cREATIVE 2.rar
- SHA256 0c23c8042575b6e23b29d4f0521f89d50ac88bda4d157ff87b84f30940438a7f
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cREATIVE 2.rar
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
300 seconds
Behavioral task
behavioral2
Sample
cREATIVE 2.rar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
300 seconds
General
- Target cREATIVE 2.rar
- Size 34.2MB
- Sample260910-q7e5ssx1cs
- SHA256 0c23c8042575b6e23b29d4f0521f89d50ac88bda4d157ff87b84f30940438a7f
- MD5 ebd845cd8d1985a0e6a175d23584d3a5
- SHA1 137fa0a0b169c96dfde39ff41b70ec93a9458902
- SHA512 58dfa73ed0677d29556b6b59fbcc4907d7662ce325ea03939daf78e8ece1d5100b2ee17c5bd14902351b71e2152f50e7933556c8122818fec3e7fecd2cef1bac
- SSDEEP 786432:EM74y0nhhopDZm5ROoD3rg/ZbHFTIWwHuWBcKyrhQ6jGlGdxpmkUK7EYC:EM8yg8TmbOi3rg/Zbl8JHuWZyrSlGdKp
- TLSH T1847733FA25DC94C6BFF2B7F9B12800E250AD21359DA2E8C253C790276F2B72499D7D14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Creative EAX Settings.exe
File Explorer
-
cREATIVE 2.rar.rar 34.2MB
-
Creative EAX Settings.exe.exe 110.6MB
-
VoicemeeterRemote64.dll.dll 188KB
-
a.png.png 72KB
Creative EAX Settings.exe
- IMPHASH de665e653fb1de074ec7c2f2365fba8c
- SHA256 0a0c213ba2ce9edb50f9c9731ea0eedd77d9345f7e35eb026dc6696ac3fed4c2
- MD5 00773f0df0c2311c584bf3a8748bd386
- SHA1 dd3531e9c901b7ccb0cadc67b21635eaf7ea161a
- SHA512 99e0684d4cb5cd84e702ce9a6a9a6d6234c60639053c98fd9a2b7ac22705d6f09916787fb1df379039c60ce02e3cb0abbf83726831d5e0c71a0f2b8f27e3735a
- SSDEEP 786432:7WyzDrTkYgKpn/jzVROH0zX23Gslgeu5RB9X6KPuLDGA+a:7/zDkYgG8Ueuj9X6KPuOBa
- TLSH T167486C1163E86E45E23B8278977786A1D6B5BC525311C2CF0094FD4A3F73BC2BA36366
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
6053472
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\coreclr\windows.x64.Release\Corehost.Static\singlefilehost.pdb
kernel32
ActivateActCtx
FindResourceW
GetWindowsDirectoryW
GetModuleHandleW
LoadLibraryExW
LoadLibraryExA
RtlCaptureContext
WideCharToMultiByte
GetConsoleOutputCP
MapViewOfFileEx
SetLastError
SetThreadErrorMode
RaiseException
SetConsoleCtrlHandler
DebugBreak
FlsAlloc
FlsSetValue
FlsGetValue
GetLocaleInfoEx
GetUserDefaultLocaleName
FlushProcessWriteBuffers
ReadFile
CreateNamedPipeA
GetCurrentProcess
WriteFile
WaitForMultipleObjects
WaitForSingleObject
DuplicateHandle
DisconnectNamedPipe
CreateEventW
CreateFileA
CancelIoEx
GetOverlappedResult
ConnectNamedPipe
FlushFileBuffers
SetEvent
ResetEvent
WaitForSingleObjectEx
VirtualAlloc
VirtualFree
VirtualQuery
VirtualProtect
SleepEx
SwitchToThread
MultiByteToWideChar
SuspendThread
ResumeThread
LCMapStringEx
FormatMessageW
LocalFree
GetModuleFileNameW
GetEnvironmentVariableW
CreateFileW
GetFullPathNameW
HeapAlloc
HeapFree
CreateFileMappingW
HeapCreate
GetProcessHeap
HeapDestroy
VerSetConditionMask
VerifyVersionInfoW
QueueUserAPC
SetThreadPriority
GetThreadPriority
TlsSetValue
TlsAlloc
WaitForMultipleObjectsEx
SignalObjectAndWait
RtlLookupFunctionEntry
SetThreadStackGuarantee
LocateXStateFeature
SetErrorMode
RaiseFailFastException
GetExitCodeProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
AddVectoredExceptionHandler
GetThreadContext
SetThreadContext
GetEnabledXStateFeatures
InitializeContext
RtlRestoreContext
SetXStateFeaturesMask
CopyContext
GetModuleHandleExW
GetCommandLineW
CreateProcessW
GetCPInfo
ExitProcess
OutputDebugStringW
RtlInstallFunctionTableCallback
GetLogicalProcessorInformationEx
SetThreadGroupAffinity
UnmapViewOfFile
GetProcessGroupAffinity
GetProcessAffinityMask
QueryInformationJobObject
FlushInstructionCache
RtlDeleteFunctionTable
CreateMemoryResourceNotification
WerRegisterRuntimeExceptionModule
RtlUnwind
CloseThreadpoolTimer
CreateThreadpoolTimer
SetThreadpoolTimer
OpenEventW
ExitThread
HeapReAlloc
TlsGetValue
GetFileSize
RtlAddFunctionTable
CreateSemaphoreExW
ReleaseSemaphore
GetSystemDefaultLCID
GetUserDefaultLCID
OutputDebugStringA
QueryThreadCycleTime
SetFilePointer
MapViewOfFile
FindClose
Sleep
RemoveDirectoryW
CreateDirectoryW
GetEnvironmentStringsW
GetSystemTime
GetSystemTimeAsFileTime
FreeLibrary
GetCurrentProcessId
GetProcAddress
CreateThread
GetSystemInfo
CloseHandle
GetActiveProcessorGroupCount
GetCurrentThread
GetLastError
FreeEnvironmentStringsW
GetCurrentThreadId
CreateActCtxW
GetTempPathW
InitializeCriticalSection
LeaveCriticalSection
GetStdHandle
FindNextFileW
EnterCriticalSection
FindFirstFileExW
GetFileSizeEx
GetConsoleMode
GetFileAttributesExW
LoadLibraryA
GetCurrentDirectoryW
WriteConsoleW
DeleteCriticalSection
CreateFileMappingA
GetTickCount64
QueryPerformanceFrequency
QueryPerformanceCounter
IsDebuggerPresent
GetNumaHighestNodeNumber
SetThreadAffinityMask
GetFileAttributesW
SetThreadIdealProcessorEx
GetThreadIdealProcessorEx
VirtualAllocExNuma
GetNumaProcessorNodeEx
VirtualUnlock
GetLargePageMinimum
IsProcessInJob
K32GetProcessMemoryInfo
GetLogicalProcessorInformation
GlobalMemoryStatusEx
RtlVirtualUnwind
IsProcessorFeaturePresent
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsFree
TryAcquireSRWLockExclusive
GetExitCodeThread
GetStringTypeW
InitializeCriticalSectionEx
DecodePointer
SetEnvironmentVariableW
GetThreadGroupAffinity
GetCurrentProcessorNumberEx
advapi32
LookupPrivilegeValueW
RegGetValueW
SetKernelObjectSecurity
RegQueryValueExW
RegOpenKeyExW
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
OpenProcessToken
RegCloseKey
SetThreadToken
RevertToSelf
OpenThreadToken
EventWrite
EventRegister
EventWriteTransfer
DeregisterEventSource
RegisterEventSourceW
ReportEventW
AdjustTokenPrivileges
ole32
CLSIDFromProgID
CoCreateGuid
CoTaskMemAlloc
CoUnmarshalInterface
CoMarshalInterface
CoGetMarshalSizeMax
CoCreateFreeThreadedMarshaler
CoGetClassObject
CoGetContextToken
CoGetObjectContext
CoReleaseMarshalData
CoInitializeEx
CoRegisterInitializeSpy
CoWaitForMultipleHandles
CoUninitialize
CoRevokeInitializeSpy
CoTaskMemFree
oleaut32
SetErrorInfo
GetErrorInfo
SysFreeString
SysStringLen
CreateErrorInfo
QueryPathOfRegTypeLi
SafeArrayGetVartype
VariantChangeType
SysAllocString
LoadRegTypeLi
SysAllocStringLen
VariantClear
VariantInit
VarCyFromDec
SafeArrayDestroy
SafeArrayAllocDescriptorEx
GetRecordInfoFromTypeInfo
SafeArraySetRecordInfo
SafeArrayAllocData
SafeArrayGetElemsize
SysStringByteLen
SysAllocStringByteLen
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayGetDim
SafeArrayGetLBound
LoadTypeLibEx
user32
LoadStringW
MessageBoxW
shell32
ShellExecuteW
api-ms-win-crt-string-l1-1-0
iswspace
strncpy
iswascii
iswupper
wcsncpy_s
isalpha
strncmp
strncpy_s
towlower
wcscat_s
_wcsdup
wcscpy_s
isdigit
strnlen
wcsnlen
strncat_s
towupper
strcmp
strcpy_s
_stricmp
strcat_s
isspace
tolower
wcsncmp
_strdup
strtok_s
wcsncat_s
strlen
_wcsnicmp
_wcsicmp
_strnicmp
api-ms-win-crt-heap-l1-1-0
_aligned_malloc
malloc
_callnewh
realloc
free
_set_new_mode
_aligned_free
calloc
api-ms-win-crt-convert-l1-1-0
atoi
_wcstoui64
_wtoi
strtoull
strtol
wcstoul
_ltow_s
_atoi64
atol
strtoul
api-ms-win-crt-stdio-l1-1-0
fputwc
__stdio_common_vsprintf_s
__stdio_common_vfprintf
__acrt_iob_func
_set_fmode
__stdio_common_vsprintf
ftell
fseek
_wfsopen
__stdio_common_vfwprintf
fclose
setvbuf
_setmode
_dup
_fileno
fwrite
__p__commode
_flushall
__stdio_common_vswprintf
__stdio_common_vsnprintf_s
fopen
_write
_wfopen
__stdio_common_vsscanf
fgets
fflush
fputs
__stdio_common_vsnwprintf_s
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-runtime-l1-1-0
_invoke_watson
_invalid_parameter_noinfo
_beginthreadex
terminate
_wcserror_s
_register_thread_local_exe_atexit_callback
_c_exit
__p___wargv
__p___argc
abort
_exit
exit
_initterm_e
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_errno
_controlfp_s
api-ms-win-crt-filesystem-l1-1-0
_wrename
_wremove
api-ms-win-crt-math-l1-1-0
truncf
atanf
trunc
ilogbf
ceil
atan2
copysign
ceilf
round
fmodf
asinh
cbrt
acosh
atanh
modf
acoshf
cbrtf
atanhf
tanhf
modff
asinhf
fmod
__setusermatherr
_fdopen
fmaf
fma
floorf
floor
acos
acosf
asin
asinf
log10
expf
exp
log10f
log
log2
coshf
cosh
log2f
cosf
logf
pow
cos
powf
roundf
atan2f
sin
sinf
sinh
sinhf
sqrt
sqrtf
tan
tanf
tanh
copysignf
atan
api-ms-win-crt-time-l1-1-0
_gmtime64_s
_time64
wcsftime
api-ms-win-crt-locale-l1-1-0
setlocale
__pctype_func
___lc_locale_name_func
___lc_codepage_func
_lock_locales
_free_locale
_configthreadlocale
_unlock_locales
___mb_cur_max_func
_create_locale
BrotliDecoderAttachDictionary
BrotliDecoderCreateInstance
BrotliDecoderDecompress
BrotliDecoderDecompressStream
BrotliDecoderDestroyInstance
BrotliDecoderErrorString
BrotliDecoderGetErrorCode
BrotliDecoderHasMoreOutput
BrotliDecoderIsFinished
BrotliDecoderIsUsed
BrotliDecoderSetMetadataCallbacks
BrotliDecoderSetParameter
BrotliDecoderTakeOutput
BrotliDecoderVersion
BrotliDefaultAllocFunc
BrotliDefaultFreeFunc
BrotliEncoderAttachPreparedDictionary
BrotliEncoderCompress
BrotliEncoderCompressStream
BrotliEncoderCreateInstance
BrotliEncoderDestroyInstance
BrotliEncoderDestroyPreparedDictionary
BrotliEncoderHasMoreOutput
BrotliEncoderIsFinished
BrotliEncoderMaxCompressedSize
BrotliEncoderPrepareDictionary
BrotliEncoderSetParameter
BrotliEncoderTakeOutput
BrotliEncoderVersion
BrotliGetDictionary
BrotliGetTransforms
BrotliSetDictionaryData
BrotliSharedDictionaryAttach
BrotliSharedDictionaryCreateInstance
BrotliSharedDictionaryDestroyInstance
BrotliTransformDictionaryWord
CLRJitAttachState
DotNetRuntimeContractDescriptor
DotNetRuntimeInfo
MetaDataGetDispenser
_kBrotliContextLookupTable
_kBrotliPrefixCodeRanges
g_CLREngineMetrics
g_dacTable
Name
.text
Size
6.4MB
Virtual Size
6.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.CLR_UEF
Size
512B
Virtual Size
215B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
228KB
Virtual Size
228KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Section
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=11, id=259, version=35207,
count=19, id=260, version=35207,
count=68, id=260, version=35223,
count=101, id=261, version=35207,
count=8, id=260, version=33145,
count=13, id=257, version=33145,
count=505, id=1, productName=Unmarked objects,
count=22, id=259, version=35223,
count=571, id=265, version=35223,
count=1, id=256, version=35223,
count=1, id=255, version=35223,
count=1, id=258, version=35223,
VoicemeeterRemote64.dll
- IMPHASH 53fd8181186447ca1e6c4bc143b7736b
- SHA256 6c108f99c955ec963702dba37739d70c31c9ce4d77758b312c0233a1f435f4fb
- MD5 b16e2603eeee1099dfe97ecf987a1319
- SHA1 a4229d70f8471d2bf7df79c5d7b426aa0bb60b94
- SHA512 3c27ae44a7d9bd88c169721a963924901abecf30537582e44f9610054e19bb8cb6bed18fadf40d71391af84d327227ba9dac2785650dd4b664eef18659fee839
- SSDEEP 3072:aR8mc+AKYjdhTzhTq4UeT/AS5IGFM4W1CgmgReNA9KHVL:aRVXA/zhTWeT/AS5L6tTKAEHx
- TLSH T190149D8A329010FAE85B9238C9E76656FB73B45313755BCF166483761F173E22A3B321
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
cf:0d:69:d5:9c:53:eb:a2:21:1f:c8:0b:07:21:93:01:43:34:e4:af:f4:86:0c:a0:24:e0:6a:a6:95:d9:f4:ed
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Dec 11, 2025
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
02:63:b9:b0:fb:b3:01:be:bb:d1:47:f4
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 21, 2025 - Jul 22, 2027
Subject
CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE
Serial Number
84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4
Issuer
CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 15, 2025 - Jan 10, 2037
Subject
CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE
Serial Number
83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f
Issuer
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 16, 2025 - Jul 16, 2041
Subject
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
76:53:fe:b9:3d:d9:e7:e9:26:32:ac:d6:0a:be:ac:38
Issuer
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2020 - Mar 18, 2045
Minor OS version
2
Major OS version
5
Entry point
68104
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
H:\Travaux\VB_VAC\VoiceMeeter\Project\voicemeeterpro_vc2010\x64\Release\VoicemeeterRemote64.pdb
setupapi
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceInterfaceAlias
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsA
SetupDiOpenDeviceInterfaceRegKey
winmm
waveOutGetDevCapsW
timeBeginPeriod
waveOutGetNumDevs
waveInGetNumDevs
waveInGetDevCapsW
timeEndPeriod
kernel32
SetFilePointer
WriteFile
CreateFileW
CloseHandle
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThread
SetThreadPriority
QueryPerformanceFrequency
WaitForSingleObject
CreateEventA
DeviceIoControl
MapViewOfFile
UnmapViewOfFile
GetTickCount
CreateFileMappingA
OpenFileMappingA
CreateThread
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetStringTypeW
LCMapStringW
LoadLibraryW
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
SetLastError
FlsFree
FlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameW
ExitProcess
GetModuleHandleW
HeapDestroy
HeapCreate
GetVersion
RtlVirtualUnwind
HeapSetInformation
GetStartupInfoW
GetFileType
GetStdHandle
SetHandleCount
InitializeCriticalSectionAndSpinCount
RtlUnwindEx
EncodePointer
GetLastError
Sleep
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
OpenFile
WriteConsoleW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCommandLineA
HeapFree
HeapAlloc
HeapReAlloc
GetCurrentThreadId
HeapSize
DecodePointer
RtlCaptureContext
RtlLookupFunctionEntry
FlsSetValue
user32
CharLowerBuffA
advapi32
RegEnumKeyW
RegOpenKeyW
RegQueryValueExW
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
shell32
ShellExecuteA
ole32
PropVariantClear
CoInitialize
CoUninitialize
CoCreateInstance
CLSIDFromString
CoTaskMemFree
VBVMR_AudioCallbackRegister
VBVMR_AudioCallbackStart
VBVMR_AudioCallbackStop
VBVMR_AudioCallbackUnregister
VBVMR_GetLevel
VBVMR_GetMidiMessage
VBVMR_GetParameterFloat
VBVMR_GetParameterStringA
VBVMR_GetParameterStringW
VBVMR_GetVoicemeeterType
VBVMR_GetVoicemeeterVersion
VBVMR_Input_GetDeviceDescA
VBVMR_Input_GetDeviceDescW
VBVMR_Input_GetDeviceNumber
VBVMR_IsParametersDirty
VBVMR_Login
VBVMR_Logout
VBVMR_MacroButton_GetStatus
VBVMR_MacroButton_IsDirty
VBVMR_MacroButton_SetStatus
VBVMR_Output_GetDeviceDescA
VBVMR_Output_GetDeviceDescW
VBVMR_Output_GetDeviceNumber
VBVMR_RunVoicemeeter
VBVMR_SendMidiMessage
VBVMR_SetParameterFloat
VBVMR_SetParameterStringA
VBVMR_SetParameterStringW
VBVMR_SetParameters
VBVMR_SetParametersW
Name
.text
Size
110KB
Virtual Size
109KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
35KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=37, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=123, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=11, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=19, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=213, id=1, productName=Unmarked objects,
count=16, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
a.png
- SHA256 41dc0e0d4075faaa95444d8215cfc00b1a154fd16a7aa3e1429fc7373d7fb59e
- MD5 a1213702df468ceb34599ec51a7bec90
- SHA1 843d9f696c3e41cababe743b3a4e3441575f6b12
- SHA512 18aab2f391cfa68f9512301a63a4e3131c94aef6644b86a71d7ce089d12169a9ad0e8cc4e61d5ca8f0fed09ce8f2c45cc5eb558ab390406ef6c76cacf9c20c3a
- SSDEEP 1536:TmIK2ea74WZMVMQ4p5H2sgISshn3Y+Q3w5A5sF4hM:lZMVF4p5H2Fbshn3Q3w5A5cwM
- TLSH T1E27312AED895AD6C4DAB2828FFC3C771F9D66607C45B39467073AE214EE3610EE10360
- MD5 SHA1 SHA512 SSDEEP TLSH