AIMP[.]zip | Triage™

resource
unpack001/UpdateInstaller.exe

AIMP.zip

SHA256 ce32eccb831b1cb15642678f0323903e0f6be0eb8e2ee45a309a41a4e49a8bfb
MD5 e663358b8e75f30238414b629de8aebc
SHA1 08c68cd92ec60d1f2b7fe7c1368817fd740b23ef
SHA512 ca3d209085282f64941d8b4c5247553511c8e2cddd616e5390c4243089c404839ebc4f24ec4d202bff3af5d89c9094ae0748b99582889b873107c79bcc2f6f70
SSDEEP 393216:dFrJ/5eZpImkJE5HIVcrlZMKY1F+xbygBJpEsHK5FQqdVzWPJzyf2W:RBeZpyE5HI6ZeySs6PzozyuW
TLSH
T1FE073383D70A7AB0A18FC71C684D9CDC85B1278EAC3ED6DE7C6EB78852FD8165422534
MD5 SHA1 SHA512 SSDEEP TLSH

AIMP-ContextMenu.ini

SHA256 70be8275e991210ae9447a8ddc08e90d67fc264b8d48295780f8594550b53dc1
MD5 dc4fc55002e9cae303441e5cbb08c21a
SHA1 5d65b6e9fa7226e2bbdc0275a84c7773ab56cc61
SHA512 af5c5b8ec9791a6150366ce40ac07e167139f0a959eadf1c7c16755d367f115b683c8c0e6299fefdf1e7c0807b73d749e9f7dd1fb14897a4877e267666bb24d4
TLSH
T1B441908A40255EDE0D8321C1F7E303F7972B41059AE401D62AD72D053709C89EEBF747
MD5 SHA1 SHA512 TLSH

AIMP-CustomGenres.txt

SHA256 c06a8dbb233ffc43c34cd1d42ae52fb4f89949dc60c555c1a4150f787ea404ea
MD5 bf8e0692b716b7c17ced35870cd12438
SHA1 ee2ca31b2d90e264e8981cb38c6f0e5fb456ba85
SHA512 414630118f80f7f16bb61e1ab9b18bad5380535461ae68951fd4c8c2f90954d1d8b3bb13e615564c1cf4e23b183ad93fdafec96cba0479e1818d76f81ef68ec8
TLSH
T1A501E4D3E6FD9941A6B74A80AFE401B1CFB77C92392C940E41D9012E55F2D81DCA8BE3
MD5 SHA1 SHA512 TLSH

AIMP.ini

SHA256 8e14204ac6d257643de97f67d96d498906a38c6b1c1aacebcf3662c66528dd1a
MD5 0a1bc29ea55c562665b8da99ffce13ab
SHA1 9cf0df88fe837f1e4b8cdf68853718255f233380
SHA512 3019d65116eaf7874f26f4c4c901c6cc8bb411553bf7dfcd42103dd041a372a72a677a5ae7251eb5bdee6b54fd78ba4f9357e616d033ee8175bc69f3a9e95fbe
SSDEEP 384:widL8VpB80VZ4dImt4VTcV/9t2aD15pUNU76LQZ7QczeMoYlcakkx4syf:widL8x4dImtPfpUNU76eQczeEasyf
TLSH
T1F3C2863B17ED2129F5F3ABA4EAF400777F267C17792CD91D51C1030A4AE1B40A9927AB
MD5 SHA1 SHA512 SSDEEP TLSH

AIMP.ini.bak

SHA256 006efdf8185b58bd5986929c2a33d0c71547d2920ddd2edd9bfa09410efa24f8
MD5 72f42fb1b0666a95f69960ce2920e9a4
SHA1 bf894b96c9f283c72135e739867ec6835a82b5c0
SHA512 d24242c45870421dd7b03fb6a532d13c06b4292959afe8fa5ae5beb7ef27c195fc33a6ba023fe1f49eb74c69a3f2219be2618555c3679e2c4bdc887022721169
SSDEEP 384:wid49VpB80VZ4dImt4VTcV/9tlot2aD15pUNUd6LyZ7QTFoYlcakkx4nyTzeU:wid49x4dImtXwfpUNUd6MQTfanyTzeU
TLSH
T143C2863B17ED2129F5F3ABA4EAF400777F267C17792CD91D51C1030A4AE1B40A9927AB
MD5 SHA1 SHA512 SSDEEP TLSH

AIMPac.ini

SHA256 dc20d6e6d180843db9925db73659ca1ec0213a1886a61b2c4a79a101e9833a85
MD5 897f47eb59d78ee2f55d12394d44fff5
SHA1 9e8b459a21c406d8f72c6f9727ad4681706bfd8f
SHA512 ad3d65ec3d6ac84354d77c2ef230adfe9f0f0ba323e3ca71afceef903cf5045ab4f8d68337ae0b659b5b76cbcc1c42b16a1436449a20c240ffc1d51231048b44
TLSH
T12371375363F92108F2F75BA8EEF950726B667C266D2CD98C50C0524E4AF1E8089627F7
MD5 SHA1 SHA512 TLSH

AIMPac.ini.bak

SHA256 1802b4ce512decaf4f1ad030672b003ea180fd3132e6b72b10bc9c40121e818c
MD5 09706c40d15e89ab0dfc88ac46d2c3bb
SHA1 9bd8d28b57b9ce839a25a6b6fbba2ae0f0e4e1a1
SHA512 fd6848b5e4a4ff145349a6c5530738eed50f9b2e9c78609708821eadeda49f08f8527b7f1224ea6895f284eff46610644ddd6d26b44cc75caf689c85721c0f5e
TLSH
T14871475363F92108F2F75FA8EEF950726B667C266D2CD98C50C0424E4AF1E8089627F7
MD5 SHA1 SHA512 TLSH

AIMPate.ini

SHA256 59a54e44f682dadbcc6bd0d1c7e8c3b4ea4675ff32eb57c36dcb1f3614439ba7
MD5 d8eb6b154b125ca4896f041594725174
SHA1 92418b159afa3a5fc776494dd130df0277ab4561
SHA512 1cafec3d0b5fbbbbdef2b5678621552225aa72cbdd0ff27c97dff11afe8a556233489961dca1e966bb763e27e557c0c4adf76ac9b12dc31437cfd3d15e586054
SSDEEP 96:rsDfB8PICOrj1BO5gs+OXtrVoyqhFYBfq8WA20:wjB8PIDatwYBi820
TLSH
T1E7B16B2327F93119F5F35BB8EAF400739B667866293DC44C90D1470A8BE2A8059637FB
MD5 SHA1 SHA512 SSDEEP TLSH

AIMPate.ini.bak

SHA256 59a54e44f682dadbcc6bd0d1c7e8c3b4ea4675ff32eb57c36dcb1f3614439ba7
MD5 d8eb6b154b125ca4896f041594725174
SHA1 92418b159afa3a5fc776494dd130df0277ab4561
SHA512 1cafec3d0b5fbbbbdef2b5678621552225aa72cbdd0ff27c97dff11afe8a556233489961dca1e966bb763e27e557c0c4adf76ac9b12dc31437cfd3d15e586054
SSDEEP 96:rsDfB8PICOrj1BO5gs+OXtrVoyqhFYBfq8WA20:wjB8PIDatwYBi820
TLSH
T1E7B16B2327F93119F5F35BB8EAF400739B667866293DC44C90D1470A8BE2A8059637FB
MD5 SHA1 SHA512 SSDEEP TLSH

AlbumArts.Cache.db

SHA256 8fe02779e9545f2ecf5c4eec6c9071b7cde15a23a624aace6b886030d7487976
MD5 f58cdff8b9fcfae6415983e2d02d6162
SHA1 652753011f6a48f4f0b04488e73dbc314cc0f473
SHA512 9c1b9843d1f655c535405f6f793931925eb9901998b33d00897c57ec62c31fc45b4ed87674400c9d34201629080d1afe2a15103d9cb8cac3ce86f4d6f5c251cd
TLSH
T198514642B8DD266EF0363FB28FF6D1246716B66C583BD42E11007ACA55C36C0AA24B73
MD5 SHA1 SHA512 TLSH

CDDB.db

SHA256 0086612c592952b4db26c515f60cebf02c5f9519a148f2b7b3b7748398fbe17d
MD5 7b8e1c60d407ff35218a2b5840c597cc
SHA1 471f3e9047a84de33b3f84de7614e680c991e8d1
SHA512 5099b39bb62311ff84445adf0739a5d70017b73618af1a2f9010fb9b4f7a8276f69c3b1c0ad2b4ec7e0547eb1a2b10ab6d63398323790199602bf7fcd6c1470c
TLSH
T14C81A459F4C86128D9913AFA1FD7D1BDCD4E73685C39807B7044178312D08C2BB6937A
MD5 SHA1 SHA512 TLSH

EQPresetsLibrary.ini

SHA256 db7651680c104c212eab784416bcc44bc85dd61cd484ef471f887c3f5d5ac1e0
MD5 de5649fdd647de7c33067fbb27e00e7d
SHA1 2f5842e657bb8af77b5ceed04a19125d929e0d08
SHA512 d924c66cea645b50ac4cbc2b58416189b8c3ee05e3af4facd802b068fd116cdf2b4a741d8faf6dbd233a18bc8f5cdfc9633e1a92361ec3cc13a5971126fe02c4
SSDEEP 192:z2AKV1nCd55U6/ldUkoIo9SNJuJL2sPoFU22hoMGdzomY+NiXfVMpVlo75QzFKrz:MgA46PcaLn75QzsDPTs3q58wZQjRcBb
TLSH
T17492562A2C1813377B77F36CD3D4097FB3600CA6A46D6E2994C243474ADE70269869BF
MD5 SHA1 SHA512 SSDEEP TLSH

Elevator.ini

SHA256 4d13421581b55371bc9d586af330e9dd830dacf4b41b815ac9bafcce26e34bf3
MD5 8f11352fda71804c4eb7ba9ac14c6705
SHA1 afcaee5d93adfd9e2e63214cc2a456a21c4fcdc1
SHA512 151713015a8e12cbbefbf91289cd9b9e9ec28478ef2f3761c463103da18b7568427bbc2d1cfd21fb8e2e6831c1b9ca2a5900693f004dbad70f89732aa532dd25
TLSH
T1A8A0029312E5128CB9775B50EC75C43513A4FC54D80E8BCC51C4254808F145059535F3
MD5 SHA1 SHA512 TLSH

Elevator.ini.bak

SHA256 4d13421581b55371bc9d586af330e9dd830dacf4b41b815ac9bafcce26e34bf3
MD5 8f11352fda71804c4eb7ba9ac14c6705
SHA1 afcaee5d93adfd9e2e63214cc2a456a21c4fcdc1
SHA512 151713015a8e12cbbefbf91289cd9b9e9ec28478ef2f3761c463103da18b7568427bbc2d1cfd21fb8e2e6831c1b9ca2a5900693f004dbad70f89732aa532dd25
TLSH
T1A8A0029312E5128CB9775B50EC75C43513A4FC54D80E8BCC51C4254808F145059535F3
MD5 SHA1 SHA512 TLSH

UpdateInstaller.exe

IMPHASH b109789cd6e811af2decf3fd32dd3481
SHA256 8dacaa5634c049ff022a30afa498efb6eeffad915ea7afe14bbc804bee4b1cc7
MD5 9ae4a78ab70f09c74863db89b804db29
SHA1 1ef7aec43b881c4b738c86f0b4418727f030b4ce
SHA512 acada63b2bf61f0532e58aa28899451fe2802390c3870c9f18bdc29622723476371499759599efffb55d6500ec0dbdf4c145c9d44babbaadd1734a6b759a493f
SSDEEP 393216:YLjL5yf3Km+50pvINcZDNOyCBVKVR+ArnxSGfKhVo+Dh/UpXtgRm5:YLjtyf3C0pvI8NYoMGO9/Wtgk5
TLSH
T19B27F17B32A8826DC21EC13ED1938F50D83374B60B33C5DB12D4266A6EA79C45E3F665
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

10:6f:21:af:11:82:18:d1:9a:a6:1f:41:b0:37:a4:5b:fd:25:9c:b2:ff:a4:59:c2:bd:0e:69:87:d0:ac:4f:97

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=IP Izmaylov Artem Andreevich,O=IP Izmaylov Artem Andreevich,L=Tula,ST=Tula Oblast,C=RU,1.2.840.113549.1.9.1=#0c0f737570706f72744061696d702e7275

Chains

Mar 6, 2026

CN=IP Izmaylov Artem Andreevich,O=IP Izmaylov Artem Andreevich,L=Tula,ST=Tula Oblast,C=RU,1.2.840.113549.1.9.1=#0c0f737570706f72744061696d702e7275

Subject

CN=IP Izmaylov Artem Andreevich,O=IP Izmaylov Artem Andreevich,L=Tula,ST=Tula Oblast,C=RU,1.2.840.113549.1.9.1=#0c0f737570706f72744061696d702e7275

Serial Number

09:59:9d:a1:98:ab:73:b3:9c:e6:63:8b

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 22, 2023 - Nov 8, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:03:32:e1:65:bf:9b:78:43:e0:99:75:94:63:77:0b

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 11, 2025 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

5

Entry point

4693792

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

SetFileAttributesW RtlUnwindEx GetACP GetExitCodeProcess LocalFree CloseHandle GetCurrentProcessId SizeofResource QueryPerformanceFrequency SetProcessWorkingSetSize FindNextFileW GetFullPathNameW VirtualFree ExitProcess HeapAlloc GetCPInfoExW GetLongPathNameW RtlUnwind GetCPInfo GetStdHandle GetModuleHandleW FreeLibrary HeapDestroy ReadFile CreateProcessW GetLastError GetModuleFileNameW SetLastError GlobalAlloc GlobalUnlock FindResourceW lstrlenA CreateThread CompareStringW CopyFileW LoadLibraryA ResetEvent MulDiv FreeResource GetDriveTypeW GetVersion RaiseException MoveFileW GlobalAddAtomW FormatMessageW OpenProcess SwitchToThread GetExitCodeThread GetCurrentThread GetFileAttributesExW ExpandEnvironmentStringsW LoadLibraryExW LockResource GetCurrentThreadId UnhandledExceptionFilter MoveFileExW PeekNamedPipe VirtualQuery GlobalFindAtomW VirtualQueryEx GlobalFree Sleep EnterCriticalSection SetFilePointer ReleaseMutex LoadResource SuspendThread GetTickCount QueueUserWorkItem GetFileSize GetTempFileNameW GetStartupInfoW GlobalDeleteAtom GetFileAttributesW GetCurrentDirectoryW SetCurrentDirectoryW InitializeCriticalSection GetThreadPriority GetCurrentProcess SetThreadPriority GlobalLock VirtualAlloc GetTempPathW GetSystemInfo GetCommandLineW LeaveCriticalSection GetProcAddress ResumeThread GetLogicalDriveStringsW GetVersionExW VerifyVersionInfoW HeapCreate DeviceIoControl LCMapStringW GetDiskFreeSpaceW VerSetConditionMask FindFirstFileW GetUserDefaultUILanguage lstrlenW QueryPerformanceCounter SetEndOfFile HeapFree WideCharToMultiByte FindClose MultiByteToWideChar CreateMutexA LoadLibraryW SetEvent CreateFileW GetLocaleInfoW EnumResourceNamesW DeleteFileW GetLocalTime WaitForSingleObject WriteFile ExitThread CreatePipe DeleteCriticalSection GetDateFormatW TlsGetValue SetErrorMode IsValidLocale TlsSetValue CreateDirectoryW GetSystemDefaultUILanguage EnumCalendarInfoW LocalAlloc RemoveDirectoryW CreateEventW WaitForMultipleObjectsEx SetThreadLocale GetThreadLocale

comdlg32

FindTextW

comctl32

FlatSB_SetScrollInfo ImageList_DragMove ImageList_Destroy _TrackMouseEvent ImageList_DragShowNolock ImageList_Add ImageList_GetDragImage FlatSB_SetScrollProp ImageList_Create ImageList_EndDrag ImageList_DrawEx ImageList_SetImageCount FlatSB_GetScrollPos FlatSB_SetScrollPos InitializeFlatSB FlatSB_GetScrollInfo ImageList_Write ImageList_DrawIndirect ImageList_SetBkColor ImageList_GetBkColor ImageList_BeginDrag ImageList_GetIcon ImageList_GetImageCount ImageList_DragEnter ImageList_GetIconSize ImageList_SetIconSize ImageList_Read ImageList_DragLeave ImageList_Draw ImageList_Remove ImageList_ReplaceIcon

shell32

SHGetMalloc SHGetFileInfoW SHGetDesktopFolder SHChangeNotify SHGetSpecialFolderLocation IsUserAnAdmin Shell_NotifyIconW SHGetSpecialFolderPathW SHAppBarMessage ShellExecuteW ShellExecuteExW

ole32

RevokeDragDrop CoCreateInstance CoUninitialize ReleaseStgMedium RegisterDragDrop IsEqualGUID OleInitialize OleUninitialize CoInitialize CoTaskMemFree CoTaskMemAlloc DoDragDrop

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

user32

CopyImage SetMenuItemInfoW GetMenuItemInfoW DefFrameProcW GetDlgCtrlID FrameRect RegisterWindowMessageW GetMenuStringW FillRect SendMessageA EnumWindows ShowOwnedPopups GetClassInfoW GetScrollRange SetActiveWindow GetActiveWindow DrawEdge GetKeyboardLayoutList LoadBitmapW EnumChildWindows GetScrollBarInfo UnhookWindowsHookEx SetCapture GetCapture ShowCaret CreatePopupMenu GetMenuItemID CharLowerBuffW PostMessageW IsZoomed SetParent DrawMenuBar GetClientRect IsChild IsIconic CallNextHookEx ShowWindow GetWindowTextW SetForegroundWindow IsDialogMessageW DestroyWindow RegisterClassW EndMenu CharNextW GetFocus GetDC SetFocus ReleaseDC SetScrollRange DrawTextW PeekMessageA MessageBeep RemovePropW AttachThreadInput GetSubMenu DestroyIcon IsWindowVisible GetGuiResources DispatchMessageA UnregisterClassW GetTopWindow SendMessageW GetWindowLongPtrW SetWindowLongPtrW GetWindowInfo LoadStringW CreateMenu CharLowerW SetWindowRgn SetWindowPos GetMenuItemCount GetSysColorBrush GetWindowDC DrawTextExW EnumClipboardFormats GetScrollInfo SetWindowTextW GetMessageExtraInfo GetSysColor EnableScrollBar TrackPopupMenu DrawIconEx GetClassNameW GetMessagePos GetIconInfo SetScrollInfo GetKeyNameTextW GetDesktopWindow SetCursorPos GetCursorPos SetMenu GetMenuState GetMenu SetRect GetKeyState ValidateRect IsCharAlphaW GetCursor KillTimer WaitMessage TranslateMDISysAccel GetWindowPlacement CreateIconIndirect CreateWindowExW GetDCEx PeekMessageW MonitorFromWindow GetUpdateRect SetTimer WindowFromPoint BeginPaint RegisterClipboardFormatW MapVirtualKeyW IsWindowUnicode DispatchMessageW DefMDIChildProcW WaitForInputIdle GetSystemMenu SetScrollPos GetScrollPos DrawFocusRect ReleaseCapture SendInput LoadCursorW ScrollWindow GetLastActivePopup GetSystemMetrics CharUpperBuffW SetClassLongPtrW GetClassLongPtrW SetClipboardData GetClipboardData ClientToScreen SetWindowPlacement GetMonitorInfoW CheckMenuItem CharUpperW DefWindowProcW GetForegroundWindow EnableWindow GetWindowThreadProcessId RedrawWindow EndPaint MsgWaitForMultipleObjectsEx LoadKeyboardLayoutW ActivateKeyboardLayout GetParent InsertMenuItemW GetPropW MessageBoxW SetPropW UpdateWindow MsgWaitForMultipleObjects DestroyMenu SetWindowsHookExW EmptyClipboard AdjustWindowRectEx IsWindow DrawIcon EnumThreadWindows InvalidateRect SetKeyboardState GetKeyboardState ScreenToClient DrawFrameControl IsCharAlphaNumericW BringWindowToTop SetCursor CreateIcon RemoveMenu GetKeyboardLayoutNameW OpenClipboard TranslateMessage MapWindowPoints EnumDisplayMonitors CountClipboardFormats CallWindowProcW CloseClipboard DestroyCursor PostQuitMessage ShowScrollBar EnableMenuItem HideCaret FindWindowExW MonitorFromPoint LoadIconW SystemParametersInfoW GetWindow GetWindowRect InsertMenuW IsWindowEnabled IsDialogMessageA FindWindowW GetKeyboardLayout DeleteMenu

oleaut32

GetErrorInfo SysFreeString VariantClear VariantInit SysReAllocStringLen SafeArrayCreate SysAllocStringLen SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound VariantCopy VariantChangeType VariantCopyInd

msvcrt

isupper isalpha isalnum toupper memchr memcmp memcpy memset isprint isspace iscntrl isxdigit ispunct isgraph islower tolower

advapi32

RegSetValueExW RegEnumKeyExW RegDeleteKeyW CryptDestroyHash RegOpenKeyExW RegQueryInfoKeyW CryptReleaseContext CryptGetHashParam RegFlushKey RegQueryValueExW CryptHashData RegCloseKey CryptCreateHash RegCreateKeyExW CryptAcquireContextW

gdi32

Arc CreateRectRgnIndirect Pie SetBkMode SelectPalette CreateCompatibleBitmap CreatePolygonRgn GetEnhMetaFileHeader ExcludeClipRect RectVisible SetWindowOrgEx MaskBlt AngleArc CreatePatternBrush DeleteEnhMetaFile Chord SetTextColor StretchBlt SetDIBits SetViewportOrgEx CreateRectRgn RealizePalette GetDIBColorTable SetDIBColorTable RoundRect SelectClipRgn RestoreDC SetRectRgn GetTextMetricsW GetWindowOrgEx CreatePalette CreateBrushIndirect PatBlt SetEnhMetaFileBits FillRgn PolyBezierTo GetStockObject CreateSolidBrush Polygon Rectangle MoveToEx DeleteDC SaveDC PlayEnhMetaFile BitBlt Ellipse FrameRgn GetDeviceCaps GetBitmapBits GetTextExtentPoint32W GetClipBox GetClipRgn Polyline IntersectClipRect GetEnhMetaFileBits GetSystemPaletteEntries CreateBitmap CombineRgn SetWinMetaFileBits CreateDIBitmap GetStretchBltMode CreateDIBSection CreatePenIndirect GetDIBits GetEnhMetaFilePaletteEntries SetStretchBltMode CreateFontIndirectW PolyBezier LineTo GetRgnBox CreateHalftonePalette DeleteObject SelectObject ExtFloodFill UnrealizeObject CopyEnhMetaFileW SetBkColor CreateCompatibleDC GetObjectW GetBrushOrgEx GetCurrentPositionEx GetWinMetaFileBits SetROP2 GetTextExtentExPointW CreateRoundRectRgn GetTextExtentPointW ExtTextOutW SetBrushOrgEx GetEnhMetaFileDescriptionW GetPixel ArcTo GdiFlush SetPixel EnumFontFamiliesExW GetPaletteEntries

Name

.text

Size

4.5MB

Virtual Size

4.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

458KB

Virtual Size

457KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

248KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

151B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

Virtual Size

632B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

109B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

233KB

Virtual Size

233KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

15.7MB

Virtual Size

15.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

AIMP.zip

AIMP-ContextMenu.ini

AIMP-CustomGenres.txt

AIMP.ini

AIMP.ini.bak

AIMPac.ini

AIMPac.ini.bak

AIMPate.ini

AIMPate.ini.bak

AlbumArts.Cache.db

CDDB.db

EQPresetsLibrary.ini

Elevator.ini

Elevator.ini.bak

UpdateInstaller.exe

PE Signature issue

kernel32

comdlg32

comctl32

shell32

ole32

version

user32

oleaut32

msvcrt

advapi32

gdi32

generic