blue driver.rar
- SHA256 73cbf3bb6a9c46790011fefb814b16230dc2f0a5b3cd1da97c1e5b8e0562c9db
Overview
overview
10Static
static
10blue driver.rar
windows10-2004-x64
1blue driver.rar
windows11-ltsc_2024-x64
1blue driver/Brz.cab
windows10-2004-x64
1blue driver/Brz.cab
windows11-ltsc_2024-x64
1TargetDir/...AX.bmp
windows10-2004-x64
1TargetDir/...AX.bmp
windows11-ltsc_2024-x64
1TargetDir/...HD.bmp
windows10-2004-x64
1TargetDir/...HD.bmp
windows11-ltsc_2024-x64
1TargetDir/...AX.ini
windows10-2004-x64
1TargetDir/...AX.ini
windows11-ltsc_2024-x64
1blue drive...ne.ini
windows10-2004-x64
1blue drive...ne.ini
windows11-ltsc_2024-x64
1blue drive...ed.ini
windows10-2004-x64
1blue drive...ed.ini
windows11-ltsc_2024-x64
1blue driver/Chs.cab
windows10-2004-x64
1blue driver/Chs.cab
windows11-ltsc_2024-x64
1TargetDir/...AX.ini
windows10-2004-x64
1TargetDir/...AX.ini
windows11-ltsc_2024-x64
1TargetDir/...AX.bmp
windows10-2004-x64
1TargetDir/...AX.bmp
windows11-ltsc_2024-x64
1TargetDir/...HD.bmp
windows10-2004-x64
1TargetDir/...HD.bmp
windows11-ltsc_2024-x64
1blue driver/Cht.cab
windows10-2004-x64
1blue driver/Cht.cab
windows11-ltsc_2024-x64
1TargetDir/...AX.ini
windows10-2004-x64
1TargetDir/...AX.ini
windows11-ltsc_2024-x64
1TargetDir/...AX.bmp
windows10-2004-x64
1TargetDir/...AX.bmp
windows11-ltsc_2024-x64
1TargetDir/...HD.bmp
windows10-2004-x64
1TargetDir/...HD.bmp
windows11-ltsc_2024-x64
1blue driver/Dut.cab
windows10-2004-x64
1blue driver/Dut.cab
windows11-ltsc_2024-x64
1Behavioral task
behavioral1
Sample
blue driver.rar
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
blue driver.rar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
blue driver/Brz.cab
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
blue driver/Brz.cab
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAX.bmp
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAX.bmp
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAXHD.bmp
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAXHD.bmp
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
TargetDir/help/EAX.ini
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
TargetDir/help/EAX.ini
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
blue driver/CTEngine.ini
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
blue driver/CTEngine.ini
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
blue driver/CTShared.ini
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
blue driver/CTShared.ini
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
blue driver/Chs.cab
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
blue driver/Chs.cab
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
TargetDir/Help/EAX.ini
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral18
Sample
TargetDir/Help/EAX.ini
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral19
Sample
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAX.bmp
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral20
Sample
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAX.bmp
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral21
Sample
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAXHD.bmp
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral22
Sample
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAXHD.bmp
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral23
Sample
blue driver/Cht.cab
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
blue driver/Cht.cab
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
TargetDir/Help/EAX.ini
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral26
Sample
TargetDir/Help/EAX.ini
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral27
Sample
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAX.bmp
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral28
Sample
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAX.bmp
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral29
Sample
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAXHD.bmp
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral30
Sample
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAXHD.bmp
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral31
Sample
blue driver/Dut.cab
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
blue driver/Dut.cab
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target blue driver.rar
- Size 3.3MB
- Sample260905-2cd5sstema
- SHA256 73cbf3bb6a9c46790011fefb814b16230dc2f0a5b3cd1da97c1e5b8e0562c9db
- MD5 76b5d5b89702727283641d45beb60351
- SHA1 b8b217e892f415c3580bcceef26ac46ecafa5e6e
- SHA512 63a89d813ac844c4e17f721270d9ed49a80386167f5a1aeb884e28c70f551fc302a1046b58b3abadaf0705cc2645f7290c0d71911c541b77e33d9eed0bd8d75b
- SSDEEP 49152:nD6vaFhBMoztg1HPt0nOcW2YTcW2Y5cW2YaKSJJUzOFhkszAPFh7rOF6w0zmOqi:nD6NrHPVlTTlT5lToJUeeZsFTGqi
- TLSH T197F5332D2D90840BDFD65B39828EEA943373D295438D82A75241A361F46C737AE3DA1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
xworm
Version
-
5.0
C2
-
NaZf-36133.portmap.host:36133
Mutex
-
HP4eZQyRSJEVK552
Attributes
-
Install_directory
%AppData%
-
install_file
XClient.exe
aes.plain
Signatures
- Detect Xworm Payload 1 IoCs
resource yara_rule static1/unpack001/blue driver/Setup.exe family_xworm - Unsigned PE 57 IoCs
Checks for missing Authenticode signature.
resource unpack002/TargetDir/AudClean.crl unpack002/TargetDir/CMSS.crl unpack002/TargetDir/CTAbout.dll unpack002/TargetDir/EAXCon.crl unpack002/TargetDir/Efx.crl unpack002/TargetDir/Karaoke.crl unpack002/TargetDir/TimeScal.crl unpack003/TargetDir/AudClean.crl unpack003/TargetDir/CMSS.crl unpack003/TargetDir/CTAbout.dll unpack003/TargetDir/EAXCon.crl unpack003/TargetDir/Efx.crl unpack003/TargetDir/Karaoke.crl unpack003/TargetDir/TimeScal.crl unpack004/TargetDir/AudClean.crl unpack004/TargetDir/CMSS.crl unpack004/TargetDir/CTAbout.dll unpack004/TargetDir/EAXCon.crl unpack004/TargetDir/Efx.crl unpack004/TargetDir/Karaoke.crl unpack004/TargetDir/TimeScal.crl unpack005/TargetDir/AudClean.crl unpack005/TargetDir/CMSS.crl unpack005/TargetDir/CTAbout.DLL unpack005/TargetDir/EAXCon.crl unpack005/TargetDir/Efx.crl unpack005/TargetDir/Karaoke.crl unpack005/TargetDir/TimeScal.crl unpack006/TargetDir/AudClean.crl unpack006/TargetDir/CMSS.crl unpack006/TargetDir/CTAbout.dll unpack006/TargetDir/EAXCon.crl unpack006/TargetDir/Efx.crl unpack006/TargetDir/Karaoke.crl unpack006/TargetDir/TimeScal.crl unpack007/TargetDir/AudClean.crl unpack007/TargetDir/CMSS.crl unpack007/TargetDir/CTAbout.dll unpack007/TargetDir/EAXCon.crl unpack007/TargetDir/Efx.crl unpack007/TargetDir/Karaoke.crl unpack007/TargetDir/TimeScal.crl unpack008/TargetDir/AudClean.crl unpack008/TargetDir/CMSS.crl unpack008/TargetDir/CTAbout.dll unpack008/TargetDir/EAXCon.crl unpack008/TargetDir/Efx.crl unpack008/TargetDir/Karaoke.crl unpack008/TargetDir/TimeScal.crl unpack009/TargetDir/AudClean.crl unpack009/TargetDir/CMSS.crl unpack009/TargetDir/CTAbout.DLL unpack009/TargetDir/EAXCon.crl unpack009/TargetDir/Efx.crl unpack009/TargetDir/Karaoke.crl unpack009/TargetDir/TimeScal.crl unpack001/blue driver/Setup.exe
File Explorer
-
blue driver.rar.rar 3.3MB
-
blue driver/Brz.cab.cab 143KB
-
TargetDir/AudClean.crl.dll 12KB
-
TargetDir/CMSS.crl.dll 12KB
-
TargetDir/CTAbout.dll.dll 256KB
-
TargetDir/EAXCon.crl.dll 36KB
-
TargetDir/Efx.crl.dll 12KB
-
TargetDir/Karaoke.crl.dll 12KB
-
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAX.bmp16KB
-
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAXHD.bmp16KB
-
TargetDir/TimeScal.crl.dll 12KB
-
TargetDir/help/EAX.chm.chm 66KB
-
TargetDir/help/EAX.ini757B
-
blue driver/CTEngine.ini115B
-
blue driver/CTShared.ini156B
-
blue driver/Chs.cab.cab 145KB
-
TargetDir/AudClean.crl.dll 12KB
-
TargetDir/CMSS.crl.dll 12KB
-
TargetDir/CTAbout.dll.dll 256KB
-
TargetDir/EAXCon.crl.dll 36KB
-
TargetDir/Efx.crl.dll 12KB
-
TargetDir/Help/EAX.chm.chm 68KB
-
TargetDir/Help/EAX.ini621B
-
TargetDir/Karaoke.crl.dll 12KB
-
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAX.bmp16KB
-
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAXHD.bmp16KB
-
TargetDir/TimeScal.crl.dll 12KB
-
blue driver/Cht.cab.cab 141KB
-
TargetDir/AudClean.crl.dll 12KB
-
TargetDir/CMSS.crl.dll 12KB
-
TargetDir/CTAbout.dll.dll 256KB
-
TargetDir/EAXCon.crl.dll 36KB
-
TargetDir/Efx.crl.dll 12KB
-
TargetDir/Help/EAX.chm.chm 65KB
-
TargetDir/Help/EAX.ini617B
-
TargetDir/Karaoke.crl.dll 12KB
-
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAX.bmp16KB
-
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAXHD.bmp16KB
-
TargetDir/TimeScal.crl.dll 12KB
-
blue driver/Dut.cab.cab 135KB
-
TargetDir/AudClean.crl.dll 12KB
-
TargetDir/CMSS.crl.dll 12KB
-
TargetDir/CTAbout.DLL.dll 256KB
-
TargetDir/EAXCon.crl.dll 36KB
-
TargetDir/Efx.crl.dll 12KB
-
TargetDir/Karaoke.crl.dll 12KB
-
TargetDir/TimeScal.crl.dll 12KB
-
TargetDir/help/EAX.chm.chm 65KB
-
TargetDir/help/EAX.ini764B
-
blue driver/EAXCSole.ini150B
-
blue driver/Eng.cab.cab 158KB
-
TargetDir/AudClean.crl.dll 12KB
-
TargetDir/CMSS.crl.dll 12KB
-
TargetDir/CTAbout.dll.dll 256KB
-
TargetDir/EAXCon.crl.dll 36KB
-
TargetDir/Efx.crl.dll 12KB
-
TargetDir/Help/EAX.chm.chm 89KB
-
TargetDir/Help/EAX.ini702B
-
TargetDir/Karaoke.crl.dll 12KB
-
TargetDir/TimeScal.crl.dll 12KB
-
blue driver/Frn.cab.cab 145KB
-
TargetDir/AudClean.crl.dll 12KB
-
TargetDir/CMSS.crl.dll 12KB
-
TargetDir/CTAbout.dll.dll 256KB
-
TargetDir/EAXCon.crl.dll 36KB
-
TargetDir/Efx.crl.dll 12KB
-
TargetDir/Karaoke.crl.dll 12KB
-
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAX.bmp16KB
-
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAXHD.bmp16KB
-
TargetDir/TimeScal.crl.dll 12KB
-
TargetDir/help/EAX.chm.chm 68KB
-
TargetDir/help/EAX.ini774B
-
blue driver/Ger.cab.cab 144KB
-
TargetDir/AudClean.crl.dll 12KB
-
TargetDir/CMSS.crl.dll 12KB
-
TargetDir/CTAbout.dll.dll 256KB
-
TargetDir/EAXCon.crl.dll 36KB
-
TargetDir/Efx.crl.dll 12KB
-
TargetDir/Karaoke.crl.dll 12KB
-
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAX.bmp16KB
-
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAXHD.bmp16KB
-
TargetDir/TimeScal.crl.dll 12KB
-
TargetDir/help/EAX.chm.chm 68KB
-
TargetDir/help/EAX.ini787B
-
blue driver/Ita.cab.cab 134KB
-
TargetDir/AudClean.crl.dll 12KB
-
TargetDir/CMSS.crl.dll 12KB
-
TargetDir/CTAbout.DLL.dll 256KB
-
TargetDir/EAXCon.crl.dll 36KB
-
TargetDir/Efx.crl.dll 12KB
-
TargetDir/Karaoke.crl.dll 12KB
-
TargetDir/TimeScal.crl.dll 12KB
-
TargetDir/help/EAX.chm.chm 65KB
-
TargetDir/help/EAX.ini756B
-
blue driver/Jpn.cab.cab 139KB
-
blue driver/SWUpdate.ini28B
-
blue driver/Setup.exe.exe 50KB
-
blue driver/Setup.ini253B
-
blue driver/Spn.cab.cab 142KB
-
blue driver/Version.ini188B
-
blue driver/data1.cab1.4MB
-
blue driver/data1.hdr26KB
-
blue driver/data2.cab427KB
-
blue driver/layout.bin1KB
-
blue driver/setup.inx196KB
blue driver/Brz.cab
- SHA256 9ab27dc10598e108fefcfdbe111507e0a1da8397599ba86f86716692e51bf790
- MD5 72c491cda9fc941d898a75074306912d
- SHA1 9c2d945ce037bfcb04ad9cfca8bc2e598944aaff
- SHA512 2c86317e251e4736058bd2e41c45a220484079b8022c73e8a95e632b3ad5c8911146fe1ef5436cd9ef6515d7c6974ab0342d3d00ea8de33af81265844e881bb1
- SSDEEP 3072:+hFqqbH2qY1sI/JQfcaqvgCg5YrDXlQvdQqm2jfz/CItmKGtLle3YO:+hFqkH23qI/GfsIwlShvfL9tXGRl2YO
- TLSH T1CAE31247A6D201939D82775D45E4B701011BE3BBB7DBA0E366C013B216FE3CA066AD6F
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/AudClean.crl
- SHA256 4a5a53e97324c5bff90aec3c8ccc2ae08fa436140159c6ac955d1c2f3db47728
- MD5 0f7b0377eb355fb9161cb93bd2d6d3d0
- SHA1 da698a23cc97b931953fde73e4123c74424d97be
- SHA512 9b4f58f209795a5661a86477590ccc93b50d978fd6658d5a0eb1f031ebf413516698ec0dc4fbcaddd795e0147ab9c69c17ccfb6e9f40b5d24a757cadc68b738c
- SSDEEP 48:CMYavQYphY+jWHdva+evZ1vk8bT5yLlGOb0qg:XLjW9va+e7vjVyL8Obq
- TLSH T11A42BB595AAB211BF0A62E75D7A506D15FFEBC53B9E6B13FCF40010918E0A0885E4FB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/CMSS.crl
- SHA256 b76afe8a459b3d220a480e6216337a874a0c8c3519db6a91646f9a36a0153e96
- MD5 e8d048e6ead8841363b60367eca358ac
- SHA1 2e7e5a46e03d366f605166f8291ec4a1575d733e
- SHA512 a306e17d886337923837740295c5a6d5dba7354be78233277156815629d864abc748243744ee1e93ff863d000a6c6a25a214a89e14fccbdd052f4329e72f13da
- SSDEEP 48:CeanvxAdW2hBN9eLnz9SfjQEkUgbf1HWnw9AdH1pAk8C5Gl7f7Kg:8vxAY2t94nIfjajF8w9AdVpAKGpfP
- TLSH T11F4280589BFB0616F1F76E7096B506D44EBE7C13B9BAE52FCB4000091DA1B4889A4F73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/CTAbout.dll
- IMPHASH 4d48d584be4ab04e74be0a000e2c11a2
- SHA256 796a1f878937220337df4bf19568e2447261a5008748677da2554e7fd3c56466
- MD5 7378b08096a0a3d7bd72640342aaaf7e
- SHA1 0b85497af84f51b7a9660f37f6329376fd4427ed
- SHA512 904cd936694b16791e54e970bb360c1e877a3e48e1ed14bc90c11dcf110e819c8afee41b7e61b90d36cfa2cba3496e0ade3f6443371ed651fac8dcf641b1c137
- SSDEEP 6144:SuYkY6S0SY/n0YYYYPYYYYYfYYYHYYYYYHYYYYYYYYYVYYYYYYYYYYYgDYYYYYYv:2kv74c
- TLSH T148446F32F1231E57D30C163681297988910D6C55BA10F4BE491BBFE9C3FA7C06DAA79E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23560
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleHandleA
lstrlenA
HeapAlloc
TlsSetValue
TlsAlloc
GetCurrentThreadId
CloseHandle
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetProcAddress
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
InterlockedIncrement
InterlockedDecrement
SetFilePointer
GetStringTypeW
GetStringTypeA
IsBadWritePtr
HeapReAlloc
VirtualAlloc
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetFileType
GetStdHandle
WriteFile
TlsFree
SetLastError
TlsGetValue
GetLastError
TerminateProcess
GetCurrentProcess
SetHandleCount
VirtualFree
GetEnvironmentStringsW
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
user32
LoadBitmapA
InvalidateRect
IsWindow
SendMessageTimeoutA
DialogBoxParamA
ShowWindow
CreateDialogParamA
LoadCursorA
ReleaseDC
GetWindowDC
LoadStringA
wsprintfA
GetWindowRect
GetCursorPos
GetDC
DrawTextA
SetCursor
ReleaseCapture
SendMessageA
SetCapture
EndDialog
SetTimer
SetWindowPos
GetSystemMetrics
FillRect
gdi32
CreateFontA
GetTextExtentPoint32A
CreateCompatibleDC
SetBkMode
SetBkColor
GetMapMode
SetMapMode
CreateBitmap
MoveToEx
LineTo
GetDeviceCaps
TextOutA
SetTextColor
DeleteObject
CreateCompatibleBitmap
CreateSolidBrush
CreatePen
Rectangle
GetObjectA
DeleteDC
BitBlt
SelectObject
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
shell32
ShellExecuteA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
CTAboutBoxDefaultEx
CTCreateAboutBoxEx
CTUpdateTextEx
Name
.text
Size
44KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
180KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=11, version=8047,
count=21, id=14, version=7299,
count=80, id=10, version=8047,
count=13, id=25, version=9210,
count=128, id=1, productName=Unmarked objects,
count=6, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
TargetDir/EAXCon.crl
- SHA256 6bd7d8d2eaee8ae9b42dc28d05baacca54b568401e6d2e931f2991c00ce50eec
- MD5 16de52ed72dab3dada1133780b233ff2
- SHA1 6d941f202076bd5b78511ee6408a1ba9e21485f7
- SHA512 ca791cf99201c43e13da5646d0115f90d2ce29d4d5ff024458175a75928f63ef9554d64df406e788672d52d6129b073b6019bd782ce3aff70b4842194bfb6fdd
- SSDEEP 384:0XpRXXIXphNUXpUXpYCyxM7+aIw/f5tLOau+gaeF4Mv40:0XPXIXNUXuXKCySQw35tLlu+Fe2MA0
- TLSH T199F283611A217C44FC7BD9B849B7F9B90128BD77935E61491EE4BE1B3533EC2A42280F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/Efx.crl
- SHA256 94b1a30ae1c8bc7d531e2f9e91d7c9e179f4205e77342d4b68b7e18c562e03c0
- MD5 b0ef5b76f89c4a0d7234c273a7521c73
- SHA1 59519da5bc646ac686eca294e3ccf8c3e1180a64
- SHA512 98198a6d511450eeddeda028862a580902d728d78909583df943fb9b897f35f379daea886d9411eb031e78834726240b59330f39e576a25736fae524894c6a6c
- SSDEEP 24:e9GSar7mBlruRtks0Pcps9ZhNt0h7bx3xTHPNWnh:KaryzruL0PJ9ltWhfc
- TLSH T1CF429F4D5AA7112BF0A65E30D7E242C15FFCAD67B9E7B16FCF40111928E060859E0EF2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
TargetDir/Karaoke.crl
- SHA256 ac8ba12718078a30ecc7c377383da85ba6665bba87992d5a2a7faf7ae2931701
- MD5 713eb8879017da4b5a5619806efeebff
- SHA1 2b80ed881e5c7d7a1d7ee180e67086ac69757057
- SHA512 afa358cbe75c8fdd0d2e341f5c6e23de9579d3ae24a37ad8536b8848d2cbe72dfd83eaa665c1d2bb8c719d359a1c4f0c875ff7d133f46c0eec39ec12923f2935
- SSDEEP 48:Cpjki1er/SBfGTOrft2vJNdBUuBtLZSZEEKS9L+1sEaulTa1h3ecD:nIeDSBfGTo2RNnfBt19EKALGauRaTeC
- TLSH T110427E499AFB1516F1B76F7097F506D51FBEBC53B9B6A12FCB1000091CA0A4889A1FB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAX.bmp
- SHA256 82a7100bc4afef8fb80b0f17770d324b7d264738dd92e644f401e3e4f7cc8a33
- MD5 7469ba5cd56d99eda9116b2c7957233a
- SHA1 9893227c9738ef6d1745f54ee0041a1da4f46276
- SHA512 2b5f57caac159e0091c98417c86671b4f788c17a73657f53b7e1b21960c518a46ccc39d43fe45dfeba2e484f3ed0e70a9c9110df8c03799daa4de68b58d21c74
- SSDEEP 96:OQRd1dyZTxXqrDGKjiqgZKcJ0O8HgO4BPGwiabLNTV4N43:OQ31dyZTxX2DbHgZKcJ0O8FnabLENQ
- TLSH T161726BE1B976A990C5D143B07BA38144601B0ED1C2CE8BAD794B7F9A73BB311791CB83
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAXHD.bmp
- SHA256 812c6d1b58bc23ca8f327f35ba2cb0f695d232a2a7d65034a91cec1db769b74e
- MD5 b739cc9b65955a64be3c3148c0423d8e
- SHA1 6b110088822b366fecf3cab85103eccc3620f090
- SHA512 2c1cc1553da9de547dc90cd864f1191fc4adb277dc771216c3a5e31c5591e393a2501245f3d78d764b339e14f63368035948166a1af0d8020373d24c5f45b773
- SSDEEP 192:O4U7rjHlRHkHYs6UWmJRDp2P37CqryjtN:OL7flRHUYs6GDp2P37CqryxN
- TLSH T10F72C0E2A135A954C1D803F17BA78409A14B9ED6C6EC979C784B3E4A33BB351760CBD3
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/TimeScal.crl
- SHA256 5b48b57c6854ef1ec1d1206772864d5bfdc4cdaaadbc4ecf175b4eda9414a767
- MD5 b2ae7c96d1ae1f3f6b07f1687abbfb03
- SHA1 16a59dc540c6d39de9aba70d018ef0705c6d5a43
- SHA512 d002bf194cfcc139f662d69a4a928f317ad4de5e8e058a197dc45d6489f3fcb067d5888b4bb3a3b5038fd7d7cb43da1b5dab4d5df664149391bae182f10675b9
- SSDEEP 24:e9GSaT3Alkbt1r8TlkQRlEpu7lplkTRlEQwFEjNIjR+cEarEcDRlEMZhNJSDRlEX:KatxQYphTYoN2+cE5gYMlkYPXy9qR7
- TLSH T143421B5D5AAB151BF0A22E34D7E606D15FFD6C63B9E7B23FCF40111918E0A0885E4EB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
TargetDir/help/EAX.chm
- SHA256 1c044200dbb8b62a8b60e0e6eb8d934521d0b61b239ac6a4dd5e573d5c90db5f
- MD5 b77f4148af1666fa7955f2e6a6ddc6ab
- SHA1 c10e48be087eb7a4114fdb70e10227a766566ccf
- SHA512 bc62d831b7f9f14a6645cfd05cf08bcf050a81441d6dd31355da27c8255d52f63fee587bd471eeb486bb5fe9b2ed1713cf6d0753431a8c422a16c8d4b3409496
- SSDEEP 1536:8sbammoQJHSxqsW6ZCPjfhZdldSrSqRVID0gWTqAaBiuKlevLp:5mmmNdQqm2jfzzdYEDtbBiutLp
- TLSH T1C1630254B9840DA1F549FD35EEB3920E50EEE2276FD879C135C79A3C4A89F9C026009B
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/help/EAX.ini
- SHA256 27a3df241c6c0e25143dc4c24b732c74412fc2ca29cf6307f175106eca755cea
- MD5 d6e4a54e19d02e4a26103980ae3fb0a9
- SHA1 68a2a74cd24a3f8feecab455c26077c07d1ce110
- SHA512 717b746e96296f31df2fcd904e1b87b6035359fdd1d09f02a736307cdbdabe125f0826d219ef99d10eebf0cc7f02a17c2ab08c0f4be73d4a4c13517dfdd96b49
- TLSH T15F012876835AEA48714E84FD378696C765F452A444C38A40C329A83D33C7B6DCA22705
- MD5 SHA1 SHA512 TLSH
blue driver/CTEngine.ini
- SHA256 a15099971534cae66ef934ad8cd56ac12ae761b5dfeda294adc57cfd7f180527
- MD5 b89cf6ef1acf67dd0c45a1757486fcfe
- SHA1 94f637b5ac4c188ac0703f08fe3573ad162ac5aa
- SHA512 8d3250f00971c5fd6fc3ee47b014789904a6b5f9ff23c9b9eb895a6d30259fa6928996762c2e9ec441ad30827c597d3409603b5e166abee56782d203fafed754
- TLSH T1CEB092FA369282A1619861A6E13852CF9181185B25AAF29A8991B1623E714422278086
- MD5 SHA1 SHA512 TLSH
blue driver/CTShared.ini
- SHA256 1f3387d25e18af590f0ab8c5738ecbe1b11501fa64047b30c573747cf8b0aca0
- MD5 f31e85f26fd1bafa29408ec83562749f
- SHA1 288c3818ef78cad91968b4e050eb5a3759844efd
- SHA512 4c2da34a49c4bf4d9363eea63f7b56b5dfbd9d65a7fdbc00981b29cd948fc89d08bda07b5c04c50cefec498a1d568132bcfd5952123e86d616b5679f0698de1c
- TLSH T170C09B25FD27A5F4A341D0DC3640C5BDD50711C34F71645915D490C67D55DE1171D5E4
- MD5 SHA1 SHA512 TLSH
blue driver/Chs.cab
- SHA256 8e0c6a73198bbb20bb8888003286aab8a790c55376fd5790db6277e0c610a6da
- MD5 a75675fbc75c8fe708b8ef9e874fd59c
- SHA1 fa52f1fcecfd20043332727af0e8a6123d900bc0
- SHA512 b08190a27422a01569fa6216ad8f9b7dd2ea610a972dcea256d57317893dcbb1670b31e17c4253d275d279cc433617ac7d291d2fcb26c35f561afc865f365c9b
- SSDEEP 3072:FXd3GkeSelGDSg9LyBlAFFsbaWaXviUBqivnPgJfuf:F3evoeQyUjsWt7vn45uf
- TLSH T12CE3122809CC9123FCF2D5FDC01AB7D45CA9D9AE5EEA3035C8890655C4E4FEA9A1F163
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/AudClean.crl
- SHA256 7b88e8ba5c2ffead9b908e76755106dad8dbd35b9442b243ac7903a761cea9f4
- MD5 9810835ee2e5b3464d14850e255ac74b
- SHA1 89b7fa7693cc34ae01903fb46a65214c14a0459b
- SHA512 bdcee865b0f1e367f9fec9f55ac81e8942143cbea9c4bce3d8bfd7731a923febab294a7ddf1eeede47dcc6267665f393e7ec2da12c0c9a79c671b0cd59f7bc91
- SSDEEP 24:elGSiJkUovVBJdVgKDpFKeQNasUt1EyP82X3Fw8ZhNiJlth8X4q13WPNgJ:C//g+Km1EG82X3hlchb0qg
- TLSH T1C542194D5A97552BF1A61E74D7E202C16FFDAC17BAE3A67FCF04000928A151859E0EF1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/CMSS.crl
- SHA256 f72747336bfe9ef88c498cecabdf542ef20be417cae6c94609828722fe2c1077
- MD5 81293ada901339602ff2a11a7d834606
- SHA1 f89e3aa95528b00d3903e0633cf4f7ba5438d004
- SHA512 2713d1925391532f96810236358d05cf302f4260656eafb2b1c1463c23b2c04c26d21a9346055d8f5ab7637abae2c508f01e9b7e3295f41e141d8ba6c17cf015
- SSDEEP 24:elGSE1M8sj0brFhj8s4RKBJJwyOp0wTK3sy3TFuL6lz3XlmUQt1py5V8k5VXw8ZK:C1grHURKVwDN9cXQt1pMV84pl8f7Kg
- TLSH T18A427F4D9AAB111AF05A0E70D3E202D15FBEAD2776E3AA7FDF50014528E491C58E0EF1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/CTAbout.dll
- IMPHASH 4d48d584be4ab04e74be0a000e2c11a2
- SHA256 a8304ccceb5dfb9785c3224f9a38778dd576659c284740bd15043b9a416df1a9
- MD5 9d66fb4fbc132317de0335a04cfe9d30
- SHA1 bed4f5d35fdcf2f002e889014b42830cadf32d2a
- SHA512 baa5c71ff1843729e6e7f02f0d3a7da69fb6b4324c82f523dc3f4dc7e135355d5d49dc0b95547421e997d03967da8ce1be53e33f46c0add46156164240792c9b
- SSDEEP 6144:BuYkY6S8SY/n0YYYYPYYYYYfYYYHYYYYYHYYYYYYYYYVYYYYYYYYYYYgDYYYYYYv:JkvP4c
- TLSH T144446032F1231E57D30C163681297988910D6C55BA10F4BE491BBFE9C3FA7C06DAA79E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23560
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleHandleA
lstrlenA
HeapAlloc
TlsSetValue
TlsAlloc
GetCurrentThreadId
CloseHandle
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetProcAddress
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
InterlockedIncrement
InterlockedDecrement
SetFilePointer
GetStringTypeW
GetStringTypeA
IsBadWritePtr
HeapReAlloc
VirtualAlloc
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetFileType
GetStdHandle
WriteFile
TlsFree
SetLastError
TlsGetValue
GetLastError
TerminateProcess
GetCurrentProcess
SetHandleCount
VirtualFree
GetEnvironmentStringsW
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
user32
LoadBitmapA
InvalidateRect
IsWindow
SendMessageTimeoutA
DialogBoxParamA
ShowWindow
CreateDialogParamA
LoadCursorA
ReleaseDC
GetWindowDC
LoadStringA
wsprintfA
GetWindowRect
GetCursorPos
GetDC
DrawTextA
SetCursor
ReleaseCapture
SendMessageA
SetCapture
EndDialog
SetTimer
SetWindowPos
GetSystemMetrics
FillRect
gdi32
CreateFontA
GetTextExtentPoint32A
CreateCompatibleDC
SetBkMode
SetBkColor
GetMapMode
SetMapMode
CreateBitmap
MoveToEx
LineTo
GetDeviceCaps
TextOutA
SetTextColor
DeleteObject
CreateCompatibleBitmap
CreateSolidBrush
CreatePen
Rectangle
GetObjectA
DeleteDC
BitBlt
SelectObject
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
shell32
ShellExecuteA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
CTAboutBoxDefaultEx
CTCreateAboutBoxEx
CTUpdateTextEx
Name
.text
Size
44KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
180KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=11, version=8047,
count=21, id=14, version=7299,
count=80, id=10, version=8047,
count=13, id=25, version=9210,
count=128, id=1, productName=Unmarked objects,
count=6, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
TargetDir/EAXCon.crl
- SHA256 388c367a0402c91b059252871aab00d5c230b0142235c773ae686af8fbc19d54
- MD5 807284f569f987e6e023206c02905174
- SHA1 e90272e25b8123fe02094eac17b6fbb6f95acc9d
- SHA512 fd3c162ce1bd76ae2a4dde750729cdae6ff33bf2b108d00bbb729c06713718a667b699e44e0a4b9d46083ecbac35dc15d094db820527ac9e7139ff9c11b41bd6
- SSDEEP 384:iXpRXXIXphNUXpUXpYCyxM7+aIw/f5tLOau+gaeF4M1/:iXPXIXNUXuXKCySQw35tLlu+Fe2MR
- TLSH T1FCF295611A217C44FC6BC9B449B7F9B90228AD77534E654A1FE4BF1B3533AC2A422C0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/Efx.crl
- SHA256 e9ef5990a85c48cd73c72304a67678b60d2180357be3635ac419dee1a2c98715
- MD5 46d2a5f8827b51065cd3ebbab4ceca20
- SHA1 c61f9d2436362da81356fe4c8ce8a9cc22485c8d
- SHA512 53a0923d0820f1489e72d9b688a51e0542781f01993b4eac96ebb255bc62c2519caf579949188974a22cba1069a15c8b69b45db236a339a36aa0445a24e806f0
- SSDEEP 24:e9GSarnOMYromDJyPMAuwEZhNtAltmx3xTHPNW:KarC8YJeMAqltImhf
- TLSH T19D429E4D5AA7112BF0A65E3097E242C15FBCAD23B6E3B27FCF40011928D161C59E0EF1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
TargetDir/Help/EAX.chm
- SHA256 ddc05fb9476de94104ca541128b892ce2fce7ae44b3aa471742b5c7ee4dd60ef
- MD5 d408901845d45cb1f4a531b1814e0ab2
- SHA1 45a0e3c9393578390183053951bdb9a12baec23f
- SHA512 b408b2226e9e17b3a373c99fc98de1a0a767748d513af901ac6e7ef68eeb960b3310c939edfbb90d904ea03863c31177185180e47c65a4671db47eaf49f0d5f1
- SSDEEP 1536:A/VYVZxQfgSTUN00lGdC/YxC7LgNA+wESsnBVfqtpv90vp:EYVviUB2C7LgNOwPqtpv6B
- TLSH T1BE630171111A4AF3C4992EB1815BAA9F3DA2F17238105921B9F7733278DDBDFB621182
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/Help/EAX.ini
- SHA256 741436c515d3355ef66e174a231860e272778165050e408e22668b99d8a2e2b0
- MD5 6df91f4329e8f5fa9b3e29e4ad6504bc
- SHA1 d52977a5f8e8a8a72055af13e2eac356822355b1
- SHA512 8415ae648d6f77410c2406bee98286ad51bafdeeae2bfbd2a04e023e192279b68d5a226a919a020ca088598473ce629d62f676daad2931be856402d54f2b5523
- TLSH T145F078128313EC0830AF88E5778953E3543452450E934A0D933DBDAC2322A7CD522590
- MD5 SHA1 SHA512 TLSH
TargetDir/Karaoke.crl
- SHA256 f18cafd1b31bae4a674d99ccac371b403cebdeb036d2f728d7ab8ac650587ab6
- MD5 fd5320f7596a7f1d2be6981c5bbcc4e8
- SHA1 16de7be9b76b4e5f55e48b228e463bf4b49fc397
- SHA512 a4fc085184cc211e1dd1860710523fd3c726b7ade16cbba11f10fd23bc34b7f38215b2131e3d65ba50aa163e182717dee99fcaa9c4281d6e48b55e1824d9ee74
- SSDEEP 24:elGSyTthRS6xhCJwzvWrbQDemjZS1TeuSrG1DlszM/OWc/51uAKiVwoZhNR9togQ:C3WWRmj6ee5MX51uAKMlpoa16VLD
- TLSH T14F42814D9AA7146BF0A60E70E7E206C10FFEAD6775A3B63FCF40014568E164859E1EF2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAX.bmp
- SHA256 31d9a092dd17fdbeb8f075c1d0927adf83a1ac37b8057a68866efa62aa4794c9
- MD5 f7c31f06624337bd4571a63a50ee58da
- SHA1 76141a033aba7407a42b6e8e779bf1651de02b69
- SHA512 6776c3d43ad7d008200d3e013601957b4a371a98286bae47ce147daddcd130b3f293b19a067d584b62f2c4b770a08743c20266db44461db2ec6b392fcdc09b8a
- SSDEEP 96:OQRd1G4pZDkDGgqk3ccr7ilYeO8ERgAU9AzwLNBg4NM13:OQ31GWZDkDGk3ccvilYeO839AzwLhNMV
- TLSH T15E72B1F1B432A850D5E543B8BBA38194A61F0FD0D6CE87AD784B3E4A73B2711740DA97
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAXHD.bmp
- SHA256 e3ebd86410437c7903ad1b8708ff25d19d54233a51f0cf85f0b9b62466155ea0
- MD5 9d9bb2d89febd10c8a51df79c3d7a4e0
- SHA1 6fce28e8ee95ca14933c4c823c78390275ea2fbf
- SHA512 65bf9264b11a48425eb7163526d849275ccd80e7bab085e966c3a93eab105263e76aeed84948af47630fc559479907d6249132d22e551ecf444df136e8693ee3
- SSDEEP 192:O4U7rjHlRHIAHUOtQ8ImEmr3p2QSbCTu5CPVsB:OL7flRHI4UcEQ3p2RbCTu5CPSB
- TLSH T1F172F4F2B431A944C6D843B07BA39008946B4ED0DAEDA39C785BBE1A73B7350711DE97
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/TimeScal.crl
- SHA256 fe53dd1b4c539ba5218092dc31aa02cd3adf0deaf563260c8eb836968d8d5fa1
- MD5 5a5b0b4d1e612636804390e95a914d0f
- SHA1 69460a9bf34fb67e10b8ba24f83a94cc5d60a06f
- SHA512 59b822692e4080c3bd51c05dad3d4eefc5b9c25f45930b7fd61a71e7bdff1d052c991ebe3486ad3a868acffe7864dc8129c4d9790d431cecda3fbc3f290b6e8b
- SSDEEP 24:e9GSatWMxHfJs8tdVCnDcN8HgcPlUXwEZhNhbeuNt7gXIyF3WPNR7p:KaV/CYNWgcPlUDldf7Xy9qR7
- TLSH T1D942C44D5AAB156BF0A61E3097E202C15FFDAC63BAE3B67FCF40110928E151859E0EF1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
blue driver/Cht.cab
- SHA256 86557cdda5eb27c3c76ad60a421d31758803f5cc450fec2807e85bd7286c4189
- MD5 aa06590595b2fac6cf94cb12ab733710
- SHA1 2bf5b0850239188c5b0539c7d1c174cd34ac1292
- SHA512 9ced5deefad70a565c86cc7b48f94ab1780bd6aab8389f78ceccd0ceb13fe3f1c903c9aa4f0bcb4f941f5aff91cb3c162f37b9987527f8e93173448bf9a6048a
- SSDEEP 3072:IRfJohfWs9GDS/ALyBlpqJWUjpGXDvBOvwh+9LXUb4yU:YfYOsAe8yVWVcDvBQwskb4yU
- TLSH T195E3122E5591B896F6D781BB1CBBF7640CA2C14B8DEB50808C66CE1AD4BCBD0465FE80
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/AudClean.crl
- SHA256 bca966eee0f28d1eaf2ef70fc61dd06a02d02db9b33399be55d32a495badf3e4
- MD5 452b482ef2e0bb81d60efd556c1d9b66
- SHA1 3ceb40e5734f1c91aa7f932c9b7c8516f764f2be
- SHA512 15ac38ef43756563988d7eef9de00e8e14a9abbf5230680a0a43fe20cbfa9e776440a4ebbac75dcc611155007ef12727a9f9f6fd0fd5f27d290102182fc01b7c
- SSDEEP 24:elGS8ljkABzeg77F4XzdDC+sr+t8yBS82X3Fw8ZhNGlth8X4q13WPNgJ:C8l0D4+MC88S82X3hlehb0qg
- TLSH T15142084D9A97565BF0A61E70D7E202D26FBDAC27BAA3A27FCF50040928E150855D0EF1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/CMSS.crl
- SHA256 db86466e63b78f7753459dd67e7e3ffa5c86c5fcd5243448474195683fd7a25c
- MD5 d6cfb21c2058a742f118a7c556475e7a
- SHA1 7e27bdb25b2db36002ea7fe4c7231b7c2a5acef9
- SHA512 6a3976c49fddf3eb1b0ef02413744da12ed7373a5b6812d82fcf6c7523b9b8fb48284ae9e4595d8f5b6104a28939cfeb5e18f4e8e78f7797c13c25ef09922340
- SSDEEP 24:elGSoa5JrrzUKoHUHpKkZxYK3XGXkA2VF4zawUQt1py5LS8k5VXw8ZhNz/wf8X1Y:Cz/rrzpFKkx9Qt1pMLS84pl8f7Kg
- TLSH T1A642904D9AAB055AF0A64E70D7E202D15FFEAD2376E3A63FCF54010525E084C48E0EF2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/CTAbout.dll
- IMPHASH 4d48d584be4ab04e74be0a000e2c11a2
- SHA256 73b295237220ac76254b9d439f1da78e54fdb577c14c56ad5910c486175e7e21
- MD5 b162cc0596df58fa15f79c209a4e01ed
- SHA1 b852dde65592f1bfa573b66de29feb42ce197648
- SHA512 540afcbee8d020df4a6da05dc017eaaab654d964168d6398c62054eba2abd48d2122cdf920d92ef5e090e864c8bd37d59685864f9aeb4c282ade1ec1b003c74e
- SSDEEP 6144:9uYkY6SLSY/n0YYYYPYYYYYfYYYHYYYYYHYYYYYYYYYVYYYYYYYYYYYgDYYYYYYv:lkvc4c
- TLSH T17B446F32F1231E57D30C163681297988910D6C55BA10F4BE491BBFE9C3FA7C06DAA79E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23560
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleHandleA
lstrlenA
HeapAlloc
TlsSetValue
TlsAlloc
GetCurrentThreadId
CloseHandle
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetProcAddress
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
InterlockedIncrement
InterlockedDecrement
SetFilePointer
GetStringTypeW
GetStringTypeA
IsBadWritePtr
HeapReAlloc
VirtualAlloc
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetFileType
GetStdHandle
WriteFile
TlsFree
SetLastError
TlsGetValue
GetLastError
TerminateProcess
GetCurrentProcess
SetHandleCount
VirtualFree
GetEnvironmentStringsW
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
user32
LoadBitmapA
InvalidateRect
IsWindow
SendMessageTimeoutA
DialogBoxParamA
ShowWindow
CreateDialogParamA
LoadCursorA
ReleaseDC
GetWindowDC
LoadStringA
wsprintfA
GetWindowRect
GetCursorPos
GetDC
DrawTextA
SetCursor
ReleaseCapture
SendMessageA
SetCapture
EndDialog
SetTimer
SetWindowPos
GetSystemMetrics
FillRect
gdi32
CreateFontA
GetTextExtentPoint32A
CreateCompatibleDC
SetBkMode
SetBkColor
GetMapMode
SetMapMode
CreateBitmap
MoveToEx
LineTo
GetDeviceCaps
TextOutA
SetTextColor
DeleteObject
CreateCompatibleBitmap
CreateSolidBrush
CreatePen
Rectangle
GetObjectA
DeleteDC
BitBlt
SelectObject
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
shell32
ShellExecuteA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
CTAboutBoxDefaultEx
CTCreateAboutBoxEx
CTUpdateTextEx
Name
.text
Size
44KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
180KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=11, version=8047,
count=21, id=14, version=7299,
count=80, id=10, version=8047,
count=13, id=25, version=9210,
count=128, id=1, productName=Unmarked objects,
count=6, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
TargetDir/EAXCon.crl
- SHA256 9390f91f4bfe0f91ebd862d2cafd31887bc0beb152d6f504ab010808a7efe831
- MD5 ee7107e7f93f3d2493fdc40d71bec418
- SHA1 c772fe2a2e1e342a6701580d9ab470bef353104a
- SHA512 373df809d6123fb70f6f5991224f16ed154f7b07425b7cddb86da3c4b833c7f5602b0edd1b39eb1c0b18c3e5a20f47ba65ff0cf51760f70835f8130eeac59df3
- SSDEEP 384:2XpRXXIXphNUXpUXpYCyxM7+aIw/f5tLOau+gaeF4M3Q:2XPXIXNUXuXKCySQw35tLlu+Fe2Mg
- TLSH T1A6F295611A217C44FC2BC9B849B7F9B90168AD77535E614A1FE4BF1B3533AC2A422C1F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/Efx.crl
- SHA256 514a159c2d45ad575e8033d7620fe1feb869962dc1df7aaedf848ecd7a6041ec
- MD5 d6f21ae61486cc1395156fb63cfe9619
- SHA1 41ec88daae74e0d110b300494002c2de14834ac7
- SHA512 c002964890a96cc67c2d2614e2300636844f97657da44961dc356046f6e27958b5b44c6d5b5561843841dafa8489a0fd85d250e6ec4e1c730fc6c8b09330894b
- SSDEEP 24:e9GSarn7bPDJyAiMAuwEZhNtAltmx3xTHPNW:Kar7nJliMAqltImhf
- TLSH T177428E4D9AA7156BF0A61E7097E242D15FFCAD27B6E3B27FCF400119289160859E0EF1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
TargetDir/Help/EAX.chm
- SHA256 45ddc86a1d303a62b1ede5c2b679ba4f0583ee994a9284c51198aaed017f0854
- MD5 1282d4aa8d16eb6febbc04554d004a7f
- SHA1 0516fa1c7ba65cc3623fe8579a097597309a1e63
- SHA512 4895f661e1c065f86138fdf78d36c32b939b7f2f8eb1bd773243ffb8dd9fbfe795f1f9d1a5086ade07123f7e738c67bff9b35b963e874878c8ad661ae54bc220
- SSDEEP 1536:bA3Y0NH8FGXDxlByXnSOPxWegJd2YABYTpUiOZr5j9dgz0zAk:MAGXDvBOdPUe82YAiUiOF5jAz0zn
- TLSH T1236302993696E8B4C3BB68B5B5CB47C9D732CB4094265683123F3F1663EDB9C1A001E7
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/Help/EAX.ini
- SHA256 31be723fa07198d020307b6e64ea0eed6d10d5811edde7b9a4ecebaacebbce26
- MD5 1ca701fa1a58058bc9171e58af749b90
- SHA1 df693b9ac374167fcc038fc1739cbfff0d6eded3
- SHA512 f435af454e9a3d2fa5de3f02f6c7f4866a3038768b7711e75972f115c4f539c7824ac46d297b3ec7e21439b7462b2270457bd79c6e8779994c7ccad79e20f04d
- TLSH T10FF022928317EC58F24E84EA7689A3EB6438A38908D34A51D33CBD3C23126ADC522944
- MD5 SHA1 SHA512 TLSH
TargetDir/Karaoke.crl
- SHA256 6639d07109fd3c3aecaa9b9b37b1af2e24c79d00ec4975e1c0581dd84ea6962d
- MD5 c47b6f4347b547fed6e6f78072ce414a
- SHA1 b7e91cc4daad2fb5240525f000dbad92e801c2ba
- SHA512 d3b359af39cb892a075d6b43ee22b9dcf1fb853b8f1963cd499f43110fdf80deb5ca96cbb225e46dd69019df3b8d22450b365714827030358949489908f49507
- SSDEEP 24:elGSWTozuzhz3PeZ/k3nOv6lGbDlHs8uY8/DWc/Rg1uAKiVwoZhNR9togXx1iWX6:CjzC213eXRg1uAKMlpoa16VLD
- TLSH T15242834D9AA7146BF0660E70D7E606D10FBDAD1776E3B23FCF40014568E16485AE1EF2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAX.bmp
- SHA256 b197f3616d41e25e1526d9ab3cd4cdaee975e21a9744a676c0ebbbe103424238
- MD5 7fee1fede9d7095a4c6c52024d142ff9
- SHA1 a6ae5089a157cc9b2ff06cee1b7c7e1315d8a0e8
- SHA512 960468362f5117a8cb74a2c71a647ce6c7c6ae8819ea316b501eb2b5a4d8ece8736248420f933305a01ddc4b7b91cd3fafe0ca26c548a2937c39564c5c514e49
- SSDEEP 96:OuRd19ihZDoDGzqRcJyzf7bO88g9/wLN7dOj4NLM3:Ou319ihZDoDXcJy77bO83/wLrOMNLE
- TLSH T161727CE0B836A985E1DA87B07BE38140155B0FD0D6CE87AD785F3E5A37B6711750CA83
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAXHD.bmp
- SHA256 26dc9e72cec1effd444d3ccef7d2328c758139a8718870ff72593518b3a24d52
- MD5 01986cf0297815b1e7fceb9b78529fb9
- SHA1 bbe2e9e20d8197164a6135d393ceced22468b0a3
- SHA512 ccf9d303ac42845e112b7a3ab70fe6c8aee25bc58543079251a58bcaade956fea671b4ea5422dbcbff7464a65069b81c8f2220e00b9d72fa8e06299cb4e33d09
- SSDEEP 96:O4UfBlrjHlRHPE1FsAlE757Kp2Z128CXuavX0SDKuwN3:O4U7rjHlRHPEHsA6757Kp2S8Ce80eCN
- TLSH T17972C2F2B535A994C4D803B17BA78408A55F4ED5CAEC939C788B7E5A33B7310310CA9B
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/TimeScal.crl
- SHA256 bf035385beb8d80280662567e2b2838114478af3eef6d066282f2b0db00e5579
- MD5 a01e61337dbae9c8f17d194386aec01a
- SHA1 c0987210b248e83af68e3145df9e337048116adc
- SHA512 a1575175882dda7a0557284a04562078769868cc31a96715726827dae15e630d1be3ba6e17a75965ee3339deef8e57da097bfa17d9e5b98938d4d7b2991c1340
- SSDEEP 24:e9GSamu5qrs8ULePN8HRgcPlUXwEZhNhbeuNt7gXIyF3WPNR7p:KamlNWRgcPlUDldf7Xy9qR7
- TLSH T1AA42C44D8E97155BF0A61E3097E242D25FFCAD67B6E3B27FCF41104928E160859E0EB1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
blue driver/Dut.cab
- SHA256 26de7b4554d6316366169c0607d75eb308adda810218aeb6c192cbe582da139d
- MD5 277f497514caab2ea0466c37c196739a
- SHA1 15a800e13fac93c139352b5cc32d7630676b4c0c
- SHA512 3af389542b2da7b62912ae8ba884ee739fc82c83c645ef13c60f087e1f292aef8948df8307aa347d0915953bb154803e0dad9d4ec4956b0867f9f71d451c78b6
- SSDEEP 3072:ImvyVrF51sbJQfcaqvgCgASzDTAkbVlgyPlByll1SojU0ZCqJ6d2GJ:I4OR5qbGfsIeSs/ll4QU8oNJ
- TLSH T1B2D312D6F8910AD77E0BC509051068A5EAB3F35126BF513B3080A8A5F9BED6F770B81D
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/AudClean.crl
- SHA256 9d4f1898912d231ce521c3d3689247a55d7e759ecd88529d317b3e65dec71e5c
- MD5 06a8dcd9216e1c5a498efcb883a9171a
- SHA1 63d3250a6071b2c471f074f2a865561e8bd46a77
- SHA512 1629b165c5278a60fa29fc94e57fcc03b7c59a2b3761edce57b787da52513652e43de583784c1d3a5543e5dff337cc18e46b2f642f058b39e090eb2be3f3eaf1
- SSDEEP 48:C8QgTDSaLoQgTDovTD0MPdrMzw9eS1o1E8j82X3hlchb0qg:ZbD5sbDsD0UdgzZSqvNhmhbq
- TLSH T11A429A595AE7455BF1A61E70ABF202C15FFDBC5779E3A27FCF40014818A0A4899E0FB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/CMSS.crl
- SHA256 23042f5bf9079084109afe9f73dd61bbd7b7bc193769b12064e0a243984d3661
- MD5 eb3d3e370f3af2501e8d86c02ba27d20
- SHA1 70ba7076f674ae18b92d4fe89ec3c4636fd2c040
- SHA512 be10e03d4f7f740ab7fe9ba01c9321cefbc457beb066df682b5e00584605ecf4023533ab3c8038c296b3a9b8652b67d5f500464287afaf21a65aa0c87002fd50
- SSDEEP 96:WWV50SQbeUzhDe4z09cLaS7vBspMLzKfP:JRnehDe4f37hiP
- TLSH T1CA42A21897FB4116F1B61F709AF105D55ABEBC93BCB3E66F8B40005C19B1A4899A0FB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/CTAbout.DLL
- IMPHASH 4d48d584be4ab04e74be0a000e2c11a2
- SHA256 64cd716510b3402b38f963e6d3e5258f507e11d4b6c5b77f93275cd2a2bcecb0
- MD5 f7b72144f4e7addd16e8fba49c8d05c7
- SHA1 49df60af5a092d4a795041dd6c227f75b6874389
- SHA512 31ea947e5b2b7e0de387f019a48d74957b72091e99d31b8ccabd5b5552f023108a01e36b4d7f2f95648cf8f97428c2d76cc939df1141e43d751149a162259eb5
- SSDEEP 6144:OuYkY6SiSY/n0YYYYPYYYYYfYYYHYYYYYHYYYYYYYYYVYYYYYYYYYYYgDYYYYYYv:ykvt4c
- TLSH T1F3446F32F1231E57D30C163681297988910D6C55BA10F4BE491BBFE9C3FA7C06DAA79E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23560
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleHandleA
lstrlenA
HeapAlloc
TlsSetValue
TlsAlloc
GetCurrentThreadId
CloseHandle
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetProcAddress
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
InterlockedIncrement
InterlockedDecrement
SetFilePointer
GetStringTypeW
GetStringTypeA
IsBadWritePtr
HeapReAlloc
VirtualAlloc
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetFileType
GetStdHandle
WriteFile
TlsFree
SetLastError
TlsGetValue
GetLastError
TerminateProcess
GetCurrentProcess
SetHandleCount
VirtualFree
GetEnvironmentStringsW
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
user32
LoadBitmapA
InvalidateRect
IsWindow
SendMessageTimeoutA
DialogBoxParamA
ShowWindow
CreateDialogParamA
LoadCursorA
ReleaseDC
GetWindowDC
LoadStringA
wsprintfA
GetWindowRect
GetCursorPos
GetDC
DrawTextA
SetCursor
ReleaseCapture
SendMessageA
SetCapture
EndDialog
SetTimer
SetWindowPos
GetSystemMetrics
FillRect
gdi32
CreateFontA
GetTextExtentPoint32A
CreateCompatibleDC
SetBkMode
SetBkColor
GetMapMode
SetMapMode
CreateBitmap
MoveToEx
LineTo
GetDeviceCaps
TextOutA
SetTextColor
DeleteObject
CreateCompatibleBitmap
CreateSolidBrush
CreatePen
Rectangle
GetObjectA
DeleteDC
BitBlt
SelectObject
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
shell32
ShellExecuteA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
CTAboutBoxDefaultEx
CTCreateAboutBoxEx
CTUpdateTextEx
Name
.text
Size
44KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
180KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=11, version=8047,
count=21, id=14, version=7299,
count=80, id=10, version=8047,
count=13, id=25, version=9210,
count=128, id=1, productName=Unmarked objects,
count=6, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
TargetDir/EAXCon.crl
- SHA256 4f9f2182c9c2797f203978469de93180fbc5ff21b793930ba801c29bd72a35bd
- MD5 7b675746fc9ca1c6661d67bb187ea989
- SHA1 51381ce9d0eed1b43424c97cc7d21ee10e86a845
- SHA512 1cb45169cd2fbe8d891371e9a324a1902c35f869ac65a235f450c595962d36e5708bfb0a0f88aed6f5f84ba65ad11571d4198e041ae9c8add1ff41f22f2e6fb1
- SSDEEP 384:hXpRXXIXphNUXpUXpYCyxM7+aIw/f5tLOau+gaeF4MzA2l:hXPXIXNUXuXKCySQw35tLlu+Fe2MzAw
- TLSH T1C5F284611A217C44FC7BC9B849B7F9B90168FD77935E61491EE4BE1B3533AC2A42280F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/Efx.crl
- SHA256 c50ce53994aa99c7dd1d00a070ebd5f1c94c69ac4a9612174d0d8b72e54a2a8f
- MD5 3b9bbee502e3607dc10e53d0687e0be3
- SHA1 456ca6221ddee41d7335153ad58db2c7d10dee07
- SHA512 f09a602e132bcbb2c2d389986dedc5c2c16c284cca35a7c4b7b6f29cea7724a85883f406342042634f4523578571748cd82abb29f40c8bd26a0edfcb3a7607c4
- SSDEEP 24:e9GSarbmStfdODJyAjMAuwEZhNtAltmx3xTHPNWOh:Karft6JljMAqltImhfP
- TLSH T171429E4D5AA7112BF0A61E709BE242C15FBCAC27BAE3B27FCF40011928D160859E0EF1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
TargetDir/Karaoke.crl
- SHA256 4ab0f0d4efaee5cb246620e53c9a6ad97421c23d86f84e2c9f1536f8e8457365
- MD5 d55bdef87a7c95521b22fd502f9858d3
- SHA1 4c678df258f57f88d6d8574616cab02b36a82a41
- SHA512 b39a2085f7d2ee76b35108d4aeb1eee05138f56ea5baae946cfd95e219c6a5956b91e6dce80c843283a18183a9b0c87bde04bf1f42b9d86332cbe7864c73659d
- SSDEEP 48:CiyriWnGXAhww+/tsjTDLDnIfFynldykY7NJnfXRV1uAKMlpoa16VLD:fojiLODXQQldTY7NfLToak
- TLSH T166425A095AEB151AF4B31F7097F205D10FBDBD53B9B3A27FCF40111918A0A8889A1FB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/TimeScal.crl
- SHA256 dbb49ff04e2020938243c30ff52deaed01a693c7d2b0b22410c53dc6215b8941
- MD5 39154f21ddbc84f3a03913f5aeee554f
- SHA1 da8cee7fde6e27e917d1631d693180cb73c3d5c9
- SHA512 79fb4db728eb86083d0371936291ab0b6a11812db8a3465b17cf80fcec2c02424b72aee9300a8d086bad2fcd5a3bc332df4e10fe9bbe66e124f609412774548f
- SSDEEP 48:Ka+gTDeWaLZgTDoaQTDlMPBNWRVcPlUDldf7Xy9qR7:5+sDe1sDbcDlUjWRlDnf7Xt7
- TLSH T16D420A4D5AA7155BF0A61E34ABE202C15FFDAC6379E3B27FCF40111918E0A4899E0EF1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
TargetDir/help/EAX.chm
- SHA256 dbb784a2e4cf21884592f43468a24347ec5cc656bfaa8b02b6477f4219c006e8
- MD5 2ffb8159b5519f256f8bdc9067601dce
- SHA1 606c88d6d7b23a3fe795b1ff1ac36ee20d0be82d
- SHA512 971f3370f8f73d241094d2759111f3cc773b44eb9b3b365adc2fae0f1e766dd131651288b1c7898ac16e85afa8e2b2607923146dd98665f2a62d64fbe2eeee31
- SSDEEP 1536:bjD8SlSwgg+2Plr1ytv6Ux1XXG222OoFckRDDEOTkKBhfve0YHR+:3D8slgyPlByllbZ2oEnKrvwHR+
- TLSH T1306301F1BE8B8670DB884171710458DF7506E50418FAB327214E3FB95BECEAA9B0F942
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/help/EAX.ini
- SHA256 32056d50d5b1d27052dd1834926eaaa640591ea03b872ab9e7c26e85ae460a23
- MD5 9860759af60d566ecfee7b8911158bfc
- SHA1 97f712c9d88ad12f3e124dd9b6601ee61d963dc0
- SHA512 80bfad5853c78efd6147cebb23b994bf89f3a0776b8d9ea6fab453b0dc1d91822e0b67938577554e2fb49a143f09b7f948ba387c5c2573c63eb0f4d3f0c7e723
- TLSH T1CF016D534257EA8C314EC0E6725997DBD238531445D747EA933DE83C232B9ECC4125C4
- MD5 SHA1 SHA512 TLSH
blue driver/EAXCSole.ini
- SHA256 a415a334b3adcbf70ddac4f56cccbd2aa5177ee45fcfb5161eaa32e0ae4f11e3
- MD5 7ebd3e3258d87ff4bda0e127a602acc4
- SHA1 2b7383d4b96cedd3ee3aa54838762a05f5b0990f
- SHA512 d51f2cc4f89fd2fe6809a288173245ca341c3880a490e98b84a1755d5fa93858e389b5c20239acb0c3c3882c00979829fe85df3193a980362c66d67638e37c98
- TLSH T15AC08C6B858AB1AD70EF33626E420382B4C80480239B0334F30A2440103A15882A804B
- MD5 SHA1 SHA512 TLSH
blue driver/Eng.cab
- SHA256 a1ffb88c2625fe408d86030156b79d59ab9c8fb99c08b4d37c93b70f7d0eb860
- MD5 d7148be1ef345caea3acdda80828b145
- SHA1 fa1432dc64213dc1419c8c9ec1e23c1a3d6725c6
- SHA512 317f573b3b5f3099f2a2a73bc15a050bcf0a116f6d0b7b82979e8f8d5bb69a646c6a118a579a11058e823994fde1dd1233342149ee7ac1c0053a2ed2fc67201e
- SSDEEP 3072:awVDFeEGDSbPu4W1IMT4LaEPDkfvHkrCDLGb+8Kb5pEsZEjkZlWWSvw:3qebP1shEV7kfvHkf7AfZECWfw
- TLSH T194F312390DA75107F8E631BB584C2F062A69332411AB672793486E5EF689BE4323F7D4
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/AudClean.crl
- SHA256 f9611608091cc1a9dc756e23e5b61654e0247f5759b80df9d8bd5d7956f0a934
- MD5 2c73284992e59e1bb397f2328dbc0645
- SHA1 c985d5b6fa6357d80befa5055036c3f89778ebcb
- SHA512 50ae8153c4174d4798c7509d2161e254627406273324459d6fe9b9cac4dac297c37735beb3061213fc4020cc95e00a5028d17ae4f05ffbd13e3ce5adfa838e07
- SSDEEP 24:elGSA6JebU/ceb7Lzeb4y31z7Bt1EyBu82X3Fw8ZhNiJlth8X4q13WPNgJNMcGlg:Cgqmp5/1E8u82X3hlchb0qgIOz
- TLSH T176422FA263F8652DF6F73F706A7203152E7ABC66DE75C25E0680100D5C32A409970B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/CMSS.crl
- SHA256 20f31e596a6fa0b8cd602bb1eb40dc083bf5c34e55fa1222f8fb2101ee8addfe
- MD5 ebd24950a96b83a6b196a5bb06aa50e1
- SHA1 a1d1cf514f23b78abe0ffa491129765b36f8166b
- SHA512 3f2ac413288836347bdf52189924f7e2304d1b8e7558edcb5681b6a9a03d3feaae7535c4a6842290e35c3c9bcf96c257d95acb6f1bf7a5b8bba01eacbd9fac1e
- SSDEEP 48:CYt1pMLu84pl8f7KgDQe44bTw4nUpfcAxUVbHgKn5Rfb2xTj:zpMLmKfPke44bLIfc2UVj9ffb2x/
- TLSH T1F242E161A3F80659F2FB6FB06AB60665593BBCA3AD76C64D0680005E1D72F80D970F33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/CTAbout.dll
- IMPHASH 4d48d584be4ab04e74be0a000e2c11a2
- SHA256 974e637de7771c3149226caffbc8eee1f60981f6db41d87a9a19e4cce175b6a4
- MD5 5f9a86eb41f13e800b1476a3d73f1c2f
- SHA1 07399a24b19e2e8639c48a7a3098bba61b34f6b5
- SHA512 e7337effc5d911d195bd71b22fe4e36c08d3ca0a4de1b567107b30215b06d888a135d142395be870f663bd9a4be5b032573c13c934ca61313b5318ff304cce1e
- SSDEEP 6144:8uYkY6SlSY/n0YYYYPYYYYYfYYYHYYYYYHYYYYYYYYYVYYYYYYYYYYYgDYYYYYYv:0kvK4c
- TLSH T18A446F32B1231E57D30C123681297988910D6C55BB10F4BE491BBFE9C3FA7C06DAA79E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23560
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleHandleA
lstrlenA
HeapAlloc
TlsSetValue
TlsAlloc
GetCurrentThreadId
CloseHandle
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetProcAddress
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
InterlockedIncrement
InterlockedDecrement
SetFilePointer
GetStringTypeW
GetStringTypeA
IsBadWritePtr
HeapReAlloc
VirtualAlloc
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetFileType
GetStdHandle
WriteFile
TlsFree
SetLastError
TlsGetValue
GetLastError
TerminateProcess
GetCurrentProcess
SetHandleCount
VirtualFree
GetEnvironmentStringsW
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
user32
LoadBitmapA
InvalidateRect
IsWindow
SendMessageTimeoutA
DialogBoxParamA
ShowWindow
CreateDialogParamA
LoadCursorA
ReleaseDC
GetWindowDC
LoadStringA
wsprintfA
GetWindowRect
GetCursorPos
GetDC
DrawTextA
SetCursor
ReleaseCapture
SendMessageA
SetCapture
EndDialog
SetTimer
SetWindowPos
GetSystemMetrics
FillRect
gdi32
CreateFontA
GetTextExtentPoint32A
CreateCompatibleDC
SetBkMode
SetBkColor
GetMapMode
SetMapMode
CreateBitmap
MoveToEx
LineTo
GetDeviceCaps
TextOutA
SetTextColor
DeleteObject
CreateCompatibleBitmap
CreateSolidBrush
CreatePen
Rectangle
GetObjectA
DeleteDC
BitBlt
SelectObject
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
shell32
ShellExecuteA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
CTAboutBoxDefaultEx
CTCreateAboutBoxEx
CTUpdateTextEx
Name
.text
Size
44KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
180KB
Virtual Size
179KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=11, version=8047,
count=21, id=14, version=7299,
count=80, id=10, version=8047,
count=13, id=25, version=9210,
count=128, id=1, productName=Unmarked objects,
count=6, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
TargetDir/EAXCon.crl
- SHA256 42b7547dc2de34e785f5b62fde3dafdd9bc512d7798dc5ddd9480845607c57b3
- MD5 5c20e7c4256d6ce2ebaef2cb1b95900a
- SHA1 b2034f1336b39693d8b21350db6382cae3576dc0
- SHA512 9a4cb6249e6bd6a0fe1ab1069f0c2f6c2e70550a0ee028f1f42f5dbdc9154571e3ed914791944cf69c8cd14925f4cda7017d41dd0e631488fe5bd0c07bd775ba
- SSDEEP 384:oNXpRXXIXphNUXpUXpYCyxM7+aIw/f5tLOau+gaeF4MP:oNXPXIXNUXuXKCySQw35tLlu+Fe2M
- TLSH T197F282611A217C44FC7BD9B849B6F9790128BD77875D62491EE4BF1B3933EC2A42280F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/Efx.crl
- SHA256 28ce81bbfb892891f4f07645f4e6a7feca4d7b4ccca7da6bad502f0c87a3acff
- MD5 8d7e524ab56620f02b7a8387b89d4ca6
- SHA1 506e1ab94741e406f402d594173818ca3bc093d2
- SHA512 0012f1468d8027a9e7b65190c3c27cefce1305feb096e0d2946166e2162a01487a5aeca983187e4f13646b40f2a9c37bfc73a2e8a50c216fba4a30d37dda7a0a
- SSDEEP 24:e9GSaOsVz2DJyAeMAuwEZhNtAltmx3xTHPNW1k1aFB:KaBhIJleMAqltImhfYUa
- TLSH T1E342574593F8157DF0FB6B7429B383129629FD74CAB5E25E0A80111E3C61B10AE70F32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
TargetDir/Help/EAX.chm
- SHA256 7ffbe1def124ab841ed44aad6e233b447f9fb3c7fe4e358eedc5db29a770c2a6
- MD5 4504e950cc4736ca1c66c19619f5d211
- SHA1 dfa689380f32e46c6c72127cac09d5963a96d58c
- SHA512 ddc3ca40b74ea9834a1d11072b4f04c4a286693044f0a15791a1490221879971bbe010824895a284e3d3ac147d5166ee61547df28550d9abafdbd868a9d93c8d
- SSDEEP 1536:zhyt0eWjPDmFf0qHP/kTZdzRuHyfuchDwPOLALn/6YGE0e7Y/c4gM6drqb:dytWPDkfvHkNZRuHyf5cz/nGK0/c/gb
- TLSH T18B9312D3399B8471E5CDBA3CCBD951FCF02F9A09B4613898C081592D09AA3E636378C6
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/Help/EAX.ini
- SHA256 d6d2e6d0530ab2bd72d1401fed70ae1e627582397916f1f6b3e1839e8d16c1de
- MD5 b6ca7126d04c960f869d1c822ff093b9
- SHA1 d22f2713eb0d0ff452f0e6fe3fc7988bbab0a769
- SHA512 c03ba3f90d43de1ef079af7492f7978e262ae39bb5fc38446bf12b80e75eb755fc9d34eafbb282dd5b414fb82ccb4f58ef8c11dd213084b7d7563618f52fec3d
- TLSH T13401999647F3DD8821AEC0E4B78A2AE72134638C0DCB8B51933EF93C234366CC46260D
- MD5 SHA1 SHA512 TLSH
TargetDir/Karaoke.crl
- SHA256 7db2a07386419eb3b385d699ca3b3e9d438124a4c6910a28c208684879ee515f
- MD5 44c1cf2758fa0bdaa23d9f924dec1a56
- SHA1 20ab2853c3d98d68fa8a8b58d5dcba68254dfac2
- SHA512 accfffdaa43544e79fe0b9c6743b70663199eed13f3a20982a79776227cb362ac67c3eb53b35000bb64692dc9480a49601537fe109b8bde2cc8e59e774f16353
- SSDEEP 48:C+cXRU1uAKMlpoa16VLDgJ29n09pH1Cd7ylXuaBasxylvHu:IuToakg49g1Ku+aBag
- TLSH T19A424442A3F91629F5F77BB029B606115A7AFD62EE76C64E0680010E5DB1F80DE71B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/TimeScal.crl
- SHA256 4deb96714b1900ea79bbd4e8af7109d56df19a0b8de60d9828984f1e4eefa745
- MD5 c3ac52a0024fa906b0832206658ade20
- SHA1 7555c24fe56db3badf2e2b4a382bef586e81ea97
- SHA512 2e8c269457ac7f71159f383cc60fcc9b6c9d4aa6e8feab02c2aa4052d913cff7d26f1da18b8772f95d4c9dd0b7dc49533600ef94c074db2fbb3cb394c1d1c753
- SSDEEP 24:e9GSayVfNabUcPlUXwEZhNhbeuNt7gXIyF3WPNR7pt0g8zceb7LWFeb331z:KayVNKUcPlUDldf7Xy9qR7WX35
- TLSH T16E420191A3FC656DF4F73B702AB203526A7AFC61DEB2D65D0A40211A6C71A409860B32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
blue driver/Frn.cab
- SHA256 93321e54b8c1ce86c45af118a4e55fb5106b8e628ea10e4c86b02de03dfd6108
- MD5 ec4e97b8510d9ebec356c9d347822b88
- SHA1 c01639d1582b9432ff6fbbc56728204df989f560
- SHA512 6f8093611bc45c05314859418b0b23d5794ab42d8412d0ef1abf9d1eb5950ab03a496bf87b9e819c1e64c3db6270ca0800a84ac5bac117280bd6b177745096f0
- SSDEEP 3072:sCBFqqbH2q01sEJQfcaqvgCgonEnfyNyN1ILx92WQWAOo81STCk:pFqkH23qEGfsIunufy92XXOP1ECk
- TLSH T123E312478950536FE7C6DBA858ECB238C623B2386A75606E526027D973FC05F6C91C8F
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/AudClean.crl
- SHA256 b9d730e495f7cefc7e67b5499b268002cfa966eb176b8669fd5cde7ceef30ce3
- MD5 d15abef8c8175f63508332627654e500
- SHA1 091da821e67d2314d7f328d64e1e0b1bf1d06279
- SHA512 c616165a9b98c36efe4f3826affa840d1cc4e033a93200a516d468609e6d7c23774e661a871d27de8e6999c21e893827bbff41da37c09291f5323f12f53ef7e9
- SSDEEP 48:C6DfiPltPIvCiP/3bLHl0ouTUJroRmp+1E8Q82X3hlMVb0qg:RDfGI3XyTyrovshkbq
- TLSH T1F642AE595AA75417F1A26E34DBF602C11FBEBC57B9F7A13FCF40004918A1A5888E0FB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/CMSS.crl
- SHA256 e543dff274901ad8f55e846e30fafec8f72693e6710c52975119b667b0e28654
- MD5 048cf547eb4bdabdb762d3e86e68bfdf
- SHA1 9a56c63015ab210847e63f1f4a05badbf21b1033
- SHA512 74a9ae820e04c05a8c4b76d18a1e5cf0f0305473485a63a11fd42a4159828445c1a754cdff940f7f3ff83afcfc511f65f371a0db6ac0194996df9249e319f289
- SSDEEP 96:GbmKGA2bGjIX212Yy0NgNMyObpMLoKfP:8mKG3Sjd0EuZVP
- TLSH T14142601897EB0556F2B62E70AAB511D15EBF7C53BCB7E52FCB4000491CA1E48C9A0FB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/CTAbout.dll
- IMPHASH 4d48d584be4ab04e74be0a000e2c11a2
- SHA256 99c1cbde3b0550d2892dd614f3102577e51e8bc239d05ad555cb3734bf3d6bcd
- MD5 36021eb2e733cadfb2713ec07f2ccb14
- SHA1 37449097cec77b4338bb8cc656b80cc42b927968
- SHA512 efb700a41009ac163f92a095dcac6c203c63e1e3be746c6182505fa50ed1277da0ec273f375d355900e39154d2bb94cc70b65fb98c8e8981dd3ba61b5ebb7abc
- SSDEEP 6144:6uYkY6SsSY/n0YYYYPYYYYYfYYYHYYYYYHYYYYYYYYYVYYYYYYYYYYYgDYYYYYYv:ukvz4c
- TLSH T178446F32F1231E57D30C163681297988910D6C55BA10F4BE491BBFE9C3FA7C06DAA79E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23560
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleHandleA
lstrlenA
HeapAlloc
TlsSetValue
TlsAlloc
GetCurrentThreadId
CloseHandle
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetProcAddress
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
InterlockedIncrement
InterlockedDecrement
SetFilePointer
GetStringTypeW
GetStringTypeA
IsBadWritePtr
HeapReAlloc
VirtualAlloc
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetFileType
GetStdHandle
WriteFile
TlsFree
SetLastError
TlsGetValue
GetLastError
TerminateProcess
GetCurrentProcess
SetHandleCount
VirtualFree
GetEnvironmentStringsW
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
user32
LoadBitmapA
InvalidateRect
IsWindow
SendMessageTimeoutA
DialogBoxParamA
ShowWindow
CreateDialogParamA
LoadCursorA
ReleaseDC
GetWindowDC
LoadStringA
wsprintfA
GetWindowRect
GetCursorPos
GetDC
DrawTextA
SetCursor
ReleaseCapture
SendMessageA
SetCapture
EndDialog
SetTimer
SetWindowPos
GetSystemMetrics
FillRect
gdi32
CreateFontA
GetTextExtentPoint32A
CreateCompatibleDC
SetBkMode
SetBkColor
GetMapMode
SetMapMode
CreateBitmap
MoveToEx
LineTo
GetDeviceCaps
TextOutA
SetTextColor
DeleteObject
CreateCompatibleBitmap
CreateSolidBrush
CreatePen
Rectangle
GetObjectA
DeleteDC
BitBlt
SelectObject
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
shell32
ShellExecuteA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
CTAboutBoxDefaultEx
CTCreateAboutBoxEx
CTUpdateTextEx
Name
.text
Size
44KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
180KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=11, version=8047,
count=21, id=14, version=7299,
count=80, id=10, version=8047,
count=13, id=25, version=9210,
count=128, id=1, productName=Unmarked objects,
count=6, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
TargetDir/EAXCon.crl
- SHA256 2299aa02f4b3c901c0dc757ad4bef25676ea96e2f6ad819cc3b30022b5655a16
- MD5 b7161f351e0e710844d349ace80863a2
- SHA1 68956f0d841e273e4fd6b5b072a6b9365caa6864
- SHA512 2729e0cafbba496c966a95c6b79600ac79f12245699cf72afd168d4d6f034b1a65e804080ca1ae3628713c60030c53d48abcc5c3a0a5774bbb850d089ec36f5f
- SSDEEP 384:mXpRXXIXphNUXpUXpYCyxM7+aIw/f5tLOau+gaeF4M7y:mXPXIXNUXuXKCySQw35tLlu+Fe2Mu
- TLSH T137F284611A217C44FC7B89B849B7F9B90228BD77975D61491EE4BF1B3533EC2A42280F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/Efx.crl
- SHA256 d099aa1274f01cf5ed9e8c9401fef474e19bb532c778e3883df93626ef675f76
- MD5 c4d7f03946061b1f6c48d4164009389a
- SHA1 4fd9cefe2e16dcf54f2bc8275ba3725b30aba533
- SHA512 c730543daf0ab160a14c9236f848a0438d45c039d172659310d1415289c70e9d9e0a9f9dc1b33aef1533feea59dd16fdc23e91b79fbaa2cf59947fb8fd374ef1
- SSDEEP 24:e9GSarvzkH5DIDJyAAMAuwEZhNtwKx3xTHPNWW:KarL85uJlAMAqltwKhfX
- TLSH T16A429E4D5AA7142BF0A61E30D7E242C15FFDAC13B9E3B27FCF40111928A061859E0EF1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
TargetDir/Karaoke.crl
- SHA256 65370d168fa0a30d48ee09b1ee198f6cef58ff30a5a82f465ef19468d009e7ec
- MD5 7e1312c6684ae4207c3a11f225bd122a
- SHA1 d86c8dd02c023b00f940fbe8fb320fde439e1ed5
- SHA512 fb277fc29ca2c08200fa4f85797d9165cf2e5aa00be0811655fe21e321819942363897fa94ea556d6273093666f2b538d860b842eca7eeb7819ad14c6b1b7e5e
- SSDEEP 48:C7icWmzQWQHVDpjrgg5j75K5N+YoaqfjB5ULOgMMR36XRC1uAKMlpoa16VLD:yRWS5Q1DHj75K5AfjfUS1AToak
- TLSH T1BE4252089BE71556F1B22F70AAF501D50FBEBC53B9B3E12FCB4000495CA1A4889A5FB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAX.bmp
- SHA256 9cf3442416c781f7045453c2edc6672be2f017e194a8eeef8427202a7eec96aa
- MD5 d17684c36d267aeb85d702ae2b6ca49a
- SHA1 dbd26ab75201e63e2ad228731069fb66fc542168
- SHA512 fe3206362f47cfc2e1dc7ecddc3830dd62ba57b1eac86016c565661388765d8f113b1bf8144279fcb58e932e98dd972ea21dee44e8605c3c685a9a6fdb7a11f0
- SSDEEP 96:OQRd1dyZE+xXGDGNqvGcJzO8QgO4BPGw8ycLNTV4N43:OQ31dyZE+xXGDPvGcJzO8qNycLENQ
- TLSH T127725AE1B976A994C5D593B07BA38144601B0ED0C2CE87AD794B3F5A73B7311791CB83
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAXHD.bmp
- SHA256 5ec314d26d14625848a00df40b893101e287c41c78775528d68475b43da29ba0
- MD5 bf353842c6951fcf72b373e31d8802bb
- SHA1 97a8e78d52795bcb1dfbbc765363ba9036d4677d
- SHA512 e5ae10d614fb013d73407307bf63973ffe4036d003a96410c5e68c3946085a3d5053d51aeff94fade41c35cdf41dff169ba5f736abb4b991b3d5aeb481129109
- SSDEEP 192:O4U7rjHlRHkH+s6BJX7x3p2PbOCtVyjtN:OL7flRHU+s6/Jp2PbOCtVyxN
- TLSH T17A72AFE2E135AA54C4D803B17BA78448A14B9ED6C6EC97AC780B3E4A33B7351754CBD3
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/TimeScal.crl
- SHA256 5a26b5048d07b3e51d824dc6f58969dee01736dc01f82bd8c180da9fc547ec2e
- MD5 ce269e9e3aa0456886f02c721b3a801d
- SHA1 8c921b4c539d0a2a2e3c3a59241fb87aca254914
- SHA512 7cb1f16108cd25af2d43c57506d4deb67b824300a7adee0feedde0678c7f14a02b2ba0af0ccaa7be34093144c6b852092cd9855941994774e7eaadc9cfb13588
- SSDEEP 48:KaZetPIvCMP43bwNWRCcPlUDld9fXy9qR7:5ZMB3IWRMDnVXt7
- TLSH T133420C5D5AAB141BF0A22E34D7E602C11FFDAC57B9E3B27FCF40110918E0A1884E0EB1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
TargetDir/help/EAX.chm
- SHA256 f21f75df318ba4a4581d9de6560759a4c4e7ad4372000f10e8aaed3db0a368a2
- MD5 d4458913edd1efb928c748a70c11438a
- SHA1 bd6299d1a3929d328c5ec8bfe48f085d9e7b032e
- SHA512 cff3415a5119d505c25310b0d7588ae8ae74a0d9d6df3170d91c717668517f3896d19c6269e89e4ea9f51920f960febdcfde6b2dbc9b7a1490752f6c28a1a7eb
- SSDEEP 1536:1O4IyhXNJxuaILhfibv6yLX+3bO+ro7jj2UtI:A4Iy1ILx4S6B+ro7X2eI
- TLSH T1D063F1C43FF52B6ACD998D7A299FE7DD31CA2AA4060570852267AAFC37CC74D1416CC1
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/help/EAX.ini
- SHA256 023935580625691039044bf6072831fcfac71324fa80c26cfe1c5c43216b253a
- MD5 fe150b4a4335ddd854cb774470788a40
- SHA1 18d3cf3b2c9d5bcdc6a25b9d85be01e525bff497
- SHA512 d8bafa343e4b8c2bd615aaadabfada0a77ecfb45f0a94b64f00854ca6758bbd8c4ef686206a9c4d8a97f325e40b2f6aaca6438159baf9bf4b6860793599cb349
- TLSH T18B01B84287D7E948608E81E9768A82C76A28830C48978645D7BDBC383342B6CD537248
- MD5 SHA1 SHA512 TLSH
blue driver/Ger.cab
- SHA256 9565deb27b34e98bbe913de8e052f3ff8a7562cd372eb115706574aa8a56cede
- MD5 b3472bd4553e9f283ff846a685848df4
- SHA1 67d335a0b054f1a918e9e716a23f33c573115d2a
- SHA512 7ea212a14bd67713f900971c2f28370bd7af24dedd87761e01cf50d66cf31e4cc4fb6a2e0cfe60a6271d0332f0e8c69c92a5941072562d288b0facbdc1918c27
- SSDEEP 3072:GaFqqbH2qY1sI/JQfcaqvgCgSvPwcga/QFPYajgIA7+wVAs3zsk/Ni9dxAzRiCS:1FqkH23qI/GfsIiPBi70IAaCAEsqNqxZ
- TLSH T186E312470AC58587AB95AA3C5FD56D89E292D1F301F81253130102BFB3F911D5E2ABBF
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/AudClean.crl
- SHA256 c53ca861980240f6603181873471a426e5ed5bf56176210eb8403fbb849f4181
- MD5 85f70689d40a10ff6e55b745bb7b2e1f
- SHA1 ad26e31b60d815f115db0079e63aeeeed15a1d64
- SHA512 fa3d11a700b10f3e402c652efb0b04b8d07c99f41ab95aaf84d9d7c6f81ded2d13798a6c810565d3ad6b002513f8a7f8319653b7bdfa53fd9761e47fa9395081
- SSDEEP 48:CyiUQ10MQ6sQ10zOUn9mw+0pMpFB1PqD82X3hlNqmb0qg:pSv2S0zcV0Cp1Pqth3qmbq
- TLSH T1F242BE195AE7591BF5A22E34EBF202C55FFEBC57B5A3A57FCF40014818A054885E0FB1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/CMSS.crl
- SHA256 0ca4791392b2aabc64604d15cb48680cfd8f40e8be4de4852d9190d3e5b6e39a
- MD5 cf53c7bd660f436b85732d2037b09ec2
- SHA1 ce9aa0a54b7b101773beaf1b83d2f58931e3eb28
- SHA512 ed15c6869098b7e934662dcfe2c8730822363798c98cc2b28e52bd3245633a49211293afdb138756168b61a60f41ad8cf4f9427f3370d719f6526a7cee209549
- SSDEEP 96:79YfjnnRXffCyUJVVYu+Cd4KMKaccB9pMLqTKfP:xWxX3UJVVLzmKwcd+GP
- TLSH T1B642C5199BE7011AF1F61F7096F601D41BBEBCA7B9B7A56FCB40004D19B1A0C44A0FB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/CTAbout.dll
- IMPHASH 4d48d584be4ab04e74be0a000e2c11a2
- SHA256 6506bf79fd6f1089ba09a3dde42eac7e96c9de65808d48aa15ff1bc235f3b7be
- MD5 9a2af094dc2e1bfd0f57d1daa2e85c3b
- SHA1 f8cc7392aadabfa5049172dcfd7eae1e16438918
- SHA512 152fbf189a73453ce1318533dc0106a08125d25426251cc2c61b9de2418710193af6475b843dc81b1c3619e4a82772efc39731f823b79d10438c341c12b90ddd
- SSDEEP 6144:SuYkY6S0SY/n0YYYYPYYYYYfYYYHYYYYYHYYYYYYYYYVYYYYYYYYYYYgDYYYYYYv:2kv74c
- TLSH T129446F32F1231E57D30C163681297988910D6C55BA10F4BE491BBFE9C3FA7C06DAA79E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23560
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleHandleA
lstrlenA
HeapAlloc
TlsSetValue
TlsAlloc
GetCurrentThreadId
CloseHandle
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetProcAddress
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
InterlockedIncrement
InterlockedDecrement
SetFilePointer
GetStringTypeW
GetStringTypeA
IsBadWritePtr
HeapReAlloc
VirtualAlloc
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetFileType
GetStdHandle
WriteFile
TlsFree
SetLastError
TlsGetValue
GetLastError
TerminateProcess
GetCurrentProcess
SetHandleCount
VirtualFree
GetEnvironmentStringsW
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
user32
LoadBitmapA
InvalidateRect
IsWindow
SendMessageTimeoutA
DialogBoxParamA
ShowWindow
CreateDialogParamA
LoadCursorA
ReleaseDC
GetWindowDC
LoadStringA
wsprintfA
GetWindowRect
GetCursorPos
GetDC
DrawTextA
SetCursor
ReleaseCapture
SendMessageA
SetCapture
EndDialog
SetTimer
SetWindowPos
GetSystemMetrics
FillRect
gdi32
CreateFontA
GetTextExtentPoint32A
CreateCompatibleDC
SetBkMode
SetBkColor
GetMapMode
SetMapMode
CreateBitmap
MoveToEx
LineTo
GetDeviceCaps
TextOutA
SetTextColor
DeleteObject
CreateCompatibleBitmap
CreateSolidBrush
CreatePen
Rectangle
GetObjectA
DeleteDC
BitBlt
SelectObject
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
shell32
ShellExecuteA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
CTAboutBoxDefaultEx
CTCreateAboutBoxEx
CTUpdateTextEx
Name
.text
Size
44KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
180KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=11, version=8047,
count=21, id=14, version=7299,
count=80, id=10, version=8047,
count=13, id=25, version=9210,
count=128, id=1, productName=Unmarked objects,
count=6, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
TargetDir/EAXCon.crl
- SHA256 3d707ec1ecf7e06bae8da924eb6ac5e169b8450fc4453c7834112bc5bf190b62
- MD5 008e9e864d0d6a3a9108bf941d1863e0
- SHA1 d7e6f9791d308419f85194d0d0e774079ff10c99
- SHA512 5b4aaf36e15c57a3270b52ba3ffb3da0c4264e890b5ff97fcb932e2557d3f5fc4cbca94c4c5a419edf06cb77015dd471b8c224600f5d73abdbda22dfec696656
- SSDEEP 384:kXpRXXIXphNUXpUXpYCyxM7+aIw/f5tLOau+gaeF4MuBh:kXPXIXNUXuXKCySQw35tLlu+Fe2MMh
- TLSH T1A2F293611A217C44FC7BC9B849B7F9B90168BD37975E61491EE4BF1B3533AC2A42280F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/Efx.crl
- SHA256 b83f1f4cbdd3c8400f8318df3ce28b4d34389313f8192f74848fc5e9b0e191b3
- MD5 0de0f314bb06952c25253cf06b516799
- SHA1 1661acdbb2fa3e0ca81b38834e93a272f3c12086
- SHA512 f8771eaaa43e5162dbe6a8ddeea23d566db7e7cbe2b03780b0ec42ca44314957d2043d0608fe8e24ce837360ad71eec5060ff0160e54a6f31c1d6dc11b72a4ab
- SSDEEP 24:e9GSarjHRkzow1YqDMAuwEZhNt9pwjlx3xTHPNWd:KarTRkzorqDMAqltkZhf0
- TLSH T1FD429F4D5AA7112BF0A65E7097E242D15FBDAD63B9E3B27FCF40111928A060859E0EF1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
TargetDir/Karaoke.crl
- SHA256 ed01c324a902d7454036a74a31b05942ce99eb3f178e81f575b720b6825f7533
- MD5 dd067d0ebcda26df102be4e09c734798
- SHA1 580b63c4a05936ccc9df2f332e57717b25e2e7d2
- SHA512 ac3601dea41fe0897ceec934d71927a8079160ec4e94a870862b52f4c4159c36dce0fa82eb74777bdc6c586add40d9f33aa6ad3cb5493e1eb17e85289e28e729
- SSDEEP 48:CG6jisuejJyRS6E3CYkjKtJeYVDgx6ypIwrvbXXRq11uAKMlpoa16VLD:B8AesNjABWTqrToak
- TLSH T1634270595BE7151BF1B25F70AAF601C11FBEBC63B9B3A12FCF40114819B164889A1FB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAX.bmp
- SHA256 447ac70e26372f495cee9d557b0f06e839235af822d75b011427641fb955194b
- MD5 a79f5087b1b6cf86fc3e9de9ce57e6d6
- SHA1 5867a488ce708017639c4726682e4a5bf0f2f564
- SHA512 26cba3194bb99afcee1ddbe604ab53a41eddb661b9d80b5e4e15efc54a22cc50197bc68a0ad065779e6b83e8d20158f1e9340bf1efb2ba7797e949cb4cdccb87
- SSDEEP 96:OQRd1dyZbPXeDGB4c2O8og2W4BPGw48LNTV4N43:OQ31dyZbPXeDLc2O8fT8LENQ
- TLSH T1B17248E1B97AA994D5D553B07BA38054600B0EE0C2CE87AD794B3F9A33B7711381CB93
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/Theme/Default/EAX_Spr_AppTitle_EAXHD.bmp
- SHA256 7790b7b1d7a02a77028c8868811b8064fb7cdac74a68af18bcd11d60f424792d
- MD5 a0cadcb0eaabe64798bc192b6f585da0
- SHA1 f3a8c02bce11728d1b81324a74d163937daffd30
- SHA512 270556b216f97d86dea986dd4309a61f2cd7be343e9a7add683df3412bd0d29a48b2fa0266608ba9214e841a9fa666268159b6a805b67257ca47be9710df6285
- SSDEEP 96:O4UfBlrjHlRHk1FFW6bXl8cp2Yf6xrjD/Chuawyj+wN3:O4U7rjHlRHkHFW6bycp2YuD/CwPyjtN
- TLSH T17E728DE2B139A954C5D803B1BBA78409A14B8ED6C6EC979C784B7E4A33B7340751CBD3
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/TimeScal.crl
- SHA256 e411f16492d718430e22adaca949e79709814ab69b3be1e9ee6880c40fccfea6
- MD5 5a994b9025044c3c8dd81299b3fbaa0b
- SHA1 e68911dcf71dec6dcf173e191b8bee1095e6ca8b
- SHA512 b13b2920fb7dca5e1a342d1bc83526e43efbaf380c30e2dba7ed0526ab26b5bca67a96ef691b7f3d88a7d3c46fca318032f0547c3f7b2ba30bfdc535971965c8
- SSDEEP 48:Ka26Q6Q0GQcB6tNSLq1cPlUDl8QBqIXy9qR7:52660GbUGqFDGeqIXt7
- TLSH T1FD420D1D5AA7191BF0A21E34E7E202C55FFEAC57B9E3B57FCF40110928E064845E0EB1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
TargetDir/help/EAX.chm
- SHA256 570edb4fae0eddd3aa2d04185221e7191edecb0c8ca8fff76ca8907fd9ca00a8
- MD5 c503ca2e0a15610c30b52f8fbf72d80c
- SHA1 7b708035e17feaab2efd5e7335764155e3e44750
- SHA512 369998af9e2ba12d9781a1748544005d37c3470568f134239d635ba4ed268f9a250a3e137ec5163e4d25301b8f92a875d3b6ae751892c24df2752c9b9e1c5df9
- SSDEEP 1536:qpjDLD9+rFPa//a6P2aaxIjloRrAZCMR6bg:aHLJsFPYajxI6M5Ec
- TLSH T12463F1B30B994876E1F80A30B7D7B14FF024169185E52622122F19EE2BF5FA4D914CFB
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/help/EAX.ini
- SHA256 673530ed1ce80a331980be6e43b4ac7d4247b0238b394f76c2dbdd5997315e76
- MD5 65cd5f10cf2d42cc9c4444c2d080ef81
- SHA1 e87299979cd44a4cf87776649e970a04bf34f0c9
- SHA512 71068de7c518e5c1e80ae074884d30a29ab1d85698862fa56af90713646c0856fb87a895169a55873f81d99360000140e23946617cccca94a38c0afc0a60ebe8
- TLSH T10301682A4717DA28A14FC0F47B4BEBDBE23433A549974616873DF83D33426BCC626605
- MD5 SHA1 SHA512 TLSH
blue driver/Ita.cab
- SHA256 f6af367dbea303bd0d86afa1ea9b646cff233c63b894ff1d605b9ec83cb09afd
- MD5 ca89691e02b37c3eedbfb44e1c1887c0
- SHA1 76b116214405cea69b217304ccc5a018590229e1
- SHA512 cf3a682b0ac34bb41cd4accb65ce0d2fd047607f3204977df0ff0aaf7a5a53cb7106e455f70b0866b27ba6ca53b7d786fdb044fbe23a0ff4e2e767cf0b5f26da
- SSDEEP 3072:ofTFqqbH2qs1suo0JQfcaqvgCg+1faNZSjoFADBCCmIZNtXC:yFqkH2rquo0GfsItZ0o+B4IDA
- TLSH T1CFD3125F0984586BA9633ED862987AD89347A7AA3EFD02A163E43751337C00E0D7D74F
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/AudClean.crl
- SHA256 fdfcf47ccb5c91aeb2d1e691d0d25c6089b414c767baa62942704d236fd7f29b
- MD5 6acd521be55dcaa74bac36931630a490
- SHA1 94274015501e5109ed34b73c1069c23381bb84ba
- SHA512 5c90b99bcb14030ab048340384736bdd5fb2c20d7b36b9b36e6fd530167a6d739f9398b60f081a95c25c8bcf1706af4ee2fbff0b8b4dbf7b760988a47fc2b1fc
- SSDEEP 48:CYZIqHqlZWbncFhVRuMhlen15RO82X3hlnXxab0qg:XzwVYb15RGhWbq
- TLSH T11E42A7595AAB551BF0A22E34D6E102C55FFEBC53B9A7B13FCF40004918A194888E0FB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/CMSS.crl
- SHA256 66b8e780eb122362e932f3c0cb6152afb20729dc70c2d68c4d16947f65603aa0
- MD5 9037189a152ecd66c82e1601a147fd13
- SHA1 a69a1c466ef64ce453a8197e2c68bc0e7b2e332e
- SHA512 e066055855c105ad50fa770a0b30024e0c1d690383907a6d90d2f9a5b51bdebfce5b1cb69efd6c8e313febacaa6f8f8f153308620104a50913656ed83fb626c7
- SSDEEP 48:CFyet0Y3sF4eFQNSPeCsTP8nblKkJc4b9et1pMLO84pl8f7Kg:RiN6QInblfJjApMLGKfP
- TLSH T108428314A7FB0106F1F72E30AAB516D44EBFBD53B8B7E16FCB40004919A195889A0FB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/CTAbout.DLL
- IMPHASH 4d48d584be4ab04e74be0a000e2c11a2
- SHA256 24030e1ce21967c8bba0570bafc0fc6082f9399eb1caa974f11801b484cbffe1
- MD5 7a593f8cbae0b504dffeaf6b86ec642c
- SHA1 ef9d5a611a474342d0221d12b43c2a4325e6408f
- SHA512 b12d87a02c230337cc637c5b5afcce99bc4a4ea7c071bdb53465efada03a6f7dfa2975cca6ee2357d948a60a0df57f8742102e963007ae81f8fc855eb12e5e66
- SSDEEP 6144:auYkY6SMSY/n0YYYYPYYYYYfYYYHYYYYYHYYYYYYYYYVYYYYYYYYYYYgDYYYYYYv:OkvT4c
- TLSH T1B2446F32F1231E57D30C163681297988910D6C55BA10F4BE491BBFE9C3FA7C06DAA79E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23560
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleHandleA
lstrlenA
HeapAlloc
TlsSetValue
TlsAlloc
GetCurrentThreadId
CloseHandle
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetProcAddress
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
InterlockedIncrement
InterlockedDecrement
SetFilePointer
GetStringTypeW
GetStringTypeA
IsBadWritePtr
HeapReAlloc
VirtualAlloc
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetFileType
GetStdHandle
WriteFile
TlsFree
SetLastError
TlsGetValue
GetLastError
TerminateProcess
GetCurrentProcess
SetHandleCount
VirtualFree
GetEnvironmentStringsW
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
user32
LoadBitmapA
InvalidateRect
IsWindow
SendMessageTimeoutA
DialogBoxParamA
ShowWindow
CreateDialogParamA
LoadCursorA
ReleaseDC
GetWindowDC
LoadStringA
wsprintfA
GetWindowRect
GetCursorPos
GetDC
DrawTextA
SetCursor
ReleaseCapture
SendMessageA
SetCapture
EndDialog
SetTimer
SetWindowPos
GetSystemMetrics
FillRect
gdi32
CreateFontA
GetTextExtentPoint32A
CreateCompatibleDC
SetBkMode
SetBkColor
GetMapMode
SetMapMode
CreateBitmap
MoveToEx
LineTo
GetDeviceCaps
TextOutA
SetTextColor
DeleteObject
CreateCompatibleBitmap
CreateSolidBrush
CreatePen
Rectangle
GetObjectA
DeleteDC
BitBlt
SelectObject
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
shell32
ShellExecuteA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
CTAboutBoxDefaultEx
CTCreateAboutBoxEx
CTUpdateTextEx
Name
.text
Size
44KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
180KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=11, version=8047,
count=21, id=14, version=7299,
count=80, id=10, version=8047,
count=13, id=25, version=9210,
count=128, id=1, productName=Unmarked objects,
count=6, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
TargetDir/EAXCon.crl
- SHA256 cec1835a10dd24b3564d44b3e51760cddeb957f903c9926d8f0891efce0d3dd9
- MD5 35ce2330f648ee301756e395daeca395
- SHA1 8d66dadb868d4f7711dfab4dd241dc8c53ab9168
- SHA512 bccb187e55888c78671bed0b1324eee344562ee9f6a7865ef64a1bf425ad912fc457933ea7116e0196dd4c4ad32944989edad1b1219f86ed15a0a4f5f843164b
- SSDEEP 384:uXpRXXIXphNUXpUXpYCyxM7+aIw/f5tLOau+gaeF4MDM:uXPXIXNUXuXKCySQw35tLlu+Fe2MA
- TLSH T192F284611A217C44FC7B89B849B7F9B90168BD77935E61491EE4BF1B3533AC2A42280F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/Efx.crl
- SHA256 aca06dcb7f135ce64fd5bee3140d22c20ec2e5bc27def8bbb51c05e63024c813
- MD5 4590fa26a4d8c99462ba93d0764920ac
- SHA1 bb392e01dcd1c35387076b1093059d46e733309c
- SHA512 0841019d6d9769f08be1fa80729c24c8c1451c7052c3a7b27b702b3b60de2653f9a49eecb84bb8eee7fa819015a68da2f7c010258dd2479ddae58dccd60e4675
- SSDEEP 24:e9GSarzeBDQno+0wL+MAuwEZhNtXOD6Wdx3xTHPNWq:Kary+no+r+MAqltexdhf/
- TLSH T1A9429E4D9AA7142BF0A65E30D7E242C15FFDAD27B9E3B27FCF40111928A061859E0EF1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
TargetDir/Karaoke.crl
- SHA256 ae39570558285c40aea85ceff55b599aa8e22d17feecc5f8ec560feba7000fb8
- MD5 6594b3536a3a04fae9e500f9cbf938df
- SHA1 faf6fbc720d80fa82cc6c617c890489105fa6461
- SHA512 582f8388f5e44a975cec0647fbfc0753c67a9742a8151b33bf16d54938fba8f20b59b885108d756819037de3b067e34b2a42e215f021d90c790a9aa44cc7a164
- SSDEEP 48:C+i5mIlwhE5uOZxaJOnQOnEn+e6YhMvh4QeVZXR01uAKMlpoa16VLD:Xkmp2uGxaJOnQOns+d8M5COToak
- TLSH T12D424A099BFB1516F5B35E70A6B606C50FBDBD53B9B7E12FCB40000958B1A4889A1FB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
TargetDir/TimeScal.crl
- SHA256 50c4e165e689e464e15d106e1f169b9b41c82e00a32fcae07f362ff0fdc8e131
- MD5 785550932d7abae0a236140c631e1af0
- SHA1 8dd92043390eaec0e87ce4587a56350b9a9f270f
- SHA512 065e5a1e62b9c35edc1e4710603f6882579f371e0ac148c888ab4d329a02052b8fd53ea184f6c1b80b2c18861e2a408df9eb2d0dbf3a6f5018a9da78c8fa4741
- SSDEEP 48:KawbNqQqlbaZCcF9NW0cPlUDljsxsXy9qR7:5+r6KW2DvXt7
- TLSH T170420B5D5AAB5417F0A22E34D7E202C15FFDAD63B9E7B13FCF40110928E150859E0EB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
TargetDir/help/EAX.chm
- SHA256 252b268b3d5319c3ce038c5c7d65db9cc6e186d83e6c27abc1fd5731a6b18b61
- MD5 4b69c7f8d4b649f0c6a35731671ed7d0
- SHA1 77d26597bd5c5fdfff63a3b9d41752250009b001
- SHA512 dc3aa287751000d16acf03d514168f7bf2a22a3e18cbc080ce90aa0560df4fb2e2cbfd375a42115555d23d39998d9b06538cf06661a62aa071ed5b6b5ebd5d94
- SSDEEP 1536:JHP4/xZj9oFAMWBChEDATdHBgibDs/eukZFqQUzAt:RPeDZoFADBC+UTdFhuiMQw8
- TLSH T1F963025E8309DC36E3F83AB49EE9C40C77E628AC7D656809346C7B1D91E4318234D6E3
- MD5 SHA1 SHA512 SSDEEP TLSH
TargetDir/help/EAX.ini
- SHA256 267333c5f75155c0abade331433ec820d189a820db2ff9195bfc84b6ef3feb21
- MD5 44e98cb440c0b9a94accefe98271bce8
- SHA1 11c8ed7a00fce7b4f194d358b395bcde42a00d4a
- SHA512 b72e29ceca68d1a51365ff0924fde79924ddea1bb2c734836e6a789b2c253af046205bd1489ca37f513713586f8a2d03881146a5e1f8d179b419786e5fc40d7e
- TLSH T1D8016892AB63D998300F41FE769969D77EB0538819C78B81D77AB83C238775CCA12908
- MD5 SHA1 SHA512 TLSH
blue driver/Jpn.cab
- SHA256 51952056110b2e52f54e7eda33b320f4e8ad5aeff983050f3e42e585945a10bf
- MD5 ab8744e1d941b465a9f1e1765f06c47f
- SHA1 41dee5e509df0f72d2338a40e7ec639353990b0c
- SHA512 71eec1b7101d2524e6d12e84c48ed8bc8c1ac1624e04d14594954b8ddac6fbe4b2842411d1e7ef7afd1dd57bbb86614b59356dcc71ee535615d33868ab29f437
- SSDEEP 3072:7VE4RBwXGkdWkE/j4fM8Yn518/k3uXodLbZSGqmGZ1qYn:XRBwhqL4E80AMuXg5SGqmU1qW
- TLSH T1D9D312377144941DA1A7E479F0FF8655B3F929C97808AE0FDA333354A43BE12D16C26A
- MD5 SHA1 SHA512 SSDEEP TLSH
blue driver/SWUpdate.ini
- SHA256 85262c2043dc3edcc5509e0a1e8e1d9a7ff779681117ec7a90c9bf574a56cc75
- MD5 397afee5375f3baf0df27a7d53d56a73
- SHA1 5fdc80000a7aba5f67c6e99a284d69c0725321d3
- SHA512 c500adbfea28dd9747c059a88cd099c79f8b56eaa23313debabf64919371b55969881946aebf2ba1bee04b00ada1c35c7e51a0bda5966a312ab9ff8b0ff3d2a5
- MD5 SHA1 SHA512
blue driver/Setup.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 23d95d6b997e83d6906738dca41cd864456df313f77c7842bd3482fcfa3cf660
- MD5 65269e41844e7b6ead8aeea23dc48ef5
- SHA1 1fc9d1b4d3b8b04a21d8e52f66787186364e9172
- SHA512 7fef724fbd5191f1bcb0827b63955793b7bcc4af06ccf6adeed8759747bb1124d27aac0868ca249c7666b0f6a603231713443ff6a1cfee039ef43f095cbcce4d
- SSDEEP 1536:CADweQKADMkV9GkSAcRaglZrODtFJ9NXi6iOCcCgP06:CADweVk5eZCJFJ9NXGOCmT
- TLSH T197335C487BD40625D9FFABB9287375060A71F9134813E75E0CD88A9B2F377808E41B9B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect Xworm Payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
51918
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
43KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
blue driver/Setup.ini
- SHA256 effc59f51f23c224ddd4faec35f03d53af776280110b392789897a47b1dff7fa
- MD5 c0c4fa24844532fa380b769143a6dfcd
- SHA1 f6a66c60cb50c786cbad42097b9302a253e24417
- SHA512 dbd6a204e0cf8643054ebb907b0d831e04b0f3cf2943b94231c051d2f4114320c8b8c7f74640e487e576e6a13db51c7c6ca67a1a009bcf28ba394b2edd545ffb
- TLSH T13ED0A9B1EB09A609E8484019B53C6EA0F3913A0A82C6F024E2DA0208A046B649F841BA
- MD5 SHA1 SHA512 TLSH
blue driver/Spn.cab
- SHA256 cad2f56b7b7d1e86a940b9d331150094a79f5f8fc6f9d9f40dea240d0494e441
- MD5 00abcaf057f45264087231ee83c94c8a
- SHA1 f0a3b514ee5e43dacf58887f13555af8e5b143b1
- SHA512 d7e0b2d3b0c6241d409d5b1bf596aac49e611a981705d0d15df9a149ba5138c46d2de9a46969db06aced353d7cd2f9d84145af5b53c2596a351e56ef66a9f375
- SSDEEP 3072:BFqqbH2qC1srSJQfcaqvgCgIE0zSAhw/iyY3hvGnsAyFCoAqTdTwCdDq:BFqkH2ZqOGfsICSsRGDCNRUaq
- TLSH T1E4E312EBEDD187D38E6371327C80332DD717A36A969E52CA1152136213EB127EC58B1E
- MD5 SHA1 SHA512 SSDEEP TLSH
blue driver/Version.ini
- SHA256 87590a0f8351b975827102dba7e3a4e852467b802d258a73943488cbb1df5a1c
- MD5 7b5c18a7a43bcf267bee0b445eb5b9ce
- SHA1 3deaf004a43c45a10a1a2211876ac8af50bfe201
- SHA512 25fc0591d9007a12c7496fd6c92b2e624270256905d2ded8e78064515d35baf1022023f683ca10217071414affc0cd2c08c9d9450974dd43b8251d40a2c9db9d
- TLSH T10AC0126535414334754127404A13D034F6BB27E0971D228CE34CC48B3B5B4098028555
- MD5 SHA1 SHA512 TLSH
blue driver/data1.cab
- SHA256 17ff993147daa0f86875a1b9ae6ab0787d5674ab4d5010824eca2c30e12a33d1
- MD5 811228d3b13880685a339a925687a037
- SHA1 792fe1d7c27be998f67fab52026b264b1ed6d458
- SHA512 13122df91d4a998402eb62d057e5fe47744d86889bd45e85b220696f359c826a66127bad4e98682377aeeb1c2dbc9910a114ab8eb437e0c900ddb228af40c96b
- SSDEEP 24576:YxBihd46MozoIg1HS0oa0nQhmO30bWfcW2YSWfcW2YQWfcW2YNMKSJblUzY:/hBMoztg1HPt0nOcW2YTcW2Y5cW2YaK0
- TLSH T14A6523BC3A66890ECB8C5B37978BC89536B75884924CC3D72613E351EC1D733EA6C51A
- MD5 SHA1 SHA512 SSDEEP TLSH
blue driver/data1.hdr
- SHA256 d0f20c906382c25bbe17c7ce5d6a0f1b3d2a398558e8b9110adcc071d3580c9c
- MD5 4a0b567f98e9f66ab300726c0a9ec4d8
- SHA1 d5acae87e5e1f099e0b85f0f6f9a0c7355f38fa1
- SHA512 2b26b974c12975746cb4dc088c00f78ee148a2b5fbf9751952150c1dd0fd06f49c3b6ff58453619cda970ba0b4cd7a897f3970cf5b008f82280604e5f1263081
- SSDEEP 384:frRaTYTcweJmbuXlj8miY53zYGu1QK2p5q8mHLzUmWX:TIKgmbuXlj8miY53sr1dQ5qXLzDWX
- TLSH T124C25E39AF10A4A2DE0C53B235A7061BE774E19462BBF737655CC1B23CCBB215D2B690
- MD5 SHA1 SHA512 SSDEEP TLSH
blue driver/data2.cab
- SHA256 c893e125d73a4364d9febd3d6f19acce33cb8c80a467b3298428b520c1688db1
- MD5 a57de8fdda0a13ceec299d5760b0faf3
- SHA1 3490fa0cfef786d1f19a176964b0eb067635d1e6
- SHA512 60ee35f7cb49ee748d3c9837b8dd5963f7b02152bdc98346e351437c801a80f2aab77c0fde955e35a34f2ffce3e8eae14c315b96a7b528fb7a7b17c447e4e77f
- SSDEEP 6144:TCSJWJB4w+pRyrvrXAlUd2WKMp5OUhuALFZ6Oz/xVtfPvE11Id04QPuVK6K:eSoJB4wI8rDA7gJD281HMvN4Ror
- TLSH T19B942328CD146039DBBA0B74E31F85F973A86992CD036F3C85465124E48DB4DAFFA94E
- MD5 SHA1 SHA512 SSDEEP TLSH
blue driver/layout.bin
- SHA256 f656adc10bef76839a347c16e144586b6267eeb24e3552400aedc8f0a7694f56
- MD5 388c5971c0be1aa329b7730ebd2d118c
- SHA1 62f4334ebf5d5d14739ba949b8e580be18dc20e0
- SHA512 4a7fa3cc556ad22cd2a9aa4ebdeee531cb7e4e7986a37fb819cb51ea3ce41e1690340abb9570616fea772d1c4ba51934482e8d8af1970e9a1488aea30ff8313d
- TLSH T1C12102B73DDE4F13C0A78536B80A491E7102E94A8359CE06893CA18A023D3997DC5176
- MD5 SHA1 SHA512 TLSH
blue driver/setup.inx
- SHA256 46b578c7dd0c65a882761124dc86048dcbb7f317c060037f9e1b3081ea6af43a
- MD5 c11694b1192ce3fdce899b719f65c22a
- SHA1 5f2fd991af17fc9b58c418fee895595c8383da4a
- SHA512 9f0fe210c7cc0e87d99e950e4699f32de8816f07a1de702cdcdd7feb4a7be1c6906cbf5e883020b4ef208ae7e979e205a14939108082ab63267493457bc62cbc
- SSDEEP 1536:ZzTdW27gDyqaeeKZveW8O8uMA3uyRXxbRlShGR+x8rG0Qiy3XiXIxlPCobatE7hv:rkJeJKZxbRloRn4XRTsWidKKz
- TLSH T1DE14BF30B4816E5BE37D9B3FC85795737360B0649F23AB26619B77386C8512B2F422B1
- MD5 SHA1 SHA512 SSDEEP TLSH