Setup[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Setup.rar
Size

3.3MB
MD5

c8bff668752a13b5121a1090f3e81cc4
SHA1

3ebdcbbf057d1775f32fbdc7f9121bdc0bbd9c40
SHA256

9b628176ba9136501c4cc960b1e87042b9ab2485da99e0462f1783b1b1c379b1
SHA512

d21ac1d78bfbea474d902244436c273093e283659c03596547cb6c4edd390a14a2d87544c33a2a0ce7b07d37da0acd1a6a8ca3dd640c6cec5dc286ccf9460d1f
SSDEEP

98304:DjbDBOeqzybEvUBMkLlFNKNbShXLRxKEpABu3p4ux:rkelbBMANMSh7rNWBAR

Score

1^/10

Malware Config

Signatures

Files

Setup.rar
.rar

Password: 1717
DLL/libobs-d3d11.pdb
DLL/libobs-opengl.dll
.dll windows x64

Password: 1717

c5a3bd6e97e3314f41e3d8013978c044

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:c0:38:e4:78:18:6b:67:2a:3a:7b:21:ba:85:dc:62
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/05/2018, 00:00

Not After

14/07/2021, 12:00

Subject

CN=Hugh Bailey,O=Hugh Bailey,L=Temecula,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

obs

shader_sampler_convert
brealloc
dstr_copy
dstr_cat_dstr
dstr_cat_strref
get_shader_param_type
cf_preprocessor_free
cf_preprocessor_init
cf_lexer_free
cf_lexer_init
dstr_ncat
dstr_printf
dstr_replace
strref_cmp
error_data_buildstring
shader_parse
gs_effect_update_params
gs_matrix_get
gs_get_effect
astrcmp_n
bmemdup
matrix4_from_matrix3
matrix4_mul
bfree
bmalloc
matrix4_transpose
blog

obsglad

glad_glEnable
glad_glFlush
glad_glBlendFunc
glad_glDepthFunc
glad_glGetString
glad_glViewport
glad_glDrawArrays
glad_glColorMask
glad_glActiveTexture
glad_glBlendFuncSeparate
glad_glGenQueries
glad_glDeleteQueries
glad_glGetQueryObjectiv
glad_glStencilOpSeparate
glad_glStencilFuncSeparate
GLAD_GL_VERSION_2_1
GLAD_GL_VERSION_3_0
glad_glGenFramebuffers
glad_glFramebufferRenderbuffer
glad_glBindVertexArray
glad_glDeleteVertexArrays
glad_glGenVertexArrays
GLAD_GL_VERSION_3_2
glad_glQueryCounter
glad_glGetQueryObjectui64v
GLAD_GL_VERSION_4_3
GLAD_GL_ARB_framebuffer_object
glad_glPushDebugGroupKHR
glad_glPopDebugGroupKHR
GLAD_GL_ARB_copy_image
GLAD_GL_NV_copy_image
GLAD_GL_ARB_seamless_cube_map
glad_glDeleteTextures
glad_glGenTextures
glad_glDeleteFramebuffers
glad_glEnableVertexAttribArray
glad_glVertexAttribPointer
glad_glBindRenderbuffer
glad_glDeleteRenderbuffers
glad_glGenRenderbuffers
glad_glRenderbufferStorage
glad_glDisable
glad_glStencilMask
glad_glClearDepth
glad_glClearStencil
glad_glClearColor
glad_glClear
glad_glTexParameteri
glad_glScissor
glad_glFrontFace
glad_glCullFace
glad_glMapBuffer
glad_glGetTexImage
glad_glUniformMatrix4fv
glad_glUniform4iv
glad_glUniform3iv
glad_glUniform2iv
glad_glUniform1iv
glad_glUniform4fv
glad_glUniform3fv
glad_glUniform2fv
glad_glUniform1fv
glad_glUniform1i
glad_glUseProgram
glad_glShaderSource
glad_glLinkProgram
glad_glGetUniformLocation
glad_glGetShaderInfoLog
glad_glGetShaderiv
glad_glGetProgramInfoLog
glad_glGetProgramiv
glad_glGetAttribLocation
glad_glDetachShader
glad_glDeleteShader
glad_glDeleteProgram
glad_glCreateShader
glad_glCreateProgram
glad_glCompileShader
glad_glAttachShader
glad_glDeleteBuffers
glad_glCopyImageSubDataNV
glad_glCopyImageSubData
glad_glMapBufferRange
glad_glFramebufferTexture2D
glad_glBindFramebuffer
glad_glUnmapBuffer
glad_glBufferData
glad_glGenBuffers
glad_glBindBuffer
glad_glCompressedTexImage2D
glad_glBindTexture
glad_glCopyTexSubImage2D
glad_glGetIntegerv
glad_glGetError
glad_glReadBuffer
glad_glTexImage2D
GLAD_WGL_ARB_create_context_profile
glad_wglChoosePixelFormatARB
GLAD_WGL_ARB_pixel_format
GLAD_WGL_ARB_create_context
gladLoadWGL
gladLoadGL
glad_glDrawElements

opengl32

wglDeleteContext
wglMakeCurrent
wglCreateContext

kernel32

GetLastError
DisableThreadLibraryCalls
InitializeSListHead
GetSystemTimeAsFileTime
GetModuleHandleW
GetStartupInfoW
GetCurrentThreadId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
IsDebuggerPresent

user32

ReleaseDC
DefWindowProcA
DefWindowProcW
RegisterClassA
CreateWindowExA
DestroyWindow
GetDC
GetClientRect

gdi32

SetPixelFormat
DescribePixelFormat
ChoosePixelFormat
SwapBuffers

vcruntime140

__std_type_info_destroy_list
memcpy
memset
memmove
__C_specific_handler

api-ms-win-crt-heap-l1-1-0

free
calloc
malloc

api-ms-win-crt-string-l1-1-0

strcmp

api-ms-win-crt-runtime-l1-1-0

_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
terminate
_cexit

Exports

Exports

device_begin_scene
device_blend_function
device_blend_function_separate
device_clear
device_copy_texture
device_copy_texture_region
device_create
device_cubetexture_create
device_debug_marker_begin
device_debug_marker_end
device_depth_function
device_destroy
device_draw
device_enable_blending
device_enable_color
device_enable_depth_test
device_enable_stencil_test
device_enable_stencil_write
device_end_scene
device_enter_context
device_flush
device_frustum
device_gdi_texture_available
device_get_cull_mode
device_get_device_obj
device_get_height
device_get_name
device_get_pixel_shader
device_get_render_target
device_get_size
device_get_texture_type
device_get_type
device_get_vertex_shader
device_get_viewport
device_get_width
device_get_zstencil_target
device_indexbuffer_create
device_leave_context
device_load_default_samplerstate
device_load_indexbuffer
device_load_pixelshader
device_load_samplerstate
device_load_swapchain
device_load_texture
device_load_vertexbuffer
device_load_vertexshader
device_ortho
device_pixelshader_create
device_preprocessor_name
device_present
device_projection_pop
device_projection_push
device_resize
device_samplerstate_create
device_set_cube_render_target
device_set_cull_mode
device_set_render_target
device_set_scissor_rect
device_set_viewport
device_shared_texture_available
device_stage_texture
device_stagesurface_create
device_stencil_function
device_stencil_op
device_swapchain_create
device_texture_create
device_timer_create
device_timer_range_create
device_vertexbuffer_create
device_vertexshader_create
device_voltexture_create
device_zstencil_create
gs_cubetexture_destroy
gs_cubetexture_get_color_format
gs_cubetexture_get_size
gs_indexbuffer_destroy
gs_indexbuffer_flush
gs_indexbuffer_flush_direct
gs_indexbuffer_get_data
gs_indexbuffer_get_num_indices
gs_indexbuffer_get_type
gs_samplerstate_destroy
gs_shader_destroy
gs_shader_get_num_params
gs_shader_get_param_by_idx
gs_shader_get_param_by_name
gs_shader_get_param_info
gs_shader_get_viewproj_matrix
gs_shader_get_world_matrix
gs_shader_set_bool
gs_shader_set_default
gs_shader_set_float
gs_shader_set_int
gs_shader_set_matrix3
gs_shader_set_matrix4
gs_shader_set_next_sampler
gs_shader_set_texture
gs_shader_set_val
gs_shader_set_vec2
gs_shader_set_vec3
gs_shader_set_vec4
gs_stagesurface_destroy
gs_stagesurface_get_color_format
gs_stagesurface_get_height
gs_stagesurface_get_width
gs_stagesurface_map
gs_stagesurface_unmap
gs_swapchain_destroy
gs_texture_destroy
gs_texture_get_color_format
gs_texture_get_height
gs_texture_get_obj
gs_texture_get_width
gs_texture_is_rect
gs_texture_map
gs_texture_unmap
gs_timer_begin
gs_timer_destroy
gs_timer_end
gs_timer_get_data
gs_timer_range_begin
gs_timer_range_destroy
gs_timer_range_end
gs_timer_range_get_data
gs_vertexbuffer_destroy
gs_vertexbuffer_flush
gs_vertexbuffer_flush_direct
gs_vertexbuffer_get_data
gs_voltexture_destroy
gs_voltexture_get_color_format
gs_voltexture_get_depth
gs_voltexture_get_height
gs_voltexture_get_width
gs_zstencil_destroy

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 283B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 706B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLL/libobs-opengl.pdb
DLL/libogg-0.dll
.dll windows x64

Password: 1717

9203ff991a4c02fe98e550a2e1adfcdf

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:c0:38:e4:78:18:6b:67:2a:3a:7b:21:ba:85:dc:62
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/05/2018, 00:00

Not After

14/07/2021, 12:00

Subject

CN=Hugh Bailey,O=Hugh Bailey,L=Temecula,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
__iob_func
_amsg_exit
_initterm
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memchr
memcpy
memmove
realloc
signal
strlen
strncmp
vfprintf

Exports

Exports

ogg_packet_clear
ogg_page_bos
ogg_page_checksum_set
ogg_page_continued
ogg_page_eos
ogg_page_granulepos
ogg_page_packets
ogg_page_pageno
ogg_page_serialno
ogg_page_version
ogg_stream_check
ogg_stream_clear
ogg_stream_destroy
ogg_stream_eos
ogg_stream_flush
ogg_stream_flush_fill
ogg_stream_init
ogg_stream_iovecin
ogg_stream_packetin
ogg_stream_packetout
ogg_stream_packetpeek
ogg_stream_pagein
ogg_stream_pageout
ogg_stream_pageout_fill
ogg_stream_reset
ogg_stream_reset_serialno
ogg_sync_buffer
ogg_sync_check
ogg_sync_clear
ogg_sync_destroy
ogg_sync_init
ogg_sync_pageout
ogg_sync_pageseek
ogg_sync_reset
ogg_sync_wrote
oggpackB_adv
oggpackB_adv1
oggpackB_bits
oggpackB_bytes
oggpackB_get_buffer
oggpackB_look
oggpackB_look1
oggpackB_read
oggpackB_read1
oggpackB_readinit
oggpackB_reset
oggpackB_write
oggpackB_writealign
oggpackB_writecheck
oggpackB_writeclear
oggpackB_writecopy
oggpackB_writeinit
oggpackB_writetrunc
oggpack_adv
oggpack_adv1
oggpack_bits
oggpack_bytes
oggpack_get_buffer
oggpack_look
oggpack_look1
oggpack_read
oggpack_read1
oggpack_readinit
oggpack_reset
oggpack_write
oggpack_writealign
oggpack_writecheck
oggpack_writeclear
oggpack_writecopy
oggpack_writeinit
oggpack_writetrunc

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 263KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLL/libopus-0.dll
.dll windows x64

Password: 1717

e5fbcc0c99448553fc32586f0e2cd6af

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:c0:38:e4:78:18:6b:67:2a:3a:7b:21:ba:85:dc:62
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/05/2018, 00:00

Not After

14/07/2021, 12:00

Subject

CN=Hugh Bailey,O=Hugh Bailey,L=Temecula,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
__iob_func
__setusermatherr
_amsg_exit
_errno
_initterm
_lock
_onexit
_unlock
abort
calloc
fprintf
free
fwrite
log10
malloc
memcpy
memmove
memset
signal
strlen
strncmp
vfprintf

Exports

Exports

opus_decode
opus_decode_float
opus_decoder_create
opus_decoder_ctl
opus_decoder_destroy
opus_decoder_get_nb_samples
opus_decoder_get_size
opus_decoder_init
opus_encode
opus_encode_float
opus_encoder_create
opus_encoder_ctl
opus_encoder_destroy
opus_encoder_get_size
opus_encoder_init
opus_get_version_string
opus_multistream_decode
opus_multistream_decode_float
opus_multistream_decoder_create
opus_multistream_decoder_ctl
opus_multistream_decoder_destroy
opus_multistream_decoder_get_size
opus_multistream_decoder_init
opus_multistream_encode
opus_multistream_encode_float
opus_multistream_encoder_create
opus_multistream_encoder_ctl
opus_multistream_encoder_destroy
opus_multistream_encoder_get_size
opus_multistream_encoder_init
opus_multistream_packet_pad
opus_multistream_packet_unpad
opus_multistream_surround_encoder_create
opus_multistream_surround_encoder_get_size
opus_multistream_surround_encoder_init
opus_packet_get_bandwidth
opus_packet_get_nb_channels
opus_packet_get_nb_frames
opus_packet_get_nb_samples
opus_packet_get_samples_per_frame
opus_packet_pad
opus_packet_parse
opus_packet_unpad
opus_pcm_soft_clip
opus_projection_ambisonics_encoder_create
opus_projection_ambisonics_encoder_get_size
opus_projection_ambisonics_encoder_init
opus_projection_decode
opus_projection_decode_float
opus_projection_decoder_create
opus_projection_decoder_ctl
opus_projection_decoder_destroy
opus_projection_decoder_get_size
opus_projection_decoder_init
opus_projection_encode
opus_projection_encode_float
opus_projection_encoder_ctl
opus_projection_encoder_destroy
opus_repacketizer_cat
opus_repacketizer_create
opus_repacketizer_destroy
opus_repacketizer_get_nb_frames
opus_repacketizer_get_size
opus_repacketizer_init
opus_repacketizer_out
opus_repacketizer_out_range
opus_strerror

Sections

.text
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 644KB - Virtual size: 644KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLL/libvorbis-0.dll
.dll windows x64

Password: 1717

88583d9461b1d191e79bd3f22b9a9279

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:c0:38:e4:78:18:6b:67:2a:3a:7b:21:ba:85:dc:62
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/05/2018, 00:00

Not After

14/07/2021, 12:00

Subject

CN=Hugh Bailey,O=Hugh Bailey,L=Temecula,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
__iob_func
__setusermatherr
_amsg_exit
_errno
_initterm
_lock
_onexit
_unlock
abort
acos
atan
calloc
exit
fprintf
free
fwrite
malloc
memcpy
memmove
memset
qsort
realloc
signal
strcpy
strlen
strncmp
vfprintf

libogg-0

oggpack_adv
oggpack_bytes
oggpack_get_buffer
oggpack_look
oggpack_read
oggpack_readinit
oggpack_reset
oggpack_write
oggpack_writeclear
oggpack_writeinit
oggpack_writetrunc

Exports

Exports

_book_maptype1_quantvals
_book_unquantize
_float32_pack
_float32_unpack
_floor_P
_make_words
_mapping_P
_residue_P
_ve_envelope_clear
_ve_envelope_init
_ve_envelope_mark
_ve_envelope_search
_ve_envelope_shift
_vi_gpsy_free
_vi_psy_free
_vorbis_apply_window
_vorbis_block_alloc
_vorbis_block_ripcord
_vorbis_window_get
_vp_ampmax_decay
_vp_couple_quantize_normalize
_vp_global_free
_vp_global_look
_vp_noisemask
_vp_offset_and_mix
_vp_psy_clear
_vp_psy_init
_vp_tonemask
drft_backward
drft_clear
drft_forward
drft_init
floor0_exportbundle
floor1_encode
floor1_exportbundle
floor1_fit
floor1_interpolate_fit
mapping0_exportbundle
mdct_backward
mdct_clear
mdct_forward
mdct_init
ov_ilog
res0_free_info
res0_free_look
res0_inverse
res0_look
res0_pack
res0_unpack
res1_class
res1_forward
res1_inverse
res2_class
res2_forward
res2_inverse
residue0_exportbundle
residue1_exportbundle
residue2_exportbundle
vorbis_analysis
vorbis_analysis_blockout
vorbis_analysis_buffer
vorbis_analysis_headerout
vorbis_analysis_init
vorbis_analysis_wrote
vorbis_bitrate_addblock
vorbis_bitrate_clear
vorbis_bitrate_flushpacket
vorbis_bitrate_init
vorbis_bitrate_managed
vorbis_block_clear
vorbis_block_init
vorbis_book_clear
vorbis_book_codelen
vorbis_book_codeword
vorbis_book_decode
vorbis_book_decodev_add
vorbis_book_decodev_set
vorbis_book_decodevs_add
vorbis_book_decodevv_add
vorbis_book_encode
vorbis_book_init_decode
vorbis_book_init_encode
vorbis_comment_add
vorbis_comment_add_tag
vorbis_comment_clear
vorbis_comment_init
vorbis_comment_query
vorbis_comment_query_count
vorbis_commentheader_out
vorbis_dsp_clear
vorbis_granule_time
vorbis_info_blocksize
vorbis_info_clear
vorbis_info_init
vorbis_lpc_from_data
vorbis_lpc_predict
vorbis_lpc_to_lsp
vorbis_lsp_to_curve
vorbis_packet_blocksize
vorbis_staticbook_destroy
vorbis_staticbook_pack
vorbis_staticbook_unpack
vorbis_synthesis
vorbis_synthesis_blockin
vorbis_synthesis_halfrate
vorbis_synthesis_halfrate_p
vorbis_synthesis_headerin
vorbis_synthesis_idheader
vorbis_synthesis_init
vorbis_synthesis_lapout
vorbis_synthesis_pcmout
vorbis_synthesis_read
vorbis_synthesis_restart
vorbis_synthesis_trackonly
vorbis_version_string
vorbis_window

Sections

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 282KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLL/libvorbisenc-2.dll
.dll windows x64

Password: 1717

d226c50d44a1010a493ecc1ea36f7cc8

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:c0:38:e4:78:18:6b:67:2a:3a:7b:21:ba:85:dc:62
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/05/2018, 00:00

Not After

14/07/2021, 12:00

Subject

CN=Hugh Bailey,O=Hugh Bailey,L=Temecula,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

libvorbis-0

vorbis_info_clear

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
__iob_func
_amsg_exit
_initterm
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
signal
strlen
strncmp
vfprintf

Exports

Exports

vorbis_encode_ctl
vorbis_encode_init
vorbis_encode_init_vbr
vorbis_encode_setup_init
vorbis_encode_setup_managed
vorbis_encode_setup_vbr

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 535KB - Virtual size: 535KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 250KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLL/libvorbisfile-3.dll
.dll windows x64

Password: 1717

7802346eb23554e5b86bb5b00a3a083a

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:c0:38:e4:78:18:6b:67:2a:3a:7b:21:ba:85:dc:62
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/05/2018, 00:00

Not After

14/07/2021, 12:00

Subject

CN=Hugh Bailey,O=Hugh Bailey,L=Temecula,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

libvorbis-0

vorbis_block_clear
vorbis_block_init
vorbis_comment_clear
vorbis_comment_init
vorbis_dsp_clear
vorbis_info_blocksize
vorbis_info_clear
vorbis_info_init
vorbis_packet_blocksize
vorbis_synthesis
vorbis_synthesis_blockin
vorbis_synthesis_halfrate
vorbis_synthesis_halfrate_p
vorbis_synthesis_headerin
vorbis_synthesis_idheader
vorbis_synthesis_init
vorbis_synthesis_lapout
vorbis_synthesis_pcmout
vorbis_synthesis_read
vorbis_synthesis_restart
vorbis_synthesis_trackonly
vorbis_window

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
__iob_func
_amsg_exit
_errno
_initterm
_lock
_onexit
_unlock
abort
calloc
fclose
fopen
fread
free
fseek
ftell
fwrite
malloc
memcpy
memset
realloc
signal
strlen
strncmp
vfprintf

libogg-0

ogg_page_bos
ogg_page_continued
ogg_page_eos
ogg_page_granulepos
ogg_page_serialno
ogg_stream_clear
ogg_stream_init
ogg_stream_packetout
ogg_stream_packetpeek
ogg_stream_pagein
ogg_stream_reset
ogg_stream_reset_serialno
ogg_sync_buffer
ogg_sync_clear
ogg_sync_init
ogg_sync_pageseek
ogg_sync_reset
ogg_sync_wrote

Exports

Exports

ov_bitrate
ov_bitrate_instant
ov_clear
ov_comment
ov_crosslap
ov_fopen
ov_halfrate
ov_halfrate_p
ov_info
ov_open
ov_open_callbacks
ov_pcm_seek
ov_pcm_seek_lap
ov_pcm_seek_page
ov_pcm_seek_page_lap
ov_pcm_tell
ov_pcm_total
ov_raw_seek
ov_raw_seek_lap
ov_raw_tell
ov_raw_total
ov_read
ov_read_filter
ov_read_float
ov_seekable
ov_serialnumber
ov_streams
ov_test
ov_test_callbacks
ov_test_open
ov_time_seek
ov_time_seek_lap
ov_time_seek_page
ov_time_seek_page_lap
ov_time_tell
ov_time_total

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 907B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 250KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLL/libvpx-1.dll
.dll windows x64

Password: 1717

3e30e18ab5d033aa9edd4de43852a0b4

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:c0:38:e4:78:18:6b:67:2a:3a:7b:21:ba:85:dc:62
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/05/2018, 00:00

Not After

14/07/2021, 12:00

Subject

CN=Hugh Bailey,O=Hugh Bailey,L=Temecula,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseSemaphore
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEvent
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObjectEx

msvcrt

__dllonexit
__iob_func
__setusermatherr
_amsg_exit
_beginthreadex
_errno
_initterm
_lock
_onexit
_setjmp
_unlock
_vsnprintf
abort
calloc
fprintf
free
fwrite
getenv
log10
malloc
memcpy
memmove
memset
printf
qsort
rand
signal
strlen
strncmp
strtol
strtoul
vfprintf
longjmp

Exports

Exports

VP8_UVSSE
average_split_mvs
b_height_log2_lookup
b_width_log2_lookup
clamp_mv_to_umv_border_sb
get_layer_resolution
iadst16_c
iadst16_sse2
iadst4_c
iadst4_sse2
iadst8_c
iadst8_sse2
idct16_c
idct16_sse2
idct32_1024_8x32
idct32_135_8x32_ssse3
idct32_34_8x32_sse2
idct32_34_8x32_ssse3
idct32_c
idct4_c
idct4_sse2
idct8_c
intra_mode_to_tx_type_lookup
kMinCompressedSize
max_txsize_lookup
mi_width_log2_lookup
num_4x4_blocks_high_lookup
num_4x4_blocks_wide_lookup
num_8x8_blocks_high_lookup
num_8x8_blocks_wide_lookup
num_pels_log2_lookup
partition_context_lookup
partition_lookup
post_encode_drop_cbr
size_group_lookup
ss_size_lookup
subsize_lookup
tx_counts_to_branch_counts_16x16
tx_counts_to_branch_counts_32x32
tx_counts_to_branch_counts_8x8
tx_mode_to_biggest_tx_size
txsize_to_bsize
uv_txsize_lookup
vp8_ac2quant
vp8_ac_uv_quant
vp8_ac_yquant
vp8_activity_masking
vp8_adjust_key_frame_context
vp8_alloc_compressor_data
vp8_alloc_frame_buffers
vp8_auto_select_speed
vp8_bilinear_filters
vp8_bilinear_predict16x16
vp8_bilinear_predict16x16_c
vp8_bilinear_predict16x16_sse2
vp8_bilinear_predict16x16_ssse3
vp8_bilinear_predict4x4_c
vp8_bilinear_predict4x4_sse2
vp8_bilinear_predict8x4_c
vp8_bilinear_predict8x4_sse2
vp8_bilinear_predict8x8
vp8_bilinear_predict8x8_c
vp8_bilinear_predict8x8_sse2
vp8_bilinear_predict8x8_ssse3
vp8_bits_per_mb
vp8_block2above
vp8_block2left
vp8_block_error_c
vp8_block_error_sse2
vp8_bmode_encodings
vp8_bmode_prob
vp8_bmode_tree
vp8_build_block_doffsets
vp8_build_block_offsets
vp8_build_component_cost_table
vp8_build_inter16x16_predictors_mb
vp8_build_inter16x16_predictors_mbuv
vp8_build_inter16x16_predictors_mby
vp8_build_inter4x4_predictors_mbuv
vp8_build_inter_predictors_b
vp8_build_inter_predictors_mb
vp8_build_intra_predictors_mbuv_s
vp8_build_intra_predictors_mby_s
vp8_cal_sad
vp8_calc_ref_frame_costs
vp8_calc_ss_err
vp8_change_config
vp8_coef_bands
vp8_coef_encodings
vp8_coef_tree
vp8_coef_update_probs
vp8_compute_frame_size_bounds
vp8_compute_skin_block
vp8_convert_rfct_to_prob
vp8_copy32xn
vp8_copy32xn_c
vp8_copy32xn_sse2
vp8_copy32xn_sse3
vp8_copy_and_extend_frame
vp8_copy_and_extend_frame_with_rect
vp8_copy_mem16x16_c
vp8_copy_mem16x16_sse2
vp8_copy_mem8x4_c
vp8_copy_mem8x4_mmx
vp8_copy_mem8x8_c
vp8_copy_mem8x8_mmx
vp8_cost_mv_ref
vp8_cost_tokens
vp8_cost_tokens2
vp8_create_common
vp8_create_compressor
vp8_create_decoder_instances
vp8_ctf_maps
vp8_dc2quant
vp8_dc_only_idct_add_c
vp8_dc_only_idct_add_mmx
vp8_dc_quant
vp8_dc_uv_quant
vp8_dct_value_cost_ptr
vp8_dct_value_tokens_ptr
vp8_de_alloc_frame_buffers
vp8_de_noise
vp8_deblock
vp8_decode_frame
vp8_decode_mb_tokens
vp8_decode_mode_mvs
vp8_decoder_create_threads
vp8_decoder_remove_threads
vp8_default_bmode_probs
vp8_default_coef_probs
vp8_default_inv_zig_zag
vp8_default_mv_context
vp8_default_zig_zag1d
vp8_default_zig_zag_mask
vp8_denoiser_allocate
vp8_denoiser_denoise_mb
vp8_denoiser_filter_c
vp8_denoiser_filter_sse2
vp8_denoiser_filter_uv_c
vp8_denoiser_filter_uv_sse2
vp8_denoiser_free
vp8_denoiser_set_parameters
vp8_dequant_idct_add_c
vp8_dequant_idct_add_mmx
vp8_dequant_idct_add_uv_block_c
vp8_dequant_idct_add_uv_block_sse2
vp8_dequant_idct_add_y_block_c
vp8_dequant_idct_add_y_block_sse2
vp8_dequantize_b_c
vp8_dequantize_b_impl_mmx
vp8_dequantize_b_mmx
vp8_diamond_search_sad_c
vp8_diamond_search_sadx4
vp8_drop_encodedframe_overshoot
vp8_encode_frame
vp8_encode_inter16x16
vp8_encode_inter16x16y
vp8_encode_intra
vp8_encode_intra16x16mbuv
vp8_encode_intra16x16mby
vp8_encode_intra4x4block
vp8_encode_intra4x4mby
vp8_encode_motion_vector
vp8_encode_value
vp8_estimate_entropy_savings
vp8_extend_mb_row
vp8_extra_bits
vp8_fast_quantize_b
vp8_fast_quantize_b_c
vp8_fast_quantize_b_sse2
vp8_fast_quantize_b_ssse3
vp8_filter_block1d16_h6_only_sse2
vp8_filter_block1d16_h6_sse2
vp8_filter_block1d16_h6_ssse3
vp8_filter_block1d16_v6_sse2
vp8_filter_block1d16_v6_ssse3
vp8_filter_block1d4_h6_ssse3
vp8_filter_block1d4_v6_ssse3
vp8_filter_block1d8_h6_only_sse2
vp8_filter_block1d8_h6_sse2
vp8_filter_block1d8_h6_ssse3
vp8_filter_block1d8_v6_only_sse2
vp8_filter_block1d8_v6_sse2
vp8_filter_block1d8_v6_ssse3
vp8_filter_block1d_h6_mmx
vp8_filter_block1dc_v6_mmx
vp8_filter_by_weight16x16_c
vp8_filter_by_weight16x16_sse2
vp8_filter_by_weight4x4_c
vp8_filter_by_weight8x8_c
vp8_filter_by_weight8x8_sse2
vp8_find_best_half_pixel_step
vp8_find_best_sub_pixel_step
vp8_find_best_sub_pixel_step_iteratively
vp8_find_near_mvs
vp8_find_near_mvs_bias
vp8_fix_contexts
vp8_full_search_sad
vp8_full_search_sad_c
vp8_full_search_sadx3
vp8_full_search_sadx8
vp8_get_compressed_data
vp8_get_inter_mbpred_error
vp8_get_preview_raw_frame
vp8_get_quantizer
vp8_get_reference
vp8_gf_boost_qadjustment
vp8_hex_search
vp8_horizontal_line_2_1_scale_c
vp8_horizontal_line_5_3_scale_c
vp8_horizontal_line_5_4_scale_c
vp8_idct_dequant_0_2x_sse2
vp8_idct_dequant_dc_0_2x_sse2
vp8_idct_dequant_dc_full_2x_sse2
vp8_idct_dequant_full_2x_sse2
vp8_init3smotion_compensation
vp8_init_dsmotion_compensation
vp8_init_intra4x4_predictors_internal
vp8_init_intra_predictors
vp8_init_mbmode_probs
vp8_init_mode_costs
vp8_initialize_enc
vp8_initialize_rd_consts
vp8_intra4x4_predict
vp8_kf_bmode_prob
vp8_kf_uv_mode_prob
vp8_kf_ymode_encodings
vp8_kf_ymode_prob
vp8_kf_ymode_tree
vp8_lookahead_depth
vp8_lookahead_destroy
vp8_lookahead_init
vp8_lookahead_peek
vp8_lookahead_pop
vp8_lookahead_push
vp8_loop_filter_bh_c
vp8_loop_filter_bh_sse2
vp8_loop_filter_bh_y_sse2
vp8_loop_filter_bhs_c
vp8_loop_filter_bhs_sse2
vp8_loop_filter_bv_c
vp8_loop_filter_bv_sse2
vp8_loop_filter_bv_y_sse2
vp8_loop_filter_bvs_c
vp8_loop_filter_bvs_sse2
vp8_loop_filter_frame
vp8_loop_filter_frame_init
vp8_loop_filter_frame_yonly
vp8_loop_filter_horizontal_edge_uv_sse2
vp8_loop_filter_init
vp8_loop_filter_mbh_c
vp8_loop_filter_mbh_sse2
vp8_loop_filter_mbv_c
vp8_loop_filter_mbv_sse2
vp8_loop_filter_partial_frame
vp8_loop_filter_row_normal
vp8_loop_filter_row_simple
vp8_loop_filter_simple_horizontal_edge_c
vp8_loop_filter_simple_horizontal_edge_sse2
vp8_loop_filter_simple_vertical_edge_c
vp8_loop_filter_simple_vertical_edge_sse2
vp8_loop_filter_update_sharpness
vp8_loop_filter_vertical_edge_uv_sse2
vp8_loopfilter_frame
vp8_machine_specific_config
vp8_mb_feature_data_bits
vp8_mb_init_dequantizer
vp8_mbblock_error_c
vp8_mbblock_error_sse2
vp8_mbblock_error_sse2_impl
vp8_mbloop_filter_horizontal_edge_sse2
vp8_mbloop_filter_horizontal_edge_uv_sse2
vp8_mbloop_filter_vertical_edge_sse2
vp8_mbloop_filter_vertical_edge_uv_sse2
vp8_mbsplit_count
vp8_mbsplit_encodings
vp8_mbsplit_offset
vp8_mbsplit_probs
vp8_mbsplit_tree
vp8_mbsplits
vp8_mbuverror_c
vp8_mbuverror_sse2
vp8_mbuverror_sse2_impl
vp8_mode_contexts
vp8_mode_order
vp8_multiframe_quality_enhance
vp8_mv_bit_cost
vp8_mv_cont
vp8_mv_pred
vp8_mv_ref_encoding_array
vp8_mv_ref_probs
vp8_mv_ref_tree
vp8_mv_update_probs
vp8_new_framerate
vp8_norm
vp8_optimize_mbuv
vp8_optimize_mby
vp8_pack_bitstream
vp8_pack_tokens
vp8_pick_frame_size
vp8_pick_inter_mode
vp8_pick_intra_mode
vp8_post_proc_frame
vp8_prev_token_class
vp8_prob_cost
vp8_quantize_mb
vp8_quantize_mbuv
vp8_quantize_mby
vp8_rd_pick_inter_mode
vp8_rd_pick_intra_mode
vp8_receive_raw_frame
vp8_ref_frame_order
vp8_refining_search_sad_c
vp8_refining_search_sadx4
vp8_regular_quantize_b
vp8_regular_quantize_b_c
vp8_regular_quantize_b_sse2
vp8_regular_quantize_b_sse4_1
vp8_regulate_q
vp8_remove_common
vp8_remove_compressor
vp8_remove_decoder_instances
vp8_reset_mb_tokens_context
vp8_restore_coding_context
vp8_reverse_trans
vp8_rtcd
vp8_save_coding_context
vp8_set_active_map
vp8_set_internal_size
vp8_set_mbmode_and_mvs
vp8_set_quantizer
vp8_set_reference
vp8_set_roimap
vp8_set_speed_features
vp8_setup_block_dptrs
vp8_setup_block_ptrs
vp8_setup_intra_recon
vp8_setup_intra_recon_top_line
vp8_setup_key_frame
vp8_setup_version
vp8_short_fdct4x4_c
vp8_short_fdct4x4_sse2
vp8_short_fdct8x4_c
vp8_short_fdct8x4_sse2
vp8_short_idct4x4llm_c
vp8_short_idct4x4llm_mmx
vp8_short_inv_walsh4x4_1_c
vp8_short_inv_walsh4x4_c
vp8_short_inv_walsh4x4_sse2
vp8_short_walsh4x4_c
vp8_short_walsh4x4_sse2
vp8_six_tap_x86
vp8_sixtap_predict16x16
vp8_sixtap_predict16x16_c
vp8_sixtap_predict16x16_sse2
vp8_sixtap_predict16x16_ssse3
vp8_sixtap_predict4x4
vp8_sixtap_predict4x4_c
vp8_sixtap_predict4x4_mmx
vp8_sixtap_predict4x4_ssse3
vp8_sixtap_predict8x4
vp8_sixtap_predict8x4_c
vp8_sixtap_predict8x4_sse2
vp8_sixtap_predict8x4_ssse3
vp8_sixtap_predict8x8
vp8_sixtap_predict8x8_c
vp8_sixtap_predict8x8_sse2
vp8_sixtap_predict8x8_ssse3
vp8_skip_fractional_mv_step
vp8_small_mvencodings
vp8_small_mvtree
vp8_start_encode
vp8_stop_encode
vp8_stuff_mb
vp8_sub_mv_ref_encoding_array
vp8_sub_mv_ref_prob2
vp8_sub_mv_ref_prob3
vp8_sub_mv_ref_tree
vp8_sub_pel_filters
vp8_subtract_b
vp8_subtract_mbuv
vp8_subtract_mby
vp8_swap_yv12_buffer
vp8_tokenize_mb
vp8_tokens_from_tree
vp8_tokens_from_tree_offset
vp8_transform_intra_mby
vp8_transform_mbuv
vp8_tree_probs_from_distribution
vp8_unpack_block1d16_h6_sse2
vp8_update_coef_probs
vp8_update_entropy
vp8_update_gf_useage_maps
vp8_update_rate_correction_factors
vp8_update_reference
vp8_update_zbin_extra
vp8_use_as_reference
vp8_uv_mode_encodings
vp8_uv_mode_prob
vp8_uv_mode_tree
vp8_variance_and_sad_16x16_sse2
vp8_vertical_band_2_1_scale_c
vp8_vertical_band_2_1_scale_i_c
vp8_vertical_band_5_3_scale_c
vp8_vertical_band_5_4_scale_c
vp8_write_mvprobs
vp8_ymode_encodings
vp8_ymode_prob
vp8_ymode_tree
vp8_yv12_alloc_frame_buffer
vp8_yv12_copy_frame_c
vp8_yv12_de_alloc_frame_buffer
vp8_yv12_extend_frame_borders_c
vp8_yv12_realloc_frame_buffer
vp8cx_base_skip_false_prob
vp8cx_create_encoder_threads
vp8cx_encode_inter_macroblock
vp8cx_encode_intra_macroblock
vp8cx_frame_init_quantizer
vp8cx_init_de_quantizer
vp8cx_init_mbrthread_data
vp8cx_init_quantizer
vp8cx_initialize_me_consts
vp8cx_mb_init_quantizer
vp8cx_pick_filter_level
vp8cx_pick_filter_level_fast
vp8cx_remove_encoder_threads
vp8cx_set_alt_lf_level
vp8dx_bool_decoder_fill
vp8dx_get_quantizer
vp8dx_get_raw_frame
vp8dx_get_reference
vp8dx_receive_compressed_data
vp8dx_references_buffer
vp8dx_set_reference
vp8dx_start_decode
vp8mt_alloc_temp_buffers
vp8mt_de_alloc_temp_buffers
vp8mt_decode_mb_rows
vp9_above_block_mode
vp9_ac_quant
vp9_accumulate_frame_counts
vp9_active_edge_sb
vp9_active_h_edge
vp9_active_v_edge
vp9_adapt_coef_probs
vp9_adapt_mode_probs
vp9_adapt_mv_probs
vp9_adjust_mask
vp9_alloc_context_buffers
vp9_alloc_internal_frame_buffers
vp9_alloc_loop_filter
vp9_append_sub8x8_mvs_for_idx
vp9_apply_encoding_flags
vp9_assign_tile_to_thread
vp9_bitstream_encode_tiles_buffer_dealloc
vp9_block_error
vp9_block_error_avx2
vp9_block_error_c
vp9_block_error_fp
vp9_block_error_fp_avx2
vp9_block_error_fp_c
vp9_block_error_fp_sse2
vp9_block_error_sse2
vp9_build_inter_mode_cost
vp9_build_inter_predictor
vp9_build_inter_predictors_sb
vp9_build_inter_predictors_sbp
vp9_build_inter_predictors_sbuv
vp9_build_inter_predictors_sby
vp9_build_mask
vp9_build_mask_frame
vp9_build_nmv_cost_table
vp9_calculate_rd_cost
vp9_cat1_prob
vp9_cat2_prob
vp9_cat3_prob
vp9_cat4_prob
vp9_cat5_prob
vp9_cat6_high_cost
vp9_cat6_low_cost
vp9_cat6_prob
vp9_change_config
vp9_choose_segmap_coding_method
vp9_clear_segdata
vp9_clearall_segfeatures
vp9_coef_con_tree
vp9_coef_encodings
vp9_coef_tree
vp9_coefband_trans_4x4
vp9_coefband_trans_8x8plus
vp9_compound_reference_allowed
vp9_compute_qdelta
vp9_compute_qdelta_by_rate
vp9_compute_rd_mult
vp9_compute_rd_mult_based_on_qindex
vp9_compute_skin_block
vp9_compute_skin_sb
vp9_cond_prob_diff_update
vp9_configure_buffer_updates

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 280KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLL/libx264-157.dll
.dll windows x64

Password: 1717

bf47da55d70850c6c90d52230a1db7c0

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:c0:38:e4:78:18:6b:67:2a:3a:7b:21:ba:85:dc:62
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/05/2018, 00:00

Not After

14/07/2021, 12:00

Subject

CN=Hugh Bailey,O=Hugh Bailey,L=Temecula,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CloseHandle
CreateEventW
CreateSemaphoreW
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetProcessAffinityMask
GetStdHandle
GetSystemTimeAsFileTime
GetThreadPriority
GetTickCount
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryW
MultiByteToWideChar
QueryPerformanceCounter
ReleaseSemaphore
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEvent
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WaitNamedPipeW
WideCharToMultiByte
WriteConsoleW

msvcrt

___lc_codepage_func
__dllonexit
__doserrno
__iob_func
__mb_cur_max
__pioinfo
__setusermatherr
_amsg_exit
_beginthreadex
_errno
_exit
_filelengthi64
_fileno
_fstat64
_ftime64
_initterm
_lock
_lseeki64
_onexit
_stricmp
_strnicmp
_unlock
_wfopen
_wrename
_write
_wstat64
_wunlink
abort
calloc
fclose
fflush
fgetpos
fprintf
fputc
fputs
fread
free
fsetpos
fwprintf
fwrite
getc
getenv
islower
isspace
isupper
isxdigit
localeconv
log10
malloc
memcmp
memcpy
memmove
memset
raise
realloc
rewind
signal
strchr
strcmp
strcpy
strcspn
strerror
strlen
strncmp
strpbrk
strspn
strstr
strtol
strtoul
tolower
ungetc
vfprintf
wcscpy
wcslen
_snwprintf
_strdup
_fileno

user32

MessageBoxW

Exports

Exports

x264_10_adaptive_quant_frame
x264_10_add16x16_idct8_avx
x264_10_add16x16_idct8_sse2
x264_10_add16x16_idct_avx
x264_10_add16x16_idct_dc_avx
x264_10_add16x16_idct_dc_sse2
x264_10_add16x16_idct_sse2
x264_10_add4x4_idct_avx
x264_10_add4x4_idct_sse2
x264_10_add8x8_idct8_avx
x264_10_add8x8_idct8_avx.skip_prologue
x264_10_add8x8_idct8_sse2
x264_10_add8x8_idct8_sse2.skip_prologue
x264_10_add8x8_idct_avx
x264_10_add8x8_idct_dc_avx
x264_10_add8x8_idct_dc_sse2
x264_10_add8x8_idct_sse2
x264_10_analyse_free_costs
x264_10_analyse_init_costs
x264_10_analyse_weight_frame
x264_10_bitstream_init
x264_10_cabac_block_residual_8x8_rd_c
x264_10_cabac_block_residual_8x8_rd_internal_avx512
x264_10_cabac_block_residual_8x8_rd_internal_lzcnt
x264_10_cabac_block_residual_8x8_rd_internal_sse2
x264_10_cabac_block_residual_8x8_rd_internal_ssse3
x264_10_cabac_block_residual_8x8_rd_internal_ssse3_lzcnt
x264_10_cabac_block_residual_c
x264_10_cabac_block_residual_internal_avx2
x264_10_cabac_block_residual_internal_avx512
x264_10_cabac_block_residual_internal_lzcnt
x264_10_cabac_block_residual_internal_sse2
x264_10_cabac_block_residual_rd_c
x264_10_cabac_block_residual_rd_internal_avx512
x264_10_cabac_block_residual_rd_internal_lzcnt
x264_10_cabac_block_residual_rd_internal_sse2
x264_10_cabac_block_residual_rd_internal_ssse3
x264_10_cabac_block_residual_rd_internal_ssse3_lzcnt
x264_10_cabac_context_init
x264_10_cabac_encode_bypass_asm
x264_10_cabac_encode_bypass_bmi2
x264_10_cabac_encode_bypass_c
x264_10_cabac_encode_decision_asm
x264_10_cabac_encode_decision_bmi2
x264_10_cabac_encode_decision_c
x264_10_cabac_encode_flush
x264_10_cabac_encode_init
x264_10_cabac_encode_init_core
x264_10_cabac_encode_terminal_asm
x264_10_cabac_encode_terminal_c
x264_10_cabac_encode_ue_bypass
x264_10_cabac_init
x264_10_cabac_mb_skip
x264_10_cabac_size_unary
x264_10_cabac_transition_unary
x264_10_cache_mv_func_table
x264_10_cache_mvd_func_table
x264_10_cache_ref_func_table
x264_10_cavlc_init
x264_10_coeff_last15_avx512
x264_10_coeff_last15_lzcnt
x264_10_coeff_last15_sse2
x264_10_coeff_last16_avx512
x264_10_coeff_last16_lzcnt
x264_10_coeff_last16_sse2
x264_10_coeff_last4_avx512
x264_10_coeff_last4_lzcnt
x264_10_coeff_last4_mmx2
x264_10_coeff_last64_avx2
x264_10_coeff_last64_avx512
x264_10_coeff_last64_lzcnt
x264_10_coeff_last64_sse2
x264_10_coeff_last8_avx512
x264_10_coeff_last8_lzcnt
x264_10_coeff_last8_sse2
x264_10_coeff_level_run15_lzcnt
x264_10_coeff_level_run15_sse2
x264_10_coeff_level_run16_lzcnt
x264_10_coeff_level_run16_sse2
x264_10_coeff_level_run4_lzcnt
x264_10_coeff_level_run4_mmx2
x264_10_coeff_level_run8_lzcnt
x264_10_coeff_level_run8_mmx2
x264_10_coeff_level_run8_sse2
x264_10_copy_column8
x264_10_cqm_delete
x264_10_cqm_init
x264_10_cqm_parse_file
x264_10_dct2x4dc_avx
x264_10_dct2x4dc_sse2
x264_10_dct4x4dc_avx
x264_10_dct4x4dc_sse2
x264_10_dct_init
x264_10_deblock_h_chroma_422_avx
x264_10_deblock_h_chroma_422_intra_avx
x264_10_deblock_h_chroma_422_intra_sse2
x264_10_deblock_h_chroma_422_sse2
x264_10_deblock_h_chroma_avx
x264_10_deblock_h_chroma_intra_avx
x264_10_deblock_h_chroma_intra_mbaff_avx
x264_10_deblock_h_chroma_intra_mbaff_sse2
x264_10_deblock_h_chroma_intra_sse2
x264_10_deblock_h_chroma_mbaff_avx
x264_10_deblock_h_chroma_mbaff_sse2
x264_10_deblock_h_chroma_sse2
x264_10_deblock_h_luma_avx
x264_10_deblock_h_luma_intra_avx
x264_10_deblock_h_luma_intra_sse2
x264_10_deblock_h_luma_sse2
x264_10_deblock_init
x264_10_deblock_inter_body_avx
x264_10_deblock_inter_body_sse2
x264_10_deblock_intra_body_avx
x264_10_deblock_intra_body_sse2
x264_10_deblock_strength_avx
x264_10_deblock_strength_avx2
x264_10_deblock_strength_avx512
x264_10_deblock_strength_sse2
x264_10_deblock_strength_ssse3
x264_10_deblock_v_chroma_avx
x264_10_deblock_v_chroma_intra_avx
x264_10_deblock_v_chroma_intra_sse2
x264_10_deblock_v_chroma_sse2
x264_10_deblock_v_luma_avx
x264_10_deblock_v_luma_intra_avx
x264_10_deblock_v_luma_intra_sse2
x264_10_deblock_v_luma_sse2
x264_10_decimate_score15_avx512
x264_10_decimate_score15_sse2
x264_10_decimate_score15_ssse3
x264_10_decimate_score16_avx512
x264_10_decimate_score16_sse2
x264_10_decimate_score16_ssse3
x264_10_decimate_score64_avx512
x264_10_decimate_score64_sse2
x264_10_decimate_score64_ssse3
x264_10_deinterleave_shufd
x264_10_denoise_dct_avx
x264_10_denoise_dct_avx2
x264_10_denoise_dct_sse2
x264_10_denoise_dct_ssse3
x264_10_dequant_4x4_avx2
x264_10_dequant_4x4_avx512
x264_10_dequant_4x4_sse2
x264_10_dequant_4x4_xop
x264_10_dequant_4x4dc_avx2
x264_10_dequant_4x4dc_sse2
x264_10_dequant_4x4dc_xop
x264_10_dequant_8x8_avx2
x264_10_dequant_8x8_avx512
x264_10_dequant_8x8_sse2
x264_10_dequant_8x8_xop
x264_10_encoder_close
x264_10_encoder_delayed_frames
x264_10_encoder_encode
x264_10_encoder_headers
x264_10_encoder_intra_refresh
x264_10_encoder_invalidate_reference
x264_10_encoder_maximum_delayed_frames
x264_10_encoder_open
x264_10_encoder_parameters
x264_10_encoder_reconfig
x264_10_encoder_reconfig_apply
x264_10_expand_border_mbpair
x264_10_field_vsad
x264_10_filler_write
x264_10_frame_cond_broadcast
x264_10_frame_cond_wait
x264_10_frame_copy_picture
x264_10_frame_deblock_row
x264_10_frame_delete
x264_10_frame_delete_list
x264_10_frame_expand_border
x264_10_frame_expand_border_chroma
x264_10_frame_expand_border_filtered
x264_10_frame_expand_border_lowres
x264_10_frame_expand_border_mod16
x264_10_frame_filter
x264_10_frame_init_lowres
x264_10_frame_init_lowres_core_avx
x264_10_frame_init_lowres_core_mmx2
x264_10_frame_init_lowres_core_sse2
x264_10_frame_init_lowres_core_ssse3
x264_10_frame_init_lowres_core_xop
x264_10_frame_new_slice
x264_10_frame_pop
x264_10_frame_pop_blank_unused
x264_10_frame_pop_unused
x264_10_frame_push
x264_10_frame_push_blank_unused
x264_10_frame_push_unused
x264_10_frame_shift
x264_10_frame_unshift
x264_10_hadamard_ac_2x2max_mmx2
x264_10_hadamard_ac_4x4_mmx2
x264_10_hadamard_ac_8x8_avx
x264_10_hadamard_ac_8x8_mmx2
x264_10_hadamard_ac_8x8_sse2
x264_10_hadamard_ac_8x8_sse4
x264_10_hadamard_ac_8x8_ssse3
x264_10_hadamard_ac_8x8_xop
x264_10_hadamard_load
x264_10_hpel_filter_c_mmx2
x264_10_hpel_filter_c_sse2
x264_10_hpel_filter_h_mmx2
x264_10_hpel_filter_h_sse2
x264_10_hpel_filter_v_mmx2
x264_10_hpel_filter_v_sse2
x264_10_hrd_fullness
x264_10_hsub_mul
x264_10_idct4x4dc_avx
x264_10_idct4x4dc_sse2
x264_10_idct_dequant_2x4_dc_avx
x264_10_idct_dequant_2x4_dc_sse2
x264_10_idct_dequant_2x4_dconly_avx
x264_10_idct_dequant_2x4_dconly_sse2
x264_10_integral_init4v_avx2
x264_10_integral_init4v_mmx
x264_10_integral_init4v_sse2
x264_10_integral_init4v_ssse3
x264_10_integral_init8v_avx2
x264_10_integral_init8v_mmx
x264_10_integral_init8v_sse2
x264_10_intra_sad_x3_4x4_avx
x264_10_intra_sad_x3_4x4_sse2
x264_10_intra_sad_x3_4x4_ssse3
x264_10_intra_sad_x3_8x8_avx2
x264_10_intra_sad_x3_8x8_sse2
x264_10_intra_sad_x3_8x8_ssse3
x264_10_intra_satd_x3_16x16_mmx2
x264_10_intra_satd_x3_4x4_mmx2
x264_10_intra_satd_x3_8x8c_mmx2
x264_10_iter_kludge
x264_10_level_token
x264_10_load_deinterleave_chroma_fdec_avx
x264_10_load_deinterleave_chroma_fdec_avx2
x264_10_load_deinterleave_chroma_fdec_sse2
x264_10_load_deinterleave_chroma_fenc_avx
x264_10_load_deinterleave_chroma_fenc_avx2
x264_10_load_deinterleave_chroma_fenc_sse2
x264_10_log
x264_10_lookahead_delete
x264_10_lookahead_get_frames
x264_10_lookahead_init
x264_10_lookahead_is_empty
x264_10_lookahead_put_frame
x264_10_macroblock_analyse
x264_10_macroblock_bipred_init
x264_10_macroblock_cache_allocate
x264_10_macroblock_cache_free
x264_10_macroblock_cache_load_interlaced
x264_10_macroblock_cache_load_progressive
x264_10_macroblock_cache_save
x264_10_macroblock_deblock
x264_10_macroblock_deblock_strength
x264_10_macroblock_encode
x264_10_macroblock_encode_p4x4
x264_10_macroblock_encode_p8x8
x264_10_macroblock_probe_skip
x264_10_macroblock_slice_init
x264_10_macroblock_thread_allocate
x264_10_macroblock_thread_free
x264_10_macroblock_thread_init
x264_10_macroblock_tree_read
x264_10_macroblock_write_cabac
x264_10_macroblock_write_cavlc
x264_10_mb_encode_chroma
x264_10_mb_mc
x264_10_mb_mc_8x8
x264_10_mb_predict_mv
x264_10_mb_predict_mv_16x16
x264_10_mb_predict_mv_direct16x16
x264_10_mb_predict_mv_pskip
x264_10_mb_predict_mv_ref16x16
x264_10_mbtree_fix8_pack_avx2
x264_10_mbtree_fix8_pack_avx512
x264_10_mbtree_fix8_pack_ssse3
x264_10_mbtree_fix8_unpack_avx2
x264_10_mbtree_fix8_unpack_avx512
x264_10_mbtree_fix8_unpack_ssse3
x264_10_mbtree_propagate_cost_avx
x264_10_mbtree_propagate_cost_avx2
x264_10_mbtree_propagate_cost_avx512
x264_10_mbtree_propagate_cost_fma4
x264_10_mbtree_propagate_cost_sse2
x264_10_mbtree_propagate_list_internal_avx
x264_10_mbtree_propagate_list_internal_avx2
x264_10_mbtree_propagate_list_internal_avx512
x264_10_mbtree_propagate_list_internal_ssse3
x264_10_mc_chroma_avx
x264_10_mc_chroma_mmx2
x264_10_mc_chroma_sse2
x264_10_mc_copy_w16_aligned_avx
x264_10_mc_copy_w16_aligned_sse
x264_10_mc_copy_w16_avx
x264_10_mc_copy_w16_mmx
x264_10_mc_copy_w16_sse
x264_10_mc_copy_w4_mmx
x264_10_mc_copy_w8_mmx
x264_10_mc_copy_w8_sse
x264_10_mc_init
x264_10_mc_init_mmx
x264_10_mc_offsetadd_w12_mmx2
x264_10_mc_offsetadd_w12_sse2
x264_10_mc_offsetadd_w16_mmx2
x264_10_mc_offsetadd_w16_sse2
x264_10_mc_offsetadd_w20_mmx2
x264_10_mc_offsetadd_w20_sse2
x264_10_mc_offsetadd_w4_mmx2
x264_10_mc_offsetadd_w8_mmx2
x264_10_mc_offsetadd_w8_sse2
x264_10_mc_offsetsub_w12_mmx2
x264_10_mc_offsetsub_w12_sse2
x264_10_mc_offsetsub_w16_mmx2
x264_10_mc_offsetsub_w16_sse2
x264_10_mc_offsetsub_w20_mmx2
x264_10_mc_offsetsub_w20_sse2
x264_10_mc_offsetsub_w4_mmx2
x264_10_mc_offsetsub_w8_mmx2
x264_10_mc_offsetsub_w8_sse2
x264_10_mc_weight_w12_mmx2
x264_10_mc_weight_w12_sse2
x264_10_mc_weight_w16_mmx2
x264_10_mc_weight_w16_sse2
x264_10_mc_weight_w20_mmx2
x264_10_mc_weight_w20_sse2
x264_10_mc_weight_w4_mmx2
x264_10_mc_weight_w8_mmx2
x264_10_mc_weight_w8_sse2
x264_10_me_refine_bidir_rd
x264_10_me_refine_bidir_satd
x264_10_me_refine_qpel
x264_10_me_refine_qpel_rd
x264_10_me_refine_qpel_refdupe
x264_10_me_search_ref
x264_10_memcpy_aligned_avx
x264_10_memcpy_aligned_avx512
x264_10_memcpy_aligned_sse
x264_10_memzero_aligned_avx
x264_10_memzero_aligned_avx512
x264_10_memzero_aligned_sse
x264_10_nal_encode
x264_10_nal_escape_avx2
x264_10_nal_escape_mmx2
x264_10_nal_escape_sse2
x264_10_noise_reduction_update
x264_10_pb_0
x264_10_pb_01
x264_10_pb_1
x264_10_pb_3
x264_10_pb_a1
x264_10_pb_shuf8x8c
x264_10_pb_unpackbd1
x264_10_pb_unpackbd2
x264_10_pd_0123
x264_10_pd_1
x264_10_pd_1024
x264_10_pd_32
x264_10_pd_4567
x264_10_pd_8
x264_10_pd_ffff
x264_10_pixel_ads1_avx
x264_10_pixel_ads1_avx2
x264_10_pixel_ads1_mmx2
x264_10_pixel_ads1_sse2
x264_10_pixel_ads1_ssse3
x264_10_pixel_ads2_avx
x264_10_pixel_ads2_avx2
x264_10_pixel_ads2_mmx2
x264_10_pixel_ads2_sse2
x264_10_pixel_ads2_ssse3
x264_10_pixel_ads4_avx
x264_10_pixel_ads4_avx2
x264_10_pixel_ads4_mmx2
x264_10_pixel_ads4_sse2
x264_10_pixel_ads4_ssse3
x264_10_pixel_ads_mvs_mmx
x264_10_pixel_ads_mvs_ssse3
x264_10_pixel_asd8_sse2
x264_10_pixel_asd8_ssse3
x264_10_pixel_asd8_xop
x264_10_pixel_avg2_w10_mmx2
x264_10_pixel_avg2_w10_sse2
x264_10_pixel_avg2_w16_avx2
x264_10_pixel_avg2_w16_mmx2
x264_10_pixel_avg2_w16_sse2
x264_10_pixel_avg2_w18_avx2
x264_10_pixel_avg2_w18_mmx2
x264_10_pixel_avg2_w18_sse2
x264_10_pixel_avg2_w4_mmx2
x264_10_pixel_avg2_w8_mmx2
x264_10_pixel_avg2_w8_sse2
x264_10_pixel_avg_16x16_mmx2
x264_10_pixel_avg_16x16_sse2
x264_10_pixel_avg_16x8_mmx2
x264_10_pixel_avg_16x8_sse2
x264_10_pixel_avg_4x16_mmx2
x264_10_pixel_avg_4x16_sse2
x264_10_pixel_avg_4x2_mmx2
x264_10_pixel_avg_4x2_sse2
x264_10_pixel_avg_4x4_mmx2
x264_10_pixel_avg_4x4_sse2
x264_10_pixel_avg_4x8_mmx2
x264_10_pixel_avg_4x8_sse2
x264_10_pixel_avg_8x16_mmx2
x264_10_pixel_avg_8x16_sse2
x264_10_pixel_avg_8x4_mmx2
x264_10_pixel_avg_8x4_sse2
x264_10_pixel_avg_8x8_mmx2
x264_10_pixel_avg_8x8_sse2
x264_10_pixel_avg_w16_mmx2
x264_10_pixel_avg_w16_sse2
x264_10_pixel_avg_w4_mmx2
x264_10_pixel_avg_w4_sse2
x264_10_pixel_avg_w8_mmx2
x264_10_pixel_avg_w8_sse2
x264_10_pixel_avg_weight_w16_mmx2
x264_10_pixel_avg_weight_w16_sse2
x264_10_pixel_avg_weight_w4_mmx2
x264_10_pixel_avg_weight_w4_sse2
x264_10_pixel_avg_weight_w8_mmx2
x264_10_pixel_avg_weight_w8_sse2
x264_10_pixel_hadamard_ac_16x16_avx
x264_10_pixel_hadamard_ac_16x16_mmx2
x264_10_pixel_hadamard_ac_16x16_sse2
x264_10_pixel_hadamard_ac_16x16_sse4
x264_10_pixel_hadamard_ac_16x16_ssse3
x264_10_pixel_hadamard_ac_16x16_xop
x264_10_pixel_hadamard_ac_16x8_avx
x264_10_pixel_hadamard_ac_16x8_mmx2
x264_10_pixel_hadamard_ac_16x8_sse2
x264_10_pixel_hadamard_ac_16x8_sse4
x264_10_pixel_hadamard_ac_16x8_ssse3
x264_10_pixel_hadamard_ac_16x8_xop
x264_10_pixel_hadamard_ac_8x16_avx
x264_10_pixel_hadamard_ac_8x16_mmx2
x264_10_pixel_hadamard_ac_8x16_sse2
x264_10_pixel_hadamard_ac_8x16_sse4
x264_10_pixel_hadamard_ac_8x16_ssse3
x264_10_pixel_hadamard_ac_8x16_xop
x264_10_pixel_hadamard_ac_8x8_avx
x264_10_pixel_hadamard_ac_8x8_mmx2
x264_10_pixel_hadamard_ac_8x8_sse2
x264_10_pixel_hadamard_ac_8x8_sse4
x264_10_pixel_hadamard_ac_8x8_ssse3
x264_10_pixel_hadamard_ac_8x8_xop
x264_10_pixel_init
x264_10_pixel_sa8d_16x16_avx
x264_10_pixel_sa8d_16x16_sse2
x264_10_pixel_sa8d_16x16_sse4
x264_10_pixel_sa8d_16x16_ssse3
x264_10_pixel_sa8d_16x16_xop
x264_10_pixel_sa8d_8x8_avx
x264_10_pixel_sa8d_8x8_internal_avx
x264_10_pixel_sa8d_8x8_internal_sse2
x264_10_pixel_sa8d_8x8_internal_sse4
x264_10_pixel_sa8d_8x8_internal_ssse3
x264_10_pixel_sa8d_8x8_internal_xop
x264_10_pixel_sa8d_8x8_sse2
x264_10_pixel_sa8d_8x8_sse4
x264_10_pixel_sa8d_8x8_ssse3
x264_10_pixel_sa8d_8x8_xop
x264_10_pixel_sa8d_satd_16x16_avx
x264_10_pixel_sa8d_satd_16x16_sse2
x264_10_pixel_sa8d_satd_16x16_sse4
x264_10_pixel_sa8d_satd_16x16_ssse3
x264_10_pixel_sa8d_satd_16x16_xop
x264_10_pixel_sa8d_satd_8x8_internal_avx
x264_10_pixel_sa8d_satd_8x8_internal_sse2
x264_10_pixel_sa8d_satd_8x8_internal_sse4
x264_10_pixel_sa8d_satd_8x8_internal_ssse3
x264_10_pixel_sa8d_satd_8x8_internal_xop
x264_10_pixel_sad_16x16_avx2
x264_10_pixel_sad_16x16_mmx2
x264_10_pixel_sad_16x16_sse2
x264_10_pixel_sad_16x16_sse2_aligned
x264_10_pixel_sad_16x16_ssse3
x264_10_pixel_sad_16x16_ssse3_aligned
x264_10_pixel_sad_16x8_avx2
x264_10_pixel_sad_16x8_mmx2
x264_10_pixel_sad_16x8_sse2
x264_10_pixel_sad_16x8_sse2_aligned
x264_10_pixel_sad_16x8_ssse3
x264_10_pixel_sad_16x8_ssse3_aligned
x264_10_pixel_sad_4x4_mmx2
x264_10_pixel_sad_4x4_ssse3
x264_10_pixel_sad_4x8_mmx2
x264_10_pixel_sad_4x8_ssse3
x264_10_pixel_sad_8x16_mmx2
x264_10_pixel_sad_8x16_sse2
x264_10_pixel_sad_8x16_sse2_aligned
x264_10_pixel_sad_8x16_ssse3
x264_10_pixel_sad_8x16_ssse3_aligned
x264_10_pixel_sad_8x4_mmx2
x264_10_pixel_sad_8x4_sse2
x264_10_pixel_sad_8x4_ssse3
x264_10_pixel_sad_8x8_mmx2
x264_10_pixel_sad_8x8_sse2
x264_10_pixel_sad_8x8_sse2_aligned
x264_10_pixel_sad_8x8_ssse3

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1001KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 433KB - Virtual size: 432KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Setup.exe
.exe windows x86

e54a12e0a5a3fa1d995076758d617f27

Code Sign

87:82:52:60:00:00:00:00:51:d3:73:d9
Certificate

Issuer

CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

10/06/2015, 13:42

Not After

10/11/2030, 14:12

Subject

CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

05:f9:7d:05:4a:9b:fc:bf:9d:5e:12:f8:d0:ab:be:07
Certificate

Issuer

CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

08/12/2020, 14:34

Not After

08/12/2023, 14:34

Subject

SERIALNUMBER=31 333 532,CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302534b

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

33:00:00:00:42:00:ba:5e:23:b0:a1:f3:99:00:00:00:00:00:42
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/07/2015, 20:55

Not After

07/07/2025, 20:55

Subject

CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:0f:ba:3b:a4:6f:b7:4a:c4:45:0b:b4:98:75:2f:bc:4a:dc:bb:22
Certificate

Issuer

CN=ESET Code Signing CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

19/07/2020, 00:00

Not After

19/07/2023, 00:00

Subject

CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7d:90:d1:7c:6b:36:ca:f6:8f:b9:b7:2f:65:68:b8:22:3d:30:2d:a8
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

17/07/2020, 00:00

Not After

17/07/2030, 00:00

Subject

CN=ESET Code Signing CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

69:79:73:ba:c8:77:a9:31:6b:52:06:18:77:49:4b:9f:1a:b2:6c:bc
Certificate

Issuer

CN=ESET Timestamping CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

18/07/2020, 00:00

Not After

18/07/2023, 00:00

Subject

CN=ESET Timestamp,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

76:79:fc:14:55:72:11:3a:f7:92:d1:f4:af:3c:4e:3a:8a:8a:6e:38
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

16/07/2020, 00:00

Not After

16/07/2030, 00:00

Subject

CN=ESET Timestamping CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:1c:b2:8a:00:00:00:00:00:26
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:41

Not After

15/04/2021, 19:51

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

f1:0b:00:09:13:ed:8f:7c:fe:6a:d7:65:1f:26:10:a9:10:d0:e0:8a:91:45:bf:2d:58:b5:f0:bf:64:cd:35:b9
Signer

Actual PE Digest

f1:0b:00:09:13:ed:8f:7c:fe:6a:d7:65:1f:26:10:a9:10:d0:e0:8a:91:45:bf:2d:58:b5:f0:bf:64:cd:35:b9

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

26/09/2022, 07:58
Valid: false

f1:0b:00:09:13:ed:8f:7c:fe:6a:d7:65:1f:26:10:a9:10:d0:e0:8a:91:45:bf:2d:58:b5:f0:bf:64:cd:35:b9
Signer

Actual PE Digest

f1:0b:00:09:13:ed:8f:7c:fe:6a:d7:65:1f:26:10:a9:10:d0:e0:8a:91:45:bf:2d:58:b5:f0:bf:64:cd:35:b9

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=31 333 532,CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302534b

26/09/2022, 07:58
Valid: true

Chain 1

SERIALNUMBER=31 333 532,CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302534b

CN=Entrust Extended Validation Code Signing CA - EVCS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsProcessInJob
GetProcAddress
GetModuleHandleA
SetThreadLocale
GetOEMCP
GetConsoleWindow
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
RaiseException
GetCommandLineA
GetLastError
HeapFree
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
LoadLibraryA
InitializeCriticalSectionAndSpinCount
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

user32

ShowWindow

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 257KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 1717

Password: 1717

c5a3bd6e97e3314f41e3d8013978c044

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

0d:c0:38:e4:78:18:6b:67:2a:3a:7b:21:ba:85:dc:62Certificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

Signer

Headers

DLL Characteristics

File Characteristics

Imports

obs

obsglad

opengl32

kernel32

user32

gdi32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 74KB - Virtual size: 74KB

.rdata Size: 27KB - Virtual size: 26KB

.data Size: 512B - Virtual size: 2KB

.pdata Size: 4KB - Virtual size: 4KB

.idata Size: 10KB - Virtual size: 9KB

.00cfg Size: 512B - Virtual size: 283B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 706B

Password: 1717

9203ff991a4c02fe98e550a2e1adfcdf

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

0d:c0:38:e4:78:18:6b:67:2a:3a:7b:21:ba:85:dc:62Certificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 15KB - Virtual size: 15KB

.data Size: 512B - Virtual size: 80B

.rdata Size: 9KB - Virtual size: 9KB

.pdata Size: 1KB - Virtual size: 1KB

.xdata Size: 1024B - Virtual size: 948B

.bss Size: - Virtual size: 2KB

.edata Size: 2KB - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 88B

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

0d:c0:38:e4:78:18:6b:67:2a:3a:7b:21:ba:85:dc:62
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

.text
Size: 74KB - Virtual size: 74KB

.rdata
Size: 27KB - Virtual size: 26KB

.data
Size: 512B - Virtual size: 2KB

.pdata
Size: 4KB - Virtual size: 4KB

.idata
Size: 10KB - Virtual size: 9KB

.00cfg
Size: 512B - Virtual size: 283B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 706B

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

0d:c0:38:e4:78:18:6b:67:2a:3a:7b:21:ba:85:dc:62
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

.text
Size: 15KB - Virtual size: 15KB

.data
Size: 512B - Virtual size: 80B

.rdata
Size: 9KB - Virtual size: 9KB

.pdata
Size: 1KB - Virtual size: 1KB

.xdata
Size: 1024B - Virtual size: 948B

.bss
Size: - Virtual size: 2KB

.edata
Size: 2KB - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 104B

.reloc
Size: 512B - Virtual size: 104B

/4
Size: 1024B - Virtual size: 944B

/19
Size: 263KB - Virtual size: 263KB

/31
Size: 10KB - Virtual size: 10KB

/45
Size: 11KB - Virtual size: 11KB

/57
Size: 5KB - Virtual size: 5KB

/70
Size: 1KB - Virtual size: 1KB

/81
Size: 28KB - Virtual size: 27KB

/92
Size: 2KB - Virtual size: 2KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

0d:c0:38:e4:78:18:6b:67:2a:3a:7b:21:ba:85:dc:62
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

.text
Size: 276KB - Virtual size: 276KB

.data
Size: 512B - Virtual size: 112B

.rdata
Size: 63KB - Virtual size: 62KB

.pdata
Size: 5KB - Virtual size: 4KB

.xdata
Size: 7KB - Virtual size: 6KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 2KB - Virtual size: 2KB

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 104B

.reloc
Size: 1024B - Virtual size: 520B

/4
Size: 8KB - Virtual size: 8KB

/19
Size: 1.1MB - Virtual size: 1.1MB

/31
Size: 80KB - Virtual size: 80KB

/45
Size: 118KB - Virtual size: 118KB

/57
Size: 32KB - Virtual size: 32KB

/70
Size: 19KB - Virtual size: 18KB

/81
Size: 644KB - Virtual size: 644KB

/92
Size: 46KB - Virtual size: 46KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

0d:c0:38:e4:78:18:6b:67:2a:3a:7b:21:ba:85:dc:62
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate