD5 008c72746e787c5ef253b1fba3c18971
SHA1 53c5c2ee202aa3d7f87e5b230d4490984c7df03a
SHA512 44891741d105f163c140aa3146f392e7ff037ba20631f8c894c3d4842c7db92bd75cb1b5c77e82ab2c5dd7301f4d81377a8a73a7c27744b22a6e7f49a59f1f12
SSDEEP 98304:TPwg0HtUYFw9xH4KCjS4SDzSAFsRaVJGUNDBTM2xzDjUi6WashM:zAUPxTCYzTuQV11HxzDAWaZ
TLSH
T1C856334C86476C9CF566171538059C5ECDBB3893C88CB8737F6DEAA107C8EAE40A6ED4
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Extracted URLs

file http://luxonix.com
file http://luxonix.com/forum/http:/luxonix.com/phpBB2/profile.php?mode=register2.
file http://www.luxonix.com/Forum
file http://www.luxonix.com/forum/
file http://www.luxonix.com/forum/*
file http://www.luxonix.com/forum/Post

msvcr80.dll

IMPHASH 7fecbc4a16a5dc85a5394a1df6217680
SHA256 9382aaed2db19cd75a70e38964f06c63f19f63c9dfb5a33b0c2d445bb41b6e46
MD5 1169436ee42f860c7db37a4692b38f0e
SHA1 4ccd15bf2c1b1d541ac883b0f42497e8ced6a5a3
SHA512 e06064eb95a2ab9c3343672072f5b3f5983fc8ea9e5c92f79e50ba2e259d6d5fa8ed97170dea6d0d032ea6c01e074eefaab850d28965c7522fb7e03d9c65eae0
SSDEEP 12288:bxzh9hH5RVKTp0G+vjhr46CIw+0yZmGyYCj:bph9hHzVKOpXwymGyYo
TLSH
T196D4CF51B5E3C472D0B201B5490ADB3A9A3BB9504638A8737BE60FCE4E787D1FB17252
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

33:c3:5f:8b:90:a4:1a:da:8a:31:e2:15:e8:8b:ff:62:ff:95:6b:8d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2009

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

2e:ab:11:dc:50:ff:5c:9d:cb:c0

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 22, 2007 - Aug 25, 2012

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:06:27:81:00:00:00:00:00:08

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2008 - Jan 22, 2010

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 16, 2006 - Sep 15, 2019

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:06:94:2d:00:00:00:00:00:09

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 25, 2008 - Jul 25, 2013

Minor OS version

0

Major OS version

4

Entry point

9003

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvcr80.i386.pdb

msvcrt

_getdrives

kernel32

GetStringTypeA GetLocalTime GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetProcAddress ExitProcess WriteFile GetStdHandle GetSystemDirectoryW GetLongPathNameW GetCurrentThreadId TlsGetValue DebugBreak OutputDebugStringA GetCommandLineA HeapFree GetVersionExA HeapAlloc GetProcessHeap DeleteCriticalSection LeaveCriticalSection EnterCriticalSection ExitThread CloseHandle GetLastError ResumeThread CreateThread TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement GetCurrentThread FindNextFileA FindFirstFileA FindClose FindNextFileW FindFirstFileW FileTimeToSystemTime FileTimeToLocalFileTime Sleep GetEnvironmentVariableA HeapDestroy HeapCreate VirtualFree HeapReAlloc VirtualAlloc HeapSize SetHandleCount GetFileType GetStartupInfoA GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetConsoleCtrlHandler FreeLibrary InterlockedExchange LoadLibraryA InitializeCriticalSection MultiByteToWideChar FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW WideCharToMultiByte QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW SetLocalTime GetStringTypeW LoadLibraryW GetLocaleInfoA GetLocaleInfoW SetEnvironmentVariableA SetEnvironmentVariableW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale RtlUnwind GetTimeFormatA GetDateFormatA GetTimeZoneInformation GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer WriteConsoleA GetConsoleOutputCP SetStdHandle CreateFileA CompareStringA CompareStringW Beep GetDiskFreeSpaceA GetLogicalDrives SetErrorMode GetFileAttributesA GetCurrentDirectoryA SetCurrentDirectoryA SetFileAttributesA GetFullPathNameA GetDriveTypeA CreateDirectoryA RemoveDirectoryA DeleteFileA GetFileAttributesW GetCurrentDirectoryW SetCurrentDirectoryW SetFileAttributesW GetFullPathNameW CreateDirectoryW DeleteFileW MoveFileW RemoveDirectoryW GetDriveTypeW MoveFileA RaiseException GetExitCodeProcess WaitForSingleObject CreateProcessA CreateProcessW HeapValidate HeapCompact HeapWalk VirtualProtect GetSystemInfo VirtualQuery IsDBCSLeadByteEx ReadConsoleA ReadConsoleW SetConsoleMode SetEndOfFile DuplicateHandle GetFileInformationByHandle PeekNamedPipe ReadConsoleInputA PeekConsoleInputA GetNumberOfConsoleInputEvents ReadConsoleInputW LockFile UnlockFile CreatePipe ReadFile CreateFileW SetFileTime LocalFileTimeToFileTime SystemTimeToFileTime

$I10_OUTPUT ??0__non_rtti_object@std@@QAE@ABV01@@Z ??0bad_cast@std@@QAE@ABV01@@Z ??0bad_cast@std@@QAE@PBD@Z ??0bad_typeid@std@@QAE@ABV01@@Z ??0bad_typeid@std@@QAE@PBD@Z ??0exception@std@@QAE@ABQBD@Z ??0exception@std@@QAE@ABQBDH@Z ??0exception@std@@QAE@ABV01@@Z ??0exception@std@@QAE@XZ ??1__non_rtti_object@std@@UAE@XZ ??1bad_cast@std@@UAE@XZ ??1bad_typeid@std@@UAE@XZ ??1exception@std@@UAE@XZ ??1type_info@@UAE@XZ ??2@YAPAXI@Z ??2@YAPAXIHPBDH@Z ??3@YAXPAX@Z ??4__non_rtti_object@std@@QAEAAV01@ABV01@@Z ??4bad_cast@std@@QAEAAV01@ABV01@@Z ??4bad_typeid@std@@QAEAAV01@ABV01@@Z ??4exception@std@@QAEAAV01@ABV01@@Z ??8type_info@@QBE_NABV0@@Z ??9type_info@@QBE_NABV0@@Z ??_7__non_rtti_object@std@@6B@ ??_7bad_cast@std@@6B@ ??_7bad_typeid@std@@6B@ ??_7exception@@6B@ ??_7exception@std@@6B@ ??_Fbad_cast@std@@QAEXXZ ??_Fbad_typeid@std@@QAEXXZ ??_U@YAPAXI@Z ??_U@YAPAXIHPBDH@Z ??_V@YAXPAX@Z ?_Name_base@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z ?_Name_base_internal@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z ?_Type_info_dtor@type_info@@CAXPAV1@@Z ?_Type_info_dtor_internal@type_info@@CAXPAV1@@Z ?_ValidateExecute@@YAHP6GHXZ@Z ?_ValidateRead@@YAHPBXI@Z ?_ValidateWrite@@YAHPAXI@Z ?_inconsistency@@YAXXZ ?_invalid_parameter@@YAXPBG00II@Z ?_is_exception_typeof@@YAHABVtype_info@@PAU_EXCEPTION_POINTERS@@@Z ?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z ?_open@@YAHPBDHH@Z ?_query_new_handler@@YAP6AHI@ZXZ ?_query_new_mode@@YAHXZ ?_set_new_handler@@YAP6AHI@ZH@Z ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z ?_set_new_mode@@YAHH@Z ?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZH@Z ?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z ?_sopen@@YAHPBDHHH@Z ?_type_info_dtor_internal_method@type_info@@QAEXXZ ?_wopen@@YAHPB_WHH@Z ?_wsopen@@YAHPB_WHHH@Z ?before@type_info@@QBEHABV1@@Z ?name@type_info@@QBEPBDPAU__type_info_node@@@Z ?raw_name@type_info@@QBEPBDXZ ?set_new_handler@@YAP6AXXZP6AXXZ@Z ?set_terminate@@YAP6AXXZH@Z ?set_terminate@@YAP6AXXZP6AXXZ@Z ?set_unexpected@@YAP6AXXZH@Z ?set_unexpected@@YAP6AXXZP6AXXZ@Z ?swprintf@@YAHPAGIPBGZZ ?swprintf@@YAHPA_WIPB_WZZ ?terminate@@YAXXZ ?unexpected@@YAXXZ ?vswprintf@@YAHPA_WIPB_WPAD@Z ?what@exception@std@@UBEPBDXZ @_calloc_crt@8 @_malloc_crt@4 @_realloc_crt@8 _CIacos _CIasin _CIatan _CIatan2 _CIcos _CIcosh _CIexp _CIfmod _CIlog _CIlog10 _CIpow _CIsin _CIsinh _CIsqrt _CItan _CItanh _CRT_RTC_INIT _CRT_RTC_INITW _CreateFrameInfo _CxxThrowException _EH_prolog _FindAndUnlinkFrame _Getdays _Getmonths _Gettnames _HUGE _IsExceptionObjectToBeDestroyed _NLG_Dispatch2 _NLG_Return _NLG_Return2 _Strftime _XcptFilter __AdjustPointer __BuildCatchObject __BuildCatchObjectHelper __CppXcptFilter __CxxCallUnwindDelDtor __CxxCallUnwindDtor __CxxCallUnwindStdDelDtor __CxxCallUnwindVecDtor __CxxDetectRethrow __CxxExceptionFilter __CxxFrameHandler __CxxFrameHandler2 __CxxFrameHandler3 __CxxLongjmpUnwind __CxxQueryExceptionSize __CxxRegisterExceptionObject __CxxUnregisterExceptionObject __DestructExceptionObject __FrameUnwindFilter __RTCastToVoid __RTDynamicCast __RTtypeid __STRINGTOLD __STRINGTOLD_L __TypeMatch ___fls_getvalue@4 ___fls_setvalue@8 ___lc_codepage_func ___lc_collate_cp_func ___lc_handle_func ___mb_cur_max_func ___mb_cur_max_l_func ___setlc_active_func ___unguarded_readlc_active_add_func __argc __argv __badioinfo __clean_type_info_names_internal __control87_2 __create_locale __crtCompareStringA __crtCompareStringW __crtGetLocaleInfoW __crtGetStringTypeW __crtLCMapStringA __crtLCMapStringW __daylight __dllonexit __doserrno __dstbias __fpecode __free_locale __get_app_type __get_current_locale __get_flsindex __get_tlsindex __getmainargs __initenv __iob_func __isascii __iscsym __iscsymf __iswcsym __iswcsymf __lc_clike __lc_codepage __lc_collate_cp __lc_handle __lconv __lconv_init __libm_sse2_acos __libm_sse2_acosf __libm_sse2_asin __libm_sse2_asinf __libm_sse2_atan __libm_sse2_atan2 __libm_sse2_atanf __libm_sse2_cos __libm_sse2_cosf __libm_sse2_exp __libm_sse2_expf __libm_sse2_log __libm_sse2_log10 __libm_sse2_log10f __libm_sse2_logf __libm_sse2_pow __libm_sse2_powf __libm_sse2_sin __libm_sse2_sinf __libm_sse2_tan __libm_sse2_tanf __mb_cur_max __p___argc __p___argv __p___initenv __p___mb_cur_max __p___wargv __p___winitenv __p__acmdln __p__amblksiz __p__commode __p__daylight __p__dstbias __p__environ __p__fmode __p__iob __p__mbcasemap __p__mbctype __p__osplatform __p__osver __p__pctype __p__pgmptr __p__pwctype __p__timezone __p__tzname __p__wcmdln __p__wenviron __p__winmajor __p__winminor __p__winver __p__wpgmptr __pctype_func __pioinfo __pwctype_func __pxcptinfoptrs __report_gsfailure __set_app_type __set_flsgetvalue __setlc_active __setusermatherr __strncnt __swprintf_l __sys_errlist __sys_nerr __threadhandle __threadid __timezone __toascii __tzname __unDName __unDNameEx __unDNameHelper __uncaught_exception __unguarded_readlc_active __vswprintf_l __wargv __wcserror __wcserror_s __wcsncnt __wgetmainargs __winitenv _abnormal_termination _abs64 _access _access_s _acmdln _adj_fdiv_m16i _adj_fdiv_m32 _adj_fdiv_m32i _adj_fdiv_m64 _adj_fdiv_r _adj_fdivr_m16i _adj_fdivr_m32 _adj_fdivr_m32i _adj_fdivr_m64 _adj_fpatan _adj_fprem _adj_fprem1 _adj_fptan _adjust_fdiv _aexit_rtn _aligned_free _aligned_malloc _aligned_msize _aligned_offset_malloc _aligned_offset_realloc _aligned_offset_recalloc _aligned_realloc _aligned_recalloc _amsg_exit _assert _atodbl _atodbl_l _atof_l _atoflt _atoflt_l _atoi64 _atoi64_l _atoi_l _atol_l _atoldbl _atoldbl_l _beep _beginthread _beginthreadex _byteswap_uint64 _byteswap_ulong _byteswap_ushort _c_exit _cabs _callnewh _calloc_crt _cexit _cgets _cgets_s _cgetws _cgetws_s _chdir _chdrive _chgsign _chkesp _chmod _chsize _chsize_s _clearfp _close _commit _commode _configthreadlocale _control87 _controlfp _controlfp_s _copysign _cprintf _cprintf_l _cprintf_p _cprintf_p_l _cprintf_s _cprintf_s_l _cputs _cputws _creat _create_locale _crt_debugger_hook _cscanf _cscanf_l _cscanf_s _cscanf_s_l _ctime32 _ctime32_s _ctime64 _ctime64_s _cwait _cwprintf _cwprintf_l _cwprintf_p _cwprintf_p_l _cwprintf_s _cwprintf_s_l _cwscanf _cwscanf_l _cwscanf_s _cwscanf_s_l _daylight _decode_pointer _difftime32 _difftime64 _dosmaperr _dstbias _dup _dup2 _dupenv_s _ecvt _ecvt_s _encode_pointer _encoded_null _endthread _endthreadex _environ _eof _errno _except_handler2 _except_handler3 _except_handler4_common _execl _execle _execlp _execlpe _execv _execve _execvp _execvpe _exit _expand _fclose_nolock _fcloseall _fcvt _fcvt_s _fdopen _fflush_nolock _fgetchar _fgetwc_nolock _fgetwchar _filbuf _filelength _filelengthi64 _fileno _findclose _findfirst32 _findfirst32i64 _findfirst64 _findfirst64i32 _findnext32 _findnext32i64 _findnext64 _findnext64i32 _finite _flsbuf _flushall _fmode _fpclass _fpieee_flt _fpreset _fprintf_l _fprintf_p _fprintf_p_l _fprintf_s_l _fputchar _fputwc_nolock _fputwchar _fread_nolock _fread_nolock_s _free_locale _freea _freea_s _freefls _fscanf_l _fscanf_s_l _fseek_nolock _fseeki64 _fseeki64_nolock _fsopen _fstat32 _fstat32i64 _fstat64 _fstat64i32 _ftell_nolock _ftelli64 _ftelli64_nolock _ftime32 _ftime32_s _ftime64 _ftime64_s _ftol _fullpath _futime32 _futime64 _fwprintf_l _fwprintf_p _fwprintf_p_l _fwprintf_s_l _fwrite_nolock _fwscanf_l _fwscanf_s_l _gcvt _gcvt_s _get_amblksiz _get_current_locale _get_daylight _get_doserrno _get_dstbias _get_errno _get_fmode _get_heap_handle _get_invalid_parameter_handler _get_osfhandle _get_osplatform _get_osver _get_output_format _get_pgmptr _get_printf_count_output _get_purecall_handler _get_sbh_threshold _get_terminate _get_timezone _get_tzname _get_unexpected _get_winmajor _get_winminor _get_winver _get_wpgmptr _getch _getch_nolock _getche _getche_nolock _getcwd _getdcwd _getdcwd_nolock _getdiskfree _getdllprocaddr _getdrive _getdrives _getmaxstdio _getmbcp _getpid _getptd _getsystime _getw _getwch _getwch_nolock _getwche _getwche_nolock _getws _getws_s _global_unwind2 _gmtime32 _gmtime32_s _gmtime64 _gmtime64_s _heapadd _heapchk _heapmin _heapset _heapused _heapwalk _hypot _hypotf _i64toa _i64toa_s _i64tow _i64tow_s _initptd _initterm _initterm_e _inp _inpd _inpw _invalid_parameter _invalid_parameter_noinfo _invoke_watson _iob _isalnum_l _isalpha_l _isatty _iscntrl_l _isctype _isctype_l _isdigit_l _isgraph_l _isleadbyte_l _islower_l _ismbbalnum _ismbbalnum_l _ismbbalpha _ismbbalpha_l _ismbbgraph _ismbbgraph_l _ismbbkalnum _ismbbkalnum_l _ismbbkana _ismbbkana_l _ismbbkprint _ismbbkprint_l _ismbbkpunct _ismbbkpunct_l _ismbblead _ismbblead_l _ismbbprint _ismbbprint_l _ismbbpunct _ismbbpunct_l _ismbbtrail _ismbbtrail_l _ismbcalnum _ismbcalnum_l _ismbcalpha _ismbcalpha_l _ismbcdigit _ismbcdigit_l _ismbcgraph _ismbcgraph_l _ismbchira _ismbchira_l _ismbckata _ismbckata_l _ismbcl0 _ismbcl0_l _ismbcl1 _ismbcl1_l _ismbcl2 _ismbcl2_l _ismbclegal _ismbclegal_l _ismbclower _ismbclower_l _ismbcprint _ismbcprint_l _ismbcpunct _ismbcpunct_l _ismbcspace _ismbcspace_l _ismbcsymbol _ismbcsymbol_l _ismbcupper _ismbcupper_l _ismbslead _ismbslead_l _ismbstrail _ismbstrail_l _isnan _isprint_l _ispunct_l _isspace_l _isupper_l _iswalnum_l _iswalpha_l _iswcntrl_l _iswcsym_l _iswcsymf_l _iswctype_l _iswdigit_l _iswgraph_l _iswlower_l _iswprint_l _iswpunct_l _iswspace_l _iswupper_l _iswxdigit_l _isxdigit_l _itoa _itoa_s _itow _itow_s _j0 _j1 _jn _kbhit _lfind _lfind_s _loaddll _local_unwind2 _local_unwind4 _localtime32 _localtime32_s _localtime64 _localtime64_s _lock _lock_file _locking _logb _longjmpex _lrotl _lrotr _lsearch _lsearch_s _lseek _lseeki64 _ltoa _ltoa_s _ltow _ltow_s _makepath _makepath_s _malloc_crt _mbbtombc _mbbtombc_l _mbbtype _mbbtype_l _mbcasemap _mbccpy _mbccpy_l _mbccpy_s _mbccpy_s_l _mbcjistojms _mbcjistojms_l _mbcjmstojis _mbcjmstojis_l _mbclen _mbclen_l _mbctohira _mbctohira_l _mbctokata _mbctokata_l _mbctolower _mbctolower_l _mbctombb _mbctombb_l _mbctoupper _mbctoupper_l _mbctype _mblen_l _mbsbtype _mbsbtype_l _mbscat_s _mbscat_s_l _mbschr _mbschr_l _mbscmp _mbscmp_l _mbscoll _mbscoll_l _mbscpy_s _mbscpy_s_l _mbscspn _mbscspn_l _mbsdec _mbsdec_l _mbsicmp _mbsicmp_l _mbsicoll _mbsicoll_l _mbsinc _mbsinc_l _mbslen _mbslen_l _mbslwr _mbslwr_l _mbslwr_s _mbslwr_s_l _mbsnbcat _mbsnbcat_l _mbsnbcat_s _mbsnbcat_s_l _mbsnbcmp _mbsnbcmp_l _mbsnbcnt _mbsnbcnt_l _mbsnbcoll _mbsnbcoll_l _mbsnbcpy _mbsnbcpy_l _mbsnbcpy_s _mbsnbcpy_s_l _mbsnbicmp _mbsnbicmp_l _mbsnbicoll _mbsnbicoll_l _mbsnbset _mbsnbset_l _mbsnbset_s _mbsnbset_s_l _mbsncat _mbsncat_l _mbsncat_s _mbsncat_s_l _mbsnccnt _mbsnccnt_l _mbsncmp _mbsncmp_l _mbsncoll _mbsncoll_l _mbsncpy _mbsncpy_l _mbsncpy_s _mbsncpy_s_l _mbsnextc _mbsnextc_l _mbsnicmp _mbsnicmp_l _mbsnicoll _mbsnicoll_l _mbsninc _mbsninc_l _mbsnlen _mbsnlen_l _mbsnset _mbsnset_l _mbsnset_s _mbsnset_s_l _mbspbrk _mbspbrk_l _mbsrchr _mbsrchr_l _mbsrev _mbsrev_l _mbsset _mbsset_l _mbsset_s _mbsset_s_l _mbsspn _mbsspn_l _mbsspnp _mbsspnp_l _mbsstr _mbsstr_l _mbstok _mbstok_l _mbstok_s _mbstok_s_l _mbstowcs_l _mbstowcs_s_l _mbstrlen _mbstrlen_l _mbstrnlen _mbstrnlen_l _mbsupr _mbsupr_l _mbsupr_s _mbsupr_s_l _mbtowc_l _memccpy _memicmp _memicmp_l _mkdir _mkgmtime32 _mkgmtime64 _mktemp _mktemp_s _mktime32 _mktime64 _msize _nextafter _onexit _open _open_osfhandle _osplatform _osver _outp _outpd _outpw _pclose _pctype _pgmptr _pipe _popen _printf_l _printf_p _printf_p_l _printf_s_l _purecall _putch _putch_nolock _putenv _putenv_s _putw _putwch _putwch_nolock _putws _pwctype _read _realloc_crt _recalloc _recalloc_crt _resetstkoflw _rmdir _rmtmp _rotl _rotl64 _rotr _rotr64 _safe_fdiv _safe_fdivr _safe_fprem _safe_fprem1 _scalb _scanf_l _scanf_s_l _scprintf _scprintf_l _scprintf_p _scprintf_p_l _scwprintf _scwprintf_l _scwprintf_p _scwprintf_p_l _searchenv _searchenv_s _seh_longjmp_unwind _seh_longjmp_unwind4 _set_SSE2_enable _set_abort_behavior _set_amblksiz _set_controlfp _set_doserrno _set_errno _set_error_mode _set_fmode _set_invalid_parameter_handler _set_malloc_crt_max_wait _set_output_format _set_printf_count_output _set_purecall_handler _set_sbh_threshold _seterrormode _setjmp _setjmp3 _setmaxstdio _setmbcp _setmode _setsystime _sleep _snprintf _snprintf_c _snprintf_c_l _snprintf_l _snprintf_s _snprintf_s_l _snscanf _snscanf_l _snscanf_s _snscanf_s_l _snwprintf _snwprintf_l _snwprintf_s _snwprintf_s_l _snwscanf _snwscanf_l _snwscanf_s _snwscanf_s_l _sopen _sopen_s _spawnl _spawnle _spawnlp _spawnlpe _spawnv _spawnve _spawnvp _spawnvpe _splitpath _splitpath_s _sprintf_l _sprintf_p _sprintf_p_l _sprintf_s_l _sscanf_l _sscanf_s_l _stat32 _stat32i64 _stat64 _stat64i32 _statusfp _statusfp2 _strcoll_l _strdate _strdate_s _strdup _strerror _strerror_s _strftime_l _stricmp _stricmp_l _stricoll _stricoll_l _strlwr _strlwr_l _strlwr_s _strlwr_s_l _strncoll _strncoll_l _strnicmp _strnicmp_l _strnicoll _strnicoll_l _strnset _strnset_s _strrev _strset _strset_s _strtime _strtime_s _strtod_l _strtoi64 _strtoi64_l _strtol_l _strtoui64 _strtoui64_l _strtoul_l _strupr _strupr_l _strupr_s _strupr_s_l _strxfrm_l _swab _swprintf _swprintf_c _swprintf_p _swprintf_p_l _swprintf_s_l _swscanf_l _swscanf_s_l _sys_errlist _sys_nerr _tell _telli64 _tempnam _time32 _time64 _timezone _tolower _tolower_l _toupper _toupper_l _towlower_l _towupper_l _tzname _tzset _ui64toa _ui64toa_s _ui64tow _ui64tow_s _ultoa _ultoa_s _ultow _ultow_s _umask _umask_s _ungetc_nolock _ungetch _ungetch_nolock _ungetwc_nolock _ungetwch _ungetwch_nolock _unlink _unloaddll _unlock _unlock_file _utime32 _utime64 _vcprintf _vcprintf_l _vcprintf_p _vcprintf_p_l _vcprintf_s _vcprintf_s_l _vcwprintf _vcwprintf_l _vcwprintf_p _vcwprintf_p_l _vcwprintf_s _vcwprintf_s_l _vfprintf_l _vfprintf_p _vfprintf_p_l _vfprintf_s_l _vfwprintf_l _vfwprintf_p _vfwprintf_p_l _vfwprintf_s_l _vprintf_l _vprintf_p _vprintf_p_l _vprintf_s_l _vscprintf _vscprintf_l _vscprintf_p _vscprintf_p_l _vscwprintf _vscwprintf_l _vscwprintf_p _vscwprintf_p_l _vsnprintf _vsnprintf_c _vsnprintf_c_l _vsnprintf_l _vsnprintf_s _vsnprintf_s_l _vsnwprintf _vsnwprintf_l _vsnwprintf_s _vsnwprintf_s_l _vsprintf_l _vsprintf_p _vsprintf_p_l _vsprintf_s_l _vswprintf _vswprintf_c _vswprintf_c_l _vswprintf_l _vswprintf_p _vswprintf_p_l _vswprintf_s_l _vwprintf_l _vwprintf_p _vwprintf_p_l _vwprintf_s_l _waccess _waccess_s _wasctime _wasctime_s _wassert _wchdir _wchmod _wcmdln _wcreat _wcscoll_l _wcsdup _wcserror _wcserror_s _wcsftime_l _wcsicmp _wcsicmp_l _wcsicoll _wcsicoll_l _wcslwr _wcslwr_l _wcslwr_s _wcslwr_s_l _wcsncoll _wcsncoll_l _wcsnicmp _wcsnicmp_l _wcsnicoll _wcsnicoll_l _wcsnset _wcsnset_s _wcsrev _wcsset _wcsset_s _wcstod_l _wcstoi64 _wcstoi64_l _wcstol_l _wcstombs_l _wcstombs_s_l _wcstoui64 _wcstoui64_l _wcstoul_l _wcsupr _wcsupr_l _wcsupr_s _wcsupr_s_l _wcsxfrm_l _wctime32 _wctime32_s _wctime64 _wctime64_s _wctomb_l _wctomb_s_l _wctype _wdupenv_s _wenviron _wexecl _wexecle _wexeclp _wexeclpe _wexecv _wexecve _wexecvp _wexecvpe _wfdopen _wfindfirst32 _wfindfirst32i64 _wfindfirst64 _wfindfirst64i32 _wfindnext32 _wfindnext32i64 _wfindnext64 _wfindnext64i32 _wfopen _wfopen_s _wfreopen _wfreopen_s _wfsopen _wfullpath _wgetcwd _wgetdcwd _wgetdcwd_nolock _wgetenv _wgetenv_s _winmajor _winminor _winver _wmakepath _wmakepath_s _wmkdir _wmktemp _wmktemp_s _wopen _wperror _wpgmptr _wpopen _wprintf_l _wprintf_p _wprintf_p_l _wprintf_s_l _wputenv _wputenv_s _wremove _wrename _write _wrmdir _wscanf_l _wscanf_s_l _wsearchenv _wsearchenv_s _wsetlocale _wsopen _wsopen_s _wspawnl _wspawnle _wspawnlp _wspawnlpe _wspawnv _wspawnve _wspawnvp _wspawnvpe _wsplitpath _wsplitpath_s _wstat32 _wstat32i64 _wstat64 _wstat64i32 _wstrdate _wstrdate_s _wstrtime _wstrtime_s _wsystem _wtempnam _wtmpnam _wtmpnam_s _wtof _wtof_l _wtoi _wtoi64 _wtoi64_l _wtoi_l _wtol _wtol_l _wunlink _wutime32 _wutime64 _y0 _y1 _yn abort abs acos asctime asctime_s asin atan atan2 atexit atof atoi atol bsearch bsearch_s btowc calloc ceil clearerr clearerr_s clock cos cosh div exit exp fabs fclose feof ferror fflush fgetc fgetpos fgets fgetwc fgetws floor fmod fopen fopen_s fprintf fprintf_s fputc fputs fputwc fputws fread fread_s free freopen freopen_s frexp fscanf fscanf_s fseek fsetpos ftell fwprintf fwprintf_s fwrite fwscanf fwscanf_s getc getchar getenv getenv_s gets gets_s getwc getwchar is_wctype isalnum isalpha iscntrl isdigit isgraph isleadbyte islower isprint ispunct isspace isupper iswalnum iswalpha iswascii iswcntrl iswctype iswdigit iswgraph iswlower iswprint iswpunct iswspace iswupper iswxdigit isxdigit labs ldexp ldiv localeconv log log10 longjmp malloc mblen mbrlen mbrtowc mbsrtowcs mbsrtowcs_s mbstowcs mbstowcs_s mbtowc memchr memcmp memcpy memcpy_s memmove memmove_s memset modf perror pow printf printf_s putc putchar puts putwc putwchar qsort qsort_s raise rand rand_s realloc remove rename rewind scanf scanf_s setbuf setlocale setvbuf signal sin sinh sprintf sprintf_s sqrt srand sscanf sscanf_s strcat strcat_s strchr strcmp strcoll strcpy strcpy_s strcspn strerror strerror_s strftime strlen strncat strncat_s strncmp strncpy strncpy_s strnlen strpbrk strrchr strspn strstr strtod strtok strtok_s strtol strtoul strxfrm swprintf_s swscanf swscanf_s system tan tanh tmpfile tmpfile_s tmpnam tmpnam_s tolower toupper towlower towupper ungetc ungetwc vfprintf vfprintf_s vfwprintf vfwprintf_s vprintf vprintf_s vsprintf vsprintf_s vswprintf_s vwprintf vwprintf_s wcrtomb wcrtomb_s wcscat wcscat_s wcschr wcscmp wcscoll wcscpy wcscpy_s wcscspn wcsftime wcslen wcsncat wcsncat_s wcsncmp wcsncpy wcsncpy_s wcsnlen wcspbrk wcsrchr wcsrtombs wcsrtombs_s wcsspn wcsstr wcstod wcstok wcstok_s wcstol wcstombs wcstombs_s wcstoul wcsxfrm wctob wctomb wctomb_s wprintf wprintf_s wscanf wscanf_s

uninst Purity.exe

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 5869a0ebad4731751c9c21975a2861363fabd79985fe93d3c4cb3595a6da23c7
MD5 cd3286e328c8f5a6cfc58bccfdc6b6ba
SHA1 a39ff471ec081ec1a89d5511e1a87fd1c2e4462d
SHA512 a96ca8cc6ee6e26940345bbeb2a639577322b03fa0146f24ba5fca3e7a1313c3e7911fb8a3b232dab75a958a3acbb970466979089d5fb90b05602c4b3142b53a
SSDEEP 3072:XLk395hYXJewl03IT2TkMjKK1HNz0DPWFjdhdWdyWmlvJYDBW7gYN:XQqkwkI6kMBn0KFj18IYWF
TLSH
T190248C447188846BCE5A42334F279B5FE9634ADD5D30211B2AACAF6F393737711288F2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12491

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/InstallOptions.dll

IMPHASH b1cd0d78f652ce5fc63f0879371af012
SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
MD5 325b008aec81e5aaa57096f05d4212b5
SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
TLSH
T1ED622A11778888F3DBD2013EB4533707AF9D5126B4929ED2CA271ECA6D2B05D7EB2346
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryA GetCurrentDirectoryA MultiByteToWideChar GetPrivateProfileIntA GlobalLock GetModuleHandleA lstrcmpiA GetPrivateProfileStringA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalUnlock GlobalAlloc

user32

MapWindowPoints GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard PtInRect SetWindowRgn LoadIconA LoadImageA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA LoadCursorA SetCursor DrawTextA GetWindowLongA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA GetClientRect

gdi32

SetTextColor CreateCompatibleDC GetObjectA GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderA SHGetDesktopFolder SHGetPathFromIDListA ShellExecuteA

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/LangDLL.dll

IMPHASH 9b6b6a7858e17fb0b17e1c1428330343
SHA256 60a964095af1be79f6a99b22212fefe2d16f5a0afd7e707d14394e4143e3f4f5
MD5 9384f4007c492d4fa040924f31c00166
SHA1 aba37faef30d7c445584c688a0b5638f5db31c7b
SHA512 68f158887e24302673227adffc688fd3edabf097d7f5410f983e06c6b9c7344ca1d8a45c7fa05553adcc5987993df3a298763477168d4842e554c4eb93b9aaaf
SSDEEP 48:iV6pAvmNC6iMPUptxEZK65x/AmvycNSmwVsOYJyvrpXptp/JvR0Jlof5d2:2811GED5ZTvycNSmwVsTJuftpZR0Sd2
TLSH
T129C18333B3C24AF5D6950633252373C366539E342359804F9B6712AA69208FBDD6E793
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5526

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
TLSH
T1D3D0C9C9501A802944208642A97A2FA263E03E210B1725FAF5724C87EB4CDE79C9D682
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/modern-header.bmp

SHA256 9be91a9c0aac1f429bca0500af3d656e9a3b8eeb1c953af799c2c3160d290d0a
MD5 a9fab50dc9481b8816c4ca5bfef3bc5e
SHA1 8f5c50a80d1f8047392550da13c06b7880c737eb
SHA512 176b37fac1b45d0fe6ecdd246360d6b4f614a313d730931ea2a57a342b0c23bdc66f005a27ea154deeabd1716ca0c76136d5b97b2b555f2723e1dc80ff219164
SSDEEP 768:OB5VCb+02JyZ2ybrDGf7Vf0WG20q0ib5CEp:OBDCb+0/2kDGJ89w0y
TLSH
T1E1C27DB1ED5C3CC40AE2593747B2B6476A116EDBD974F87CA97F300213B618CA440C79
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 b327ff3e5c3a88b785f2084cc6bcf6b49fa8f2a3f87e7f0fa7b359e2e71cbb1b
MD5 990c32c42e6a316738ea1d7f380d8440
SHA1 c42978831035f45b9f575725ed26aac452aa3f3f
SHA512 8ecff4892906686136aaa36452150f174318990cd20bed1bc3387ce78aa45088ef8148f990b6cb7d4ddee865dd0102a1fb021b4e491f1598fbb133bcb3a5eff1
SSDEEP 3072:ucBrAfhHIUx8OI5lyd3V5/B1KFko4YL5fFG:HBrAfho6I5lOHB1Sb4eU
TLSH
T1FBE39E0AFE5834E4065861968FADE097AF138FA2C388C7F9756E745043FF4D8B84A1D6
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Sharing

General

Malware Config

Signatures

File Explorer

Purity_Setup.exe

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

$PLUGINSDIR/InstallOptions.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/LangDLL.dll

kernel32

user32

gdi32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/ioSpecial.ini

$PLUGINSDIR/modern-header.bmp

$PLUGINSDIR/modern-wizard.bmp

$R0

PE Signature issue

msvcrt

kernel32

generic

$_4_/Purity.dll

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

wininet

comctl32

generic

000 GM Normal.pth

000 GM Normal.smp

000 GM Normal.wvt

001 GM Rhythm.pth

001 GM Rhythm.smp

001 GM Rhythm.wvt

010 Factory Melody.smp

010 Motive.pth

010 Piano.wvt

011 Factory Drum.smp

011 Organ.wvt

012 Percussive.wvt

013 Guitar & Plucked.wvt

014 Bass Guitar.wvt

015 Strings.wvt

016 Brass.wvt

017 Woodwind.wvt

018 Synth.wvt

019 VOX.wvt

020 Phrase.pth

020 SFX.wvt

021 Basic Waveform.wvt

030 Drum Loop.pth

030 Kick.wvt

031 Snare.wvt

032 Tom.wvt

033 Hat.wvt

034 Cymbal.wvt