N7R Store(1).rar
- SHA256 11397c5ffb87d6fdc6b0954900159a7e0c39585d73fb500d4a9608e0df0ba7a1
Overview
overview
3Static
static
3كرت ب�...le.exe
windows10-2004-x64
3كرت ب�...le.exe
windows11-ltsc_2024-x64
3كرت ب�...I2.dll
windows10-2004-x64
1كرت ب�...I2.dll
windows11-ltsc_2024-x64
1كرت ب�...di.dll
windows10-2004-x64
1كرت ب�...di.dll
windows11-ltsc_2024-x64
1كرت ب�...32.dll
windows10-2004-x64
3كرت ب�...32.dll
windows11-ltsc_2024-x64
3كرت ب�...64.dll
windows10-2004-x64
1كرت ب�...64.dll
windows11-ltsc_2024-x64
1كرت ب�....dylib
macos-10.15-amd64
1كرت ب�...put.js
windows10-2004-x64
3كرت ب�...put.js
windows11-ltsc_2024-x64
3كرت ب�...kin.js
windows10-2004-x64
3كرت ب�...kin.js
windows11-ltsc_2024-x64
3كرت ب�...in.dll
windows10-2004-x64
1كرت ب�...in.dll
windows11-ltsc_2024-x64
1كرت ب�...zer.js
windows10-2004-x64
3كرت ب�...zer.js
windows11-ltsc_2024-x64
3كرت ب�...dge.js
windows10-2004-x64
3كرت ب�...dge.js
windows11-ltsc_2024-x64
3كرت ب�...te.dll
windows10-2004-x64
3كرت ب�...te.dll
windows11-ltsc_2024-x64
3كرت ب�...64.dll
windows10-2004-x64
1كرت ب�...64.dll
windows11-ltsc_2024-x64
1Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
كرت باترك.exe/Blue-Voicemeeter-EQ/EAX Console.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
كرت باترك.exe/Blue-Voicemeeter-EQ/EAX Console.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
كرت باترك.exe/Blue-Voicemeeter-EQ/Guna.UI2.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
كرت باترك.exe/Blue-Voicemeeter-EQ/Guna.UI2.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
كرت باترك.exe/Blue-Voicemeeter-EQ/Melanchall.DryWetMidi.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
كرت باترك.exe/Blue-Voicemeeter-EQ/Melanchall.DryWetMidi.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
كرت باترك.exe/Blue-Voicemeeter-EQ/Melanchall_DryWetMidi_Native32.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
كرت باترك.exe/Blue-Voicemeeter-EQ/Melanchall_DryWetMidi_Native32.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
كرت باترك.exe/Blue-Voicemeeter-EQ/Melanchall_DryWetMidi_Native64.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
كرت باترك.exe/Blue-Voicemeeter-EQ/Melanchall_DryWetMidi_Native64.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
كرت باترك.exe/Blue-Voicemeeter-EQ/Melanchall_DryWetMidi_Native64.dylib
Resource
macos-20260915-en
macos-10.15-amd64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
كرت باترك.exe/Blue-Voicemeeter-EQ/MidiOutput.js
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral13
Sample
كرت باترك.exe/Blue-Voicemeeter-EQ/MidiOutput.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
كرت باترك.exe/Blue-Voicemeeter-EQ/OriginalSkin.js
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral15
Sample
كرت باترك.exe/Blue-Voicemeeter-EQ/OriginalSkin.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral16
Sample
كرت باترك.exe/Blue-Voicemeeter-EQ/OriginalSkin.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
كرت باترك.exe/Blue-Voicemeeter-EQ/OriginalSkin.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
كرت باترك.exe/Blue-Voicemeeter-EQ/RealEqualizer.js
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral19
Sample
كرت باترك.exe/Blue-Voicemeeter-EQ/RealEqualizer.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral20
Sample
كرت باترك.exe/Blue-Voicemeeter-EQ/VoicemeeterBridge.js
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral21
Sample
كرت باترك.exe/Blue-Voicemeeter-EQ/VoicemeeterBridge.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral22
Sample
كرت باترك.exe/Blue-Voicemeeter-EQ/VoicemeeterRemote.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral23
Sample
كرت باترك.exe/Blue-Voicemeeter-EQ/VoicemeeterRemote.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral24
Sample
كرت باترك.exe/Blue-Voicemeeter-EQ/VoicemeeterRemote64.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
كرت باترك.exe/Blue-Voicemeeter-EQ/VoicemeeterRemote64.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target N7R Store(1).rar
- Size 1.7MB
- Sample261024-vn9yaavzhx
- SHA256 11397c5ffb87d6fdc6b0954900159a7e0c39585d73fb500d4a9608e0df0ba7a1
- MD5 1563d85bc280e96248bb26df2f515078
- SHA1 cf0efb98eb2b96ca30a24a107fe7f04122f1bcdf
- SHA512 21c8ca4f484a1fbeda37cd61b3c03103854349d86c3eb1fd059fb4572a553bf5cb659ec0635e4a4abb3ba7f01d2eecccb046ca86f5263161cc797e20bfedf414
- SSDEEP 49152:2qwpk5GN03WpM+dpbGu5EZmuvJ5W9KJZUV4Tji5:ik5GN0QM+d5h5EZnvJ2KO
- TLSH T1ED8533CA3BD29D871A2EF6001373C89856E96954C4D5F26EBE8E93EEB0C450C376F509
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 5 IoCs
Checks for missing Authenticode signature.
resource unpack001/كرت باترك.exe/Blue-Voicemeeter-EQ/EAX Console.exe unpack001/كرت باترك.exe/Blue-Voicemeeter-EQ/Melanchall.DryWetMidi.dll unpack001/كرت باترك.exe/Blue-Voicemeeter-EQ/Melanchall_DryWetMidi_Native32.dll unpack001/كرت باترك.exe/Blue-Voicemeeter-EQ/Melanchall_DryWetMidi_Native64.dll unpack001/كرت باترك.exe/Blue-Voicemeeter-EQ/OriginalSkin.dll - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/كرت باترك.exe/Blue-Voicemeeter-EQ/Guna.UI2.dll
File Explorer
-
N7R Store(1).rar.7z 1.7MB
-
كرت باترك.exe/Blue-Voicemeeter-EQ/EAX Console.exe.exe 2.0MB
-
كرت باترك.exe/Blue-Voicemeeter-EQ/EAX Console.exe.config189B
-
كرت باترك.exe/Blue-Voicemeeter-EQ/EAX Console.pdb161KB
-
كرت باترك.exe/Blue-Voicemeeter-EQ/Guna.UI2.dll.dll 2.1MB
-
كرت باترك.exe/Blue-Voicemeeter-EQ/HandBlue.cur4KB
-
كرت باترك.exe/Blue-Voicemeeter-EQ/Melanchall.DryWetMidi.dll.dll 778KB
-
كرت باترك.exe/Blue-Voicemeeter-EQ/Melanchall.DryWetMidi.xml.xml 2.1MB
-
كرت باترك.exe/Blue-Voicemeeter-EQ/Melanchall_DryWetMidi_Native32.dll.dll 56KB
-
كرت باترك.exe/Blue-Voicemeeter-EQ/Melanchall_DryWetMidi_Native64.dll.dll 65KB
-
كرت باترك.exe/Blue-Voicemeeter-EQ/Melanchall_DryWetMidi_Native64.dylib.dylib 88KB
-
كرت باترك.exe/Blue-Voicemeeter-EQ/MidiOutput.cs.js 5KB
-
كرت باترك.exe/Blue-Voicemeeter-EQ/OriginalSkin.cs.js 36KB
-
كرت باترك.exe/Blue-Voicemeeter-EQ/OriginalSkin.dll.dll 68KB
-
كرت باترك.exe/Blue-Voicemeeter-EQ/README-Arabic.txt3KB
-
كرت باترك.exe/Blue-Voicemeeter-EQ/RealEqualizer.cs.js 5KB
-
كرت باترك.exe/Blue-Voicemeeter-EQ/Verification.txt305B
-
كرت باترك.exe/Blue-Voicemeeter-EQ/VoicemeeterBridge.cs.js 5KB
-
كرت باترك.exe/Blue-Voicemeeter-EQ/VoicemeeterRemote.dll.dll 156KB
-
كرت باترك.exe/Blue-Voicemeeter-EQ/VoicemeeterRemote64.dll.dll 188KB
-
كرت باترك.exe/Blue-Voicemeeter-EQ/hand.txt26B
-
كرت باترك.exe/Blue-Voicemeeter-EQ/midi-output.txt20B
-
كرت باترك.exe/Blue-Voicemeeter-EQ/siledr.bmp1KB
-
كرت باترك.exe/Blue-Voicemeeter-EQ/voicemeeter-strip.txt4B
كرت باترك.exe/Blue-Voicemeeter-EQ/EAX Console.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 3edbbf7e9c3d96ed796a311ef74227da8d918e5b79ba98257e433019b3133b87
- MD5 a6b55ffd85c3405d3b80c1d465c1a37c
- SHA1 09497080a7e79bc1e6c7d05da5f6c5e2516a933b
- SHA512 cee8ad5a422c1e1b501bf7d91dfd61e476f124c85f926be966d5df494a2016ec3fa4c65a6e38dc362550170c9530890ca375c4cdd24ac59249d411fcfd2db224
- SSDEEP 49152:RLsCK8uxgaMj3XRD+uj3H2Cuk1+Lda3Wvho0o5c0XWzoZsCKsmL:RLsCK80DMj3XZ+ujX2Cuk1+Lda3Wvhoy
- TLSH T1D89538D2EA4482D4ED3E47B3B1275CF116A33C7EEAF0649D248DB92649B3253442F91B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1789134
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
266KB
Virtual Size
265KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
كرت باترك.exe/Blue-Voicemeeter-EQ/EAX Console.exe.config
- SHA256 47e5a0f101af4151d7f13d2d6bfa9b847d5b5e4a98d1f4674b7c015772746cdf
- MD5 9dbad5517b46f41dbb0d8780b20ab87e
- SHA1 ef6aef0b1ea5d01b6e088a8bf2f429773c04ba5e
- SHA512 43825f5c26c54e1fc5bffcce30caad1449a28c0c9a9432e9ce17d255f8bf6057c1a1002d9471e5b654ab1de08fb6eabf96302cdb3e0fb4b63ba0ff186e903be8
- TLSH T17CC080454054BD274D334B1357518539EFB073A36424140CF42FA7560F3114D4657377
- MD5 SHA1 SHA512 TLSH
كرت باترك.exe/Blue-Voicemeeter-EQ/EAX Console.pdb
- SHA256 7203a8d8f03200e481a81514e096460b44c4a42d82ab044be802275766a06815
- MD5 683def7b1d2319ee8fc29f836f3070e4
- SHA1 32d726e675c40ee518e29ffe3c36cba2b9ffa936
- SHA512 62bb5fab975b9c98f3475a53bc47f8deec6bd9ad27d8cdd280ad59f3af68f2a076e250291a171dffcdeb6e29e102defedb5711fb254d291cb0181cb837225196
- SSDEEP 1536:ZcnQAF0t7LGn3Lc8Qau/NGlC6drjIU/EFSUubmzYM/jO:nAuG3w8CQ3JAQZEO
- TLSH T11EF373A77720C173C44482F64DF3AF740324EE91AB82C7CB6799A19C6DE27925F86361
- MD5 SHA1 SHA512 SSDEEP TLSH
كرت باترك.exe/Blue-Voicemeeter-EQ/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6d876b257a97995d21072acd44580633468516121145cc218277edc18f971030
- MD5 58459aefb74d5ff786b9efb982d44eab
- SHA1 584f851c9824a27f4e2e5594ac206f8b165adf72
- SHA512 80e975d2726eb1e4515a79f3ced422e61315f9b2bcb87d054aa654c1885c12c2a16f75da9aba6f8cd2dd652bb85da50579d1e618f10fab1e50c0cd29f37c7b55
- SSDEEP 24576:mecRcAIrcai1e9RcNiCljNAXCITob+HgbY8DkUKAMDitqTwCTxZmxV7FdHQ/jzwQ:3AIKyo+HgbY8DkRmaZ8V7FyH
- TLSH T133A50A147ED4EB27D16BCE33D5E24011E3F1E5A32AB1EB0E76D35768184234A788636E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
0c:8b:14:20:bc:10:db:d0:29:b9:4e:67:9d:b2:a6:c7:df:c3:b3:87
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sobatdata Software
Chains
Feb 18, 2025
CN=Sobatdata Software
Subject
CN=Sobatdata Software
Serial Number
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Issuer
CN=Sobatdata Root CA
Timespan
Oct 23, 2019 - Oct 22, 2025
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Minor OS version
0
Major OS version
4
Entry point
2188846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
كرت باترك.exe/Blue-Voicemeeter-EQ/HandBlue.cur
- SHA256 ede61b6f6d22ab82d1ee9ccb0c0831dc776759860b09fd2dbb0e8fa19ad775a2
- MD5 161d157ccab42b7edbb2c62fa38b298a
- SHA1 f1cf92a510a5799e5c3a44940d07217278f5481f
- SHA512 ddc6f153f9292ef70ea88bc7d8054b12cca1665d947c7bace9d2a4d5b4b45b2d26d6223a55f6c16a05379f4022a80be0fa5190e317783254570a1f2eababab59
- SSDEEP 24:KOFNM9wfQWjGeqY9UYaQIBkrrs8zqFJVtYK7bB7rSJyLkcXF:pRQWHd/gBaXYVeKHBvSJEd
- TLSH T13C91DC94E884E2E1FDE11A34CA95ED321A033D9F80413C10B4C5BB1B19733E72B72E0A
- MD5 SHA1 SHA512 SSDEEP TLSH
كرت باترك.exe/Blue-Voicemeeter-EQ/Melanchall.DryWetMidi.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ad4ac36ecd26a0dd9c79ed0fadd6a9a18fcbdef0032af22f083e9430e1c84e87
- MD5 ed0dc7a819ba3e72503409b1bc3f7b66
- SHA1 9e2ead3d137005dd19573f2695657eff3015bbf0
- SHA512 b4709a51d7da713f1ae0828664f9dd622ad6f8740d0d0c9872f3ab54a9bd61d01fb7c9bdd1b24f012880f16e86034f2d0926c02c73276ddb1ac55ea5643db9f0
- SSDEEP 12288:vwUNlhmD+rq4sdOuxyuD63PdQAdPYfFRvBR:vwUM+GC1uWPdG3BR
- TLSH T19B05591237EC8E3BC6AF163BD570129963F0E846B393EB4B2314A6995D96B425C403F7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
797082
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/DryWetMidi/obj/Release/net45/Melanchall.DryWetMidi.pdb
mscoree
_CorDllMain
Name
.text
Size
774KB
Virtual Size
774KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
كرت باترك.exe/Blue-Voicemeeter-EQ/Melanchall.DryWetMidi.xml
- SHA256 f2da1cb18492541cf59455162ce2bdfdba18a98d7a0a8089c5912b6a1ff08446
- MD5 89a8c4eac38d71c3d2e033b98f8ce1a7
- SHA1 d7fa6faddc8d55817c8423dd901a32ad38cbcae0
- SHA512 e40391cc737da6c037ffd7d419c93890006fcd4634705abb92bf3f5ddca5e21e3b6626729bf5cf8361d4ad9b295e813c8db6ff1909c14c83c0bd3c3a044b54e9
- SSDEEP 6144:TrmzbvjQGhekYjTq++Omo0CcqkY8WO0+S4OgC8Wtt57uwqOC+gaOwgUaAW2uPecb:TA9bNF
- TLSH T164A52134B2D04A170AB702971D2BF484FE720663648D186971AC5F6B3F7AC935AFBC61
- MD5 SHA1 SHA512 SSDEEP TLSH
كرت باترك.exe/Blue-Voicemeeter-EQ/Melanchall_DryWetMidi_Native32.dll
- IMPHASH 1664d86a0cab81be8d8ef31af93e08ac
- SHA256 080346c638e219ec7cd4748e370e5e11931ed3a228c17f76d84c4d10ba9c9e6f
- MD5 1b976d18b403ffb7d670b17a871bbfd4
- SHA1 7e2022b1833f8ad6c4f4cc643d7068e013107ebd
- SHA512 1b676ca71cba6ed2fc9952e46038eb891217a7960d7aa10b37dcb0f6230e30ab2e62d1e36faf7c783785c7874173dd29ab947e8bcd4be8c36cec7277a2340692
- SSDEEP 384:ikfQAw+aLuu4N5ljtm8Xy9kjwJFP9TNaZFjnUmWw6w+e5XchXSvWZdTc2xv1Awo6:hft9RBi9kcfPmZFjHP5cJPDHthH
- TLSH T18343A890BE844C9AE411B37854E5C167B63CB9D5C6031F0766286F35AB23BC13EDA27E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4636
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
msvcrt
_amsg_exit
_initterm
_iob
_lock
_unlock
abort
calloc
free
fwrite
malloc
memcpy
realloc
strlen
strncmp
vfprintf
winmm
midiInAddBuffer
midiInClose
midiInGetDevCapsA
midiInGetNumDevs
midiInOpen
midiInPrepareHeader
midiInReset
midiInStart
midiInStop
midiInUnprepareHeader
midiOutClose
midiOutGetDevCapsA
midiOutGetNumDevs
midiOutLongMsg
midiOutOpen
midiOutPrepareHeader
midiOutReset
midiOutShortMsg
midiOutUnprepareHeader
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
timeKillEvent
timeSetEvent
CanCompareDevices
CloseInputDevice
CloseOutputDevice
CloseSession
ConnectToInputDevice
DisconnectFromInputDevice
GetApiType
GetDeviceManufacturer
GetDeviceProduct
GetInputDeviceDriverVersion
GetInputDeviceHashCode
GetInputDeviceInfo
GetInputDeviceManufacturer
GetInputDeviceName
GetInputDeviceProduct
GetInputDeviceSysExBufferData
GetInputDevicesCount
GetOutputDeviceChannelsMask
GetOutputDeviceDriverVersion
GetOutputDeviceHashCode
GetOutputDeviceInfo
GetOutputDeviceManufacturer
GetOutputDeviceName
GetOutputDeviceNotesNumber
GetOutputDeviceOptions
GetOutputDeviceProduct
GetOutputDeviceSysExBufferData
GetOutputDeviceTechnology
GetOutputDeviceVoicesNumber
GetOutputDevicesCount
IsInputDevicePropertySupported
IsOutputDevicePropertySupported
OpenInputDevice_Win
OpenOutputDevice_Win
OpenSession_Win
OpenTickGeneratorSession
PrepareInputDeviceSysExBuffer
RenewInputDeviceSysExBuffer
SendShortEventToOutputDevice
SendSysExEventToOutputDevice_Win
StartHighPrecisionTickGenerator_Win
StopHighPrecisionTickGenerator
UnprepareInputDeviceSysExBuffer
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
40B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/4
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
140B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/14
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/29
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/41
Size
512B
Virtual Size
175B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/55
Size
512B
Virtual Size
217B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/67
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/80
Size
512B
Virtual Size
117B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
كرت باترك.exe/Blue-Voicemeeter-EQ/Melanchall_DryWetMidi_Native64.dll
- IMPHASH cac31477dc7c3091aa8122f665d600a3
- SHA256 80ca89af931e43642a125ec82e253d9bd7002088d000daba6e0661cdad89f5aa
- MD5 5326dfc6840947388f19f474c28e8c55
- SHA1 81afe328f00c500a7138c16c2a0ef200e2a122e4
- SHA512 4c0a1385438f26c1633c58c5e57f0f94ce704d8da52ec16f6111d2347e69cf8c0a3bdf9a4e737794110c02108ed70a4b65dec0ef67fca16d9103647e65a7ac5c
- SSDEEP 768:STukqEi0unSZFjZe7+zZj2WuLGIC1FyOJJnD19UkG3JSTEUb:G3dun+jZeyYaIC1drGoTEUb
- TLSH T1636350E12FD44C9BE925A23C52E6C232353CB9E447534B07963469321F13EC17EE9A9A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4912
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
api-ms-win-crt-environment-l1-1-0
__p__environ
__p__wenviron
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
free
malloc
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___argv
__p___wargv
_configure_narrow_argv
_configure_wide_argv
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_exit
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_register_onexit_function
abort
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vfwprintf
fwrite
api-ms-win-crt-string-l1-1-0
strlen
strncmp
api-ms-win-crt-time-l1-1-0
__daylight
__timezone
__tzname
_tzset
winmm
midiInAddBuffer
midiInClose
midiInGetDevCapsA
midiInGetNumDevs
midiInOpen
midiInPrepareHeader
midiInReset
midiInStart
midiInStop
midiInUnprepareHeader
midiOutClose
midiOutGetDevCapsA
midiOutGetNumDevs
midiOutLongMsg
midiOutOpen
midiOutPrepareHeader
midiOutReset
midiOutShortMsg
midiOutUnprepareHeader
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
timeKillEvent
timeSetEvent
CanCompareDevices
CloseInputDevice
CloseOutputDevice
CloseSession
ConnectToInputDevice
DisconnectFromInputDevice
GetApiType
GetDeviceManufacturer
GetDeviceProduct
GetInputDeviceDriverVersion
GetInputDeviceHashCode
GetInputDeviceInfo
GetInputDeviceManufacturer
GetInputDeviceName
GetInputDeviceProduct
GetInputDeviceSysExBufferData
GetInputDevicesCount
GetOutputDeviceChannelsMask
GetOutputDeviceDriverVersion
GetOutputDeviceHashCode
GetOutputDeviceInfo
GetOutputDeviceManufacturer
GetOutputDeviceName
GetOutputDeviceNotesNumber
GetOutputDeviceOptions
GetOutputDeviceProduct
GetOutputDeviceSysExBufferData
GetOutputDeviceTechnology
GetOutputDeviceVoicesNumber
GetOutputDevicesCount
IsInputDevicePropertySupported
IsOutputDevicePropertySupported
OpenInputDevice_Win
OpenOutputDevice_Win
OpenSession_Win
OpenTickGeneratorSession
PrepareInputDeviceSysExBuffer
RenewInputDeviceSysExBuffer
SendShortEventToOutputDevice
SendSysExEventToOutputDevice_Win
StartHighPrecisionTickGenerator_Win
StopHighPrecisionTickGenerator
UnprepareInputDeviceSysExBuffer
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
836B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
272B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
112B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
80B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/31
Size
512B
Virtual Size
175B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/45
Size
512B
Virtual Size
164B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/57
Size
512B
Virtual Size
72B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/70
Size
512B
Virtual Size
163B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/81
Size
512B
Virtual Size
504B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
كرت باترك.exe/Blue-Voicemeeter-EQ/Melanchall_DryWetMidi_Native64.dylib
- SHA256 aa08c542e77b045fa1e00d4feab21080ceb415c4b6c343b0dbc5704d1fb02f92
- MD5 a51c6118f789a4f373ab25d98fab2988
- SHA1 80eafcd0d5806bb6bc40600d418206b78f4240a4
- SHA512 333a70512c919ec4119e9ce30364ad5380655f9105c60fdde4a29de600d54985bee73b02f498cd9a90d0ded58d9ea4d9eb1ba76f1879b595760d6b5174b2f647
- SSDEEP 384:OwUiZX3J6yvvnVDytNa2ZHS60LuoM5W/pFA6Uxf9pVtjN/gDtgd/OC5zgtDH23Zh:Owd3CBUuL5WafVQ99W3PQdLj0
- TLSH T14E93F9E36BC8561CC58B62B4C85101E2F435F81613E6461EF3DCAFA5EC197C82646EAE
- MD5 SHA1 SHA512 SSDEEP TLSH
كرت باترك.exe/Blue-Voicemeeter-EQ/MidiOutput.cs
- SHA256 997afd79ced2cb5b4e7d56fb50644ff426b07fb104acce2d0f18c2bac2e0c335
- MD5 ae396905f90b949e2f2cca32ca9a9738
- SHA1 1e3238613349cd6b485897b29bca113aece6d6e6
- SHA512 9413ea1a858921875ecd1ddcd96be4b2e8b82fed4df3da3d2c39121181001d584ecb1e5dd1bb3730d7ec7eed12eb309ca0752f1b72c04599d3f3ce85d055537b
- SSDEEP 96:CV4Qc2wVZlWXyk0Pu9L+4INM3tGcVF6mwuO9e9r9JT9z8EwCKRBXpcoDwUg:18wVZoCk0of7b7wuO9e9xJpr6BOoZg
- TLSH T1A2B1B5706B68A2AF088B19A96DF8A61CF563132912403C60DB5D5B065FDF043DBB2F1D
- MD5 SHA1 SHA512 SSDEEP TLSH
كرت باترك.exe/Blue-Voicemeeter-EQ/OriginalSkin.cs
- SHA256 c3fa3e47565004a94b36ce6dc6b85cde7303297985f315d2031ebf8565823f59
- MD5 8521c8cc6bd5200e6802588d489983fa
- SHA1 96821cfd9cbe9f2ac36f329f1e282aca335d3060
- SHA512 d866e1b3c6c3fcacb9a61ae15e908c4a73b0dc340ae6c12e1044712beb6631a34dc94c0f7ae89d8db5e8e6d48c6bdb1c7d2b0056b056fee0670a14c81919b8f3
- SSDEEP 384:IAyielYj/FtmyCOMHVk3di1EHyR3RO8QJIC7oq5o+5pOj7Th2OJQ/QykFz8JViUa:BBg40KH4cfIEoq6BjHhD6IycfUTW
- TLSH T17EF26D2233891A70DCF6548F05E549805FBDB2558241C716BB6FC5AB2E8E84642BEF3F
- MD5 SHA1 SHA512 SSDEEP TLSH
كرت باترك.exe/Blue-Voicemeeter-EQ/OriginalSkin.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 894a7069820856ae85093a9a1dbb038785adf0d171264b245d8637ad831f175f
- MD5 5f35f464e1ffc65564d2456faaf199bb
- SHA1 048e1e009536f5ccf16b27367a83c8f79a90ec95
- SHA512 3e8b351e015b33bba258152e93ba1042e399fc51538f308dcafba393ab01a34b322a2fe20dac1c31bb9b8c41aa2ff9f44c4aedc480a87a0e119718a215986cfb
- SSDEEP 1536:Ih9JErjv84+PdCvHNM/K8IJ2XyYbn44i:Ih9JErjf+P6NM/HIcXyWnNi
- TLSH T11B633B8533F99A23F97D8B7E967242214375BD231532E34E0EE990DE0A727D84804BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
75646
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
66KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
696B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
كرت باترك.exe/Blue-Voicemeeter-EQ/README-Arabic.txt
- SHA256 90c715d9c8ef0ad94d28fb720a36978a8e57ef6f323fdbe4e72e1db64acca3ff
- MD5 f7f9475218f24c6cedfbf9de83f822f6
- SHA1 b5e3231f3818dde2f39c37ba4fb3b9db305facc8
- SHA512 b0d4f7b42e6349083e1ee54befc50e3fc5411820dc0b204f8f2c9d6712eafb9ad973a38022bd6b2627bf931818d2969d7ea6207dfaf5f66c4ff46fbeee2f15e4
- TLSH T14B61C2E30E21C4705A599F4AD2D23278D9777E37964EF83234530E11E5DB823E28E679
- MD5 SHA1 SHA512 TLSH
كرت باترك.exe/Blue-Voicemeeter-EQ/RealEqualizer.cs
- SHA256 d9e1b860e64e45b161be1851674de67a6d3eb716971ce4b3784b13e14de6d8d3
- MD5 f608a8f07cc01551d60f37460d640396
- SHA1 0b74e29b358c27cdfc1266a5f2310a84c7cc934a
- SHA512 7f46f20584b4cde87f161007223ea9e0cfb953cd409ca905b976b8d79abf0808cdce43564b5da20f408435674518ef147d363950142c6850085a8c044191e914
- SSDEEP 96:CjMK2J2wVnR1ujuifhwBXBzRHlpaeSY+KeSd+2s2sTfjYuvTYg4i2XzNeQkKU9wh:B5ijnKRRHKeS0eSbs2sTfjzvTYgX2YKp
- TLSH T1A9C1E98C61C6502B8AD753AFBDC917D2F51BA12C20AE9824CC46CB0E5F8514276F6F3E
- MD5 SHA1 SHA512 SSDEEP TLSH
كرت باترك.exe/Blue-Voicemeeter-EQ/Verification.txt
- SHA256 b9035a4584bcae76a373e897a5725020bbe2caeb7ccd93947b97d0efe73ebfea
- MD5 b1559a4a89b110364a93d29971c21736
- SHA1 dfeefce8aa851d6e874054f8c1764ea0d71d6f42
- SHA512 278adcbc56bf90b17d864618fc039a2ce9965f56471e200cb15def368f30e023a65515c59c2e1d87db363f9fd333980be2bc139d1882054a511f089e6d9107a7
- TLSH T15DE02DEE5C2111A4A7E8527127D6A71827DEBE8035A463E52498C7911843D599F1B80E
- MD5 SHA1 SHA512 TLSH
كرت باترك.exe/Blue-Voicemeeter-EQ/VoicemeeterBridge.cs
- SHA256 38bd8267a560be6548f698478e9742f3fb047347155ee454bcba40eb9a258fab
- MD5 3790274e37eaf1428f643786b9e9fac7
- SHA1 330e3fe491fe227b093da85d1e632a8cfb06122d
- SHA512 1a64e90f4921cca6296e564cd128ff2da07ee304c47fa42a986bbd001b0dd213318b325a57ce9f985f77cb9bd059f1e11ed593863dd27b424f13620845ecbbbf
- SSDEEP 96:CVc7vGoT1o1V9kdT5tTWuUPT8FOO2IyfU8GuC3Pt:/Go5gsdFB+AF5yfUvr3Pt
- TLSH T109B17148A1819B6C95E712937DC35728F23D51BA35F82420C5CE0E13AFE3F46A37A799
- MD5 SHA1 SHA512 SSDEEP TLSH
كرت باترك.exe/Blue-Voicemeeter-EQ/VoicemeeterRemote.dll
- IMPHASH f88eca84e5bd78d6db1efaf50cfb9972
- SHA256 5d85a8e00c714a707a65671936fb49611f4e7751a9065c618804ed5ca47872cb
- MD5 79b4ef6b17d0a8bb825437773c1d8e3f
- SHA1 255fbeb8ad45faad93afeac2afa2cb7e7d78d079
- SHA512 0c76b45b3c311f34de0087755d63e7966edf24ad77360897475854ff66421ce55e93f35a78ea10f15cce8ccc505618d12dd6114eabc89b73a1e468f5b16799f9
- SSDEEP 3072:+cvA+X1yaikOLqMvbJl1rvVygoP5UG7GjSVX:PYH1rtyrQjS5
- TLSH T1E6F3AF1376D240F6D5813EBD14E7373BEF3AAA5648668E438B98DD521C31352BB2620F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
13:66:36:5a:25:0b:71:6a:b7:25:77:01:32:d2:54:d0:a9:df:36:cd:27:58:52:f7:07:15:6b:65:4f:68:9e:ae
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Dec 11, 2025
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
02:63:b9:b0:fb:b3:01:be:bb:d1:47:f4
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 21, 2025 - Jul 22, 2027
Subject
CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE
Serial Number
84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4
Issuer
CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 15, 2025 - Jan 10, 2037
Subject
CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE
Serial Number
83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f
Issuer
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 16, 2025 - Jul 16, 2041
Subject
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
76:53:fe:b9:3d:d9:e7:e9:26:32:ac:d6:0a:be:ac:38
Issuer
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2020 - Mar 18, 2045
Minor OS version
0
Major OS version
4
Entry point
58027
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
WideCharToMultiByte
MultiByteToWideChar
GetCurrentProcess
VirtualFree
VirtualAlloc
QueryPerformanceFrequency
DeviceIoControl
CreateEventA
GetModuleHandleA
GetProcAddress
LoadLibraryA
FreeLibrary
OpenFile
GetModuleFileNameA
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
TerminateProcess
RtlUnwind
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
CloseHandle
SetFilePointer
GetLastError
LCMapStringW
LCMapStringA
GetOEMCP
CreateFileW
WriteFile
GetCurrentThread
SetThreadPriority
CreateThread
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetTickCount
OpenFileMappingA
CreateFileMappingA
MapViewOfFile
Sleep
UnmapViewOfFile
GetACP
GetCPInfo
ExitProcess
GetVersion
GetCommandLineA
HeapFree
HeapReAlloc
HeapAlloc
InterlockedIncrement
InterlockedDecrement
user32
CharLowerBuffA
advapi32
RegEnumKeyA
RegOpenKeyExW
RegEnumKeyW
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyW
RegQueryValueExA
RegOpenKeyA
RegCloseKey
shell32
ShellExecuteA
ole32
CoInitialize
CoCreateInstance
CLSIDFromString
CoUninitialize
CoTaskMemFree
PropVariantClear
setupapi
SetupDiGetDeviceInterfaceAlias
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupDiOpenDeviceInterfaceRegKey
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
winmm
timeBeginPeriod
waveInGetDevCapsW
waveInGetNumDevs
waveOutGetDevCapsW
timeEndPeriod
waveOutGetNumDevs
VBVMR_AudioCallbackRegister
VBVMR_AudioCallbackStart
VBVMR_AudioCallbackStop
VBVMR_AudioCallbackUnregister
VBVMR_GetLevel
VBVMR_GetMidiMessage
VBVMR_GetParameterFloat
VBVMR_GetParameterStringA
VBVMR_GetParameterStringW
VBVMR_GetVoicemeeterType
VBVMR_GetVoicemeeterVersion
VBVMR_Input_GetDeviceDescA
VBVMR_Input_GetDeviceDescW
VBVMR_Input_GetDeviceNumber
VBVMR_IsParametersDirty
VBVMR_Login
VBVMR_Logout
VBVMR_MacroButton_GetStatus
VBVMR_MacroButton_IsDirty
VBVMR_MacroButton_SetStatus
VBVMR_Output_GetDeviceDescA
VBVMR_Output_GetDeviceDescW
VBVMR_Output_GetDeviceNumber
VBVMR_RunVoicemeeter
VBVMR_SendMidiMessage
VBVMR_SetParameterFloat
VBVMR_SetParameterStringA
VBVMR_SetParameterStringW
VBVMR_SetParameters
VBVMR_SetParametersW
Name
.text
Size
84KB
Virtual Size
83KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
32KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=24, id=14, version=7299,
count=1, productName=Unmarked objects (old),
count=19, id=19, version=8034,
count=207, id=1, productName=Unmarked objects,
count=2, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=143, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
كرت باترك.exe/Blue-Voicemeeter-EQ/VoicemeeterRemote64.dll
- IMPHASH 53fd8181186447ca1e6c4bc143b7736b
- SHA256 6c108f99c955ec963702dba37739d70c31c9ce4d77758b312c0233a1f435f4fb
- MD5 b16e2603eeee1099dfe97ecf987a1319
- SHA1 a4229d70f8471d2bf7df79c5d7b426aa0bb60b94
- SHA512 3c27ae44a7d9bd88c169721a963924901abecf30537582e44f9610054e19bb8cb6bed18fadf40d71391af84d327227ba9dac2785650dd4b664eef18659fee839
- SSDEEP 3072:aR8mc+AKYjdhTzhTq4UeT/AS5IGFM4W1CgmgReNA9KHVL:aRVXA/zhTWeT/AS5L6tTKAEHx
- TLSH T190149D8A329010FAE85B9238C9E76656FB73B45313755BCF166483761F173E22A3B321
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
cf:0d:69:d5:9c:53:eb:a2:21:1f:c8:0b:07:21:93:01:43:34:e4:af:f4:86:0c:a0:24:e0:6a:a6:95:d9:f4:ed
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Dec 11, 2025
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
02:63:b9:b0:fb:b3:01:be:bb:d1:47:f4
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 21, 2025 - Jul 22, 2027
Subject
CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE
Serial Number
84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4
Issuer
CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 15, 2025 - Jan 10, 2037
Subject
CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE
Serial Number
83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f
Issuer
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 16, 2025 - Jul 16, 2041
Subject
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
76:53:fe:b9:3d:d9:e7:e9:26:32:ac:d6:0a:be:ac:38
Issuer
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2020 - Mar 18, 2045
Minor OS version
2
Major OS version
5
Entry point
68104
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
H:\Travaux\VB_VAC\VoiceMeeter\Project\voicemeeterpro_vc2010\x64\Release\VoicemeeterRemote64.pdb
setupapi
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceInterfaceAlias
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsA
SetupDiOpenDeviceInterfaceRegKey
winmm
waveOutGetDevCapsW
timeBeginPeriod
waveOutGetNumDevs
waveInGetNumDevs
waveInGetDevCapsW
timeEndPeriod
kernel32
SetFilePointer
WriteFile
CreateFileW
CloseHandle
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThread
SetThreadPriority
QueryPerformanceFrequency
WaitForSingleObject
CreateEventA
DeviceIoControl
MapViewOfFile
UnmapViewOfFile
GetTickCount
CreateFileMappingA
OpenFileMappingA
CreateThread
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetStringTypeW
LCMapStringW
LoadLibraryW
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
SetLastError
FlsFree
FlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameW
ExitProcess
GetModuleHandleW
HeapDestroy
HeapCreate
GetVersion
RtlVirtualUnwind
HeapSetInformation
GetStartupInfoW
GetFileType
GetStdHandle
SetHandleCount
InitializeCriticalSectionAndSpinCount
RtlUnwindEx
EncodePointer
GetLastError
Sleep
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
OpenFile
WriteConsoleW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCommandLineA
HeapFree
HeapAlloc
HeapReAlloc
GetCurrentThreadId
HeapSize
DecodePointer
RtlCaptureContext
RtlLookupFunctionEntry
FlsSetValue
user32
CharLowerBuffA
advapi32
RegEnumKeyW
RegOpenKeyW
RegQueryValueExW
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
shell32
ShellExecuteA
ole32
PropVariantClear
CoInitialize
CoUninitialize
CoCreateInstance
CLSIDFromString
CoTaskMemFree
VBVMR_AudioCallbackRegister
VBVMR_AudioCallbackStart
VBVMR_AudioCallbackStop
VBVMR_AudioCallbackUnregister
VBVMR_GetLevel
VBVMR_GetMidiMessage
VBVMR_GetParameterFloat
VBVMR_GetParameterStringA
VBVMR_GetParameterStringW
VBVMR_GetVoicemeeterType
VBVMR_GetVoicemeeterVersion
VBVMR_Input_GetDeviceDescA
VBVMR_Input_GetDeviceDescW
VBVMR_Input_GetDeviceNumber
VBVMR_IsParametersDirty
VBVMR_Login
VBVMR_Logout
VBVMR_MacroButton_GetStatus
VBVMR_MacroButton_IsDirty
VBVMR_MacroButton_SetStatus
VBVMR_Output_GetDeviceDescA
VBVMR_Output_GetDeviceDescW
VBVMR_Output_GetDeviceNumber
VBVMR_RunVoicemeeter
VBVMR_SendMidiMessage
VBVMR_SetParameterFloat
VBVMR_SetParameterStringA
VBVMR_SetParameterStringW
VBVMR_SetParameters
VBVMR_SetParametersW
Name
.text
Size
110KB
Virtual Size
109KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
35KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=37, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=123, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=11, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=19, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=213, id=1, productName=Unmarked objects,
count=16, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
كرت باترك.exe/Blue-Voicemeeter-EQ/hand.txt
- SHA256 aae4720fb818e25b0ae7bcd1bd3761730ed9c67a308b416805897ee13aae1733
- MD5 72dae589b0cd2214ff2a78d981b02427
- SHA1 89fffc23e5d5b13b5cdaec82ba442802264382c7
- SHA512 22169d8657d9c333ce9c33ab55e3e7b839e602c0b7f76b87791267003df2b40a758de2868bc2d8485c35a5a20b14510ecf62837743914c64fee5e3be7989dd25
- MD5 SHA1 SHA512
كرت باترك.exe/Blue-Voicemeeter-EQ/midi-output.txt
- SHA256 bb926f4b2ad5ff46844fcb91e10275dfad5712b352b434838a540b4c0104a8e6
- MD5 f5ffb9c416f9cceadb017860fde05f66
- SHA1 9770c13a297c3fbfec932c5e7bd3b36fed6a27a4
- SHA512 7b422d5c01bbf87a62a84b466bfbecb55462ae0a51d9f9d159ca714bfbde7baccad31d0018c8f4824fb414fbab8d60e175a01fc95c6f23869f8764ef330b7240
- MD5 SHA1 SHA512
كرت باترك.exe/Blue-Voicemeeter-EQ/siledr.bmp
- SHA256 bae61b36c730e5d091ee74db10d530404b0399784a2b97d49cdd5dacfeaf24d8
- MD5 6428af1cb7c2f936153aa7a0650f76a6
- SHA1 bd5b24d5e04459afdb02b508da1e724604e47158
- SHA512 f6010b587ab6d71efb5599d81b5d2297c33d79da5a3cd32b39551eebbb19d9c1ebadac603c1aaa9a740579dd99871875e698ef8cdcbe166d8dad65747c872621
- TLSH T1F42105D2B77CD71BCDC150B1D614D3365555B50EC00794B3D638695CE48D34847472F4
- MD5 SHA1 SHA512 TLSH
كرت باترك.exe/Blue-Voicemeeter-EQ/voicemeeter-strip.txt
- SHA256 186a919b8c7cb84aebf4e53c70cd1cc028a93a1d183ee29dd6e10cd18a714577
- MD5 aa4367f1fe496fd3c34d87d036a83e8e
- SHA1 c2910c1634f8c5d1b06192ba588d0e6d823e87ea
- SHA512 6d33dd30fa31fca5257e3478f09dceb15d1e84e2861b4e347c6a1a20194d6335d8fc3eb8277bb2e1e45537a76ec450ab8d2ba043c0c0969f63c5b3ca333030dc
- MD5 SHA1 SHA512