net8.0-windows.rar
- SHA256 c247820cf857162bfca002259f6079ead7ee83eecfa1a5add8e994ec2111ce5c
Static task
static1
1 signatures
General
- Target net8.0-windows.rar
- Size 532KB
- Sample261020-nssfgabc88
- SHA256 c247820cf857162bfca002259f6079ead7ee83eecfa1a5add8e994ec2111ce5c
- MD5 027eb21f28015fbb4bdff4c3f46e2547
- SHA1 47df1ed0e7dcf2c6324709eefd1856b104bdd571
- SHA512 f09cdeba9c2ea684af5aed74af2b0295031e370b699e567a0a87376de325e40d77a0293b7b4d1a0d7211269fda1c5e7540d3318502ca7307c2296f575da83cf8
- SSDEEP 12288:RFkoEMGUE7RXRWZsHGU/RFkoEMGUHenkkJHQ1eHYkl4XY7p5YWKGfedlOsW:woEML82sHL/woEML8HddCszz/feXg
- TLSH T1BAC423186569B84FCFBB548531C072B28BF1FDD15DCDC8E32F48BABB83510299952AE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 15 IoCs
Checks for missing Authenticode signature.
resource unpack001/net8.0-windows/Host/MasonEAX.PresetHost.dll unpack001/net8.0-windows/Host/MasonEAX.PresetHost.exe unpack001/net8.0-windows/Host/MasonEAX.Vst.dll unpack001/net8.0-windows/MasonEAX.PresetHost.exe unpack001/net8.0-windows/MasonEAX.Vst.dll unpack001/net8.0-windows/MasonEAX.dll unpack001/net8.0-windows/MasonEAX.exe unpack001/net8.0-windows/NAudio.Asio.dll unpack001/net8.0-windows/NAudio.Core.dll unpack001/net8.0-windows/NAudio.Midi.dll unpack001/net8.0-windows/NAudio.Wasapi.dll unpack001/net8.0-windows/NAudio.WinForms.dll unpack001/net8.0-windows/NAudio.WinMM.dll unpack001/net8.0-windows/NAudio.dll unpack001/net8.0-windows/Plugins/ReverbPresets64.dll
File Explorer
-
net8.0-windows.rar.rar 532KB
-
net8.0-windows/Host/MasonEAX.PresetHost.deps.json889B
-
net8.0-windows/Host/MasonEAX.PresetHost.dll.exe 4KB
-
net8.0-windows/Host/MasonEAX.PresetHost.exe.exe 148KB
-
net8.0-windows/Host/MasonEAX.PresetHost.pdb10KB
-
net8.0-windows/Host/MasonEAX.PresetHost.runtimeconfig.json340B
-
net8.0-windows/Host/MasonEAX.Vst.dll.dll 18KB
-
net8.0-windows/Host/MasonEAX.Vst.pdb14KB
-
net8.0-windows/MasonEAX.PresetHost.deps.json889B
-
net8.0-windows/MasonEAX.PresetHost.exe.exe 148KB
-
net8.0-windows/MasonEAX.PresetHost.runtimeconfig.json340B
-
net8.0-windows/MasonEAX.Vst.dll.dll 18KB
-
net8.0-windows/MasonEAX.Vst.pdb14KB
-
net8.0-windows/MasonEAX.deps.json4KB
-
net8.0-windows/MasonEAX.dll.exe 61KB
-
net8.0-windows/MasonEAX.exe.exe 148KB
-
net8.0-windows/MasonEAX.pdb29KB
-
net8.0-windows/MasonEAX.runtimeconfig.json429B
-
net8.0-windows/NAudio.Asio.dll.dll 33KB
-
net8.0-windows/NAudio.Core.dll.dll 183KB
-
net8.0-windows/NAudio.Midi.dll.dll 45KB
-
net8.0-windows/NAudio.Wasapi.dll.dll 175KB
-
net8.0-windows/NAudio.WinForms.dll.dll 33KB
-
net8.0-windows/NAudio.WinMM.dll.dll 56KB
-
net8.0-windows/NAudio.dll.dll 7KB
-
net8.0-windows/Plugins/ReverbPresets64.dll.dll 127KB
net8.0-windows/Host/MasonEAX.PresetHost.deps.json
- SHA256 aa41c120f6b2af3933e14b9f54a3ddd229d961d00f2fd7376d37000aefe672a4
- MD5 b40d572f4c2669806715b6565e85f341
- SHA1 b18f650ce34daf3aacc121e05ade19ab162e1706
- SHA512 1654db0f2a7c7ad2bc7af862461b2b53d279a8a41f6eade0511eee3608df7001279cfbf122b5edf63d790507ab6c7b616dba696c73756dfc5fec49079137819c
- TLSH T11A11B568D1883E9701B667F555364393F23227770402299F74BC882C4F739AB4440F68
- MD5 SHA1 SHA512 TLSH
net8.0-windows/Host/MasonEAX.PresetHost.dll
- SHA256 ffddbd9eb1160c7b7111146374a9b057b06aada6d0a36fd9ab937638d43cab2c
- MD5 f9b0d68d9db15a20b28e8e851d48aef5
- SHA1 6924cf5d5d54f3651bc3537b663703994d57e0b0
- SHA512 49ca89731ba9580fbaa1ea4cf0ba14e7ec83731499dbcbb732673a14221dffa662c0c5e563f6794eaa89414de88ec5e96984e1aab048ad37fbc1527335460a76
- SSDEEP 48:616fD5vC+Uu9wxyW5/KXeMjmoMFExKIZSplzVN5BL6pfbNtm:1tqvPISESxVbSzNt
- TLSH T1DD918491D3F44727E97B0B32AE3356821374FB568D06DFEE24C8212AAD465244D63F71
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\PC.com\Downloads\MasonEAX (1)\MasonEAX\MasonEAX.PresetHost\obj\Release\net8.0\MasonEAX.PresetHost.pdb
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
net8.0-windows/Host/MasonEAX.PresetHost.exe
- IMPHASH bb3ac2c21e02c68abcad237dc3fa6d00
- SHA256 a76501050254d3b3f08c5e6f60d142f6168f0aaa72696217d481569bbd73473d
- MD5 699cff44859de4125577ba6c5b776ba8
- SHA1 7c8391ed6f192f4918a822aa8164eb60b9678d5e
- SHA512 5574fa61deb01de381bd2fe37969180f7cd65d3dc0627cca5a617124234cd0aa09e038296e4a221c076ae227b565a8682c35bf234459d74f6ed1b612b46865cf
- SSDEEP 3072:sqeXA/4yIg9vkNPNu6H6xCYOiVUE265hJhb:svgvkNFNaxmNEBJh
- TLSH T1E8E33B07A2A851BDE1B7D679CD924D41FB7378598B71A7CF03504AB60E63BD0AE39302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
72400
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
kernel32
FreeLibrary
LoadLibraryExW
OutputDebugStringW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
GetModuleHandleW
MultiByteToWideChar
GetFileAttributesExW
LoadLibraryA
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetProcAddress
GetWindowsDirectoryW
FindResourceW
GetLastError
ActivateActCtx
FindClose
CreateActCtxW
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
shell32
ShellExecuteW
advapi32
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
_invoke_watson
__p___argc
_exit
exit
_initterm_e
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_errno
_initialize_onexit_table
abort
_c_exit
_register_thread_local_exe_atexit_callback
terminate
__p___wargv
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
_set_fmode
fputwc
__p__commode
fputws
_wfsopen
fflush
__stdio_common_vfwprintf
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf
setvbuf
api-ms-win-crt-heap-l1-1-0
calloc
_set_new_mode
free
_callnewh
malloc
api-ms-win-crt-string-l1-1-0
wcsncmp
toupper
strcmp
strlen
_wcsdup
wcsnlen
strcpy_s
api-ms-win-crt-convert-l1-1-0
wcstoul
_wtoi
api-ms-win-crt-time-l1-1-0
wcsftime
_gmtime64_s
_time64
api-ms-win-crt-locale-l1-1-0
___mb_cur_max_func
_configthreadlocale
___lc_codepage_func
___lc_locale_name_func
__pctype_func
_lock_locales
setlocale
_unlock_locales
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
89KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
47KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
824B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=35207,
count=12, id=260, version=35207,
count=87, id=261, version=35207,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=33145,
count=204, id=1, productName=Unmarked objects,
count=10, id=265, version=35223,
count=1, id=258, version=35223,
net8.0-windows/Host/MasonEAX.PresetHost.pdb
- SHA256 b6e6227f6eaa0a6a439fc6dfdd0d42e5bcf408194481384f0d0c43861cb06d80
- MD5 879427dd1d117a4fd13a911d0965b9c5
- SHA1 007c76d3d2994d03482900ae6b5a19ae384111da
- SHA512 5814d52f6c688f7b00e0a73e537dc8f95625bce8e34c310333eaacb40ff411388823f2e10d6078a8831c7839d4920df2ef7f0271ed892b8b435d3cb3b168184e
- SSDEEP 192:cMjRAIficXpnhw6l4D7aIXzBKZ1ca1D97TqmNZOdZiLm430aD4ux13CfexHTfyvn:cYRAww6l4D7aIXzsZ1ca1R7TqiycD0ao
- TLSH T14022A47B534CE261C54625B26A25C1CC373483203706FCB9F1D82A09EEAF69D07F65B1
- MD5 SHA1 SHA512 SSDEEP TLSH
net8.0-windows/Host/MasonEAX.PresetHost.runtimeconfig.json
- SHA256 28329cf08f6505e73806b17558b187c02f0c1c516fe47ebfb7a013d082aaa306
- MD5 253333997e82f7d44ea8072dfae6db39
- SHA1 03b9744e89327431a619505a7c72fd497783d884
- SHA512 56d99039e0fb6305588e9f87361e7e0d5051507bf321ba36619c4d29741f35c27c62f025a52523c9e1c7287aabf1533444330a8cdf840fa5af0fa2241fcb4fc2
- TLSH T114E02664CE006CA701FA727FC531C183EB30632700101891B4FC080C2F775B50112F5A
- MD5 SHA1 SHA512 TLSH
net8.0-windows/Host/MasonEAX.Vst.dll
- SHA256 9d9d2c55b2ff5fa4675397155794e779a29945e2edf0c89b42817df6e9109553
- MD5 7b8019ec37df0a23a4c9ccf0c32a0376
- SHA1 525421e154b3b9fcfd3e912e980cc5037f9afb42
- SHA512 f87857c8aadc88c06c3f514f8c17d12cc597078a028cd4ecb522c42f1cb10137dd57e9de15aecddabc8424137cc6ff4462ef6344006fc30839c9be6a4544939b
- SSDEEP 384:TykUOt/H3gfuAfP4AMDmoO2zrW5OlTsbAaLX0E/U:TykUk/Qf34AMDmyuEdgLX9
- TLSH T151823B361398D37FC9994B3A9C63112102F2EB993D13E7FA9D64706A2F27F091815D2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\PC.com\Downloads\MasonEAX (1)\MasonEAX\MasonEAX.Vst\obj\Release\net8.0\MasonEAX.Vst.pdb
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
836B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
net8.0-windows/Host/MasonEAX.Vst.pdb
- SHA256 49277944181d879d7c9a65f767bbbfa17e351220d556d7ca38ff23e25b1a4db2
- MD5 9e149f4433f5f95419e8cbd48c4248c9
- SHA1 f1923ab7c254dc91daa76fa28a7404fd9e9e995d
- SHA512 4362338a2fa41db73ceffe1bf05c83001ff1d7e952f2f63e057cd56b9abb3774f80f865801aa7ea72bf13f368381f222d23793f8cc1faff50fa6ca51f88b5e3d
- SSDEEP 384:QQsg2YPfw6l4D7aIXzsZ1ca1R7TqiycD0aD9+exHTfyv8G7ldftucZ5jjmlS:Q5g2MThrD+f3Rn
- TLSH T1D7628F3B6348E721C58151B62427C39D73348310BB46EF79F2D83A19DE9F6990BF60A5
- MD5 SHA1 SHA512 SSDEEP TLSH
net8.0-windows/MasonEAX.PresetHost.deps.json
- SHA256 aa41c120f6b2af3933e14b9f54a3ddd229d961d00f2fd7376d37000aefe672a4
- MD5 b40d572f4c2669806715b6565e85f341
- SHA1 b18f650ce34daf3aacc121e05ade19ab162e1706
- SHA512 1654db0f2a7c7ad2bc7af862461b2b53d279a8a41f6eade0511eee3608df7001279cfbf122b5edf63d790507ab6c7b616dba696c73756dfc5fec49079137819c
- TLSH T11A11B568D1883E9701B667F555364393F23227770402299F74BC882C4F739AB4440F68
- MD5 SHA1 SHA512 TLSH
net8.0-windows/MasonEAX.PresetHost.exe
- IMPHASH bb3ac2c21e02c68abcad237dc3fa6d00
- SHA256 a76501050254d3b3f08c5e6f60d142f6168f0aaa72696217d481569bbd73473d
- MD5 699cff44859de4125577ba6c5b776ba8
- SHA1 7c8391ed6f192f4918a822aa8164eb60b9678d5e
- SHA512 5574fa61deb01de381bd2fe37969180f7cd65d3dc0627cca5a617124234cd0aa09e038296e4a221c076ae227b565a8682c35bf234459d74f6ed1b612b46865cf
- SSDEEP 3072:sqeXA/4yIg9vkNPNu6H6xCYOiVUE265hJhb:svgvkNFNaxmNEBJh
- TLSH T1E8E33B07A2A851BDE1B7D679CD924D41FB7378598B71A7CF03504AB60E63BD0AE39302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
72400
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
kernel32
FreeLibrary
LoadLibraryExW
OutputDebugStringW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
GetModuleHandleW
MultiByteToWideChar
GetFileAttributesExW
LoadLibraryA
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetProcAddress
GetWindowsDirectoryW
FindResourceW
GetLastError
ActivateActCtx
FindClose
CreateActCtxW
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
shell32
ShellExecuteW
advapi32
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
_invoke_watson
__p___argc
_exit
exit
_initterm_e
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_errno
_initialize_onexit_table
abort
_c_exit
_register_thread_local_exe_atexit_callback
terminate
__p___wargv
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
_set_fmode
fputwc
__p__commode
fputws
_wfsopen
fflush
__stdio_common_vfwprintf
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf
setvbuf
api-ms-win-crt-heap-l1-1-0
calloc
_set_new_mode
free
_callnewh
malloc
api-ms-win-crt-string-l1-1-0
wcsncmp
toupper
strcmp
strlen
_wcsdup
wcsnlen
strcpy_s
api-ms-win-crt-convert-l1-1-0
wcstoul
_wtoi
api-ms-win-crt-time-l1-1-0
wcsftime
_gmtime64_s
_time64
api-ms-win-crt-locale-l1-1-0
___mb_cur_max_func
_configthreadlocale
___lc_codepage_func
___lc_locale_name_func
__pctype_func
_lock_locales
setlocale
_unlock_locales
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
89KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
47KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
824B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=35207,
count=12, id=260, version=35207,
count=87, id=261, version=35207,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=33145,
count=204, id=1, productName=Unmarked objects,
count=10, id=265, version=35223,
count=1, id=258, version=35223,
net8.0-windows/MasonEAX.PresetHost.runtimeconfig.json
- SHA256 28329cf08f6505e73806b17558b187c02f0c1c516fe47ebfb7a013d082aaa306
- MD5 253333997e82f7d44ea8072dfae6db39
- SHA1 03b9744e89327431a619505a7c72fd497783d884
- SHA512 56d99039e0fb6305588e9f87361e7e0d5051507bf321ba36619c4d29741f35c27c62f025a52523c9e1c7287aabf1533444330a8cdf840fa5af0fa2241fcb4fc2
- TLSH T114E02664CE006CA701FA727FC531C183EB30632700101891B4FC080C2F775B50112F5A
- MD5 SHA1 SHA512 TLSH
net8.0-windows/MasonEAX.Vst.dll
- SHA256 9d9d2c55b2ff5fa4675397155794e779a29945e2edf0c89b42817df6e9109553
- MD5 7b8019ec37df0a23a4c9ccf0c32a0376
- SHA1 525421e154b3b9fcfd3e912e980cc5037f9afb42
- SHA512 f87857c8aadc88c06c3f514f8c17d12cc597078a028cd4ecb522c42f1cb10137dd57e9de15aecddabc8424137cc6ff4462ef6344006fc30839c9be6a4544939b
- SSDEEP 384:TykUOt/H3gfuAfP4AMDmoO2zrW5OlTsbAaLX0E/U:TykUk/Qf34AMDmyuEdgLX9
- TLSH T151823B361398D37FC9994B3A9C63112102F2EB993D13E7FA9D64706A2F27F091815D2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\PC.com\Downloads\MasonEAX (1)\MasonEAX\MasonEAX.Vst\obj\Release\net8.0\MasonEAX.Vst.pdb
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
836B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
net8.0-windows/MasonEAX.Vst.pdb
- SHA256 49277944181d879d7c9a65f767bbbfa17e351220d556d7ca38ff23e25b1a4db2
- MD5 9e149f4433f5f95419e8cbd48c4248c9
- SHA1 f1923ab7c254dc91daa76fa28a7404fd9e9e995d
- SHA512 4362338a2fa41db73ceffe1bf05c83001ff1d7e952f2f63e057cd56b9abb3774f80f865801aa7ea72bf13f368381f222d23793f8cc1faff50fa6ca51f88b5e3d
- SSDEEP 384:QQsg2YPfw6l4D7aIXzsZ1ca1R7TqiycD0aD9+exHTfyv8G7ldftucZ5jjmlS:Q5g2MThrD+f3Rn
- TLSH T1D7628F3B6348E721C58151B62427C39D73348310BB46EF79F2D83A19DE9F6990BF60A5
- MD5 SHA1 SHA512 SSDEEP TLSH
net8.0-windows/MasonEAX.deps.json
- SHA256 f29cfa829328493e1f7e10954f5ac7f632d1c4bac980c7cdf5e2a7fa00613cb0
- MD5 71096c953f79bde81403cb738dd07362
- SHA1 ac0933bae1b44f581512595459a18c990c5c5c1f
- SHA512 d6f35c63d29304cb9cbdf02c2f9ec983e021e7c368b28874f15e40dd244b9fdf329a811822510902b303519cc08eb84e749af9c6aca20d9280df8d5aa8cc71ad
- SSDEEP 48:vC00b23Pg3CN3MNBN3w13635A3nHr4H0MkDHoHmGbbH65pZHJU98MHNObH1p:QtyDIr3epZ298MtsX
- TLSH T1B4B1E615D4903E6756F127E9243642C2F372E72B5302194FB8BC649C8F72E97684AF3A
- MD5 SHA1 SHA512 SSDEEP TLSH
net8.0-windows/MasonEAX.dll
- SHA256 20b0bb9084811c140641a72c0b3dbadaf55bb23b758f70026724d2fa651c3da1
- MD5 1b9b6085096ec85b54b1e4aa7127f23f
- SHA1 cd3446399583344a35406df9f0fdaf7fdbac1dc6
- SHA512 c9f781cbbbc5b15f395d170d2ae4b64a9514e5ef3e1e3bf104a6aaa3f0b860378205d001406613a90274a3c22b7852dc977a54fafcc66b79e2d25310f89bb741
- SSDEEP 768:HENfeVbvshKOEOxEghx4FiXq60m3+PCbuMbYEW3TA7e7qhhft:MuvsMdKhxRc5MbYEaaUq3ft
- TLSH T148533B1033BC9627D2BF8FFCB5A2441223F9A4663642D7D81EC6B4EE4523BD558123A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\PC.com\Downloads\MasonEAX (1)\MasonEAX\MasonEAX.App\obj\Release\net8.0-windows\MasonEAX.pdb
Name
.text
Size
59KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
net8.0-windows/MasonEAX.exe
- IMPHASH bb3ac2c21e02c68abcad237dc3fa6d00
- SHA256 7efe653a0df87fc5747c7c0b93df99247f4b3ab8a95d071377e39798e9172710
- MD5 c34b895b46823af216ef55f281ab21d7
- SHA1 a9f6dde3e54cf41f0360955ffc5ea2c52bd03b00
- SHA512 5fc9fe15e61c8426b55f5fa9f8d29dc61bfa86ab7deac8389b1dfb9bb73a5c3f5e73178cf09f49a25f33b54eb4825f05c6f20bf4804e561e3670988709a6fd2f
- SSDEEP 3072:MqeXA/4yIg9vkNPNu6H6xCYOiVUE265eJm:MvgvkNFNaxmNE+J
- TLSH T173E33B07A2A851BDE1B7D679CD924D41FB7378598B71A7CF03504AB60E63BD0AE39302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
72400
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
kernel32
FreeLibrary
LoadLibraryExW
OutputDebugStringW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
GetModuleHandleW
MultiByteToWideChar
GetFileAttributesExW
LoadLibraryA
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetProcAddress
GetWindowsDirectoryW
FindResourceW
GetLastError
ActivateActCtx
FindClose
CreateActCtxW
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
shell32
ShellExecuteW
advapi32
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
_invoke_watson
__p___argc
_exit
exit
_initterm_e
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_errno
_initialize_onexit_table
abort
_c_exit
_register_thread_local_exe_atexit_callback
terminate
__p___wargv
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
_set_fmode
fputwc
__p__commode
fputws
_wfsopen
fflush
__stdio_common_vfwprintf
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf
setvbuf
api-ms-win-crt-heap-l1-1-0
calloc
_set_new_mode
free
_callnewh
malloc
api-ms-win-crt-string-l1-1-0
wcsncmp
toupper
strcmp
strlen
_wcsdup
wcsnlen
strcpy_s
api-ms-win-crt-convert-l1-1-0
wcstoul
_wtoi
api-ms-win-crt-time-l1-1-0
wcsftime
_gmtime64_s
_time64
api-ms-win-crt-locale-l1-1-0
___mb_cur_max_func
_configthreadlocale
___lc_codepage_func
___lc_locale_name_func
__pctype_func
_lock_locales
setlocale
_unlock_locales
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
89KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
47KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
824B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=35207,
count=12, id=260, version=35207,
count=87, id=261, version=35207,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=33145,
count=204, id=1, productName=Unmarked objects,
count=10, id=265, version=35223,
count=1, id=258, version=35223,
net8.0-windows/MasonEAX.pdb
- SHA256 377273c59b67e6e1f765cf4196d51551f0db99cba4d9d6f9afa479b4347efd61
- MD5 a3bd90d2412b112e1e39b199d570d92f
- SHA1 83fa078e4bf56f2402ecb8e1fdbd142fcb090a9b
- SHA512 fd2b1f1eb4c4e0830d47b868e27129c33079e59bfcb99962520e506c7a866f26db2683568292e365ef918de977a9311fc9fb4a144f936faf00fb93ffe2a36ffc
- SSDEEP 384:IG97qQNxIS/9B1z/qfnPkw6l4D7aIXzsZ1cBa17kG7KT7BirycN0aDj+0exHTfyX:9xIM/zD7kCs6rNFfYvivPlqiW4
- TLSH T1D1D2C56B9349DB25C28125B79523C3883734C6606B49AF7EF3C87728ED9F7480BB6560
- MD5 SHA1 SHA512 SSDEEP TLSH
net8.0-windows/MasonEAX.runtimeconfig.json
- SHA256 73b37384bb001e78db2014d328750eb2990393712fd63cd00c0f41965b3dbe96
- MD5 1043e1e5e960609d014e56f638202c24
- SHA1 aaa1583e8c9809a39a52c73efff1e5e439cfd3df
- SHA512 5fe61affcddd7b6235270cc3f0e7fa7f2e890852de6f5c7759234870d244ee1b32f95dfd7efb5e2f410d12557593491c53a5323b68966918f92a545c1f10d66e
- TLSH T1BEE02A3ACA206DB714F02BBEC02AC187FA3023AB00040D16BAFC180C2F361A22001F88
- MD5 SHA1 SHA512 TLSH
net8.0-windows/NAudio.Asio.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ca03780217139b37f7f5b6921d59defb8d24988315b16b167a77fa88caa7d00f
- MD5 eb254b04d63a9f03b77563243805f68f
- SHA1 b01c83ec51f7a6548d1babb5e5ff8d5b944965a1
- SHA512 af40c8b9753ebd5abdefad82597dcefc3e5272e917657e3cc7d7961ee8e0070c04f964df456eaa92c8ba832b1967f35ac57490fa2adab2164f323e778979ef9c
- SSDEEP 768:gehRrWpB5henf0HTYdpVCYKo9c1e6ttHjB6Ca:gehRr68M47hGtHF4
- TLSH T16FF22B71EBE88A27C92E2779B4F2040407B5F190F623E74F9A4C54AA6FE63594790373
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
40130
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\markh\code\mygithub\NAudio\NAudio.Asio\obj\Release\netstandard2.0\NAudio.Asio.pdb
mscoree
_CorDllMain
Name
.text
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net8.0-windows/NAudio.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fcf493fc47a2f478a65303886b975fbdbf714cbb1f2d79f7fce97e4bb16b01a8
- MD5 48867f392b8e77dc06c062638c6fbd36
- SHA1 ccc0931e2cf3d6d79e24c1f28d9c96b40c131af6
- SHA512 b536e18c482dcf810ec30b9a943ec06e0ca4f6f2bd8f187b807a9a9fd90d28c4c2fb69bada4766c72e0b7942f5e7d40dd94b193ab01e68f666838698bbb473bc
- SSDEEP 3072:n5nFpdQWUY6GwfIGsnLRp2qr2eeY0nVuEtEVEOUkk6uSYsM+S76t:jpdQJY6GwfIGyRp2qI/VZtEVETtHG
- TLSH T1CE046D2963E84256E5AFABB1F0F208175BF1F4463037DB0E5D806AE92A07B11C562F77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
190890
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\markh\code\mygithub\NAudio\NAudio.Core\obj\Release\netstandard2.0\NAudio.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
181KB
Virtual Size
181KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net8.0-windows/NAudio.Midi.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f246e29921797b173b54229685e997a11f9cc388fa1e589c212328abd7a94ebe
- MD5 3f5c79100f4f7902114c3fcba275c606
- SHA1 cb874b2a2561239b5b1c30a49574229716f5f62d
- SHA512 e435b839a769572a251cb07238020f2496bef97949a3b3159e85c12327e4399a2adca67bb5b2a0606318ca9b5c7ea99bf013a431c72034ce51f9224721a4cf79
- SSDEEP 768:lwuDUaOqgwjYpA2kn+sbS+O/RXgQPODHM0Mx7YlEmmSFyaetiWvmYRMUQ6LUOu5+:lwuDU7fwT2k+sbRMZgQP6HM0Mx7cPXeN
- TLSH T103232915A3F8861AE2BF7B79FC7056100BB2B9867A32D74F0AD8686D1D237844C61773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
52474
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\markh\code\mygithub\NAudio\NAudio.Midi\obj\Release\netstandard2.0\NAudio.Midi.pdb
mscoree
_CorDllMain
Name
.text
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net8.0-windows/NAudio.Wasapi.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 618ef0e49d64e7a66dfe64bbf6ae81705b9d9683d8a9f321e5c3024d666bdf82
- MD5 278ebb79da14ecf8e0559530c2fda076
- SHA1 8a45f0400f6bc46d254120345fd5e39b6c9b71a1
- SHA512 f789600a820ff4286cb323c4f9dfb6b44001be9295bb24973308363a2668761055e807c7ebcb53900293f4be71c6b5ca328075c230b1ea8270f0d76e3ec477bc
- SSDEEP 3072:ZTo4k5xAt4T6awobjXGUHVUbLuh9aaWIiEKILT9rPr/duoSabKj5BIfgmFyjaKv9:ZTxk5xc4W+VU69aaWfIFzDoI44
- TLSH T121046C3537E88967C1EF97B4F8F2294787B1E0463A13AF8D15C45F256D13BA24804BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
185178
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\markh\code\mygithub\NAudio\NAudio.Wasapi\obj\Release\netstandard2.0\NAudio.Wasapi.pdb
mscoree
_CorDllMain
Name
.text
Size
173KB
Virtual Size
172KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net8.0-windows/NAudio.WinForms.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b313f530227fd31fc2b6fa74547f4c8a964cde7696c07624dfc19b693fe9c468
- MD5 2da1307837dc63aaab828470701a2761
- SHA1 3d862f84328d8fba810da31fffcdfc53a8cf786c
- SHA512 503fa2ff0ccea1d51aa59c4f38a2d552626556b0cc692a699f15714b9af901d9e664642adf5e25d6cf5ce77a6ded59427dd1bd23e030aedb3891ae943629d2b4
- SSDEEP 768:+GRcd/kDtaVL9ugB/0p6oCPREb4DmHBRrne5:zaVL9ugQLMOb4Dm/2
- TLSH T166F21919239CC36BC67F0FBA50A611430336E681F552EBED6DC831A99EA37510761BE3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
40422
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\markh\code\mygithub\NAudio\NAudio.WinForms\obj\Release\netcoreapp3.1\NAudio.WinForms.pdb
mscoree
_CorDllMain
Name
.text
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net8.0-windows/NAudio.WinMM.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 749a01ebbb5edd8b1a03c5263b04de6acadecf52e4cc84d7412bc6e93f180958
- MD5 faf1ba532964984a34d60674fbc7a5a7
- SHA1 0999178949de510a47d87de3b8a117a003c572ee
- SHA512 d23b783bfd55a09c726ba09d627dfcc6c22a6e7bed8a53dff72c349bbe6fb190afb574cc267b7bebed1540b0bf834f259b5d03b50e023881b3ec42a8b2b57f1f
- SSDEEP 768:cQFu51JOtZ+Wr3CJBTNoNfDhPrDVSvxu1tEMgGd8GbpDrXa8Rcer+7Ul:cQ8zvWr3CJZNYDhP9Svxu1tEufpDuil
- TLSH T12A434B013BD8427AD2FE1B3EA1F30A524731A8D6796BFB4F1598F1DA9853B8049017B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
63254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\markh\code\mygithub\NAudio\NAudio.WinMM\obj\Release\netstandard2.0\NAudio.WinMM.pdb
mscoree
_CorDllMain
Name
.text
Size
54KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
868B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net8.0-windows/NAudio.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c001e49d31497f608b14066b0f10304c0ccb7e3b9df9d5fec5cf3196f92961b8
- MD5 555d4c629b3d58d3d4314e2fa51d2f63
- SHA1 0aae01bac50a5abfe42a6cde715f391069fed72c
- SHA512 b3cde721761fe1210a5b31da4637ae6e501d489d3209a179669ad80c03e4ff717af81f82d130673080194e5f2f7a17fcd4891ac598aedca14c10c7f2b0904b8d
- SSDEEP 192:7HBYhRUzpGapaMW2Son1MRl4CAJj6GjSm8:7HCMzpGbx2Kvm8
- TLSH T1A7F1C739A7A4C237CA964F75E81707940374EB40DA57CF2D0D8CA09BE913749AB727D1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13742
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\markh\code\mygithub\NAudio\NAudio\obj\Release\net6.0-windows\NAudio.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
936B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net8.0-windows/Plugins/ReverbPresets64.dll
- IMPHASH 6e053f9a1e4690a349e15f49f8b72fec
- SHA256 507eb215983424c9d495ab0b281c5ce0ed14f7073f9e4f41403658ffb5a481ba
- MD5 cd36b34fdb4ff69b8645f62e13187f43
- SHA1 50a20de6a9cad793053c7527ef000dfefd9b7316
- SHA512 41a0e369658199314c5e3927eb0938b4dccdcd716dee6fe9beb5b81255ad679c9e9bff85c0103003335317b4dded4e0464e6f9d63a28ad1e6b3f0fe019c022bf
- SSDEEP 3072:PqUflqPiiUMnDPFY0YkZppoEePkxW8k4R:PviDPFYBZzMx7k4
- TLSH T1AFD35B03B58191F9E41AC0788327AA37AB3674C50B2267FF07B515342F9ABD53F3AA15
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
94500
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
ReverbPresets.pdb
user32
EndPaint
SetCapture
SetFocus
BeginPaint
ReleaseCapture
DefWindowProcW
GetWindowLongPtrW
SetTimer
InvalidateRect
FillRect
KillTimer
SetWindowLongPtrW
DestroyWindow
UnregisterClassW
DrawTextW
LoadCursorW
RegisterClassExW
CreateWindowExW
gdi32
DeleteDC
BitBlt
RestoreDC
IntersectClipRect
SaveDC
SetBkMode
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontW
SetTextColor
DeleteObject
CreateSolidBrush
kernel32
GetConsoleMode
WaitForSingleObject
RtlVirtualUnwind
WideCharToMultiByte
MultiByteToWideChar
WriteConsoleW
HeapAlloc
QueryPerformanceCounter
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStdHandle
GetConsoleOutputCP
GetProcessHeap
HeapFree
GetModuleHandleExW
HeapReAlloc
GetCurrentThreadId
GetLastError
SetLastError
GetEnvironmentVariableW
GetCurrentDirectoryW
RtlCaptureContext
GetCurrentProcess
RtlLookupFunctionEntry
WaitForSingleObjectEx
LoadLibraryA
GetProcAddress
lstrlenW
GetCurrentProcessId
CreateMutexA
CloseHandle
ReleaseMutex
api-ms-win-core-synch-l1-2-0
WakeByAddressSingle
WaitOnAddress
WakeByAddressAll
ntdll
RtlNtStatusToDosError
NtWriteFile
vcruntime140
__CxxFrameHandler3
__C_specific_handler
__std_type_info_destroy_list
memset
memcpy
memcmp
api-ms-win-crt-math-l1-1-0
sinf
powf
roundf
ceilf
exp2
sin
sinh
pow
expf
cosf
cos
tan
api-ms-win-crt-runtime-l1-1-0
_cexit
_execute_onexit_table
_initterm
_initialize_onexit_table
_initterm_e
_seh_filter_dll
_initialize_narrow_environment
_configure_narrow_argv
VSTPluginMain
Name
.text
Size
94KB
Virtual Size
93KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
496B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
524B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=3, id=259, version=35207,
count=7, id=260, version=35207,
count=13, id=261, version=35207,
count=9, id=257, version=33145,
count=107, id=1, productName=Unmarked objects,
count=4, productName=Unmarked objects (old),
count=1, id=256, version=35228,
count=1, id=258, version=35228,