Microsoft[.]HEVCVideoExtension_1[.]0[.]40203[.]0_x64__8wekyb3d8bbwe[.]Appx

Sharing

Copy URL Twitter E-mail

General

Target

Microsoft.HEVCVideoExtension_1.0.40203.0_x64__8wekyb3d8bbwe.Appx
Size

2.8MB
MD5

9a113178145ce8edc5ee9a72158e1cc4
SHA1

f891c44fb1363942c5133e3f0d6e7f99cd3c9de8
SHA256

db8f01b40f08976c2148bb8ac11f7041ee59f8f5bcf94b997d0705390926a2df
SHA512

28fdb2bbec3a8f7a97b5074d550552e93cb8413dbdf12eaa56b2027ceaa38a71a9f7f7a8d6ed4bee8f974ee80ae7ada9689c82413b89e4a601f31acb2894782e
SSDEEP

49152:5c7iWgLn3PnRjvEboHNP/xeZjQYdOOaihpW8VYZLCEhKkagaEwqbplj5F1k:5cmWgb3PRVn0ZjpTaipf6CpEwIj5fk

Score

3^/10

Malware Config

Signatures

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack001/EnablerService.HEVC.dll
unpack001/EnablerService_HEVC.winmd
unpack001/codecpacks.HEVC.exe
unpack001/codecpacks_HEVC.winmd

Files

Microsoft.HEVCVideoExtension_1.0.40203.0_x64__8wekyb3d8bbwe.Appx
.appx
AppxBlockMap.xml
.xml
AppxManifest.xml
AppxMetadata/CodeIntegrity.cat
AppxSignature.p7x
Assets/HEVCCodecAppList.scale-100.png
.png
Assets/HEVCCodecAppList.scale-125.png
.png
Assets/HEVCCodecAppList.scale-150.png
.png
Assets/HEVCCodecAppList.scale-200.png
.png
Assets/HEVCCodecAppList.scale-400.png
.png
Assets/HEVCCodecAppList.targetsize-16.png
.png
Assets/HEVCCodecAppList.targetsize-16_altform-unplated.png
.png
Assets/HEVCCodecAppList.targetsize-24.png
.png
Assets/HEVCCodecAppList.targetsize-24_altform-unplated.png
.png
Assets/HEVCCodecAppList.targetsize-256.png
.png
Assets/HEVCCodecAppList.targetsize-256_altform-unplated.png
.png
Assets/HEVCCodecAppList.targetsize-48.png
.png
Assets/HEVCCodecAppList.targetsize-48_altform-unplated.png
.png
Assets/HEVCCodecBadgeLogo.scale-100.png
.png
Assets/HEVCCodecBadgeLogo.scale-125.png
.png
Assets/HEVCCodecBadgeLogo.scale-150.png
.png
Assets/HEVCCodecBadgeLogo.scale-200.png
.png
Assets/HEVCCodecBadgeLogo.scale-400.png
.png
Assets/HEVCCodecLargeTile.scale-100.png
.png
Assets/HEVCCodecLargeTile.scale-125.png
.png
Assets/HEVCCodecLargeTile.scale-150.png
.png
Assets/HEVCCodecLargeTile.scale-200.png
.png
Assets/HEVCCodecLargeTile.scale-400.png
.png
Assets/HEVCCodecMedTile.scale-100.png
.png
Assets/HEVCCodecMedTile.scale-125.png
.png
Assets/HEVCCodecMedTile.scale-150.png
.png
Assets/HEVCCodecMedTile.scale-200.png
.png
Assets/HEVCCodecMedTile.scale-400.png
.png
Assets/HEVCCodecSmallTile.scale-100.png
.png
Assets/HEVCCodecSmallTile.scale-125.png
.png
Assets/HEVCCodecSmallTile.scale-150.png
.png
Assets/HEVCCodecSmallTile.scale-200.png
.png
Assets/HEVCCodecSmallTile.scale-400.png
.png
Assets/HEVCCodecSplashScreen.scale-100.png
.png
Assets/HEVCCodecSplashScreen.scale-125.png
.png
Assets/HEVCCodecSplashScreen.scale-150.png
.png
Assets/HEVCCodecSplashScreen.scale-200.png
.png
Assets/HEVCCodecSplashScreen.scale-400.png
.png
Assets/HEVCCodecStoreLogo.scale-100.png
.png
Assets/HEVCCodecStoreLogo.scale-125.png
.png
Assets/HEVCCodecStoreLogo.scale-150.png
.png
Assets/HEVCCodecStoreLogo.scale-200.png
.png
Assets/HEVCCodecStoreLogo.scale-400.png
.png
Assets/HEVCCodecWideTile.scale-100.png
.png
Assets/HEVCCodecWideTile.scale-125.png
.png
Assets/HEVCCodecWideTile.scale-150.png
.png
Assets/HEVCCodecWideTile.scale-200.png
.png
Assets/HEVCCodecWideTile.scale-400.png
.png
Assets/contrast-black/HEVCCodecAppList.scale-100_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.scale-125_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.scale-150_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.scale-200_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.scale-400_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-16_altform-unplated_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-16_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-20_altform-unplated_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-20_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-24_altform-unplated_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-24_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-256_altform-unplated_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-256_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-30_altform-unplated_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-30_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-32_altform-unplated_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-32_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-36_altform-unplated_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-36_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-40_altform-unplated_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-40_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-48_altform-unplated_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-48_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-60_altform-unplated_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-60_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-64_altform-unplated_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-64_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-72_altform-unplated_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-72_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-80_altform-unplated_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-80_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-96_altform-unplated_contrast-black.png
.png
Assets/contrast-black/HEVCCodecAppList.targetsize-96_contrast-black.png
.png
Assets/contrast-black/HEVCCodecBadgeLogo.scale-100_contrast-black.png
.png
Assets/contrast-black/HEVCCodecBadgeLogo.scale-125_contrast-black.png
.png
Assets/contrast-black/HEVCCodecBadgeLogo.scale-150_contrast-black.png
.png
Assets/contrast-black/HEVCCodecBadgeLogo.scale-200_contrast-black.png
.png
Assets/contrast-black/HEVCCodecBadgeLogo.scale-400_contrast-black.png
.png
Assets/contrast-black/HEVCCodecLargeTile.scale-100_contrast-black.png
.png
Assets/contrast-black/HEVCCodecLargeTile.scale-125_contrast-black.png
.png
Assets/contrast-black/HEVCCodecLargeTile.scale-150_contrast-black.png
.png
Assets/contrast-black/HEVCCodecLargeTile.scale-200_contrast-black.png
.png
Assets/contrast-black/HEVCCodecLargeTile.scale-400_contrast-black.png
.png
Assets/contrast-black/HEVCCodecMedTile.scale-100_contrast-black.png
.png
Assets/contrast-black/HEVCCodecMedTile.scale-125_contrast-black.png
.png
Assets/contrast-black/HEVCCodecMedTile.scale-150_contrast-black.png
.png
Assets/contrast-black/HEVCCodecMedTile.scale-200_contrast-black.png
.png
Assets/contrast-black/HEVCCodecMedTile.scale-400_contrast-black.png
.png
Assets/contrast-black/HEVCCodecSmallTile.scale-100_contrast-black.png
.png
Assets/contrast-black/HEVCCodecSmallTile.scale-125_contrast-black.png
.png
Assets/contrast-black/HEVCCodecSmallTile.scale-150_contrast-black.png
.png
Assets/contrast-black/HEVCCodecSmallTile.scale-200_contrast-black.png
.png
Assets/contrast-black/HEVCCodecSmallTile.scale-400_contrast-black.png
.png
Assets/contrast-black/HEVCCodecSplashScreen.scale-100_contrast-black.png
.png
Assets/contrast-black/HEVCCodecSplashScreen.scale-125_contrast-black.png
.png
Assets/contrast-black/HEVCCodecSplashScreen.scale-150_contrast-black.png
.png
Assets/contrast-black/HEVCCodecSplashScreen.scale-200_contrast-black.png
.png
Assets/contrast-black/HEVCCodecSplashScreen.scale-400_contrast-black.png
.png
Assets/contrast-black/HEVCCodecStoreLogo.scale-100_contrast-black.png
.png
Assets/contrast-black/HEVCCodecStoreLogo.scale-125_contrast-black.png
.png
Assets/contrast-black/HEVCCodecStoreLogo.scale-150_contrast-black.png
.png
Assets/contrast-black/HEVCCodecStoreLogo.scale-200_contrast-black.png
.png
Assets/contrast-black/HEVCCodecStoreLogo.scale-400_contrast-black.png
.png
Assets/contrast-black/HEVCCodecWideTile.scale-100_contrast-black.png
.png
Assets/contrast-black/HEVCCodecWideTile.scale-125_contrast-black.png
.png
Assets/contrast-black/HEVCCodecWideTile.scale-150_contrast-black.png
.png
Assets/contrast-black/HEVCCodecWideTile.scale-200_contrast-black.png
.png
Assets/contrast-black/HEVCCodecWideTile.scale-400_contrast-black.png
.png
Assets/contrast-white/HEVCCodecAppList.scale-100_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.scale-125_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.scale-150_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.scale-200_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.scale-400_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-16_altform-unplated_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-16_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-20_altform-unplated_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-20_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-24_altform-unplated_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-24_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-256_altform-unplated_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-256_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-30_altform-unplated_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-30_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-32_altform-unplated_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-32_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-36_altform-unplated_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-36_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-40_altform-unplated_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-40_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-48_altform-unplated_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-48_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-60_altform-unplated_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-60_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-64_altform-unplated_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-64_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-72_altform-unplated_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-72_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-80_altform-unplated_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-80_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-96_altform-unplated_contrast-white.png
.png
Assets/contrast-white/HEVCCodecAppList.targetsize-96_contrast-white.png
.png
Assets/contrast-white/HEVCCodecBadgeLogo.scale-100_contrast-white.png
.png
Assets/contrast-white/HEVCCodecBadgeLogo.scale-125_contrast-white.png
.png
Assets/contrast-white/HEVCCodecBadgeLogo.scale-150_contrast-white.png
.png
Assets/contrast-white/HEVCCodecBadgeLogo.scale-200_contrast-white.png
.png
Assets/contrast-white/HEVCCodecBadgeLogo.scale-400_contrast-white.png
.png
Assets/contrast-white/HEVCCodecLargeTile.scale-100_contrast-white.png
.png
Assets/contrast-white/HEVCCodecLargeTile.scale-125_contrast-white.png
.png
Assets/contrast-white/HEVCCodecLargeTile.scale-150_contrast-white.png
.png
Assets/contrast-white/HEVCCodecLargeTile.scale-200_contrast-white.png
.png
Assets/contrast-white/HEVCCodecLargeTile.scale-400_contrast-white.png
.png
Assets/contrast-white/HEVCCodecMedTile.scale-100_contrast-white.png
.png
Assets/contrast-white/HEVCCodecMedTile.scale-125_contrast-white.png
.png
Assets/contrast-white/HEVCCodecMedTile.scale-150_contrast-white.png
.png
Assets/contrast-white/HEVCCodecMedTile.scale-200_contrast-white.png
.png
Assets/contrast-white/HEVCCodecMedTile.scale-400_contrast-white.png
.png
Assets/contrast-white/HEVCCodecSmallTile.scale-100_contrast-white.png
.png
Assets/contrast-white/HEVCCodecSmallTile.scale-125_contrast-white.png
.png
Assets/contrast-white/HEVCCodecSmallTile.scale-150_contrast-white.png
.png
Assets/contrast-white/HEVCCodecSmallTile.scale-200_contrast-white.png
.png
Assets/contrast-white/HEVCCodecSmallTile.scale-400_contrast-white.png
.png
Assets/contrast-white/HEVCCodecSplashScreen.scale-100_contrast-white.png
.png
Assets/contrast-white/HEVCCodecSplashScreen.scale-125_contrast-white.png
.png
Assets/contrast-white/HEVCCodecSplashScreen.scale-150_contrast-white.png
.png
Assets/contrast-white/HEVCCodecSplashScreen.scale-200_contrast-white.png
.png
Assets/contrast-white/HEVCCodecSplashScreen.scale-400_contrast-white.png
.png
Assets/contrast-white/HEVCCodecStoreLogo.scale-100_contrast-white.png
.png
Assets/contrast-white/HEVCCodecStoreLogo.scale-125_contrast-white.png
.png
Assets/contrast-white/HEVCCodecStoreLogo.scale-150_contrast-white.png
.png
Assets/contrast-white/HEVCCodecStoreLogo.scale-200_contrast-white.png
.png
Assets/contrast-white/HEVCCodecStoreLogo.scale-400_contrast-white.png
.png
Assets/contrast-white/HEVCCodecWideTile.scale-100_contrast-white.png
.png
Assets/contrast-white/HEVCCodecWideTile.scale-125_contrast-white.png
.png
Assets/contrast-white/HEVCCodecWideTile.scale-150_contrast-white.png
.png
Assets/contrast-white/HEVCCodecWideTile.scale-200_contrast-white.png
.png
Assets/contrast-white/HEVCCodecWideTile.scale-400_contrast-white.png
.png
EnablerService.HEVC.dll
.dll windows:6 windows x64 arch:x64

11eed1268d47f5bd95be772c2e166695

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\BA\215\b\release\x64\EnablerService.HEVC.pdb

Imports

vccorlib140_app

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ
?__abi_WinRTraiseChangedStateException@@YAXXZ
?__abi_WinRTraiseNullReferenceException@@YAXXZ
?__abi_WinRTraiseCOMException@@YAXJ@Z
?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ
?__abi_WinRTraiseInvalidArgumentException@@YAXXZ
?__abi_WinRTraiseAccessDeniedException@@YAXXZ
?__abi_WinRTraiseOperationCanceledException@@YAXXZ
?__abi_WinRTraiseFailureException@@YAXXZ
?__abi_WinRTraiseDisconnectedException@@YAXXZ
?__abi_WinRTraiseNotImplementedException@@YAXXZ
?__abi_WinRTraiseInvalidCastException@@YAXXZ
?__abi_WinRTraiseOutOfMemoryException@@YAXXZ
??0Object@Platform@@QE$AAA@XZ
?Free@Heap@Details@Platform@@SAXPEAX@Z
?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z
?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ
?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z
?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z
?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z
?__abi_translateCurrentException@@YAJ_N@Z
?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z
??0DisconnectedException@Platform@@QE$AAA@XZ
??0Delegate@Platform@@QE$AAA@XZ
??0NullReferenceException@Platform@@QE$AAA@XZ
?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z
?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z
?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z
?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z
?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z
?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z
?InitializeData@Details@Platform@@YAJH@Z
?UninitializeData@Details@Platform@@YAXH@Z
?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z
?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z
?__abi_WinRTraiseObjectDisposedException@@YAXXZ
?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z
?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z
?__abi_WinRTraiseWrongThreadException@@YAXXZ

msvcp140_app

?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?_XGetLastError@std@@YAXXZ
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?__ExceptionPtrCreate@@YAXPEAX@Z
?_Xlength_error@std@@YAXPEBD@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
_Cnd_init_in_situ
_Mtx_init_in_situ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
_Cnd_wait
_Cnd_destroy_in_situ
_Mtx_destroy_in_situ
_Cnd_broadcast
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
_Mtx_lock
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_Xbad_function_call@std@@YAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?__ExceptionPtrCurrentException@@YAXPEAX@Z

vcruntime140_app

__CxxFrameHandler3
__std_terminate
_purecall
__std_exception_copy
__std_exception_destroy
__C_specific_handler
_CxxThrowException
__std_type_info_destroy_list
memmove
memset

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_execute_onexit_table
_crt_atexit
_initialize_narrow_environment
_cexit
_configure_narrow_argv
_initterm
_initterm_e
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-core-synch-l1-1-0

LeaveCriticalSection
AcquireSRWLockExclusive
DeleteCriticalSection
ReleaseSRWLockExclusive
InitializeCriticalSectionEx
EnterCriticalSection

api-ms-win-core-winrt-string-l1-1-0

WindowsCompareStringOrdinal
WindowsDuplicateString
WindowsCreateStringReference
WindowsCreateString
WindowsDeleteString

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler

api-ms-win-core-synch-l1-2-0

InitializeConditionVariable
SleepConditionVariableCS
WakeAllConditionVariable

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcessId

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EnablerService_HEVC.winmd
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
[Content_Types].xml
.xml
codecpacks.HEVC.exe
.exe windows:6 windows x64 arch:x64

47897b3c4751c9885edf44f0e223a822

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\BA\215\b\release\x64\codecpacks.HEVC.pdb

Imports

vccorlib140_app

?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z
?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z
?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z
?UninitializeData@Details@Platform@@YAXH@Z
?InitializeData@Details@Platform@@YAJH@Z
?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z
??0Delegate@Platform@@QE$AAA@XZ
??0DisconnectedException@Platform@@QE$AAA@XZ
?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z
?__abi_translateCurrentException@@YAJ_N@Z
?__abi_WinRTraiseNotImplementedException@@YAXXZ
?__abi_WinRTraiseInvalidCastException@@YAXXZ
?__abi_WinRTraiseNullReferenceException@@YAXXZ
?__abi_WinRTraiseOperationCanceledException@@YAXXZ
?__abi_WinRTraiseFailureException@@YAXXZ
?__abi_WinRTraiseAccessDeniedException@@YAXXZ
?__abi_WinRTraiseOutOfMemoryException@@YAXXZ
?__abi_WinRTraiseInvalidArgumentException@@YAXXZ
?__abi_WinRTraiseOutOfBoundsException@@YAXXZ
?__abi_WinRTraiseChangedStateException@@YAXXZ
?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ
?__abi_WinRTraiseWrongThreadException@@YAXXZ
?__abi_WinRTraiseDisconnectedException@@YAXXZ
?__abi_WinRTraiseObjectDisposedException@@YAXXZ
?__abi_WinRTraiseCOMException@@YAXJ@Z
?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z
?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ
?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z
?Free@Heap@Details@Platform@@SAXPEAX@Z
??0Object@Platform@@QE$AAA@XZ

vcruntime140_app

_CxxThrowException
__CxxFrameHandler3
__std_terminate
memset
__C_specific_handler

api-ms-win-crt-runtime-l1-1-0

_initterm
_set_app_type
_configure_narrow_argv
_exit
_get_narrow_winmain_command_line
_initialize_narrow_environment
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
exit
_seh_filter_exe
_initterm_e
_initialize_onexit_table
_register_onexit_function
_crt_atexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode
free

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-core-synch-l1-1-0

ReleaseSRWLockExclusive
AcquireSRWLockExclusive

api-ms-win-core-winrt-error-l1-1-0

RoFailFastWithErrorContext
SetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-winrt-string-l1-1-0

WindowsDuplicateString
WindowsDeleteString
WindowsCreateString

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler
CoTaskMemAlloc
CoTaskMemFree

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
GetCurrentThreadId

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-winrt-l1-1-0

RoInitialize

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
codecpacks_HEVC.winmd
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
resources.pri
x64/hevcdecoder_store.dll
.dll windows:10 windows x64 arch:x64

2b39ab7e3cc37b605a9ac303313ac93d

Code Sign

33:00:00:03:25:48:b2:9d:0e:7f:c5:f4:1f:00:00:00:00:03:25
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:29

Not After

03/03/2021, 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:8a:07:37:33:cf:20:48:89:3c:00:00:00:00:01:8a
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:39

Not After

03/03/2021, 18:39

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9f:65:e2:c5:d4:d6:b4:75:e2:7c:57:b1:d8:01:af:ae:4b:d0:08:c3:b6:d7:19:f0:08:cd:4d:fb:1f:5b:fe:d3
Signer

Actual PE Digest

9f:65:e2:c5:d4:d6:b4:75:e2:7c:57:b1:d8:01:af:ae:4b:d0:08:c3:b6:d7:19:f0:08:cd:4d:fb:1f:5b:fe:d3

Digest Algorithm

sha256

PE Digest Matches

true

9f:65:e2:c5:d4:d6:b4:75:e2:7c:57:b1:d8:01:af:ae:4b:d0:08:c3:b6:d7:19:f0:08:cd:4d:fb:1f:5b:fe:d3
Signer

Actual PE Digest

9f:65:e2:c5:d4:d6:b4:75:e2:7c:57:b1:d8:01:af:ae:4b:d0:08:c3:b6:d7:19:f0:08:cd:4d:fb:1f:5b:fe:d3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

HEVCDECODER_STORE.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_crt_atexit
terminate
_initterm_e
_initterm
_cexit
_errno
abort
_initialize_narrow_environment
_invalid_parameter_noinfo

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vsnprintf_s

api-ms-win-crt-heap-l1-1-0

free
_callnewh
_free_base
_aligned_free
malloc
_calloc_base
_aligned_malloc

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW
LoadLibraryExW
DisableThreadLibraryCalls
GetModuleHandleExW
GetModuleFileNameA
GetProcAddress
GetModuleFileNameW

api-ms-win-core-synch-l1-2-0

Sleep
WakeAllConditionVariable
SleepConditionVariableSRW
InitOnceExecuteOnce

api-ms-win-core-featurestaging-l1-1-0

RecordFeatureUsage
GetFeatureEnabledState
SubscribeFeatureStateChangeNotification
UnsubscribeFeatureStateChangeNotification

api-ms-win-core-synch-l1-1-0

WaitForMultipleObjectsEx
AcquireSRWLockShared
InitializeCriticalSectionEx
EnterCriticalSection
SetEvent
CreateEventW
LeaveCriticalSection
InitializeCriticalSection
CreateSemaphoreExW
DeleteCriticalSection
ReleaseSemaphore
OpenSemaphoreW
CreateMutexExW
WaitForSingleObject
ReleaseMutex
ResetEvent
ReleaseSRWLockShared
ReleaseSRWLockExclusive
WaitForSingleObjectEx
CreateEventExW
AcquireSRWLockExclusive

api-ms-win-core-heap-l1-1-0

HeapFree
HeapAlloc
GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

GetLastError
RaiseException
SetLastError

api-ms-win-core-winrt-string-l1-1-0

WindowsStringHasEmbeddedNull
WindowsCreateString
WindowsGetStringRawBuffer
WindowsIsStringEmpty

api-ms-win-core-com-l1-1-0

CoCreateGuid
PropVariantClear
CoTaskMemFree
CoTaskMemAlloc

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventRegister
EventSetInformation
EventWriteTransfer

api-ms-win-core-util-l1-1-0

DecodePointer
EncodePointer

api-ms-win-eventing-classicprovider-l1-1-0

GetTraceEnableFlags
TraceMessage
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceEnableLevel
GetTraceLoggerHandle

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer

api-ms-win-core-processthreads-l1-1-0

GetThreadPriority
GetCurrentProcess
CreateThread
TlsGetValue
GetCurrentThreadId
GetCurrentProcessId
GetCurrentThread
TlsSetValue
SetThreadPriority

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW
RoOriginateError

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
OutputDebugStringW
DebugBreak

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-memory-l1-1-0

VirtualFree
VirtualProtect
VirtualAlloc

api-ms-win-core-rtlsupport-l1-1-0

RtlUnwindEx
RtlDeleteFunctionTable
RtlLookupFunctionEntry
RtlAddFunctionTable
RtlPcToFileHeader

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetSystemInfo
GetTickCount64

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList
InitializeSListHead

api-ms-win-core-fibers-l1-1-0

FlsAlloc
FlsGetValue
FlsSetValue
FlsFree

api-ms-win-crt-string-l1-1-0

strnlen
strncpy_s
strcpy_s

api-ms-win-crt-utility-l1-1-0

rand
qsort
srand

api-ms-win-crt-time-l1-1-0

_time64

mfplat

MFCreateMediaType
MFCreateDXGISurfaceBuffer
MFCreateTrackedSample
MFCopyImage
MFCreateCollection
MFGetSystemTime
MFCreateSample
MFCreateAttributes
MFCreateMediaEvent
MFCreateVideoSampleAllocatorEx

api-ms-win-core-heap-l2-1-0

LocalFree
LocalAlloc

api-ms-win-core-synch-l1-2-1

CreateSemaphoreW

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

IPPCODE
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 868KB - Virtual size: 865KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x64/mfh265enc.dll
.dll windows:10 windows x64 arch:x64

b47ba914a507dbc0ee04660a7e5f2928

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:29

Not After

03/03/2021, 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:8b:4c:b8:eb:9d:8f:8a:c0:e9:00:00:00:00:01:8b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:39

Not After

03/03/2021, 18:39

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

44:a5:69:c3:39:f6:82:80:f8:4b:64:ee:41:17:27:13:3c:51:ec:58:4a:af:76:d1:c6:ec:e7:2a:e6:e1:71:1f
Signer

Actual PE Digest

44:a5:69:c3:39:f6:82:80:f8:4b:64:ee:41:17:27:13:3c:51:ec:58:4a:af:76:d1:c6:ec:e7:2a:e6:e1:71:1f

Digest Algorithm

sha256

PE Digest Matches

true

44:a5:69:c3:39:f6:82:80:f8:4b:64:ee:41:17:27:13:3c:51:ec:58:4a:af:76:d1:c6:ec:e7:2a:e6:e1:71:1f
Signer

Actual PE Digest

44:a5:69:c3:39:f6:82:80:f8:4b:64:ee:41:17:27:13:3c:51:ec:58:4a:af:76:d1:c6:ec:e7:2a:e6:e1:71:1f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

mfH265Enc.pdb

Imports

api-ms-win-crt-heap-l1-1-0

_free_base
_callnewh
_calloc_base
malloc
realloc
calloc
free

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce
WakeAllConditionVariable
SleepConditionVariableSRW

api-ms-win-core-winrt-string-l1-1-0

WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateString
WindowsIsStringEmpty

api-ms-win-core-synch-l1-1-0

InitializeCriticalSectionEx
DeleteCriticalSection
AcquireSRWLockShared
ResetEvent
ReleaseSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
CreateEventW
SetEvent

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcessId
CreateThread

api-ms-win-core-sysinfo-l1-1-0

GetLogicalProcessorInformation
GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList
InitializeSListHead

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlUnwindEx
RtlPcToFileHeader

api-ms-win-core-errorhandling-l1-1-0

SetLastError
RaiseException
GetLastError

api-ms-win-core-fibers-l1-1-0

FlsGetValue
FlsFree
FlsAlloc
FlsSetValue

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_register_onexit_function
_execute_onexit_table
_initterm_e
_crt_atexit
abort
terminate
_seh_filter_dll

api-ms-win-crt-string-l1-1-0

strcat_s
strcpy_s
strcmp
wcsnlen
wcsncpy_s

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vsprintf_s
fread

api-ms-win-crt-convert-l1-1-0

_strtoui64
atof
atoi

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-crt-math-l1-1-0

sin
sqrt
sqrtf
logf
pow
floorf
floor
exp
ceilf
log
powf

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory

Sections

.text
Size: 908KB - Virtual size: 904KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x86/hevcdecoder_store.dll
.dll windows:10 windows x86 arch:x86

53c97b427259199a45a6cf98cadeb5f8

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:29

Not After

03/03/2021, 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:8b:4c:b8:eb:9d:8f:8a:c0:e9:00:00:00:00:01:8b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:39

Not After

03/03/2021, 18:39

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d9:49:07:28:9d:4c:d1:7e:84:51:3a:8d:cf:48:34:6e:e4:34:5d:3d:11:9f:64:a4:f1:c5:b5:d0:e8:b7:10:8d
Signer

Actual PE Digest

d9:49:07:28:9d:4c:d1:7e:84:51:3a:8d:cf:48:34:6e:e4:34:5d:3d:11:9f:64:a4:f1:c5:b5:d0:e8:b7:10:8d

Digest Algorithm

sha256

PE Digest Matches

true

d9:49:07:28:9d:4c:d1:7e:84:51:3a:8d:cf:48:34:6e:e4:34:5d:3d:11:9f:64:a4:f1:c5:b5:d0:e8:b7:10:8d
Signer

Actual PE Digest

d9:49:07:28:9d:4c:d1:7e:84:51:3a:8d:cf:48:34:6e:e4:34:5d:3d:11:9f:64:a4:f1:c5:b5:d0:e8:b7:10:8d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

HEVCDECODER_STORE.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

abort
_cexit
_initterm
_initterm_e
_crt_atexit
terminate
_seh_filter_dll
_configure_narrow_argv
_execute_onexit_table
_errno
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_invalid_parameter_noinfo

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vsnprintf_s

api-ms-win-crt-heap-l1-1-0

_aligned_free
_aligned_malloc
malloc
_calloc_base
_callnewh
_free_base
free

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW
GetModuleHandleExW
DisableThreadLibraryCalls
GetProcAddress
LoadLibraryExW
GetModuleFileNameW
GetModuleFileNameA

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce
Sleep
WakeAllConditionVariable
SleepConditionVariableSRW

api-ms-win-core-featurestaging-l1-1-0

UnsubscribeFeatureStateChangeNotification
GetFeatureEnabledState
SubscribeFeatureStateChangeNotification
RecordFeatureUsage

api-ms-win-core-synch-l1-1-0

CreateSemaphoreExW
InitializeCriticalSection
DeleteCriticalSection
InitializeCriticalSectionEx
WaitForSingleObject
ReleaseMutex
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WaitForSingleObjectEx
OpenSemaphoreW
ResetEvent
AcquireSRWLockShared
CreateEventW
SetEvent
WaitForMultipleObjectsEx
LeaveCriticalSection
CreateEventExW
ReleaseSRWLockShared
ReleaseSemaphore
EnterCriticalSection
CreateMutexExW

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapFree
HeapAlloc

api-ms-win-core-errorhandling-l1-1-0

GetLastError
SetLastError
RaiseException

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateString
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsStringHasEmbeddedNull

api-ms-win-core-com-l1-1-0

PropVariantClear
CoTaskMemFree
CoCreateGuid
CoTaskMemAlloc

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventRegister
EventSetInformation
EventWriteTransfer

api-ms-win-core-util-l1-1-0

DecodePointer
EncodePointer

api-ms-win-eventing-classicprovider-l1-1-0

GetTraceEnableFlags
TraceMessage
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceEnableLevel
GetTraceLoggerHandle

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolTimer
SetThreadpoolTimer

api-ms-win-core-processthreads-l1-1-0

TlsGetValue
GetThreadPriority
GetCurrentThreadId
GetCurrentThread
TlsSetValue
CreateThread
GetCurrentProcess
GetCurrentProcessId
SetThreadPriority

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError
RoOriginateErrorW

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
OutputDebugStringW
DebugBreak

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-memory-l1-1-0

VirtualProtect
VirtualFree
VirtualAlloc

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount64

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList
InitializeSListHead

api-ms-win-core-rtlsupport-l1-1-0

RtlUnwind

api-ms-win-core-fibers-l1-1-0

FlsSetValue
FlsAlloc
FlsFree
FlsGetValue

api-ms-win-crt-string-l1-1-0

strnlen
strncpy_s
strcpy_s

api-ms-win-crt-utility-l1-1-0

rand
qsort
srand

api-ms-win-crt-time-l1-1-0

_time32

mfplat

MFGetSystemTime
MFCreateSample
MFCreateVideoSampleAllocatorEx
MFCreateMediaType
MFCreateMediaEvent
MFCreateAttributes
MFCreateCollection
MFCopyImage
MFCreateTrackedSample
MFCreateDXGISurfaceBuffer

api-ms-win-core-heap-l2-1-0

LocalFree
LocalAlloc

api-ms-win-core-synch-l1-2-1

CreateSemaphoreW

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

IPPCODE
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x86/mfh265enc.dll
.dll windows:10 windows x86 arch:x86

361b3ce4f4ae4bdc40f0d87acce5867f

Code Sign

33:00:00:03:25:48:b2:9d:0e:7f:c5:f4:1f:00:00:00:00:03:25
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:29

Not After

03/03/2021, 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:8a:07:37:33:cf:20:48:89:3c:00:00:00:00:01:8a
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:39

Not After

03/03/2021, 18:39

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:57:a4:46:f8:7f:2f:37:ed:41:51:72:63:c7:60:84:77:2b:9a:eb:b9:b5:a4:1a:81:7f:a7:80:a0:dc:a4:ce
Signer

Actual PE Digest

0c:57:a4:46:f8:7f:2f:37:ed:41:51:72:63:c7:60:84:77:2b:9a:eb:b9:b5:a4:1a:81:7f:a7:80:a0:dc:a4:ce

Digest Algorithm

sha256

PE Digest Matches

true

0c:57:a4:46:f8:7f:2f:37:ed:41:51:72:63:c7:60:84:77:2b:9a:eb:b9:b5:a4:1a:81:7f:a7:80:a0:dc:a4:ce
Signer

Actual PE Digest

0c:57:a4:46:f8:7f:2f:37:ed:41:51:72:63:c7:60:84:77:2b:9a:eb:b9:b5:a4:1a:81:7f:a7:80:a0:dc:a4:ce

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

mfH265Enc.pdb

Imports

api-ms-win-crt-heap-l1-1-0

_calloc_base
malloc
_free_base
realloc
_callnewh
free
calloc

api-ms-win-core-synch-l1-2-0

SleepConditionVariableSRW
InitOnceExecuteOnce
WakeAllConditionVariable

api-ms-win-core-winrt-string-l1-1-0

WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
WindowsCreateString

api-ms-win-core-synch-l1-1-0

CreateEventW
SetEvent
ResetEvent
InitializeCriticalSectionEx
EnterCriticalSection
WaitForSingleObject
AcquireSRWLockShared
LeaveCriticalSection
InitializeCriticalSection
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockShared
DeleteCriticalSection

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
CreateThread
GetCurrentProcessId

api-ms-win-core-sysinfo-l1-1-0

GetLogicalProcessorInformation
GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList
InitializeSListHead

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-rtlsupport-l1-1-0

RtlUnwind

api-ms-win-core-errorhandling-l1-1-0

SetLastError
RaiseException
GetLastError

api-ms-win-core-fibers-l1-1-0

FlsFree
FlsAlloc
FlsSetValue
FlsGetValue

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initterm
_initterm_e
abort
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_cexit

api-ms-win-crt-string-l1-1-0

wcsnlen
wcsncpy_s
strcpy_s
strcat_s

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
fread
__stdio_common_vsprintf_s

api-ms-win-crt-convert-l1-1-0

_strtoui64
atof
atoi

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-crt-math-l1-1-0

_CIpow
_CIsin
_CIsqrt
ceil
_CIlog
_CIexp
floor

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory

Sections

.text
Size: 833KB - Virtual size: 832KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

11eed1268d47f5bd95be772c2e166695

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

vccorlib140_app

msvcp140_app

vcruntime140_app

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-core-util-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-com-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-interlocked-l1-1-0

Exports

Exports

Sections

.text Size: 63KB - Virtual size: 62KB

.rdata Size: 49KB - Virtual size: 49KB

.data Size: 16KB - Virtual size: 17KB

.pdata Size: 4KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 928B

.reloc Size: 1KB - Virtual size: 1KB

Headers

DLL Characteristics

File Characteristics

Sections

.rdata Size: 3KB - Virtual size: 3KB

47897b3c4751c9885edf44f0e223a822

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

vccorlib140_app

vcruntime140_app

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-core-util-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-winrt-error-l1-1-0

api-ms-win-core-winrt-error-l1-1-1

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-com-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-winrt-l1-1-0

Sections

.text Size: 17KB - Virtual size: 16KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 5KB - Virtual size: 6KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 904B

.reloc Size: 1024B - Virtual size: 628B

Headers

DLL Characteristics

File Characteristics

Sections

.rdata Size: 2KB - Virtual size: 2KB

2b39ab7e3cc37b605a9ac303313ac93d

Code Sign

33:00:00:03:25:48:b2:9d:0e:7f:c5:f4:1f:00:00:00:00:03:25Certificate

Extended Key Usages

.text
Size: 63KB - Virtual size: 62KB

.rdata
Size: 49KB - Virtual size: 49KB

.data
Size: 16KB - Virtual size: 17KB

.pdata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 928B

.reloc
Size: 1KB - Virtual size: 1KB

.rdata
Size: 3KB - Virtual size: 3KB

.text
Size: 17KB - Virtual size: 16KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 5KB - Virtual size: 6KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 904B

.reloc
Size: 1024B - Virtual size: 628B

.rdata
Size: 2KB - Virtual size: 2KB

33:00:00:03:25:48:b2:9d:0e:7f:c5:f4:1f:00:00:00:00:03:25
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

33:00:00:01:8a:07:37:33:cf:20:48:89:3c:00:00:00:00:01:8a
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

9f:65:e2:c5:d4:d6:b4:75:e2:7c:57:b1:d8:01:af:ae:4b:d0:08:c3:b6:d7:19:f0:08:cd:4d:fb:1f:5b:fe:d3
Signer

9f:65:e2:c5:d4:d6:b4:75:e2:7c:57:b1:d8:01:af:ae:4b:d0:08:c3:b6:d7:19:f0:08:cd:4d:fb:1f:5b:fe:d3
Signer

.text
Size: 1.3MB - Virtual size: 1.3MB

IPPCODE
Size: 4KB - Virtual size: 2KB

.rdata
Size: 868KB - Virtual size: 865KB

.data
Size: 8KB - Virtual size: 17KB

.pdata
Size: 48KB - Virtual size: 47KB

.rsrc
Size: 8KB - Virtual size: 4KB

.reloc
Size: 8KB - Virtual size: 4KB

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

33:00:00:01:8b:4c:b8:eb:9d:8f:8a:c0:e9:00:00:00:00:01:8b
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

44:a5:69:c3:39:f6:82:80:f8:4b:64:ee:41:17:27:13:3c:51:ec:58:4a:af:76:d1:c6:ec:e7:2a:e6:e1:71:1f
Signer

44:a5:69:c3:39:f6:82:80:f8:4b:64:ee:41:17:27:13:3c:51:ec:58:4a:af:76:d1:c6:ec:e7:2a:e6:e1:71:1f
Signer