sb0490 Creative EAX Settings-share.zip
- SHA256 b9e18a89dc0c4f615ff2e8b6fbe819a6c6225a1ca5a3adc073998587558bccef
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
sb0490 Creative EAX Settings-share.zip
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
sb0490 Creative EAX Settings-share.zip
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
sb0490 Creative EAX Settings-share.zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target sb0490 Creative EAX Settings-share.zip
- Size 9.7MB
- Sample261104-t9a6eax18q
- SHA256 b9e18a89dc0c4f615ff2e8b6fbe819a6c6225a1ca5a3adc073998587558bccef
- MD5 1fd8f6b108a30fdf8f60d9318b754a39
- SHA1 702abdc3681145425b582014a4bf8b02d92f4012
- SHA512 e50947f03ec2f9481abe3a3ac4498991ea0ad134ef1a5616eb5c1bbe22bec7aad90c982f8d40a27ff2849605e0daa0d2e589b6649f93065a077cc46db6a33d05
- SSDEEP 196608:tcI6X0HHS0jcJ4AYyD+9vjw5SqHQe3Qb7v4tArDZFjuk4M3dbrQ9AQThLXxmIb0:tcIBbI4VySarHVgPv1r1puqdc6QThbkD
- TLSH T1E5A633ACEF682D90A99FE1FAEBA2E390D56B42FD08F12CF53B4143D47941905DDA0907
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 12 IoCs
Checks for missing Authenticode signature.
resource unpack001/Creative EAX Settings.exe unpack001/Device Control.exe unpack001/Libraries/CMSS3.ax unpack001/Libraries/CreativeCmssHost.exe unpack001/Libraries/CreativeEAXStudio_FLCore.dll unpack001/Libraries/Melanchall.DryWetMidi.dll unpack001/Libraries/Melanchall_DryWetMidi_Native32.dll unpack001/Libraries/Melanchall_DryWetMidi_Native64.dll unpack001/Libraries/NAudio.dll unpack001/Libraries/SoundBlaster_EAX_v2.3.dll unpack001/Libraries/Virtual.ax unpack001/Libraries/soft_oal.dll - Untrusted Codesign Signers 11 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack002/A/VBCABLE_ControlPanel.exe unpack002/A/VBCABLE_Setup.exe unpack002/A/VBCABLE_Setup_x64.exe unpack002/A/vbaudio_cablea64_2003.sys unpack002/A/vbaudio_cablea64_vista.sys unpack002/A/vbaudio_cablea64_win7.sys unpack002/A/vbaudio_cablea_2003.sys unpack002/A/vbaudio_cablea_vista.sys unpack002/A/vbaudio_cablea_win7.sys unpack002/A/vbaudio_cablea_xp.sys unpack001/Libraries/Guna.UI2.dll
File Explorer
-
sb0490 Creative EAX Settings-share.zip.zip 9.7MB
-
Creative EAX Settings.exe.exe 7.2MB
-
Creative EAX Settings.exe.config.xml 178B
-
Device Control.exe.exe 504KB
-
Extras/VB-CABLE-A.zip.zip 1.0MB
-
A/VBCABLE_ControlPanel.exe.exe 847KB
-
A/VBCABLE_Setup.exe.exe 867KB
-
A/VBCABLE_Setup_x64.exe.exe 892KB
-
A/pin_in.ico7KB
-
A/pin_out.ico7KB
-
A/readme.txt3KB
-
A/vbMmeCablea64_2003.inf4KB
-
A/vbMmeCablea64_vista.inf4KB
-
A/vbMmeCablea64_win7.inf4KB
-
A/vbMmeCablea_2003.inf4KB
-
A/vbMmeCablea_vista.inf4KB
-
A/vbMmeCablea_win7.inf4KB
-
A/vbMmeCablea_xp.inf4KB
-
A/vbaudio_cablea64_2003.cat8KB
-
A/vbaudio_cablea64_2003.sys.sys 40KB
-
A/vbaudio_cablea64_vista.cat8KB
-
A/vbaudio_cablea64_vista.sys.sys 40KB
-
A/vbaudio_cablea64_win7.cat8KB
-
A/vbaudio_cablea64_win7.sys.sys 40KB
-
A/vbaudio_cablea_2003.cat8KB
-
A/vbaudio_cablea_2003.sys.sys 33KB
-
A/vbaudio_cablea_vista.cat8KB
-
A/vbaudio_cablea_vista.sys.sys 33KB
-
A/vbaudio_cablea_win7.cat8KB
-
A/vbaudio_cablea_win7.sys.sys 33KB
-
A/vbaudio_cablea_xp.cat8KB
-
A/vbaudio_cablea_xp.sys.sys 33KB
-
Libraries/CMSS3.ax.dll 156KB
-
Libraries/CreativeCmssHost.exe.exe 23KB
-
Libraries/CreativeEAXStudio_FLCore.dll.dll .js 1.4MB
-
Libraries/Guna.UI2.dll.dll 2.1MB
-
Libraries/Melanchall.DryWetMidi.dll.dll 778KB
-
Libraries/Melanchall_DryWetMidi_Native32.dll.dll 56KB
-
Libraries/Melanchall_DryWetMidi_Native64.dll.dll 65KB
-
Libraries/Microsoft.Web.WebView2.Core.dll.dll 681KB
-
Libraries/Microsoft.Web.WebView2.WinForms.dll.dll 37KB
-
Libraries/NAudio.dll.dll 501KB
-
Libraries/OpenAL-Soft-LICENSE.txt22KB
-
Libraries/OpenAL-pffft-LICENSE.txt1KB
-
Libraries/SoundBlaster_EAX_v2.3.dll.dll 1.2MB
-
Libraries/Virtual.ax.dll 88KB
-
Libraries/VoicemeeterRemote.dll.dll 188KB
-
Libraries/VoicemeeterRemote32.dll.dll 156KB
-
Libraries/VoicemeeterRemote64.dll.dll 188KB
-
Libraries/WebView2Loader.dll.dll 190KB
-
Libraries/soft_oal.dll.dll 3.7MB
-
Libraries/vcruntime140.dll.dll 120KB
-
Theme/Default/1.txt7B
-
Theme/Default/Eco siledr.bmp1KB
-
Theme/Default/HandBlue.cur2KB
-
Theme/Default/siledr.bmp1KB
-
Theme/Default/siledr_blue.bmp1KB
-
Theme/Default/siledr_blue_wide.bmp1KB
-
Theme/Default/siledr_brec.bmp408B
-
Theme/Default/siledr_eq.bmp1KB
-
Theme/Default/siledr_hover.bmp1KB
-
Theme/Default/siledr_specker..bmp2KB
-
Theme/Default/siledr_track.bmp1KB
-
Theme/Default/sur siledr.bmp1KB
Creative EAX Settings.exe
- SHA256 f5453f6313a9bd8502b04c951b09fb2dd741f73a502f6a850c424a8a94c20aca
- MD5 92fe0130a8cd04e67da81b94f6e700b4
- SHA1 42376f15de95893b24c83c71f4c3e1b6824bede6
- SHA512 6665460bfc1ea054e05088763d420ae964988cbddf3edfcfda106f6ce0f01ecd8b0252ef6b6175dbb025d1874576b981119ea0809d0a8e6cd59cb8bffb374c2e
- SSDEEP 196608:7ej3XZ+12Cuk1+Lda3WtCcGDe64d5s3HDSeOb5YBp7aY64cXDO0Xh/y:7SZ+X3cpOeJd5GHDSeOb5YBp7aY64gDX
- TLSH T1D776275CB1F04CD5D83E26B2E46ACD97F3192CA98AA0720A20567D350DF378EDC1F966
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.text
Size
6.8MB
Virtual Size
6.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
400KB
Virtual Size
400KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Creative EAX Settings.exe.config
- SHA256 1db230d0cecfb848155ced039164e79b146efb10e0804154ce643eca6438a0b5
- MD5 fa4323d079346ecb5bd95a9a46c61cd0
- SHA1 0260f7621ce53ca3918d918c1730affa46885bf8
- SHA512 aa2343b23e42e77153a9289487adc8996e64b55a08ae94cd4fb99fc5c873d70270e6792e9705ff6962fee88eea31d850c268c10aef3311b0fa4c5b174aa6e0a5
- TLSH T142C080154098BD279D334F176351C525FBB072526464040CF42F9757073105D4247326
- MD5 SHA1 SHA512 TLSH
Device Control.exe
- SHA256 3bdfc650a89912726a002b9912e8c21481bc147263c5128b9f00c147b08aa2f5
- MD5 540b9e2d4e659fc3050e297ae9bdb914
- SHA1 9a0c737230292ffe75d0cd85a27bab1d6cab96b1
- SHA512 faec8415322a21f43db41b205ac57135c51e141b33653bad11c86da9e8304572bdb54c0b8ba9a68098aa21dd226ff2ab4f333ee30a8de563d2c5f7de799fec29
- SSDEEP 12288:tx4KwPrBmG1jlW7cKxV+yBa5uYIvig37owELPdJWp:tKKurMG/9KxV3gK37oHLP6
- TLSH T1E3B4230BAB409EF4CDA684314D6689619197D3EC997688CF65A1F08F3F07634A53FF88
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
502KB
Virtual Size
501KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Extras/VB-CABLE-A.zip
- SHA256 576fe1f000d8c4a8c9cbfb405f6f64897e6c0d99c347dd33bd7716b55a9ea5ef
- MD5 cfdb824d4997c1b4065b4d703b27cc67
- SHA1 511b7cd0919018a087aa2c120c37ee0fcfb93219
- SHA512 9f9b2e6f7627da271bce010f1b1306f33d18a528fbe6d46f573c9359b733f84127731a80f5fa9dc4bba0d89413eb9b8b6c4ec8c110eb3005fa3804141c65d85a
- SSDEEP 24576:wiBYDxHFU5S0vh/PXpTZAGjaIac1V71/BfDiZtdS:BAwthHtZAGjDa21BfDiDdS
- TLSH T1D235332FBB8C9C9CCDD89036E0CD9D0A1BE9107CD09E6B776236D8943ED220156B56B7
- MD5 SHA1 SHA512 SSDEEP TLSH
A/VBCABLE_ControlPanel.exe
- IMPHASH 3a057d8e2436bad9e0ae8c20a8d4d334
- SHA256 39c0c1f94f7dfbc1a731d89ddd327625e899ae6f655e94a2c4113398daae6424
- MD5 d11a75808673747f47a00807878a2b5b
- SHA1 400c3ff04e735804d531397b43d90a73e96c76e8
- SHA512 6f4f616f9bb8f98caf9ab8577bf43e7d3a45a80f0ca008c6592d29033846d1f60d9ee4381406b267b63adb9271ee99c15b4d6e54f7070933914110427994ca63
- SSDEEP 6144:2m+J+Gq3QgXnSXFXgSsVu1G8dHaUOdYIq/NdO+DWR8nF:EJiXS1XrdHtdZDTF
- TLSH T16A059939352893E3E4041371C42959AA770AE127BDC329AA318FCE0E71559D5CFFADB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
ba:9a:c1:99:4b:aa:a0:29:73:00:aa:35:6e:c7:4c:40:53:1c:9d:45
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Chains
Oct 19, 2015
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Serial Number
25:37:71:57:3a:5e:82:02:f5:44:ae:d9:b5:7f:3c:49
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 8, 2014 - Feb 6, 2017
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
61:19:93:e4:00:00:00:00:00:1c
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 22, 2011 - Feb 22, 2021
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
0
Major OS version
4
Entry point
15299
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
FlushFileBuffers
GetStringTypeW
GetStringTypeA
SetStdHandle
LoadLibraryA
GetOEMCP
GetACP
LCMapStringW
MultiByteToWideChar
GetCPInfo
SetFilePointer
WriteFile
TlsGetValue
SetLastError
DeviceIoControl
GetTickCount
CreateFileA
GetLastError
CreateMutexA
ReleaseMutex
WaitForSingleObject
CloseHandle
GetModuleHandleA
GetProcAddress
GetCurrentProcess
LCMapStringA
GetVersionExA
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetFileType
GetStdHandle
HeapFree
HeapAlloc
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
user32
GetMessageA
DispatchMessageA
TranslateMessage
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
GetSystemMetrics
SetWindowPos
SetTimer
BeginPaint
EndPaint
KillTimer
PostQuitMessage
GetDC
ReleaseDC
DefWindowProcA
MessageBoxA
DrawTextA
LoadBitmapA
PostMessageA
SystemParametersInfoA
gdi32
SetBkMode
SetTextColor
Rectangle
CreateCompatibleDC
SelectObject
GetObjectA
BitBlt
DeleteDC
DeleteObject
CreateFontIndirectA
CreateBrushIndirect
GetStockObject
advapi32
RegOpenKeyExA
RegCreateKeyExA
RegOpenKeyA
RegCreateKeyA
RegSetValueExA
RegCloseKey
shell32
ShellExecuteA
setupapi
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
Name
.text
Size
40KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
772KB
Virtual Size
769KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=21, id=14, version=7299,
count=13, id=19, version=8034,
count=131, id=1, productName=Unmarked objects,
count=102, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
A/VBCABLE_Setup.exe
- IMPHASH b6a0e451a265d1400cd8938ba1c07b7b
- SHA256 1220ece1a7816989a0205f570522708b63252bdde989fce1a5b2d8efc8f1d771
- MD5 6ee5f59488175e774b64799b17cbd50d
- SHA1 8477ccfeafb5cadc8a5788f0f5995a3abf71f248
- SHA512 a2268ae6f70eb417b74bc5bd0d5ba8ad5d8b20bca7ed3d6f053882f179c1a245512c708ef2ba80b763eb447591662c5fc4797e55daaaaae187a8ad72349abfc9
- SSDEEP 6144:csvu9XQ85KJObQKBsFmILSgFOVzPjWst+vNJGwrJvkixQHmdLSdWxe4MUq8haY0Q:lgltqJRRQHy6WxEH8MYmmBHCS
- TLSH T1BA155EED31223A03C99845769918BFFDB9841C04D6A5F974EA3B790C10396D0793EFEA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
91:0a:78:1d:77:4f:7c:a3:d3:6b:3d:71:42:c5:f8:68:c4:de:62:04
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Chains
Oct 19, 2015
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Serial Number
25:37:71:57:3a:5e:82:02:f5:44:ae:d9:b5:7f:3c:49
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 8, 2014 - Feb 6, 2017
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
61:19:93:e4:00:00:00:00:00:1c
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 22, 2011 - Feb 22, 2021
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
0
Major OS version
4
Entry point
18080
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
FlushFileBuffers
GetStringTypeW
GetStringTypeA
SetStdHandle
HeapReAlloc
VirtualAlloc
GetModuleHandleA
LoadLibraryA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetCPInfo
HeapAlloc
SetFilePointer
WriteFile
GetCurrentProcess
GetVersionExA
CreateMutexA
ReleaseMutex
WaitForSingleObject
CloseHandle
GetSystemDirectoryA
CreateDirectoryA
GetLastError
CopyFileA
SetFileAttributesA
GetOEMCP
Sleep
GetProcAddress
FreeLibrary
GetWindowsDirectoryA
GetModuleFileNameA
FindClose
RemoveDirectoryA
FindFirstFileA
FindNextFileA
DeleteFileA
GetACP
RtlUnwind
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
user32
GetMessageA
DispatchMessageA
TranslateMessage
LoadIconA
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
SystemParametersInfoA
GetSystemMetrics
SetWindowPos
EndPaint
PostQuitMessage
DefWindowProcA
SetCursor
MessageBoxA
GetDC
ReleaseDC
DrawTextA
LoadBitmapA
LoadCursorA
PostMessageA
BeginPaint
gdi32
GetStockObject
SetTextColor
RoundRect
SetBkMode
CreateCompatibleDC
SelectObject
GetObjectA
BitBlt
DeleteDC
DeleteObject
CreateFontIndirectA
Rectangle
advapi32
RegEnumKeyExA
RegEnumKeyA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyA
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
shell32
ShellExecuteA
Name
.text
Size
36KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
796KB
Virtual Size
794KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=20, id=14, version=7299,
count=11, id=19, version=8034,
count=129, id=1, productName=Unmarked objects,
count=79, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
A/VBCABLE_Setup_x64.exe
- IMPHASH a8194a43a704f66b831c9ab7866c9847
- SHA256 24b75e4a6f13a7bab355eae2e73e96c3992f6857d2bf784253c46e3f7efe9fcd
- MD5 8323da6530ea6eb166b6f4a20da16beb
- SHA1 d2fa65247accb9d1b7834de5655a066717e0b530
- SHA512 7044db34e48927b06cf50a68e8415e7c7c163b0e868d65f5b5c269ffe3c7fc1a00577a0ea5946f148ad3eb1e1c60473c01659ebb246e115fba5f849a914aa20a
- SSDEEP 6144:ZhGFpT4Igz/FGBQLyN0Q85KJObQKBsFmILSgFOVzPjWst+vNJGwrJvkixQHmdLSK:HF/4WltqJRRQHy6WxEH8MYmmBHL
- TLSH T1851571ED31223A0389D845769918BFFDB9841C04D6A5F974EA37B90C10396D0793EFEA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
65:6d:86:de:65:5c:cd:92:f8:80:27:de:36:d1:8f:4e:ed:37:49:db
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Chains
Oct 19, 2015
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Serial Number
25:37:71:57:3a:5e:82:02:f5:44:ae:d9:b5:7f:3c:49
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 8, 2014 - Feb 6, 2017
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
61:19:93:e4:00:00:00:00:00:1c
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 22, 2011 - Feb 22, 2021
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
2
Major OS version
5
Entry point
21456
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
H:\Travaux\VB_VAC\Installer\VBVAC_Setup_vc2010\x64\Release\VBCABLE_Setup_x64.pdb
kernel32
GetVersionExA
GetWindowsDirectoryA
GetSystemDirectoryA
CreateDirectoryA
FindFirstFileA
RemoveDirectoryA
CopyFileA
SetFileAttributesA
FindClose
GetModuleFileNameA
FindNextFileA
CreateMutexA
ReleaseMutex
DeleteFileA
GetModuleHandleA
Sleep
LCMapStringW
GetConsoleMode
GetConsoleCP
SetFilePointer
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
GetCurrentProcess
LoadLibraryA
GetProcAddress
GetLastError
FreeLibrary
CloseHandle
GetStringTypeW
FlushFileBuffers
GetTickCount
WaitForSingleObject
HeapSize
SetStdHandle
WriteConsoleW
CreateFileW
MultiByteToWideChar
FreeEnvironmentStringsW
RtlUnwindEx
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapSetInformation
GetVersion
HeapCreate
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
EncodePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
user32
DrawTextA
LoadBitmapA
LoadIconA
BeginPaint
GetDC
TranslateMessage
MessageBoxA
CreateWindowExA
PostQuitMessage
DefWindowProcA
SetWindowPos
ShowWindow
PostMessageA
DispatchMessageA
SystemParametersInfoA
GetSystemMetrics
UpdateWindow
LoadCursorA
RegisterClassA
GetMessageA
SetCursor
EndPaint
ReleaseDC
gdi32
SetTextColor
DeleteDC
CreateFontIndirectA
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
Rectangle
RoundRect
GetObjectA
GetStockObject
BitBlt
advapi32
RegQueryValueExA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegOpenKeyExA
RegCreateKeyA
RegEnumKeyExA
RegDeleteKeyA
RegSetValueExA
shell32
ShellExecuteA
Name
.text
Size
59KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
794KB
Virtual Size
793KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=26, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=101, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=11, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=13, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=148, id=1, productName=Unmarked objects,
count=5, id=174, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
A/pin_in.ico
- SHA256 db6ffd304e036a07a472d2e226a60a999bafbaf28ce78322a8271277e581b032
- MD5 d9a5613b33c46867c07a70265ada276d
- SHA1 a7cc1d7076d33440169d4278e5a37cd20dec2e3b
- SHA512 981fa46ed5b267c6948156b9f6a676adc1182ebf5e8e52c1598f461bfeaaad50e57eb4872ebf2f24d878d9157c25a1abfa249c0f865f6850164470540c13365d
- SSDEEP 48:cGH7VychiBF2cHEg/qhV7o9Rz4ciyiNC8anisNdr0F7BRfHbv+zeaSKPTIt:2ceHhqf+/5VwHpimZ
- TLSH T190E145CF8A7164C6F14D3EB8464D4A4AB78E7B0CC5C3D121B96C689D37E8225B41BBE4
- MD5 SHA1 SHA512 SSDEEP TLSH
A/pin_out.ico
- SHA256 06899ab8da336563ec1fbf2b67f2a7ec6e56f1fab10157f01b93860ba0c8fb46
- MD5 65b15b7daf75ff7fcf5db697c2aef97a
- SHA1 af147f92307e1d386f1a50a9520e971f20db68e9
- SHA512 2a9297b39ffd3fbc0a62b0170599271ab0a5bace72ecdd9482e626db37a0339c3b2b667991d3bf0e79a15d2d334f64ce4f4153388685ff31c038fe5cf7e52a06
- SSDEEP 96:LmWMufNlhgeg4xG473/25g4br6OR8CBo702IZ1d:LfMaNlhFB7qbr6K8CB84L
- TLSH T1E5E1772666266EE1EE4F3B799C1E0542B94CBB2B43D771A9CD080947B7E48487C0F2F5
- MD5 SHA1 SHA512 SSDEEP TLSH
A/readme.txt
- SHA256 c802624d64dea7f7b333e4464d3ec9b8bb2c6da2cc1bd2d3a56889cf60ed77a7
- MD5 67de05df45e547b434294b954c2db7c4
- SHA1 1f6e3e002f36548720fe95d7193afce685a0ee34
- SHA512 89c478c4a95914cad5d369a5f98cbafbc462c3402799fce5f0d607b9e8af77c6794e265bb9f1c744072216cc47f21f534003f9f6d93a7829a3a38d5a43e60405
- TLSH T12471D9DE7E06C3700751C3B634349460F3B6515AB5B3A64038A6F24E5B6258945EF83F
- MD5 SHA1 SHA512 TLSH
A/vbMmeCablea64_2003.inf
- SHA256 ca4f69d6b5f2b4e12ceed92015b83a1dd4083eefbafcbf527bec0dcbe3f9f9f9
- MD5 72fee906a903cd3bf12464baa0f45608
- SHA1 5fec8865f2a11864fbe8fe9363db6656695a2f20
- SHA512 52563f35c8fcb8bfd6d88b1b11f0300a82bac3bfece692027db3d57f05c867341d27ce33a16c789977d4486e991b74913cb988bfa87f676abb48884463740e6d
- SSDEEP 48:WyqASf8qpqm7nN+FxiQMXr1wu5SPN4QMECprcSSHrZiLGLgwlXmLhq1MC1zgvQdz:BqAuFpqm7845rPeXaMWCFgvD1cD
- TLSH T17B91F0CE01FF9C59A306A17CBF530DA3661221A0ECA7110A3BBD9A1194DD7DC5329DBD
- MD5 SHA1 SHA512 SSDEEP TLSH
A/vbMmeCablea64_vista.inf
- SHA256 6c9c8b85ca21b3bfd5294cd3f54e999203be330b143e76b607676ac098779ae2
- MD5 d04f74547d31af54d90e490e5c2f881a
- SHA1 7a52a6456a365d7d941a1298ab5ce3c8453c1ba1
- SHA512 d387abf2cd993375e07beb64eb7cc42325898af536e10754a60b01ad68028ba1707befd02f8e61d9689368824d1c2f8409d811f83872852295e67212d455adc0
- SSDEEP 96:MqAunfcZyusNVEr+rNIhwnIMWCFgvD1cW:MqAQfcZyusNnrNqwnIyEcW
- TLSH T14881FEC9058FFC598385E1E4EFA30AE3AA1323D550B311253BA79916D8DDBD81329CB9
- MD5 SHA1 SHA512 SSDEEP TLSH
A/vbMmeCablea64_win7.inf
- SHA256 7f07ad455c2c726f00374cfb0f2df81939a5588e43835e3eb751062bdc53b70b
- MD5 b6b8e6afad30c1c101d6cf3ab8c89127
- SHA1 1cdb847889384fa3916b7863bac854ebc2804212
- SHA512 c5bd49995b908b5c536428fec1aacd9d2aa6af95b03b9571ec51470ecedf8d1b515701d27b44f68eab6b7b113aee0d74ea36022a8070f02702dcf358b4bba4b4
- SSDEEP 96:MqAuHfcZyusNV8r+rNIhwniMWCFgvD1cW:MqAAfcZyusNnrNqwniyEcW
- TLSH T16D81FDC9058BFC558345E1E4EFA30AE3AA1223D550B311253BA7D916D8CCBD8132ADB9
- MD5 SHA1 SHA512 SSDEEP TLSH
A/vbMmeCablea_2003.inf
- SHA256 4a0be61a6588618a122a165e36d909d09c717f5e52b0053c0ec191d7dfe16596
- MD5 c36de35577178e971cfcf577321ff4eb
- SHA1 81c0f57f10a15bf8dcad789811c42f640084ef30
- SHA512 0f7233cc12f35fa992c9170bc021017f8cad7b6095e5393a81e0cb095c5aaff5b920c65ba660f8479382647960bfc1b325d09a1d978e1e0c00e9dcb283dc1e17
- SSDEEP 48:ByqASfaqpqm7nN+FxiQMXr1wu5SPN4QMECprcSSHrZiLGLyKlRULhq1MC1zgvQdz:MqAuHpqm7845rpQRoMWCFgvD1cD
- TLSH T1DB91E0CE05FF9C45A306A17CBF530E93661221A0ECA312193BBD9A1194DD7DC5329DBD
- MD5 SHA1 SHA512 SSDEEP TLSH
A/vbMmeCablea_vista.inf
- SHA256 129c89940dba962b860605a7734ab35b3453c51c1cefdae9d6a06aeff97c013c
- MD5 bd266a9155ef064a5d7e9ce3e60e1e61
- SHA1 8860501ba7bc20fd32841a55b54d6856c0e5b882
- SHA512 6b39d32b8eb236c991481e7f4cc9fd1e9065ebaeeeb0f29404221691e57750ce69df29baadb7204d64519bdc2718a217eabad01cbdd9bd32496bb7042dc8ef40
- SSDEEP 96:MqAu7fcZyusNVGr+rNIhwnuMWCFgvD1cW:MqAgfcZyusNZrNqwnuyEcW
- TLSH T1E481FDD9048FFC458385F1E4EF930AE3AA1323D550B311653BA79916D8CCBD81329CB9
- MD5 SHA1 SHA512 SSDEEP TLSH
A/vbMmeCablea_win7.inf
- SHA256 fdd057a1352341ccead9734d9fb35855f100d5d307f3ef2b9566ace967d09ad3
- MD5 454a12a64d3375f6e004e86c680eec72
- SHA1 8ca6c92a69e8bdefd8ebec7eac92e3bd40836d38
- SHA512 8f2324009665f6c90a41166e969f762bfba9efff58b55e21490c917df8ba90341327272b43f0dd0f668244a68497b80a115f3858b22300f1294b4cafd9391605
- SSDEEP 96:MqAusZ0fcZyusNVo7r+rNIhwnFWMWCFgvD1cW:MqA9Z0fcZyusNWOrNqwnFWyEcW
- TLSH T17281ECD9048BFC558345E1E4EFA30AE3AA1227D590B311253AA7D916E8CDBD81329CB9
- MD5 SHA1 SHA512 SSDEEP TLSH
A/vbMmeCablea_xp.inf
- SHA256 592ba3b20cdf32c4cc02ccc11c245f1bca2065b465ca546238b741d6a2fc2cf7
- MD5 7173c3e3c001599c1539d2674bb31e44
- SHA1 1eca8d95cc88c3c6672408236116d2a820a647c3
- SHA512 08d76c24321947cfc018caf35d4a56e58231f32059849deca13226b001a8e90153b7df069df9faaf34c3a74ff452e618d26bf8ded6cbd8aaae72fdc7476946a7
- SSDEEP 48:WyqASf2pqm7nN+FxiQMXr1wu5SPN4QMECprcSSHrZiLGLZhlcnLhq1MC1zgLQdWT:BqAu2pqm7845rmvcLMWCFgLD1cW
- TLSH T1189111CE01FF9C55A306A17CBF830D93661225A0ECA311093BBD9A1194CDBDC5319DBD
- MD5 SHA1 SHA512 SSDEEP TLSH
A/vbaudio_cablea64_2003.cat
- SHA256 c8a133e68ad5195eb7fb1d5137511316a1c47895bfb86481c70ad251617cc735
- MD5 cf1c5889833cff198cfa135a0afcc01c
- SHA1 43543f242d1f0a8c95340c6ab0f68036bcbbbb36
- SHA512 d238a4b6d3c42cd5262866139dc723307ffd9437de6f31d54ea9877d692e2d7bde4c2f512ed6edae1b02e4905ef53da239c7c5a5683ede1665512c9af7749764
- SSDEEP 192:hYkDnYe+PjPQrXOsT3mEjtlAur9ZCspE+TMArXM4Upc:hnYPLeO5sUHeMGMZe
- TLSH T1C8021ADB0E286452EDC7CDA0D6E5D16BED31B7A26D8494AE50B392805EC2FE03B1D40F
- MD5 SHA1 SHA512 SSDEEP TLSH
A/vbaudio_cablea64_2003.sys
- IMPHASH ca7fb7a55ae57fa257e0aadbf4320b46
- SHA256 0e3211eb286bbbbba9aabe9106f688e45f6a18d59b2562b275c3cb7e66793ff6
- MD5 8d02577b426006caba38104b99250fd9
- SHA1 a45a60589a471cd623e9e07e6df40661e13f8347
- SHA512 ed3303598c5056ee2e5cf386c507824fe58f2d57bc0c3b27ed339021471ad83064cf008e0111fe2814424c58a7036c5797d4b77fb8db10878b6420a9c6649d69
- SSDEEP 768:MGF2FV3Pibpw3bDe3us/iWyuZ0wuePi+4gj+qxlmC5mX:Mi2Hibb4Qu+JllmNX
- TLSH T199037C96E790A48AD4D74638CBD493A3FB70B6C51B4283CF126186E90E47BE4AF3D305
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
df:9d:92:60:7c:c3:6e:ce:7b:5b:0c:28:fe:96:f9:e5:a3:a1:a8:dd
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Chains
Oct 19, 2015
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Serial Number
25:37:71:57:3a:5e:82:02:f5:44:ae:d9:b5:7f:3c:49
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 8, 2014 - Feb 6, 2017
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
61:19:93:e4:00:00:00:00:00:1c
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 22, 2011 - Feb 22, 2021
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
6
Entry point
41136
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
c:\vbvaca\objfre_wnet_amd64\amd64\vbaudio_cablea64_2003.pdb
ntoskrnl.exe
ExAllocatePoolWithTag
ExFreePoolWithTag
IoRegisterDeviceInterface
IoSetDeviceInterfaceState
ExFreePool
IofCompleteRequest
KeInitializeMutex
RtlQueryRegistryValues
KeInitializeDpc
KeSetTimerEx
KeReleaseMutex
KeWaitForSingleObject
KeInitializeTimerEx
KeCancelTimer
KeBugCheckEx
portcls.sys
PcDispatchIrp
PcNewPort
PcAddAdapterDevice
PcRegisterSubdevice
PcRegisterAdapterPowerManagement
PcRegisterPhysicalConnection
PcInitializeAdapterDriver
PcNewMiniport
PcNewServiceGroup
Name
.text
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
636B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
PAGE
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
INIT
Size
1024B
Virtual Size
1022B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
418B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=110, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=24, id=1, productName=Unmarked objects,
count=5, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=2, id=125, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=3, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=9, id=137, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
A/vbaudio_cablea64_vista.cat
- SHA256 7c54c931d8e1786f6e6a1ed50ceca054e8f493e01ed46ebad65e055b469dceb2
- MD5 7d134267d6b0e9be232b2f5e7d0da28e
- SHA1 8c005a8e9a151768596d59cc139f6c5fc5a85986
- SHA512 2249eafc22b8aa24fc4e24e572c4fc7c3fca897e4a1b4eb0afed637aef5fc121bf19836b34a0337a47595a7aa40a60d11a08566f8d606605416ff55181cb458d
- SSDEEP 192:e5I8CQJnYe+PjPQrXOsT3mEjtlAur9ZCspE+TMArXEzl:eDnYPLeO5sUHeMG0
- TLSH T16E021BD70A286452EEC7CD50D6D5E16BED31B7D6AD84A4AE60B782812EC2FE0371D40F
- MD5 SHA1 SHA512 SSDEEP TLSH
A/vbaudio_cablea64_vista.sys
- IMPHASH ca7fb7a55ae57fa257e0aadbf4320b46
- SHA256 ee05ae32a02b4313d399bc4c7322cfee88956aca27d4300ad32d4e512c0a1bb2
- MD5 db728e744b1c856b617e47e34b87bfd9
- SHA1 ed82c17d9a5fb4cd381692e85fcfa263db4c12f5
- SHA512 65128b26479c95ddcbfcb4abb445225451d2bc69afa81591bed9b0367340fd678777f898a48060a9a13c8b4a6ad268cd01aaa7bf47d15c5a957469d1e1c4a1fa
- SSDEEP 768:Hk2Fde3TzpnexUG6/ieyuZnw+eXCd4gxqxUmj5mU:E27WzG3V+1JYUm0U
- TLSH T152036D96E790A58AD4974678CBD493A7FF30B6C51B0283CF126186EA0E47BE46F3D305
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
4e:8d:f6:36:ac:6d:1f:2e:cb:9f:05:bb:4d:41:66:b4:a8:7e:60:ee
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Chains
Oct 19, 2015
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Serial Number
25:37:71:57:3a:5e:82:02:f5:44:ae:d9:b5:7f:3c:49
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 8, 2014 - Feb 6, 2017
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
61:19:93:e4:00:00:00:00:00:1c
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 22, 2011 - Feb 22, 2021
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
6
Entry point
41136
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
c:\vbvaca\objfre_wlh_amd64\amd64\vbaudio_cablea64_vista.pdb
ntoskrnl.exe
ExAllocatePoolWithTag
ExFreePoolWithTag
IoRegisterDeviceInterface
IoSetDeviceInterfaceState
ExFreePool
IofCompleteRequest
KeInitializeMutex
RtlQueryRegistryValues
KeInitializeDpc
KeSetTimerEx
KeReleaseMutex
KeWaitForSingleObject
KeInitializeTimerEx
KeCancelTimer
KeBugCheckEx
portcls.sys
PcDispatchIrp
PcNewPort
PcAddAdapterDevice
PcRegisterSubdevice
PcRegisterAdapterPowerManagement
PcRegisterPhysicalConnection
PcInitializeAdapterDriver
PcNewMiniport
PcNewServiceGroup
Name
.text
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
660B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
PAGE
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
INIT
Size
1024B
Virtual Size
1022B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
418B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=129, version=50727,
count=24, id=1, productName=Unmarked objects,
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=2, id=125, productName=VS2005 build 50727, version=50727,
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=109, productName=VS2005 build 50727, version=50727,
count=9, id=137, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
A/vbaudio_cablea64_win7.cat
- SHA256 09b762362533f1b69d9b9c228c7c2584b369c27fcedf22bae113a2bc8eb5f2a7
- MD5 0ebc316f1eb21ff11c5c03393b1b90ac
- SHA1 17658b7450933e3e5268fd55a81fc1fa5434ebf9
- SHA512 95c5a591cd03e7199d191abe962ed92cea10642a01b67ecd8aa24fc6b796f11d5a37279be2a361240ec484b74186e97eebdc33855d2ffd373c70a55cae725561
- SSDEEP 192:uQw3nYe+PjPQrXOsT3mEjtlAur9ZCspE+TMArX8uzGB:u/nYPLeO5sUHeMG8XB
- TLSH T141021BE70E186052EDC7CDA0C6D5E16FED31B7E26D8494AE90B682D15DC2BE1371D40E
- MD5 SHA1 SHA512 SSDEEP TLSH
A/vbaudio_cablea64_win7.sys
- IMPHASH ca7fb7a55ae57fa257e0aadbf4320b46
- SHA256 e606ebbe8eed82c78c45207ca06a29448aed067840848c2989d3d8d9f1d04559
- MD5 48cd2cdf941d7a31ba38b98cec75c5c0
- SHA1 d9d780aa9c37f0cea5d344512fdbd82f5f88ca09
- SHA512 fb607dd7d6475e5604193ba4ea32c280071511da80c55d21507cf867d3b03a47ebbfdd3c5820e0ce78b4e8602c23828bd5c9a891cea5e897daa74e282bb04263
- SSDEEP 768:2k2Fde3Tzpne1YCG/ieyuZnw+eXCd4gxqxamK5mc:727WzSjV+1JYamlc
- TLSH T136036D66E790658AD497467CCBD49397FB30B6C51B0283CF126186DA0E87BE4AF3D305
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
da:19:17:85:11:3f:be:01:90:50:41:39:e0:43:fc:09:cc:06:36:84
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Chains
Oct 19, 2015
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Serial Number
25:37:71:57:3a:5e:82:02:f5:44:ae:d9:b5:7f:3c:49
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 8, 2014 - Feb 6, 2017
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
61:19:93:e4:00:00:00:00:00:1c
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 22, 2011 - Feb 22, 2021
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
6
Entry point
41136
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
c:\vbvaca\objfre_win7_amd64\amd64\vbaudio_cablea64_win7.pdb
ntoskrnl.exe
ExAllocatePoolWithTag
ExFreePoolWithTag
IoRegisterDeviceInterface
IoSetDeviceInterfaceState
ExFreePool
IofCompleteRequest
KeInitializeMutex
RtlQueryRegistryValues
KeInitializeDpc
KeSetTimerEx
KeReleaseMutex
KeWaitForSingleObject
KeInitializeTimerEx
KeCancelTimer
KeBugCheckEx
portcls.sys
PcDispatchIrp
PcNewPort
PcAddAdapterDevice
PcRegisterSubdevice
PcRegisterAdapterPowerManagement
PcRegisterPhysicalConnection
PcInitializeAdapterDriver
PcNewMiniport
PcNewServiceGroup
Name
.text
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
660B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
PAGE
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
INIT
Size
1024B
Virtual Size
1022B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
418B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=136, version=30729,
count=24, id=1, productName=Unmarked objects,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=137, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
A/vbaudio_cablea_2003.cat
- SHA256 afa56498e777e3c9f21011549826d3246692a8229c7c9bdb0cd3e8f70360449d
- MD5 e9c5fbe24efa70bd6954d5d97b4e4f50
- SHA1 10952f6842c17b5d08985d454acb4ec8de28f145
- SHA512 c914b07ead2b505dc737b100ee08bb6acc7490c3eb2be699904901710ddf15d594976dd82ebec6ea763760cc49b19f630e98cf4c704f5f1b6d349261e4648f56
- SSDEEP 192:h8JnYe+PjPQrXOsT3mEjtlAur9ZCspE+TMArX/sia9:OnYPLeO5sUHeMG0v
- TLSH T10402F9D70E282452EDC7CDA0D6D5D16BED31B7E65D84A4AE60B682815EC2FE03B1E40F
- MD5 SHA1 SHA512 SSDEEP TLSH
A/vbaudio_cablea_2003.sys
- IMPHASH a4a05ed563e0dd361bebd95e880d3118
- SHA256 73333853c5b438ca111781fe3a397c27ac02874bed2f98657a4873af4f3bc264
- MD5 abede3ff6c0be2d3c96c91c945d0a5ea
- SHA1 58e03bb5f7bbefd81256838a72a536823935676a
- SHA512 7940cd5b20faad2aa09bff83c6318a68b9027e5da53bd970fb466a008ca9e4b8154e10650c128d3e1c8aa73d266a6f312c5a9769a09e04bab0b48dbb69445bd1
- SSDEEP 384:stCW0Hd7txBF465IJIPaS+GDWNyqKYWL17hH9oqrN+G2UmnYPLeO5sUHeMTR:eC17txLJ5GSmNyqKnjprN+V5mN
- TLSH T168E25B623A91AA35FCC336F0869D76B5BABCE6A5170642C700280BF55E94BC06F7C54F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
7e:e5:4c:0f:92:46:96:dd:a7:14:36:51:46:bb:ea:f1:30:d3:98:29
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Chains
Oct 19, 2015
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Serial Number
25:37:71:57:3a:5e:82:02:f5:44:ae:d9:b5:7f:3c:49
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 8, 2014 - Feb 6, 2017
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
61:19:93:e4:00:00:00:00:00:1c
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 22, 2011 - Feb 22, 2021
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
6
Entry point
32886
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
c:\vbvaca\objfre_wnet_x86\i386\vbaudio_cablea_2003.pdb
ntoskrnl.exe
ExFreePoolWithTag
ExAllocatePoolWithTag
memset
_alldiv
ExFreePool
IoSetDeviceInterfaceState
IofCompleteRequest
IoRegisterDeviceInterface
RtlQueryRegistryValues
KeInitializeMutex
KeCancelTimer
KeQueryInterruptTime
_aullrem
_allmul
KeReleaseMutex
KeWaitForSingleObject
KeSetTimerEx
KeInitializeTimerEx
KeInitializeDpc
KeTickCount
KeBugCheckEx
InterlockedIncrement
InterlockedDecrement
portcls.sys
PcNewPort
PcRegisterPhysicalConnection
PcRegisterAdapterPowerManagement
PcDispatchIrp
PcAddAdapterDevice
PcInitializeAdapterDriver
PcNewServiceGroup
PcRegisterSubdevice
PcNewMiniport
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
PAGE
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
INIT
Size
1024B
Virtual Size
1002B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
812B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=32, id=1, productName=Unmarked objects,
count=5, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
A/vbaudio_cablea_vista.cat
- SHA256 a1861115a107e5085e25c0706a3e1d76942599cff18a2fd2f8fbe59e6e1ead64
- MD5 082bb4f183483230c1ce3b7525aa3979
- SHA1 f09126c020d76f9dc3ca5b913be9efa9a39498b2
- SHA512 d5bafb2fd12aa32edc26dba55816b6bf26e919c78d7b25cdcb18b8a36540a6b433a192a1642c4dbc93be1b3ebb55300dd657cff2beb4b2793c0cf47f842e1134
- SSDEEP 192:7eHI7tzrJnYe+PjPQrXOsT3mEjtlAur9ZCspE+TMArXzR/:7tznYPLeO5sUHeMG1
- TLSH T1DE021AD70E286052EDC7CDA0DAD5E16BDD71B3E65D8494AE60B782811EC2FE0371D40E
- MD5 SHA1 SHA512 SSDEEP TLSH
A/vbaudio_cablea_vista.sys
- IMPHASH a4a05ed563e0dd361bebd95e880d3118
- SHA256 d27aacd55b3f46a5d3546c639e108ad10155c698e94ffc0cfb6b6ba0e021e5f0
- MD5 feabe569b199287596b78e557cbfba48
- SHA1 16780706efb11152f469c04ad23ab8a2c18f82cc
- SHA512 0d94cbd00bdf22d5cacf1d15236521c887607eb5f89b73b16685fa51753f4e76466b10262d958551993dfbe888f3489e2192d3b9f869dcefb81048217e251a1f
- SSDEEP 384:yCW0Hd7txBF465IJIPSSCGDWNyqKYWL17hH9oqzFs0G2UxnYPLeO5sUHeMW:yC17txLJ5eSSNyqKnjpRs0a5m2
- TLSH T16AE24B623A506A35FCC336F0869D76B5BABCE6A5170642C700280BF56E94BC06F7854F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
5a:e1:51:74:2e:8a:a4:89:d7:70:2c:a0:8f:8e:ea:d7:72:cb:65:08
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Chains
Oct 19, 2015
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Serial Number
25:37:71:57:3a:5e:82:02:f5:44:ae:d9:b5:7f:3c:49
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 8, 2014 - Feb 6, 2017
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
61:19:93:e4:00:00:00:00:00:1c
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 22, 2011 - Feb 22, 2021
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
6
Entry point
32886
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
c:\vbvaca\objfre_wlh_x86\i386\vbaudio_cablea_vista.pdb
ntoskrnl.exe
ExFreePoolWithTag
ExAllocatePoolWithTag
memset
_alldiv
ExFreePool
IoSetDeviceInterfaceState
IofCompleteRequest
IoRegisterDeviceInterface
RtlQueryRegistryValues
KeInitializeMutex
KeCancelTimer
KeQueryInterruptTime
_aullrem
_allmul
KeReleaseMutex
KeWaitForSingleObject
KeSetTimerEx
KeInitializeTimerEx
KeInitializeDpc
KeTickCount
KeBugCheckEx
InterlockedIncrement
InterlockedDecrement
portcls.sys
PcNewPort
PcRegisterPhysicalConnection
PcRegisterAdapterPowerManagement
PcDispatchIrp
PcAddAdapterDevice
PcInitializeAdapterDriver
PcNewServiceGroup
PcRegisterSubdevice
PcNewMiniport
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
PAGE
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
INIT
Size
1024B
Virtual Size
1002B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
812B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=110, productName=VS2005 build 50727, version=50727,
count=32, id=1, productName=Unmarked objects,
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=4, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
A/vbaudio_cablea_win7.cat
- SHA256 9eab8bf838c6593feb1547c032018656a72cf83a11ee260675529f0684ec9e9c
- MD5 bd868706619ef599be18c207cfd2dd7b
- SHA1 e9b37283e0484ced37e1fbdf6dadb2e3c2e6680f
- SHA512 f73d120d9e045cad078a490a70c34bff0ebe22acacf3b9e6146f24d3b888fb3c80cabad8cde8b6952a5486da2663c0cacd10b3f8616f0a5216736f5e7f68704d
- SSDEEP 192:AGxanYe+PjPQrXOsT3mEjtlAur9ZCspE+TMArXg6+qO:XanYPLeO5sUHeMGFVO
- TLSH T19C021ADB0A2C6452EDC7CDA0DAD5E1ABAD31B3D65DC494AE50B282815EC2FE0371D40F
- MD5 SHA1 SHA512 SSDEEP TLSH
A/vbaudio_cablea_win7.sys
- IMPHASH a4a05ed563e0dd361bebd95e880d3118
- SHA256 4acc9a4e2e720ea91c7c662ba97ff945f10c6ab24341bd56ffa9bf8db9250d58
- MD5 e3d414cef03470338a1f2c4a81917af3
- SHA1 b870fdfd86d2984aa3a83514c3892239ed05d5aa
- SHA512 45e7b6aa03ccc4dc983173b08a9fd58c9fa783907b3906511fd824be38c599350cf49c394338e99bfab187891356a785460ef366ca4c1d7912214f8781822608
- SSDEEP 384:8CW0Hd7txBF465IJIPnSHGDWNyqKYWL17hH9oq37us2UQFnYPLeO5sUHeMgbgspf:8C17txLJ5zSPNyqKnjp37uD5mAcsB
- TLSH T1B8E25C623A906A35FCC336F0869D76B57ABCE6A5170652C700280BF56E94BC06F7C54F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
8d:18:4b:78:e0:27:bc:fe:a9:8d:43:7d:6b:e6:1e:df:a8:9f:9c:dd
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Chains
Oct 19, 2015
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Serial Number
25:37:71:57:3a:5e:82:02:f5:44:ae:d9:b5:7f:3c:49
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 8, 2014 - Feb 6, 2017
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
61:19:93:e4:00:00:00:00:00:1c
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 22, 2011 - Feb 22, 2021
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
6
Entry point
32886
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
c:\vbvaca\objfre_win7_x86\i386\vbaudio_cablea_win7.pdb
ntoskrnl.exe
ExFreePoolWithTag
ExAllocatePoolWithTag
memset
_alldiv
ExFreePool
IoSetDeviceInterfaceState
IofCompleteRequest
IoRegisterDeviceInterface
RtlQueryRegistryValues
KeInitializeMutex
KeCancelTimer
KeQueryInterruptTime
_aullrem
_allmul
KeReleaseMutex
KeWaitForSingleObject
KeSetTimerEx
KeInitializeTimerEx
KeInitializeDpc
KeTickCount
KeBugCheckEx
InterlockedIncrement
InterlockedDecrement
portcls.sys
PcNewPort
PcRegisterPhysicalConnection
PcRegisterAdapterPowerManagement
PcDispatchIrp
PcAddAdapterDevice
PcInitializeAdapterDriver
PcNewServiceGroup
PcRegisterSubdevice
PcNewMiniport
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
PAGE
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
INIT
Size
1024B
Virtual Size
1002B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
812B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=32, id=1, productName=Unmarked objects,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
A/vbaudio_cablea_xp.cat
- SHA256 8b5a6b49171059bcf9de67fc0f60fa50b50ed85ef2b8e3f0a686bb22c75b84bc
- MD5 7b16f6d4f10b2aa49cb919c4316e90a0
- SHA1 a04ff0bdacd3c2fe0ef9b8f996d170010b984094
- SHA512 f6bb3abd93d3aef242ed6e740ab6d0b744ee91e279f7960d28b05d15db7f0fc0c59893a07ef190269dbde8da4462ab475ff982d0e72003fbf94130076c62edc2
- SSDEEP 192:LZ66nYe+PjPQrXOsT3mEjtlAur9ZCspE+TMArXo/ogr70K:LNnYPLeO5sUHeMGEDAK
- TLSH T1D3022BDB0A282052EDC7CEA0D6D5D16BDD31B7E66D8464AF50B282916EC2FE0375D40E
- MD5 SHA1 SHA512 SSDEEP TLSH
A/vbaudio_cablea_xp.sys
- IMPHASH a4a05ed563e0dd361bebd95e880d3118
- SHA256 9c09ccae77084dbdec44934b67b850a48326385e88008947589e3872e1c9df61
- MD5 5e22c8e2e69142c82cad703d8c487337
- SHA1 aba73116fc146f7da0994e5504e9b8b3f49eb251
- SHA512 afcdf348260e9c70ab62e14112557b39aa5b69fe58f389c5b54801834f2809ffdc11f17539577aaa80b165ed45a5c92ee0e4e52ba39ea4bde4408503b4e9ea97
- SSDEEP 384:vfgW0Hd7txBF46lSbuvZ83fb7NUQsyzz6qKYMr1dhPCQAJmAnYPLeO5sUHeMxy:ng17txLJl831UA6qKNdbAJ35m4
- TLSH T1FAE24B623AA0A125ECC336F4C79E77B6AA7CE6A5171252D700280BF55E943C16F7C48F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
d7:02:41:5a:ef:66:d0:ff:bf:ea:44:f8:1e:bf:61:4c:f4:5a:1b:c7
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Chains
Oct 19, 2015
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Vincent Burel,OU=Individual Developer,O=No Organization Affiliation,L=Eymet,ST=Dordogne,C=FR
Serial Number
25:37:71:57:3a:5e:82:02:f5:44:ae:d9:b5:7f:3c:49
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 8, 2014 - Feb 6, 2017
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
61:19:93:e4:00:00:00:00:00:1c
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 22, 2011 - Feb 22, 2021
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
6
Entry point
23286
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
c:\vbvaca\objfre_wxp_x86\i386\vbaudio_cablea_xp.pdb
ntoskrnl.exe
ExFreePoolWithTag
ExAllocatePoolWithTag
memset
_alldiv
ExFreePool
IoSetDeviceInterfaceState
IofCompleteRequest
IoRegisterDeviceInterface
RtlQueryRegistryValues
KeInitializeMutex
KeCancelTimer
KeQueryInterruptTime
_aullrem
_allmul
KeReleaseMutex
KeWaitForSingleObject
KeSetTimerEx
KeInitializeTimerEx
KeInitializeDpc
KeTickCount
KeBugCheckEx
InterlockedIncrement
InterlockedDecrement
portcls.sys
PcNewPort
PcRegisterPhysicalConnection
PcRegisterAdapterPowerManagement
PcDispatchIrp
PcAddAdapterDevice
PcInitializeAdapterDriver
PcNewServiceGroup
PcRegisterSubdevice
PcNewMiniport
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
PAGE
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
INIT
Size
1024B
Virtual Size
1002B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
896B
Virtual Size
794B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=32, id=1, productName=Unmarked objects,
count=5, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Libraries/CMSS3.ax
- IMPHASH 2b24776e8d2f49908305be9df7d1a5f6
- SHA256 84c89836317c51a80a8790385c7c61ccecfcfcde07226977ae46d571b1b2936a
- MD5 bf43d033b4ca60e500352f43bca0f43d
- SHA1 58deb169db5414c7167dcc130035a36265750b9d
- SHA512 4d827cb1db558398a1a55134c324471d82623f70eb78bf6a7ff313b163f0238c23ff955041f99827eb0c44e699d6256a3fc36d6fe913a15aba333f076ac96b2f
- SSDEEP 3072:UbYhee9HkD6ZhQc5unmLPfBN5CPJ5lF/4lvAtcs2LcXuRa99A:UbUekvQRCPfbwP7luvsS4r99
- TLSH T197F3D6014606A12EFCD35EB584EF5ABF9B386741032816C793D0DE6A7B622F27E34176
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
112208
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcrt
_purecall
__CxxFrameHandler
ceil
fwrite
memmove
tan
sinh
floor
tanh
??2@YAPAXI@Z
fopen
fclose
memcpy
pow
fflush
sin
memset
strncpy
exp
cos
sprintf
sqrt
log
fabs
strcpy
memcmp
_ftol
??3@YAXPAX@Z
kernel32
lstrlenA
GetVersionExA
DisableThreadLibraryCalls
WideCharToMultiByte
GetACP
LeaveCriticalSection
GetModuleFileNameA
GetLastError
MultiByteToWideChar
FreeLibrary
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
InterlockedIncrement
InterlockedDecrement
advapi32
RegCreateKeyA
RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
user32
wsprintfA
wvsprintfA
ole32
CoCreateInstance
CoTaskMemAlloc
StringFromGUID2
CoUninitialize
CoFreeUnusedLibraries
CoInitialize
CoTaskMemFree
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
128KB
Virtual Size
125KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=95, version=2190,
count=12, id=93, version=2179,
count=120, id=1, productName=Unmarked objects,
count=6, id=14, version=7299,
count=3, id=4, version=8047,
count=1, id=28, version=9178,
count=12, id=11, version=8966,
count=1, id=48, version=9044,
count=25, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Libraries/CreativeCmssHost.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 aee368fcb24ef5f07a4246aa75a25c417925a50386f2ae5d482d16ee58f353a9
- MD5 1261f64603c2cd2f9c3b410e14bb54c6
- SHA1 57ad9eed6c847fa481b0871d36b81d212325e432
- SHA512 c32ed0038301906e7c7fcd9eb16b07b28ac607087cab2ceb818c4312d89944e2d79b9bc360807d7e3b885af43ff239518ce35395694718b2e6659239b8760ec2
- SSDEEP 384:D3YcF3S+maf4K6Rd7B1NqHs4cPGc+M51ny5E6wnhVg8kSBkW:Mc1S+vhMNfNqHs4cGcrLnwwnH+IkW
- TLSH T10FB21A1D67F8E123D1BE43B989F34F4A07B0E9265323DFC90A7446A96A373E45A00B57
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
29486
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Libraries/CreativeEAXStudio_FLCore.dll
- SHA256 64115d0979387ee5a11fbb6d649cfb451a5627f3e76ea484a57e2920664a5981
- MD5 d8ca0f130e6f0736610d5b5b6ded0763
- SHA1 30739a640806259665d66264da03c810b92af7c1
- SHA512 1164c73ed1c9f9a6e6f3aa7a07a926548bcb0f34918f9d6a3f625fc0577883968499f8eb68f77404e86033f941ff3ca020bfd634c22f7df98b04240e035a4152
- SSDEEP 24576:vCnVAzt6hzjmPbzaqS7Hm21ihaaJZMJ7KsA7uiLv5jNUN0Uu:Ic6h3ibTS7H4hbMJ7gLv5jNUWU
- TLSH T1D565E4B575E75CD9D23E01F8C6F58ED3E2243C5D9EA1B04A6128BE2009F275DD8AE0E1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
744B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Libraries/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6d876b257a97995d21072acd44580633468516121145cc218277edc18f971030
- MD5 58459aefb74d5ff786b9efb982d44eab
- SHA1 584f851c9824a27f4e2e5594ac206f8b165adf72
- SHA512 80e975d2726eb1e4515a79f3ced422e61315f9b2bcb87d054aa654c1885c12c2a16f75da9aba6f8cd2dd652bb85da50579d1e618f10fab1e50c0cd29f37c7b55
- SSDEEP 24576:mecRcAIrcai1e9RcNiCljNAXCITob+HgbY8DkUKAMDitqTwCTxZmxV7FdHQ/jzwQ:3AIKyo+HgbY8DkRmaZ8V7FyH
- TLSH T133A50A147ED4EB27D16BCE33D5E24011E3F1E5A32AB1EB0E76D35768184234A788636E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
0c:8b:14:20:bc:10:db:d0:29:b9:4e:67:9d:b2:a6:c7:df:c3:b3:87
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sobatdata Software
Chains
Feb 18, 2025
CN=Sobatdata Software
Subject
CN=Sobatdata Software
Serial Number
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Issuer
CN=Sobatdata Root CA
Timespan
Oct 23, 2019 - Oct 22, 2025
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Minor OS version
0
Major OS version
4
Entry point
2188846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Libraries/Melanchall.DryWetMidi.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ad4ac36ecd26a0dd9c79ed0fadd6a9a18fcbdef0032af22f083e9430e1c84e87
- MD5 ed0dc7a819ba3e72503409b1bc3f7b66
- SHA1 9e2ead3d137005dd19573f2695657eff3015bbf0
- SHA512 b4709a51d7da713f1ae0828664f9dd622ad6f8740d0d0c9872f3ab54a9bd61d01fb7c9bdd1b24f012880f16e86034f2d0926c02c73276ddb1ac55ea5643db9f0
- SSDEEP 12288:vwUNlhmD+rq4sdOuxyuD63PdQAdPYfFRvBR:vwUM+GC1uWPdG3BR
- TLSH T19B05591237EC8E3BC6AF163BD570129963F0E846B393EB4B2314A6995D96B425C403F7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
797082
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/DryWetMidi/obj/Release/net45/Melanchall.DryWetMidi.pdb
mscoree
_CorDllMain
Name
.text
Size
774KB
Virtual Size
774KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Libraries/Melanchall_DryWetMidi_Native32.dll
- IMPHASH 1664d86a0cab81be8d8ef31af93e08ac
- SHA256 080346c638e219ec7cd4748e370e5e11931ed3a228c17f76d84c4d10ba9c9e6f
- MD5 1b976d18b403ffb7d670b17a871bbfd4
- SHA1 7e2022b1833f8ad6c4f4cc643d7068e013107ebd
- SHA512 1b676ca71cba6ed2fc9952e46038eb891217a7960d7aa10b37dcb0f6230e30ab2e62d1e36faf7c783785c7874173dd29ab947e8bcd4be8c36cec7277a2340692
- SSDEEP 384:ikfQAw+aLuu4N5ljtm8Xy9kjwJFP9TNaZFjnUmWw6w+e5XchXSvWZdTc2xv1Awo6:hft9RBi9kcfPmZFjHP5cJPDHthH
- TLSH T18343A890BE844C9AE411B37854E5C167B63CB9D5C6031F0766286F35AB23BC13EDA27E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4636
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
msvcrt
_amsg_exit
_initterm
_iob
_lock
_unlock
abort
calloc
free
fwrite
malloc
memcpy
realloc
strlen
strncmp
vfprintf
winmm
midiInAddBuffer
midiInClose
midiInGetDevCapsA
midiInGetNumDevs
midiInOpen
midiInPrepareHeader
midiInReset
midiInStart
midiInStop
midiInUnprepareHeader
midiOutClose
midiOutGetDevCapsA
midiOutGetNumDevs
midiOutLongMsg
midiOutOpen
midiOutPrepareHeader
midiOutReset
midiOutShortMsg
midiOutUnprepareHeader
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
timeKillEvent
timeSetEvent
CanCompareDevices
CloseInputDevice
CloseOutputDevice
CloseSession
ConnectToInputDevice
DisconnectFromInputDevice
GetApiType
GetDeviceManufacturer
GetDeviceProduct
GetInputDeviceDriverVersion
GetInputDeviceHashCode
GetInputDeviceInfo
GetInputDeviceManufacturer
GetInputDeviceName
GetInputDeviceProduct
GetInputDeviceSysExBufferData
GetInputDevicesCount
GetOutputDeviceChannelsMask
GetOutputDeviceDriverVersion
GetOutputDeviceHashCode
GetOutputDeviceInfo
GetOutputDeviceManufacturer
GetOutputDeviceName
GetOutputDeviceNotesNumber
GetOutputDeviceOptions
GetOutputDeviceProduct
GetOutputDeviceSysExBufferData
GetOutputDeviceTechnology
GetOutputDeviceVoicesNumber
GetOutputDevicesCount
IsInputDevicePropertySupported
IsOutputDevicePropertySupported
OpenInputDevice_Win
OpenOutputDevice_Win
OpenSession_Win
OpenTickGeneratorSession
PrepareInputDeviceSysExBuffer
RenewInputDeviceSysExBuffer
SendShortEventToOutputDevice
SendSysExEventToOutputDevice_Win
StartHighPrecisionTickGenerator_Win
StopHighPrecisionTickGenerator
UnprepareInputDeviceSysExBuffer
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
40B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/4
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
140B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/14
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/29
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/41
Size
512B
Virtual Size
175B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/55
Size
512B
Virtual Size
217B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/67
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/80
Size
512B
Virtual Size
117B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Libraries/Melanchall_DryWetMidi_Native64.dll
- IMPHASH cac31477dc7c3091aa8122f665d600a3
- SHA256 80ca89af931e43642a125ec82e253d9bd7002088d000daba6e0661cdad89f5aa
- MD5 5326dfc6840947388f19f474c28e8c55
- SHA1 81afe328f00c500a7138c16c2a0ef200e2a122e4
- SHA512 4c0a1385438f26c1633c58c5e57f0f94ce704d8da52ec16f6111d2347e69cf8c0a3bdf9a4e737794110c02108ed70a4b65dec0ef67fca16d9103647e65a7ac5c
- SSDEEP 768:STukqEi0unSZFjZe7+zZj2WuLGIC1FyOJJnD19UkG3JSTEUb:G3dun+jZeyYaIC1drGoTEUb
- TLSH T1636350E12FD44C9BE925A23C52E6C232353CB9E447534B07963469321F13EC17EE9A9A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4912
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
api-ms-win-crt-environment-l1-1-0
__p__environ
__p__wenviron
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
free
malloc
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___argv
__p___wargv
_configure_narrow_argv
_configure_wide_argv
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_exit
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_register_onexit_function
abort
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vfwprintf
fwrite
api-ms-win-crt-string-l1-1-0
strlen
strncmp
api-ms-win-crt-time-l1-1-0
__daylight
__timezone
__tzname
_tzset
winmm
midiInAddBuffer
midiInClose
midiInGetDevCapsA
midiInGetNumDevs
midiInOpen
midiInPrepareHeader
midiInReset
midiInStart
midiInStop
midiInUnprepareHeader
midiOutClose
midiOutGetDevCapsA
midiOutGetNumDevs
midiOutLongMsg
midiOutOpen
midiOutPrepareHeader
midiOutReset
midiOutShortMsg
midiOutUnprepareHeader
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
timeKillEvent
timeSetEvent
CanCompareDevices
CloseInputDevice
CloseOutputDevice
CloseSession
ConnectToInputDevice
DisconnectFromInputDevice
GetApiType
GetDeviceManufacturer
GetDeviceProduct
GetInputDeviceDriverVersion
GetInputDeviceHashCode
GetInputDeviceInfo
GetInputDeviceManufacturer
GetInputDeviceName
GetInputDeviceProduct
GetInputDeviceSysExBufferData
GetInputDevicesCount
GetOutputDeviceChannelsMask
GetOutputDeviceDriverVersion
GetOutputDeviceHashCode
GetOutputDeviceInfo
GetOutputDeviceManufacturer
GetOutputDeviceName
GetOutputDeviceNotesNumber
GetOutputDeviceOptions
GetOutputDeviceProduct
GetOutputDeviceSysExBufferData
GetOutputDeviceTechnology
GetOutputDeviceVoicesNumber
GetOutputDevicesCount
IsInputDevicePropertySupported
IsOutputDevicePropertySupported
OpenInputDevice_Win
OpenOutputDevice_Win
OpenSession_Win
OpenTickGeneratorSession
PrepareInputDeviceSysExBuffer
RenewInputDeviceSysExBuffer
SendShortEventToOutputDevice
SendSysExEventToOutputDevice_Win
StartHighPrecisionTickGenerator_Win
StopHighPrecisionTickGenerator
UnprepareInputDeviceSysExBuffer
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
836B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
272B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
112B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
80B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/31
Size
512B
Virtual Size
175B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/45
Size
512B
Virtual Size
164B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/57
Size
512B
Virtual Size
72B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/70
Size
512B
Virtual Size
163B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/81
Size
512B
Virtual Size
504B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Libraries/Microsoft.Web.WebView2.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d60e6e94245078cb56e44ebd5f360dc04bf18e460136be93bfc4cfca43b98505
- MD5 e336cd4cc1f67e3f57ead4e72a24c93b
- SHA1 c03565235315e597786b287b52e00f27bf0de806
- SHA512 950516cb1f7a493592c0ad4c39c0df9a5c0cd44225cff17e2561d72d908c4f7b8623ef28610c66c6cd0b963ac89fcae9ab41a9a99b42249114963f7e21e92bb2
- SSDEEP 12288:RJ4dCXzRKX4EcJupbSRi461R1VFrP3224c+iKmDRkRFNBMUFeA+imQ269pRFZNIz:RJ4dCXzRKX4EcJAD1RnQk
- TLSH T14DE4301223FD8619F5F27FB9997412609BB6BC97BD78C38D0698642D0D72B819DA0333
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
91:eb:ec:e3:ed:86:89:f0:69:69:e3:e0:ae:0d:51:95:2c:38:4c:94:0d:73:61:4f:43:93:3f:5c:28:1b:f5:2e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 20, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:33:4e:c2:48:56:4c:2b:5c:6f:00:00:00:00:02:33
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8603-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:25:80:c7:37:c6:cd:aa:77:49:00:01:00:00:02:25
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
694098
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\third_party\edge_webview2\win\webview2_api_writer\dotNetAPIWrapper\Microsoft.Web.WebView2.Core\bin\ReleasePackage\Microsoft.Web.WebView2.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
670KB
Virtual Size
669KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Libraries/Microsoft.Web.WebView2.WinForms.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6a9e6856f23c463783c3afb0ca5d78f56324c86657162ccb16d5227b3233b32a
- MD5 f1a15a22fe0874e4bb2e8f05dfd62f57
- SHA1 aa06e407c7b4241ae559aee616ef156540a76a12
- SHA512 5c467d9f6d27b12931777520e10c85599742f9fa9a9add3971be9a862bfa278c526310368e8a8d79d39673c2af5c1fa3daca0829127b755728596770fe460198
- SSDEEP 768:psQNb2vIYymJ22Mss+5JQ+ZDgcEST3p4Jjrjh2jeFSUyauTv1JKia5/Zi/ZGQSxx:pzb2vLbJQ+ZDgcEST3p4JjrjaeFSUyaN
- TLSH T151033A4087ECC517EAEB5F78A8B4856107BABEC37DA1D7980D88B1E90C73BD055113AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0d:22:58:a6:50:34:b4:d3:d0:be:e3:4f:ed:93:e9:0d:2b:38:e4:6e:41:82:80:b6:15:27:33:db:36:21:2c:2d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 20, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:33:4e:c2:48:56:4c:2b:5c:6f:00:00:00:00:02:33
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:F002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:20:24:e1:e6:e0:17:b9:b4:8e:00:01:00:00:02:20
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
34142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\third_party\edge_webview2\win\winforms_control\Microsoft.Web.WebView2.WinForms\obj\Release Stable APIs\net462\Microsoft.Web.WebView2.WinForms.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Libraries/NAudio.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bc4bacc3b8b28d898f1671b79f216cca439f95eb60cd32d3e3ecafbecac42780
- MD5 047bca47d9d12191811fb2e87cded3aa
- SHA1 afdc5d27fb919d1d813e6a07466f889dbc8c6677
- SHA512 99505644d42e4c60c977e4144165ea9dea8f1301e6456aa809e046ecc84a3813a190ce65169a6ffef5a36ad3541ec91002615a02933f8deb642aa3f8f3b11f2f
- SSDEEP 12288:YnfnRe200wJT4WQ+NOStYVlJHMGwH7fu:ODIrQ+NOS2HMGwHT
- TLSH T1DFB45C2237D4962BD1AF2371E8F0051E97B1E4867227EF4F899467BE1D83B914D10BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
516230
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Code\github\NAudio\NAudio\obj\Release\net35\NAudio.pdb
mscoree
_CorDllMain
Name
.text
Size
499KB
Virtual Size
499KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
948B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Libraries/OpenAL-Soft-LICENSE.txt
- SHA256 d808ce217e5b611854da622b57ec29fe545584c48bc5352fae72a4b6e5074a15
- MD5 0f159f19f9377e1895fbb477d5a7953e
- SHA1 707b40a3e29fae6db61aa9620879f003fdda4ed2
- SHA512 5dbdb4d9f9c49696d923221222accc893562313d24903700e5db1aa64e9394e428fe1a19fc0dffc30ca3fc4e0adb9587d48014414ebabf407c4abc6603d0a387
- SSDEEP 384:XA5UwOVAAZ4zZyyZV+f6wFDVxnF+7xqsv3t+zP8EfHinIVFkspBM9b/7ops0V:XAuFmAH0V+rnFC3gleSBm/7ksA
- TLSH T14EA2643EB70513B206C206915A4F64DFA32BD07932275A64749DC15C23ABD3583BFBEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Libraries/OpenAL-pffft-LICENSE.txt
- SHA256 64056328b3e7bc104e24ef96accc1a7abead156f0c02d1b87c97e3f3a28030de
- MD5 c104e5027ef1e3ebb8f4c0a464b05c4e
- SHA1 f0ec8ed989f196320d61b70afd61dd01029e3429
- SHA512 f36a8cc816efa29042c9874d43999794ab6157ee75e326bc306651eaf919d8bb880850b74f80cf9824d798551226572bd8af1d62f49f1eeb1994af2002e25ac1
- TLSH T1C631B6AB53540B3219D604E75117F9C879AD902B75077D021C6FF248536F43EA7B3496
- MD5 SHA1 SHA512 TLSH
Libraries/SoundBlaster_EAX_v2.3.dll
- IMPHASH 0728af39147d18cc20ac650246cafce1
- SHA256 981cf6b25818875e646360e40e0b41374e67e8605da9b9f110b280c4eea7dcf0
- MD5 25f48b353017750f5480949445da1b4c
- SHA1 0ea941bfb03fad737038bd06e23a3dfc63453095
- SHA512 c32f6f5f4bef0391e1cfd047d507264f151e49ccc98eff0c2daf2f730b644bfd5eccf1f3a0f281d8ca8004b97fca1844de457d2ec3cb5ce01fca15b5086a5a13
- SSDEEP 24576:r3aC8wLUioJH0VmkwLGzsZ0KTn6i8UGCSu6+uXDhehy:rNLU/JH0VmkwLXZjRGcC9eh
- TLSH T112456B06F54695ACD06AC0B483578A73BA3574CA0B3169FF02D852353FAAFE05B3CB59
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
852112
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
ReverbPresets.pdb
user32
ReleaseDC
GetDC
LoadImageW
SetWindowLongPtrW
CreateWindowExW
RegisterClassExW
LoadCursorW
DestroyWindow
GetAsyncKeyState
ReleaseCapture
SetCapture
EndPaint
FrameRect
FillRect
BeginPaint
RegisterHotKey
SetFocus
UnregisterHotKey
KillTimer
DefWindowProcW
GetWindowLongPtrW
DrawTextW
InvalidateRect
gdi32
GetStockObject
DeleteDC
BitBlt
CreateFontW
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
SetBkMode
SetTextColor
LineTo
MoveToEx
RoundRect
SelectObject
CreatePen
CreateSolidBrush
DeleteObject
msimg32
AlphaBlend
comdlg32
GetOpenFileNameW
kernel32
WaitForSingleObject
WaitForSingleObjectEx
SetFileTime
SetFileInformationByHandle
GetLastError
SetFilePointerEx
ReleaseMutex
CreateMutexA
GetCurrentProcessId
GetProcessHeap
HeapFree
HeapReAlloc
lstrlenW
GetCurrentProcess
WideCharToMultiByte
GetModuleHandleW
CloseHandle
GetModuleHandleExW
GetModuleFileNameW
LoadLibraryW
GetProcAddress
GetTempPathW
SetThreadStackGuarantee
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
CreateThread
Sleep
SetWaitableTimer
CreateWaitableTimerExW
GetConsoleOutputCP
GetStdHandle
WriteConsoleW
MultiByteToWideChar
HeapAlloc
GetModuleHandleA
GetFullPathNameW
FormatMessageW
GetConsoleMode
FindClose
FindFirstFileExW
GetFileInformationByHandle
CreateFileW
GetFileInformationByHandleEx
CreateDirectoryW
GetEnvironmentVariableW
GetCurrentThread
GetCurrentDirectoryW
SetLastError
LoadLibraryA
api-ms-win-core-synch-l1-2-0
WakeByAddressSingle
WaitOnAddress
WakeByAddressAll
bcryptprimitives
ProcessPrng
ntdll
RtlCaptureContext
RtlVirtualUnwind
NtWriteFile
RtlLookupFunctionEntry
NtReadFile
RtlNtStatusToDosError
vcruntime140
__C_specific_handler
__CxxFrameHandler3
memcpy
_CxxThrowException
memmove
memset
__std_type_info_destroy_list
memcmp
api-ms-win-crt-math-l1-1-0
roundf
sinf
expf
floorf
ceilf
api-ms-win-crt-runtime-l1-1-0
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm_e
_initterm
_cexit
_execute_onexit_table
api-ms-win-crt-heap-l1-1-0
free
MAIN
VSTPluginMain
main
Name
.text
Size
842KB
Virtual Size
841KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
366KB
Virtual Size
366KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35403,
count=3, id=259, version=35403,
count=7, id=260, version=35403,
count=16, id=261, version=35403,
count=17, id=257, version=33145,
count=221, id=1, productName=Unmarked objects,
count=139, productName=Unmarked objects (old),
count=1, id=256, version=35730,
count=1, id=258, version=35730,
Libraries/Virtual.ax
- IMPHASH 6b2a833473bd90fbc074294b8aa2be68
- SHA256 5e9a0eca1f3869cb97b6e8a883ca2c58e7c6d0281860ec714822a0e7456ab4b1
- MD5 cbe6db0db1162f8ea3f29407dc074a9e
- SHA1 37d954325d5d72f870349fab7d8a2248d0b66cd9
- SHA512 8d648ff90f7fd1a9b2283e6d86e27766dd1c4dd4cc6cc06eb75fbb7a478c2063513b8b14cc00dd632ebdb3f72a5524a8350057adf3fc351b5742517763448cb1
- SSDEEP 1536:ICVrjpd67+IbIuSRYFqeRqEvVgO3Qatf2v8QMHHL9edUR:ICVrVd6CgjSsdlvVgO3Vt/Lr9eCR
- TLSH T158932B10A242A678FAE315F3D9FE667E97249B95031415CB9384DE7B27320F17D302AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
46208
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcrt
_purecall
__CxxFrameHandler
memmove
??2@YAPAXI@Z
strncpy
memcpy
sprintf
memset
??3@YAXPAX@Z
memcmp
_ftol
strcpy
kernel32
WideCharToMultiByte
GetACP
GetModuleFileNameA
GetLastError
MultiByteToWideChar
lstrlenA
FreeLibrary
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
advapi32
RegCreateKeyA
RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
user32
wsprintfA
wvsprintfA
ole32
CoCreateInstance
CoTaskMemAlloc
StringFromGUID2
CoUninitialize
CoFreeUnusedLibraries
CoInitialize
CoTaskMemFree
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
64KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=95, version=2190,
count=12, id=93, version=2179,
count=107, id=1, productName=Unmarked objects,
count=5, id=14, version=7299,
count=3, id=4, version=8047,
count=1, id=28, version=9178,
count=12, id=11, version=8966,
count=16, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Libraries/VoicemeeterRemote.dll
- IMPHASH 53fd8181186447ca1e6c4bc143b7736b
- SHA256 6c108f99c955ec963702dba37739d70c31c9ce4d77758b312c0233a1f435f4fb
- MD5 b16e2603eeee1099dfe97ecf987a1319
- SHA1 a4229d70f8471d2bf7df79c5d7b426aa0bb60b94
- SHA512 3c27ae44a7d9bd88c169721a963924901abecf30537582e44f9610054e19bb8cb6bed18fadf40d71391af84d327227ba9dac2785650dd4b664eef18659fee839
- SSDEEP 3072:aR8mc+AKYjdhTzhTq4UeT/AS5IGFM4W1CgmgReNA9KHVL:aRVXA/zhTWeT/AS5L6tTKAEHx
- TLSH T190149D8A329010FAE85B9238C9E76656FB73B45313755BCF166483761F173E22A3B321
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
cf:0d:69:d5:9c:53:eb:a2:21:1f:c8:0b:07:21:93:01:43:34:e4:af:f4:86:0c:a0:24:e0:6a:a6:95:d9:f4:ed
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Dec 11, 2025
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
02:63:b9:b0:fb:b3:01:be:bb:d1:47:f4
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 21, 2025 - Jul 22, 2027
Subject
CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE
Serial Number
84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4
Issuer
CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 15, 2025 - Jan 10, 2037
Subject
CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE
Serial Number
83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f
Issuer
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 16, 2025 - Jul 16, 2041
Subject
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
76:53:fe:b9:3d:d9:e7:e9:26:32:ac:d6:0a:be:ac:38
Issuer
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2020 - Mar 18, 2045
Minor OS version
2
Major OS version
5
Entry point
68104
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
H:\Travaux\VB_VAC\VoiceMeeter\Project\voicemeeterpro_vc2010\x64\Release\VoicemeeterRemote64.pdb
setupapi
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceInterfaceAlias
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsA
SetupDiOpenDeviceInterfaceRegKey
winmm
waveOutGetDevCapsW
timeBeginPeriod
waveOutGetNumDevs
waveInGetNumDevs
waveInGetDevCapsW
timeEndPeriod
kernel32
SetFilePointer
WriteFile
CreateFileW
CloseHandle
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThread
SetThreadPriority
QueryPerformanceFrequency
WaitForSingleObject
CreateEventA
DeviceIoControl
MapViewOfFile
UnmapViewOfFile
GetTickCount
CreateFileMappingA
OpenFileMappingA
CreateThread
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetStringTypeW
LCMapStringW
LoadLibraryW
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
SetLastError
FlsFree
FlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameW
ExitProcess
GetModuleHandleW
HeapDestroy
HeapCreate
GetVersion
RtlVirtualUnwind
HeapSetInformation
GetStartupInfoW
GetFileType
GetStdHandle
SetHandleCount
InitializeCriticalSectionAndSpinCount
RtlUnwindEx
EncodePointer
GetLastError
Sleep
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
OpenFile
WriteConsoleW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCommandLineA
HeapFree
HeapAlloc
HeapReAlloc
GetCurrentThreadId
HeapSize
DecodePointer
RtlCaptureContext
RtlLookupFunctionEntry
FlsSetValue
user32
CharLowerBuffA
advapi32
RegEnumKeyW
RegOpenKeyW
RegQueryValueExW
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
shell32
ShellExecuteA
ole32
PropVariantClear
CoInitialize
CoUninitialize
CoCreateInstance
CLSIDFromString
CoTaskMemFree
VBVMR_AudioCallbackRegister
VBVMR_AudioCallbackStart
VBVMR_AudioCallbackStop
VBVMR_AudioCallbackUnregister
VBVMR_GetLevel
VBVMR_GetMidiMessage
VBVMR_GetParameterFloat
VBVMR_GetParameterStringA
VBVMR_GetParameterStringW
VBVMR_GetVoicemeeterType
VBVMR_GetVoicemeeterVersion
VBVMR_Input_GetDeviceDescA
VBVMR_Input_GetDeviceDescW
VBVMR_Input_GetDeviceNumber
VBVMR_IsParametersDirty
VBVMR_Login
VBVMR_Logout
VBVMR_MacroButton_GetStatus
VBVMR_MacroButton_IsDirty
VBVMR_MacroButton_SetStatus
VBVMR_Output_GetDeviceDescA
VBVMR_Output_GetDeviceDescW
VBVMR_Output_GetDeviceNumber
VBVMR_RunVoicemeeter
VBVMR_SendMidiMessage
VBVMR_SetParameterFloat
VBVMR_SetParameterStringA
VBVMR_SetParameterStringW
VBVMR_SetParameters
VBVMR_SetParametersW
Name
.text
Size
110KB
Virtual Size
109KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
35KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=37, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=123, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=11, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=19, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=213, id=1, productName=Unmarked objects,
count=16, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Libraries/VoicemeeterRemote32.dll
- IMPHASH f88eca84e5bd78d6db1efaf50cfb9972
- SHA256 5d85a8e00c714a707a65671936fb49611f4e7751a9065c618804ed5ca47872cb
- MD5 79b4ef6b17d0a8bb825437773c1d8e3f
- SHA1 255fbeb8ad45faad93afeac2afa2cb7e7d78d079
- SHA512 0c76b45b3c311f34de0087755d63e7966edf24ad77360897475854ff66421ce55e93f35a78ea10f15cce8ccc505618d12dd6114eabc89b73a1e468f5b16799f9
- SSDEEP 3072:+cvA+X1yaikOLqMvbJl1rvVygoP5UG7GjSVX:PYH1rtyrQjS5
- TLSH T1E6F3AF1376D240F6D5813EBD14E7373BEF3AAA5648668E438B98DD521C31352BB2620F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
13:66:36:5a:25:0b:71:6a:b7:25:77:01:32:d2:54:d0:a9:df:36:cd:27:58:52:f7:07:15:6b:65:4f:68:9e:ae
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Dec 11, 2025
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
02:63:b9:b0:fb:b3:01:be:bb:d1:47:f4
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 21, 2025 - Jul 22, 2027
Subject
CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE
Serial Number
84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4
Issuer
CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 15, 2025 - Jan 10, 2037
Subject
CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE
Serial Number
83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f
Issuer
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 16, 2025 - Jul 16, 2041
Subject
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
76:53:fe:b9:3d:d9:e7:e9:26:32:ac:d6:0a:be:ac:38
Issuer
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2020 - Mar 18, 2045
Minor OS version
0
Major OS version
4
Entry point
58027
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
WideCharToMultiByte
MultiByteToWideChar
GetCurrentProcess
VirtualFree
VirtualAlloc
QueryPerformanceFrequency
DeviceIoControl
CreateEventA
GetModuleHandleA
GetProcAddress
LoadLibraryA
FreeLibrary
OpenFile
GetModuleFileNameA
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
TerminateProcess
RtlUnwind
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
CloseHandle
SetFilePointer
GetLastError
LCMapStringW
LCMapStringA
GetOEMCP
CreateFileW
WriteFile
GetCurrentThread
SetThreadPriority
CreateThread
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetTickCount
OpenFileMappingA
CreateFileMappingA
MapViewOfFile
Sleep
UnmapViewOfFile
GetACP
GetCPInfo
ExitProcess
GetVersion
GetCommandLineA
HeapFree
HeapReAlloc
HeapAlloc
InterlockedIncrement
InterlockedDecrement
user32
CharLowerBuffA
advapi32
RegEnumKeyA
RegOpenKeyExW
RegEnumKeyW
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyW
RegQueryValueExA
RegOpenKeyA
RegCloseKey
shell32
ShellExecuteA
ole32
CoInitialize
CoCreateInstance
CLSIDFromString
CoUninitialize
CoTaskMemFree
PropVariantClear
setupapi
SetupDiGetDeviceInterfaceAlias
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupDiOpenDeviceInterfaceRegKey
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
winmm
timeBeginPeriod
waveInGetDevCapsW
waveInGetNumDevs
waveOutGetDevCapsW
timeEndPeriod
waveOutGetNumDevs
VBVMR_AudioCallbackRegister
VBVMR_AudioCallbackStart
VBVMR_AudioCallbackStop
VBVMR_AudioCallbackUnregister
VBVMR_GetLevel
VBVMR_GetMidiMessage
VBVMR_GetParameterFloat
VBVMR_GetParameterStringA
VBVMR_GetParameterStringW
VBVMR_GetVoicemeeterType
VBVMR_GetVoicemeeterVersion
VBVMR_Input_GetDeviceDescA
VBVMR_Input_GetDeviceDescW
VBVMR_Input_GetDeviceNumber
VBVMR_IsParametersDirty
VBVMR_Login
VBVMR_Logout
VBVMR_MacroButton_GetStatus
VBVMR_MacroButton_IsDirty
VBVMR_MacroButton_SetStatus
VBVMR_Output_GetDeviceDescA
VBVMR_Output_GetDeviceDescW
VBVMR_Output_GetDeviceNumber
VBVMR_RunVoicemeeter
VBVMR_SendMidiMessage
VBVMR_SetParameterFloat
VBVMR_SetParameterStringA
VBVMR_SetParameterStringW
VBVMR_SetParameters
VBVMR_SetParametersW
Name
.text
Size
84KB
Virtual Size
83KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
32KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=24, id=14, version=7299,
count=1, productName=Unmarked objects (old),
count=19, id=19, version=8034,
count=207, id=1, productName=Unmarked objects,
count=2, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=143, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Libraries/VoicemeeterRemote64.dll
- IMPHASH 53fd8181186447ca1e6c4bc143b7736b
- SHA256 6c108f99c955ec963702dba37739d70c31c9ce4d77758b312c0233a1f435f4fb
- MD5 b16e2603eeee1099dfe97ecf987a1319
- SHA1 a4229d70f8471d2bf7df79c5d7b426aa0bb60b94
- SHA512 3c27ae44a7d9bd88c169721a963924901abecf30537582e44f9610054e19bb8cb6bed18fadf40d71391af84d327227ba9dac2785650dd4b664eef18659fee839
- SSDEEP 3072:aR8mc+AKYjdhTzhTq4UeT/AS5IGFM4W1CgmgReNA9KHVL:aRVXA/zhTWeT/AS5L6tTKAEHx
- TLSH T190149D8A329010FAE85B9238C9E76656FB73B45313755BCF166483761F173E22A3B321
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
cf:0d:69:d5:9c:53:eb:a2:21:1f:c8:0b:07:21:93:01:43:34:e4:af:f4:86:0c:a0:24:e0:6a:a6:95:d9:f4:ed
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Dec 11, 2025
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=423 734 177,CN=BUREL VINCENT Entrepreneur individuel,O=BUREL VINCENT Entrepreneur individuel,STREET=21 avenue des Marguerites,L=Eymet,ST=Dordogne,C=FR,1.3.6.1.4.1.311.60.2.1.3=#13024652,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
02:63:b9:b0:fb:b3:01:be:bb:d1:47:f4
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 21, 2025 - Jul 22, 2027
Subject
CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE
Serial Number
84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4
Issuer
CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 15, 2025 - Jan 10, 2037
Subject
CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE
Serial Number
83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f
Issuer
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 16, 2025 - Jul 16, 2041
Subject
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
76:53:fe:b9:3d:d9:e7:e9:26:32:ac:d6:0a:be:ac:38
Issuer
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2020 - Mar 18, 2045
Minor OS version
2
Major OS version
5
Entry point
68104
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
H:\Travaux\VB_VAC\VoiceMeeter\Project\voicemeeterpro_vc2010\x64\Release\VoicemeeterRemote64.pdb
setupapi
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceInterfaceAlias
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsA
SetupDiOpenDeviceInterfaceRegKey
winmm
waveOutGetDevCapsW
timeBeginPeriod
waveOutGetNumDevs
waveInGetNumDevs
waveInGetDevCapsW
timeEndPeriod
kernel32
SetFilePointer
WriteFile
CreateFileW
CloseHandle
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThread
SetThreadPriority
QueryPerformanceFrequency
WaitForSingleObject
CreateEventA
DeviceIoControl
MapViewOfFile
UnmapViewOfFile
GetTickCount
CreateFileMappingA
OpenFileMappingA
CreateThread
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetStringTypeW
LCMapStringW
LoadLibraryW
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
SetLastError
FlsFree
FlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameW
ExitProcess
GetModuleHandleW
HeapDestroy
HeapCreate
GetVersion
RtlVirtualUnwind
HeapSetInformation
GetStartupInfoW
GetFileType
GetStdHandle
SetHandleCount
InitializeCriticalSectionAndSpinCount
RtlUnwindEx
EncodePointer
GetLastError
Sleep
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
OpenFile
WriteConsoleW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCommandLineA
HeapFree
HeapAlloc
HeapReAlloc
GetCurrentThreadId
HeapSize
DecodePointer
RtlCaptureContext
RtlLookupFunctionEntry
FlsSetValue
user32
CharLowerBuffA
advapi32
RegEnumKeyW
RegOpenKeyW
RegQueryValueExW
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
shell32
ShellExecuteA
ole32
PropVariantClear
CoInitialize
CoUninitialize
CoCreateInstance
CLSIDFromString
CoTaskMemFree
VBVMR_AudioCallbackRegister
VBVMR_AudioCallbackStart
VBVMR_AudioCallbackStop
VBVMR_AudioCallbackUnregister
VBVMR_GetLevel
VBVMR_GetMidiMessage
VBVMR_GetParameterFloat
VBVMR_GetParameterStringA
VBVMR_GetParameterStringW
VBVMR_GetVoicemeeterType
VBVMR_GetVoicemeeterVersion
VBVMR_Input_GetDeviceDescA
VBVMR_Input_GetDeviceDescW
VBVMR_Input_GetDeviceNumber
VBVMR_IsParametersDirty
VBVMR_Login
VBVMR_Logout
VBVMR_MacroButton_GetStatus
VBVMR_MacroButton_IsDirty
VBVMR_MacroButton_SetStatus
VBVMR_Output_GetDeviceDescA
VBVMR_Output_GetDeviceDescW
VBVMR_Output_GetDeviceNumber
VBVMR_RunVoicemeeter
VBVMR_SendMidiMessage
VBVMR_SetParameterFloat
VBVMR_SetParameterStringA
VBVMR_SetParameterStringW
VBVMR_SetParameters
VBVMR_SetParametersW
Name
.text
Size
110KB
Virtual Size
109KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
35KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=37, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=123, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=11, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=19, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=213, id=1, productName=Unmarked objects,
count=16, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Libraries/WebView2Loader.dll
- IMPHASH 8596af6dd51622a07d3ec94b56ffd325
- SHA256 3426dcc55fdfb8b5e7ac623cf33b4ccf283fbf68a0c5a65bddfdb4d749a8abee
- MD5 f1426c839cbf0e9a4eae7c67916cedff
- SHA1 60cdeba80ce6357d9598947bd65f2db31e5efa2c
- SHA512 392d172f8e960a2d18d18175813e091c27d12065db06c4fcaabb6429bbb1306a3087fff33e51bf9226759b34d454109c11a310711ff9f7c6f9d8f78164b661f3
- SSDEEP 3072:hJoWXgNjIFnTf75x2v/KUUbPXGUIufAuzA2dTZnaZED3JU9jfbKuFjaS3:LKI175Av/KLB9zz3nyED3JU9DKC
- TLSH T142145D06B3E940F6F976D67C89A38A46F67278110710AAEF0360473D5F2BBD49A3D721
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
50:fb:9e:c0:21:af:a3:68:11:4c:c5:76:f2:69:83:67:59:5c:74:f2:13:50:cb:fb:bc:be:9b:f0:74:51:a1:be
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 20, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:33:4e:c2:48:56:4c:2b:5c:6f:00:00:00:00:02:33
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A000-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:2b:bb:00:50:ff:4d:3b:9a:a1:00:01:00:00:02:2b
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
40592
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
WebView2Loader.dll.pdb
kernel32
AcquireSRWLockExclusive
CloseHandle
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringEx
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
MultiByteToWideChar
OpenEventW
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReleaseSRWLockExclusive
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
TerminateProcess
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
CreateOrJoinCoreWebView2ClusterEnvironment
GetAvailableCoreWebView2BrowserVersionString
GetAvailableCoreWebView2BrowserVersionStringWithOptions
GetCoreWebView2ClusterEnvironmentOptions
Name
.text
Size
110KB
Virtual Size
110KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Libraries/soft_oal.dll
- IMPHASH 374c8e26afbd5074431e8cd7e341d977
- SHA256 3963b06e319180700be0bcc0d027336664bb3a4975876b4a5442f10746fab5b4
- MD5 6e4febfc0135347d17b8969b8dd2987a
- SHA1 f6697d90f7a21b29050b05643824f2272f271832
- SHA512 6c922effd46729f72c5e74bb7a39605b67ca2c0bd88f0d9064cdc8baf631c9b0f20beaf12c2248b3684251e17366305f286560ff2df241b2504a75b2b9fc7c7d
- SSDEEP 49152:BRwdFuJ8xyWkyKjBaR1HZjQRYB3/gpuS5Kql/R+LHvFTVNy+dXdydgdAd3d1WmaO:bBYHkYKwFoRI05at
- TLSH T1CE064B43E26260FCC16BD1748257B773B931781842347EAB5BA5CB312F72E60976EB24
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4592
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
avrt
AvRevertMmThreadCharacteristics
AvSetMmThreadCharacteristicsW
kernel32
CloseHandle
CreateEventA
CreateEventW
CreateFileW
CreateHardLinkW
CreateSemaphoreA
DebugBreak
DeleteCriticalSection
DeleteFileW
DuplicateHandle
EnterCriticalSection
FileTimeToSystemTime
FormatMessageA
FormatMessageW
FreeLibrary
GetCPInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceExW
GetFileAttributesW
GetFileInformationByHandle
GetFileType
GetFullPathNameW
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetProcAddress
GetProcessAffinityMask
GetProcessTimes
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetTempPathW
GetThreadContext
GetThreadPriority
GetThreadTimes
GetTickCount
InitializeCriticalSection
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryW
LocalFree
MoveFileExW
MultiByteToWideChar
OpenProcess
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReleaseSemaphore
RemoveDirectoryW
ResetEvent
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetEndOfFile
SetEvent
SetFilePointer
SetLastError
SetProcessAffinityMask
SetSystemTime
SetThreadContext
SetThreadPriority
Sleep
SuspendThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
msvcrt
iswctype
_assert
___lc_codepage_func
___mb_cur_max_func
__iob_func
__setusermatherr
_aligned_free
_aligned_malloc
_amsg_exit
_beginthreadex
_close
_endthreadex
_errno
_filelengthi64
_fileno
_findclose
_fstat64
_get_osfhandle
_hypot
_initterm
_isatty
_lock
_lseeki64
_setjmp
_setmode
_telli64
_unlock
_vscprintf
_vsnprintf
_wchdir
_wchmod
_wfopen
_wfullpath
_wgetcwd
_wgetenv
_wmkdir
_wopen
_wstat64
_wutime64
abort
calloc
ceil
ceilf
exp
fclose
fflush
fgetpos
fopen
fprintf
fputc
fputs
fread
free
fsetpos
fwrite
getc
getenv
getwc
isalnum
isdigit
isspace
isxdigit
ldexp
localeconv
log
log10
longjmp
malloc
memchr
memcmp
memcpy
memmove
memset
pow
putc
putwc
realloc
setlocale
setvbuf
sinh
strchr
strcmp
strcoll
strerror
strftime
strlen
strncmp
strtol
strtoul
strxfrm
tan
tolower
toupper
towlower
towupper
ungetc
ungetwc
vfprintf
wcscat
wcscmp
wcscoll
wcscpy
wcsftime
wcslen
wcsxfrm
_wfindnext
_wfindfirst
_strtoui64
_strtoi64
_lseeki64
_write
_strdup
_read
_fileno
_fdopen
ole32
CLSIDFromString
CoCreateInstance
CoInitializeEx
CoTaskMemFree
CoUninitialize
PropVariantClear
StringFromCLSID
shell32
SHGetKnownFolderPath
user32
GetForegroundWindow
winmm
waveInAddBuffer
waveInClose
waveInGetDevCapsW
waveInGetNumDevs
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInStop
waveInUnprepareHeader
waveOutClose
waveOutGetDevCapsW
waveOutGetNumDevs
waveOutOpen
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite
alAuxiliaryEffectSlotPlaySOFT
alAuxiliaryEffectSlotPlayvSOFT
alAuxiliaryEffectSlotStopSOFT
alAuxiliaryEffectSlotStopvSOFT
alAuxiliaryEffectSlotf
alAuxiliaryEffectSlotfv
alAuxiliaryEffectSloti
alAuxiliaryEffectSlotiv
alBuffer3f
alBuffer3i
alBufferCallbackSOFT
alBufferData
alBufferSamplesSOFT
alBufferStorageSOFT
alBufferSubDataSOFT
alBufferSubSamplesSOFT
alBufferf
alBufferfv
alBufferi
alBufferiv
alDeferUpdatesSOFT
alDeleteAuxiliaryEffectSlots
alDeleteBuffers
alDeleteEffects
alDeleteFilters
alDeleteSources
alDisable
alDistanceModel
alDopplerFactor
alDopplerVelocity
alEffectf
alEffectfv
alEffecti
alEffectiv
alEnable
alEventCallbackSOFT
alEventControlSOFT
alFilterf
alFilterfv
alFilteri
alFilteriv
alFlushMappedBufferSOFT
alGenAuxiliaryEffectSlots
alGenBuffers
alGenEffects
alGenFilters
alGenSources
alGetAuxiliaryEffectSlotf
alGetAuxiliaryEffectSlotfv
alGetAuxiliaryEffectSloti
alGetAuxiliaryEffectSlotiv
alGetBoolean
alGetBooleanv
alGetBuffer3PtrSOFT
alGetBuffer3f
alGetBuffer3i
alGetBufferPtrSOFT
alGetBufferPtrvSOFT
alGetBufferSamplesSOFT
alGetBufferf
alGetBufferfv
alGetBufferi
alGetBufferiv
alGetDouble
alGetDoublev
alGetEffectf
alGetEffectfv
alGetEffecti
alGetEffectiv
alGetEnumValue
alGetError
alGetFilterf
alGetFilterfv
alGetFilteri
alGetFilteriv
alGetFloat
alGetFloatv
alGetInteger
alGetInteger64SOFT
alGetInteger64vSOFT
alGetIntegerv
alGetListener3f
alGetListener3i
alGetListenerf
alGetListenerfv
alGetListeneri
alGetListeneriv
alGetPointerSOFT
alGetPointervSOFT
alGetProcAddress
alGetSource3dSOFT
alGetSource3f
alGetSource3i
alGetSource3i64SOFT
alGetSourcedSOFT
alGetSourcedvSOFT
alGetSourcef
alGetSourcefv
alGetSourcei
alGetSourcei64SOFT
alGetSourcei64vSOFT
alGetSourceiv
alGetString
alGetStringiSOFT
alIsAuxiliaryEffectSlot
alIsBuffer
alIsBufferFormatSupportedSOFT
alIsEffect
alIsEnabled
alIsExtensionPresent
alIsFilter
alIsSource
alListener3f
alListener3i
alListenerf
alListenerfv
alListeneri
alListeneriv
alMapBufferSOFT
alProcessUpdatesSOFT
alSource3dSOFT
alSource3f
alSource3i
alSource3i64SOFT
alSourcePause
alSourcePausev
alSourcePlay
alSourcePlayv
alSourceQueueBufferLayersSOFT
alSourceQueueBuffers
alSourceRewind
alSourceRewindv
alSourceStop
alSourceStopv
alSourceUnqueueBuffers
alSourcedSOFT
alSourcedvSOFT
alSourcef
alSourcefv
alSourcei
alSourcei64SOFT
alSourcei64vSOFT
alSourceiv
alSpeedOfSound
alUnmapBufferSOFT
alcCaptureCloseDevice
alcCaptureOpenDevice
alcCaptureSamples
alcCaptureStart
alcCaptureStop
alcCloseDevice
alcCreateContext
alcDestroyContext
alcDevicePauseSOFT
alcDeviceResumeSOFT
alcGetContextsDevice
alcGetCurrentContext
alcGetEnumValue
alcGetError
alcGetInteger64vSOFT
alcGetIntegerv
alcGetProcAddress
alcGetString
alcGetStringiSOFT
alcGetThreadContext
alcIsExtensionPresent
alcIsRenderFormatSupportedSOFT
alcLoopbackOpenDeviceSOFT
alcMakeContextCurrent
alcOpenDevice
alcProcessContext
alcRenderSamplesSOFT
alcResetDeviceSOFT
alcSetThreadContext
alcSuspendContext
alsoft_get_version
Name
.text
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
195KB
Virtual Size
195KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
774KB
Virtual Size
773KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
82KB
Virtual Size
81KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
138KB
Virtual Size
138KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
878KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
824B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Libraries/vcruntime140.dll
- IMPHASH cfd5d6cb7ecdafff3769e90c815d91d2
- SHA256 184146852727a9db4eea06178716bec3cdbb1015c911f6b0f915b184ad7775b2
- MD5 0d35c5e99871b4f02c490b9fd9dace34
- SHA1 c2280e6285147cd8010becc0cd3a120fca0088e0
- SHA512 114bc156655e0d3249b6f94af1da80528b6695630f548ab596dfb406f6ffcc65276c9f900b637ba9c244ba5a4331aa15d2de0672f6dcbd38cb49a206c100698b
- SSDEEP 1536:a9pCUgtBAVcxStMXcfG8VwfmpcGLOI5Sv+vecbeQ6N7l9gEeza/yLzt:qyA+3EOfmpcGSdOecbeQ6Nx9Mqsp
- TLSH T1B9C37B4272B802FBC16BD274C292AE27FBB6B50687605BDF07AA86650F537D06D3C341
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
29:56:35:0a:31:24:9e:62:2b:54:83:e0:54:06:57:24:78:97:57:10:a9:f5:bd:48:da:a1:fc:fe:39:17:40:78
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 21, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
29:56:35:0a:31:24:9e:62:2b:54:83:e0:54:06:57:24:78:97:57:10:a9:f5:bd:48:da:a1:fc:fe:39:17:40:78
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 21, 2025
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:0d:c4:e7:bb:f4:af:f8:f0:90:00:00:00:00:01:0d
Issuer
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 15, 2025 - May 15, 2026
Subject
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:14:9d:fb:c3:1f:1f:63:c3:10:00:00:00:00:00:14
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 1, 2013 - May 1, 2028
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:DC00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:03:bb:1e:5c:00:38:6c:74:ca:00:01:00:00:02:03
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:7f:2f:42:2a:73:53:08:de:ea:00:00:00:00:04:7f
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 15, 2025 - May 15, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A000-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:08:78:9d:58:5d:92:c7:d9:52:00:01:00:00:02:08
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 30, 2025 - Apr 22, 2026
Minor OS version
0
Major OS version
6
Entry point
66656
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdb
api-ms-win-crt-runtime-l1-1-0
terminate
abort
api-ms-win-crt-heap-l1-1-0
calloc
malloc
free
api-ms-win-crt-string-l1-1-0
strcpy_s
strncmp
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
__stdio_common_vsprintf
api-ms-win-crt-convert-l1-1-0
atol
kernel32
EnterCriticalSection
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
RtlLookupFunctionEntry
RtlUnwindEx
RtlUnwind
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
EncodePointer
RaiseException
RtlPcToFileHeader
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
SetLastError
_CreateFrameInfo
_CxxThrowException
_FindAndUnlinkFrame
_IsExceptionObjectToBeDestroyed
_SetWinRTOutOfMemoryExceptionCallback
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__C_specific_handler
__C_specific_handler_noexcept
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__NLG_Dispatch2
__NLG_Return2
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
__current_exception
__current_exception_context
__intrinsic_setjmp
__intrinsic_setjmpex
__processing_throw
__report_gsfailure
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__telemetry_main_invoke_trigger
__telemetry_main_return_trigger
__unDName
__unDNameEx
__uncaught_exception
__uncaught_exceptions
__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW
__vcrt_InitializeCriticalSectionEx
__vcrt_LoadLibraryExW
_get_purecall_handler
_get_unexpected
_is_exception_typeof
_local_unwind
_purecall
_set_purecall_handler
_set_se_translator
longjmp
memchr
memcmp
memcpy
memmove
memset
set_unexpected
strchr
strrchr
strstr
unexpected
wcschr
wcsrchr
wcsstr
Name
.text
Size
72KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
fothk
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
892B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
504B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
976B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
732B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=257, version=33140,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=35, id=1, productName=Unmarked objects,
count=1, productName=Unmarked objects (old),
count=16, id=260, version=35403,
count=31, id=261, version=35403,
count=21, id=259, version=35403,
count=1, id=256, version=35403,
count=1, id=255, version=35403,
count=1, id=258, version=35403,
Theme/Default/1.txt
- SHA256 83e69c29d594c7ec97a526f5fda1ad07aa8891b260c69ec0fb061e36b6538837
- MD5 97b6273711cceb9b744b50c3bd107c4e
- SHA1 e09aad0a96285f51e01dc50092e38308b906a27a
- SHA512 889fae34fc54fd9eeaaf6d6fad257e29be4b72b16a59003812c1a52efdeb3d0cc29a7c0fed83009a9d072087d82adda25bf09792d5ffeb98f85aadbba0ab98fd
- MD5 SHA1 SHA512
Theme/Default/Eco siledr.bmp
- SHA256 ef6e277f4c5bd1ec230f2ebff3e658e3f063bd5e2d2b6250cf12744295f028e4
- MD5 46a43dfcc55bc11a24c733fe53e2df7a
- SHA1 4081fd3af8f922daca29f43352cd1625648d2c51
- SHA512 1c7eafc490e321957b671d47960d1d95e291884c55683481d8738a76a6dbe04c54fc7bcb8f2c70c3e355075fef70996dad80b81c6134effa95daa01e735ff026
- TLSH T16831DD32F3191C74E2A402B2E824C8B672D8FADA600355E7561A0E499617818AE27BE2
- MD5 SHA1 SHA512 TLSH
Theme/Default/HandBlue.cur
- SHA256 69ac873e1942d7c512f9c1caf2d6ad55447a02e0e6888a14ec32ff47f24ef812
- MD5 2553d098f0cf9b84b032978a88d5933a
- SHA1 49e28e9c655ac83dd9d42ed9575e32b2fb7560c9
- SHA512 071ac861cb9dffef106ac2baf05d48ee3581cd5857de1b0eed543d596aeb839a3435c10d714f204dba17dc8263011c1c396d9d6ea53d94a6c7c8147cde3f0214
- TLSH T1544194E4783AC0DEC6C60238D563AE6C97564D6F8A020B7691F8FE4E6DBA3933417080
- MD5 SHA1 SHA512 TLSH
Theme/Default/siledr.bmp
- SHA256 c52415146ecf257e73b65bad9e1d94b15ec67a69aeaef538553b4bf9d5de22aa
- MD5 236046bf1b072d75cfbfb4dd4b25f7c7
- SHA1 e80dbec226fbf8cd7b67ed2c6d339fc593d4b01d
- SHA512 240448849f20275a10817829e3172bc39ee52a671b84bf46a4d6edd29dd6e977a3497983073b1ff86fcb889695bfadf62d220e2e4f97c35103bfeccd93ff1944
- TLSH T14D212BD79A53C91FC7941434587A60380244F35F835302727C4660F1F10511B0605F91
- MD5 SHA1 SHA512 TLSH
Theme/Default/siledr_blue.bmp
- SHA256 556fb1b3222047a5fc783962e52f826b7b9d5f5bb1afb277746dd5b4574dce25
- MD5 f342108f8e367998ba6c9eeb658b8c2d
- SHA1 0baf7ff5bfb373f6ecbaf72a146d62647e18b004
- SHA512 91ec18ed2928948dda6fb603ddc5e78ac1e05fbad9b9f65d7db71419abad763016d742f86012e15b80eb24ccd7d3b1270edc2c762fe94598725689885e391e43
- TLSH T17B2195338D3F7353E7745871ECB1D43103024B7FC1FB141274041528340694935157D1
- MD5 SHA1 SHA512 TLSH
Theme/Default/siledr_blue_wide.bmp
- SHA256 21bd7314047d4253c7b0f54325c6f17480ce66b0ae6793419c351feeba0022c2
- MD5 91a8d008d5aea9de13d310b9c7355ed0
- SHA1 0b4a70b73ace25e19ef1f1f68b454a7ec36e6063
- SHA512 2f1ee1ae646dc1e438ff011f963bd859538e476716ee19eb5132eecf53380182ca03070131a03347e32c6ecad3d5c91b065b41290098a96cad0cc3495a27b0e0
- TLSH T128217E75FD529327DBE9A8788496827085BF8572D8562381F9C3390C2DE12C94864F83
- MD5 SHA1 SHA512 TLSH
Theme/Default/siledr_brec.bmp
- SHA256 ab1e56ffea8e8828695d71a42f6777445b6e627305803d1513ef8262ad59d006
- MD5 e0b55885ab474cd6196bfbc42d130922
- SHA1 6957dd52479fa269507585a9853e58fa83a7acd2
- SHA512 ecf67cb731290e73d3a548940e492fce55133beb3291a4b64c6e0e94a7c423086a3bb9e7628cc7246478925fd26ef0e89a878396a83cd8d152ba260c8b031207
- TLSH T17DE0023B9654C424D23E18344956B5CE129890567891DFFB55851EDCE41A6C84D093AF
- MD5 SHA1 SHA512 TLSH
Theme/Default/siledr_eq.bmp
- SHA256 9105efca77816285e903212366aefa8cc589f275cb6024a16e5b3e758bcf9b00
- MD5 fa815bee526fe325331834b572e8f1ba
- SHA1 a94f75f2e308b3b819d829c8aa6db84a1d312f0c
- SHA512 47e9da11a08e0714162d75d4a4ab3566a7048e83d2a97c6b816c983dc1bbfcdf9a07f7f77ea62be89f69a784c8abe74cf1e5c5167d5bfa631233124053efafa7
- TLSH T15831C041FCD5CE04E789E172E1348257BE7530FA8106807397D89C7160A2174994B50E
- MD5 SHA1 SHA512 TLSH
Theme/Default/siledr_hover.bmp
- SHA256 4f0b856ae4b1fc63c9dea76d75209ac7f35b0d9eba3a16db195ab6d27ba0bab4
- MD5 4767b79e52306c73650a1b655bb4e4de
- SHA1 d18e7ed1b32c13f3f3010a984bf6431ff004000c
- SHA512 ce561598f716fdba23064a8c836097b933368c321b6cb0d2b1b39b5d5f05b37ada426546866872c486d02f66995d9514c51ad4ed940c361a7931696266631833
- TLSH T1DD210253E10C3B37C7FD8276C943137291D0085F09D580B198BE3106690E3A956822F2
- MD5 SHA1 SHA512 TLSH
Theme/Default/siledr_specker..bmp
- SHA256 72f2b2cb56bd3fca34ece99ac2fd2580d170c1307e1364cfb19a3a9132490905
- MD5 a7f8394a9aa1295b87f82842c4c310bd
- SHA1 365a1e65e9977f53b691a067c7ee58656628c110
- SHA512 11da14070e6fa54110e0f18c04b5f5facf79fb34e8cc1ee96b52e2b6d5953bf3cdfd53b14cf935699e9ac4e8bbe886974da72e832c79f510c9f6111406134d56
- TLSH T18141121CF525D56CD9B444726854939B557460F5C8DA2B2270027420548A4573F1CAA1
- MD5 SHA1 SHA512 TLSH
Theme/Default/siledr_track.bmp
- SHA256 d517409da49679f148e42f995dbff2bc6681808767584168530a55bbcd9a6cfa
- MD5 f834126f1ffadc21fe8048973264b2d0
- SHA1 2508e034f7dbed0fa8bc9454c97349e5842b4288
- SHA512 4db7d91ce49cb4de39eabe982d0a3c717b578172ef8372bf83218f9275582bfa54665bb2e9c8771cbf0388a54ff87a1bd7a48814d13b8daeb8612f486e04e672
- TLSH T199312207134CE008EC3CAB3092002A0600B8B931D0C519D3330982861828AE1431C267
- MD5 SHA1 SHA512 TLSH
Theme/Default/sur siledr.bmp
- SHA256 3a0fd9948ce80f370d21281e8e84028435543e95f7da9cfb7b6ea12006c8923f
- MD5 0bbcc8f15c0a653d21c3012d1e04ba40
- SHA1 2485fa6efa2f177883a0b82924c46714a097cc18
- SHA512 913bec69ff069f1139e22f44776448ff304f55c0e1fb3a4985a216652bf9186033055732fa03dcb6d5786fa12db20ef3a5ce3ab6c08e67d267c39794fb741b84
- TLSH T1C9215238F20C4E20CB8D10BF4D1882D7C03772C0B0347BA3B004AE7486C1368893F688
- MD5 SHA1 SHA512 TLSH