Setup[.]rar | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

Setup.rar
Size

14.7MB
MD5

33a78ed22169caac19d120f5394462f1
SHA1

3cba3d3721a23f3e6397d1541956b04b42e45255
SHA256

03078d91c002a05891cf8876c769a5ea4840a9db3d0eadafd06a6a7729a4c5cf
SHA512

9b02ed9b9afab2ba37e43331788de264e0f7184933df49f807bf4613496d5dd458849aeebfd5f39247ac789a790200e471e8359832c5dc78bf8e44baa12e8c8e
SSDEEP

393216:WgB2WBSACz0aRR9NlVNrzVOL5I1o2NLp+xwBln2gdzJF0h2:AKg0GtrzVXomV+xcLdtn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Setup.exe

Files

Setup.rar
.rar

Password: 1847
Setup.exe
.exe windows:4 windows x86 arch:x86

Password: 1847

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 543KB - Virtual size: 543KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
avcodec-59.dll
.dll windows:4 windows x64 arch:x64

Password: 1847

a9f4b31bc853f620c435d626154cb852

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:d4:1a:66:69:21:53:ff:be:5d:ef:e8:73:ad:ff:6a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

01/07/2021, 00:00

Not After

15/08/2024, 23:59

Subject

CN=Hugh Bailey,O=Hugh Bailey,L=Temecula,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

dc:9a:36:80:cd:9b:3b:ba:c5:2d:64:cc:36:79:82:57:62:15:69:81:d6:0e:d1:df:5e:0e:eb:4d:5d:26:5f:18:00:ca:b7:d6:11:39:c2:04:e2:ff:ae:3d:c5:1e:28:01:20:4f:0c:79:f9:77:4d:31:d9:c1:e0:84:32:33:30:aa
Signer

Actual PE Digest

dc:9a:36:80:cd:9b:3b:ba:c5:2d:64:cc:36:79:82:57:62:15:69:81:d6:0e:d1:df:5e:0e:eb:4d:5d:26:5f:18:00:ca:b7:d6:11:39:c2:04:e2:ff:ae:3d:c5:1e:28:01:20:4f:0c:79:f9:77:4d:31:d9:c1:e0:84:32:33:30:aa

Digest Algorithm

sha512

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateEventW
CreateMutexA
CreateSemaphoreA
CreateSemaphoreW
CreateThread
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FreeLibrary
GetActiveProcessorGroupCount
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetProcessAffinityMask
GetStdHandle
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
GetThreadGroupAffinity
GetThreadPriority
GetTickCount
InitOnceBeginInitialize
InitOnceComplete
InitOnceExecuteOnce
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OpenProcess
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReleaseMutex
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadAffinityMask
SetThreadContext
SetThreadGroupAffinity
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableCS
SuspendThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
__C_specific_handler

msvcrt

___lc_codepage_func
___mb_cur_max_func
__doserrno
__iob_func
__setusermatherr
_aligned_free
_aligned_malloc
_amsg_exit
_assert
_beginthreadex
_endthreadex
_errno
_filelengthi64
_fileno
_fstat64
_ftime64
_hypot
_initterm
_localtime64
_lock
_setjmp
_stricmp
_strnicmp
_time64
_ultoa
_unlock
_vsnprintf
_wfopen
_wrename
_wunlink
abort
acos
atan
atoi
bsearch
calloc
exit
fclose
feof
fflush
fgetpos
fopen
fprintf
fputc
fputs
fread
free
frexp
fscanf
fseek
fsetpos
fwrite
getc
getenv
islower
isspace
isupper
isxdigit
localeconv
log10
malloc
memchr
memcmp
memcpy
memmove
memset
printf
puts
qsort
rand
realloc
signal
strchr
strcmp
strcpy
strcspn
strerror
strftime
strlen
strncmp
strncpy
strpbrk
strspn
strstr
strtol
strtoul
tan
tanh
tolower
ungetc
vfprintf
wcscpy
wcslen
wcsrchr
_ftime64_s
longjmp
_strdup
_fileno

ole32

CoTaskMemFree

avutil-57

av_asprintf
av_audio_fifo_alloc
av_audio_fifo_drain
av_audio_fifo_free
av_audio_fifo_read
av_audio_fifo_reset
av_audio_fifo_size
av_audio_fifo_write
av_base64_decode
av_base64_encode
av_bmg_get
av_bprint_append_data
av_bprint_chars
av_bprint_clear
av_bprint_escape
av_bprint_finalize
av_bprint_get_buffer
av_bprint_init
av_bprint_init_for_buffer
av_bprintf
av_buffer_alloc
av_buffer_allocz
av_buffer_create
av_buffer_default_free
av_buffer_get_ref_count
av_buffer_is_writable
av_buffer_make_writable
av_buffer_pool_get
av_buffer_pool_init
av_buffer_pool_init2
av_buffer_pool_uninit
av_buffer_realloc
av_buffer_ref
av_buffer_replace
av_buffer_unref
av_calloc
av_channel_layout_check
av_channel_layout_compare
av_channel_layout_copy
av_channel_layout_default
av_channel_layout_describe
av_channel_layout_from_mask
av_channel_layout_index_from_channel
av_channel_layout_subset
av_channel_layout_uninit
av_chroma_location_name
av_color_primaries_name
av_color_range_name
av_color_space_name
av_color_transfer_name
av_content_light_metadata_create_side_data
av_cpu_count
av_crc
av_crc_get_table
av_crc_init
av_d2q
av_default_item_name
av_dict_copy
av_dict_free
av_dict_get
av_dict_set
av_display_matrix_flip
av_display_rotation_set
av_div_q
av_dovi_metadata_alloc
av_downmix_info_update_side_data
av_dynamic_hdr_plus_alloc
av_dynamic_hdr_vivid_alloc
av_dynarray_add
av_dynarray_add_nofree
av_expr_eval
av_expr_free
av_expr_parse
av_fast_malloc
av_fast_mallocz
av_fast_realloc
av_fifo_alloc2
av_fifo_can_read
av_fifo_can_write
av_fifo_drain2
av_fifo_freep2
av_fifo_peek
av_fifo_read
av_fifo_reset2
av_fifo_write
av_film_grain_params_create_side_data
av_find_best_pix_fmt_of_2
av_fourcc_make_string
av_frame_alloc
av_frame_apply_cropping
av_frame_clone
av_frame_copy
av_frame_copy_props
av_frame_free
av_frame_get_buffer
av_frame_get_side_data
av_frame_is_writable
av_frame_move_ref
av_frame_new_side_data
av_frame_new_side_data_from_buf
av_frame_ref
av_frame_remove_side_data
av_frame_unref
av_free
av_freep
av_gcd
av_get_bits_per_pixel
av_get_bytes_per_sample
av_get_channel_layout_nb_channels
av_get_channel_layout_string
av_get_cpu_flags
av_get_media_type_string
av_get_picture_type_char
av_get_pix_fmt_name
av_get_planar_sample_fmt
av_get_sample_fmt_name
av_get_token
av_gettime
av_hwdevice_ctx_create
av_hwdevice_get_type_name
av_hwframe_ctx_alloc
av_hwframe_ctx_init
av_hwframe_get_buffer
av_hwframe_transfer_data
av_image_alloc
av_image_check_sar
av_image_check_size
av_image_check_size2
av_image_copy
av_image_copy_plane
av_image_copy_to_buffer
av_image_fill_arrays
av_image_fill_black
av_image_fill_linesizes
av_image_fill_plane_sizes
av_image_fill_pointers
av_image_get_buffer_size
av_image_get_linesize
av_lfg_init
av_lfg_init_from_data
av_log
av_log_get_level
av_log_once
av_lzo1x_decode
av_malloc
av_malloc_array
av_mallocz
av_mastering_display_metadata_create_side_data
av_match_list
av_md5_alloc
av_md5_final
av_md5_init
av_md5_update
av_memcpy_backptr
av_memdup
av_mul_q
av_nearer_q
av_opt_copy
av_opt_free
av_opt_get_int
av_opt_next
av_opt_set
av_opt_set_defaults
av_opt_set_defaults2
av_opt_set_dict
av_opt_set_dict2
av_opt_set_from_string
av_opt_set_int
av_parse_color
av_pix_fmt_count_planes
av_pix_fmt_desc_get
av_pix_fmt_get_chroma_sub_sample
av_realloc
av_realloc_array
av_realloc_f
av_reallocp
av_reallocp_array
av_reduce
av_rescale
av_rescale_q
av_rescale_q_rnd
av_rescale_rnd
av_sample_fmt_is_planar
av_samples_copy
av_samples_fill_arrays
av_samples_get_buffer_size
av_samples_set_silence
av_size_mult
av_sscanf
av_stereo3d_alloc
av_stereo3d_create_side_data
av_strcasecmp
av_strdup
av_strerror
av_stristr
av_strlcat
av_strlcatf
av_strlcpy
av_strncasecmp
av_strtok
av_timecode_adjust_ntsc_framenum2
av_timecode_get_smpte
av_timecode_init_from_string
av_timecode_make_mpeg_tc_string
av_timecode_make_smpte_tc_string2
av_tx_init
av_tx_uninit
av_usleep
av_vbprintf
av_video_enc_params_create_side_data
av_vlog
avpriv_alloc_fixed_dsp
avpriv_cga_font
avpriv_float_dsp_alloc
avpriv_fopen_utf8
avpriv_get_gamma_from_trc
avpriv_get_trc_function_from_trc
avpriv_init_lls
avpriv_report_missing_feature
avpriv_request_sample
avpriv_scalarproduct_float_c
avpriv_set_systematic_pal2
avpriv_slicethread_create
avpriv_slicethread_execute
avpriv_slicethread_free
avpriv_solve_lls
avpriv_vga16_font

swresample-4

swr_alloc
swr_close
swr_convert
swr_free
swr_init
swr_is_initialized

Exports

Exports

av_ac3_parse_header
av_adts_header_parse
av_bsf_alloc
av_bsf_flush
av_bsf_free
av_bsf_get_by_name
av_bsf_get_class
av_bsf_get_null_filter
av_bsf_init
av_bsf_iterate
av_bsf_list_alloc
av_bsf_list_append
av_bsf_list_append2
av_bsf_list_finalize
av_bsf_list_free
av_bsf_list_parse_str
av_bsf_receive_packet
av_bsf_send_packet
av_codec_ffversion
av_codec_is_decoder
av_codec_is_encoder
av_codec_iterate
av_cpb_properties_alloc
av_d3d11va_alloc_context
av_dct_calc
av_dct_end
av_dct_init
av_dirac_parse_sequence_header
av_dv_codec_profile
av_dv_codec_profile2
av_dv_frame_profile
av_fast_padded_malloc
av_fast_padded_mallocz
av_fft_calc
av_fft_end
av_fft_init
av_fft_permute
av_get_audio_frame_duration
av_get_audio_frame_duration2
av_get_bits_per_sample
av_get_exact_bits_per_sample
av_get_pcm_codec
av_get_profile_name
av_grow_packet
av_imdct_calc
av_imdct_half
av_init_packet
av_jni_get_java_vm
av_jni_set_java_vm
av_mdct_calc
av_mdct_end
av_mdct_init
av_mediacodec_alloc_context
av_mediacodec_default_free
av_mediacodec_default_init
av_mediacodec_release_buffer
av_mediacodec_render_buffer_at_time
av_new_packet
av_packet_add_side_data
av_packet_alloc
av_packet_clone
av_packet_copy_props
av_packet_free
av_packet_free_side_data
av_packet_from_data
av_packet_get_side_data
av_packet_make_refcounted
av_packet_make_writable
av_packet_move_ref
av_packet_new_side_data
av_packet_pack_dictionary
av_packet_ref
av_packet_rescale_ts
av_packet_shrink_side_data
av_packet_side_data_name
av_packet_unpack_dictionary
av_packet_unref
av_parser_close
av_parser_init
av_parser_iterate
av_parser_parse2
av_qsv_alloc_context
av_rdft_calc
av_rdft_end
av_rdft_init
av_shrink_packet
av_vorbis_parse_frame
av_vorbis_parse_frame_flags
av_vorbis_parse_free
av_vorbis_parse_init
av_vorbis_parse_reset
av_xiphlacing
avcodec_align_dimensions
avcodec_align_dimensions2
avcodec_alloc_context3
avcodec_chroma_pos_to_enum
avcodec_close
avcodec_configuration
avcodec_dct_alloc
avcodec_dct_get_class
avcodec_dct_init
avcodec_decode_subtitle2
avcodec_default_execute
avcodec_default_execute2
avcodec_default_get_buffer2
avcodec_default_get_encode_buffer
avcodec_default_get_format
avcodec_descriptor_get
avcodec_descriptor_get_by_name
avcodec_descriptor_next
avcodec_encode_subtitle
avcodec_enum_to_chroma_pos
avcodec_fill_audio_frame
avcodec_find_best_pix_fmt_of_list
avcodec_find_decoder
avcodec_find_decoder_by_name
avcodec_find_encoder
avcodec_find_encoder_by_name
avcodec_flush_buffers
avcodec_free_context
avcodec_get_class
avcodec_get_frame_class
avcodec_get_hw_config
avcodec_get_hw_frames_parameters
avcodec_get_name
avcodec_get_subtitle_rect_class
avcodec_get_type
avcodec_is_open
avcodec_license
avcodec_open2
avcodec_parameters_alloc
avcodec_parameters_copy
avcodec_parameters_free
avcodec_parameters_from_context
avcodec_parameters_to_context
avcodec_pix_fmt_to_codec_tag
avcodec_profile_name
avcodec_receive_frame
avcodec_receive_packet
avcodec_send_frame
avcodec_send_packet
avcodec_string
avcodec_version
avpriv_ac3_parse_header
avpriv_adts_header_parse
avpriv_codec_get_cap_skip_frame_fill_param
avpriv_dca_convert_bitstream
avpriv_dca_parse_core_frame_header
avpriv_elbg_do
avpriv_elbg_free
avpriv_exif_decode_ifd
avpriv_find_start_code
avpriv_fits_header_init
avpriv_fits_header_parse_line
avpriv_get_raw_pix_fmt_tags
avpriv_h264_has_num_reorder_frames
avpriv_mpeg4audio_get_config2
avpriv_mpegaudio_decode_header
avpriv_packet_list_free
avpriv_packet_list_get
avpriv_packet_list_put
avpriv_pix_fmt_find
avpriv_split_xiph_headers
avpriv_tak_parse_streaminfo
avsubtitle_free

Sections

.text
Size: 25.3MB - Virtual size: 25.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 318KB - Virtual size: 317KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 10.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
avdevice-59.dll
.dll windows:4 windows x64 arch:x64

Password: 1847

8c6e5517d0766d7417c41642edc2cc2e

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:d4:1a:66:69:21:53:ff:be:5d:ef:e8:73:ad:ff:6a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

01/07/2021, 00:00

Not After

15/08/2024, 23:59

Subject

CN=Hugh Bailey,O=Hugh Bailey,L=Temecula,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:b1:da:3e:80:11:f7:59:d6:cc:8c:ba:cb:b7:93:19:12:cd:7a:fd:91:ff:07:3a:91:72:77:05:81:58:73:99:6e:00:2b:ba:03:20:ef:d4:3f:77:c7:01:46:5f:0b:75:99:5a:d4:50:ca:12:ca:c0:fb:21:ea:32:a2:4f:39:cc
Signer

Actual PE Digest

0f:b1:da:3e:80:11:f7:59:d6:cc:8c:ba:cb:b7:93:19:12:cd:7a:fd:91:ff:07:3a:91:72:77:05:81:58:73:99:6e:00:2b:ba:03:20:ef:d4:3f:77:c7:01:46:5f:0b:75:99:5a:d4:50:ca:12:ca:c0:fb:21:ea:32:a2:4f:39:cc

Digest Algorithm

sha512

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

gdi32

BitBlt
CombineRgn
CreateCompatibleDC
CreateDIBSection
CreateRectRgn
DeleteDC
DeleteObject
GetDIBColorTable
GetDeviceCaps
GetObjectA
GetStockObject
SelectObject

kernel32

CloseHandle
CreateEventA
CreateMutexA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
ReleaseMutex
ResetEvent
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEvent
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_unlock
abort
atoi
calloc
fflush
fputs
free
fwrite
getc
islower
isspace
isupper
isxdigit
localeconv
malloc
memcpy
realloc
signal
strcmp
strlen
strncmp
strtok
strtol
strtoul
tolower
ungetc
vfprintf
wcscmp
wcscpy
_wcsdup

ole32

CoCreateInstance
CoGetMalloc
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CreateBindCtx
OleLoadFromStream
OleSaveToStream

oleaut32

OleCreatePropertyFrame

shlwapi

SHCreateStreamOnFileA

user32

AdjustWindowRectEx
BeginPaint
CopyIcon
CreateWindowExA
DefWindowProcA
DestroyCursor
DestroyWindow
DispatchMessageA
DrawIcon
EndPaint
FindWindowW
FrameRect
GetClientRect
GetCursorInfo
GetDC
GetIconInfo
GetSystemMetrics
GetWindowLongPtrA
GetWindowRect
LoadCursorA
PeekMessageA
ReleaseDC
SendMessageA
SetWindowLongPtrA
SetWindowRgn
ShowWindow

avicap32

capCreateCaptureWindowA
capGetDriverDescriptionA

avcodec-59

av_get_pcm_codec
av_new_packet
av_packet_add_side_data
av_packet_move_ref
av_packet_pack_dictionary
av_packet_unref
avcodec_find_decoder
avpriv_pix_fmt_find

avfilter-8

av_buffersink_get_ch_layout
av_buffersink_get_format
av_buffersink_get_frame_flags
av_buffersink_get_h
av_buffersink_get_sample_aspect_ratio
av_buffersink_get_sample_rate
av_buffersink_get_time_base
av_buffersink_get_type
av_buffersink_get_w
avfilter_get_by_name
avfilter_graph_alloc
avfilter_graph_config
avfilter_graph_create_filter
avfilter_graph_dump
avfilter_graph_free
avfilter_graph_parse_ptr
avfilter_inout_free
avfilter_link
avfilter_pad_get_type

avformat-59

av_codec_get_id
av_find_input_format
avformat_alloc_context
avformat_alloc_output_context2
avformat_free_context
avformat_get_riff_video_tags
avformat_new_stream
avio_closep
avio_open2
avio_read_to_bprint
avpriv_register_devices
avpriv_set_pts_info

avutil-57

av_bprint_finalize
av_bprint_init
av_calloc
av_chroma_location_name
av_color_primaries_name
av_color_range_name
av_color_space_name
av_color_transfer_name
av_default_item_name
av_dict_copy
av_dict_free
av_dict_set
av_frame_alloc
av_frame_free
av_frame_get_side_data
av_frame_unref
av_free
av_freep
av_get_bytes_per_sample
av_get_media_type_string
av_get_padded_bits_per_pixel
av_get_pix_fmt_name
av_get_sample_fmt_name
av_gettime
av_gettime_relative
av_image_copy_to_buffer
av_image_get_buffer_size
av_int_list_length_for_size
av_log
av_malloc
av_malloc_array
av_mallocz
av_opt_set_bin
av_opt_set_defaults
av_opt_set_dict2
av_opt_set_int
av_parse_video_rate
av_parse_video_size
av_pix_fmt_desc_get
av_reallocp_array
av_rescale_q_rnd
av_strdup
av_usleep
avpriv_report_missing_feature

Exports

Exports

av_device_capabilities
av_device_ffversion
av_input_audio_device_next
av_input_video_device_next
av_output_audio_device_next
av_output_video_device_next
avdevice_app_to_dev_control_message
avdevice_capabilities_create
avdevice_capabilities_free
avdevice_configuration
avdevice_dev_to_app_control_message
avdevice_free_list_devices
avdevice_license
avdevice_list_devices
avdevice_list_input_sources
avdevice_list_output_sinks
avdevice_register_all
avdevice_version

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
avfilter-8.dll
.dll windows:4 windows x64 arch:x64

Password: 1847

f7c25b7080edaaa8b016104832eb5a31

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:d4:1a:66:69:21:53:ff:be:5d:ef:e8:73:ad:ff:6a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

01/07/2021, 00:00

Not After

15/08/2024, 23:59

Subject

CN=Hugh Bailey,O=Hugh Bailey,L=Temecula,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

44:e7:f9:78:e5:ad:91:3a:c5:5f:df:f4:57:d7:00:25:1c:42:8b:1c:cc:f6:76:9a:d5:df:c9:36:b9:91:df:79:27:d4:be:7e:77:36:e6:8a:b6:b7:ce:0e:69:67:f9:6a:30:2c:de:ea:40:9c:e9:a4:2c:77:e4:a9:e6:38:8a:54
Signer

Actual PE Digest

44:e7:f9:78:e5:ad:91:3a:c5:5f:df:f4:57:d7:00:25:1c:42:8b:1c:cc:f6:76:9a:d5:df:c9:36:b9:91:df:79:27:d4:be:7e:77:36:e6:8a:b6:b7:ce:0e:69:67:f9:6a:30:2c:de:ea:40:9c:e9:a4:2c:77:e4:a9:e6:38:8a:54

Digest Algorithm

sha512

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetProcessAffinityMask
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
MultiByteToWideChar
OpenProcess
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
__C_specific_handler

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
__setusermatherr
_amsg_exit
_beginthreadex
_endthreadex
_errno
_hypot
_initterm
_lock
_setjmp
_ultoa
_unlock
abort
acos
asin
atan
bsearch
calloc
cosh
exit
fclose
feof
fgetc
fgets
fprintf
fputc
fread
free
frexp
fseek
ftell
fwrite
getc
islower
isspace
isupper
isxdigit
localeconv
log10
malloc
memcmp
memcpy
memmove
memset
printf
qsort
realloc
signal
sinh
strchr
strcmp
strcspn
strerror
strlen
strncmp
strrchr
strspn
strstr
strtol
strtoul
tan
tanh
tolower
ungetc
vfprintf
wcslen
longjmp
_strdup

avcodec-59

av_dct_calc
av_dct_end
av_dct_init
av_fft_calc
av_fft_end
av_fft_init
av_fft_permute
av_packet_unref
av_rdft_calc
av_rdft_end
av_rdft_init
avcodec_alloc_context3
avcodec_dct_alloc
avcodec_dct_get_class
avcodec_dct_init
avcodec_find_decoder
avcodec_flush_buffers
avcodec_free_context
avcodec_open2
avcodec_parameters_to_context
avcodec_receive_frame
avcodec_send_packet
avpriv_elbg_do
avpriv_elbg_free

avformat-59

av_find_best_stream
av_find_input_format
av_get_frame_filename
av_read_frame
av_seek_frame
avformat_close_input
avformat_find_stream_info
avformat_match_stream_specifier
avformat_open_input
avio_closep
avio_get_str
avio_open
avio_read
avio_rl32
avio_seek
avio_size
avio_write

avutil-57

av_add_q
av_adler32_update
av_asprintf
av_audio_fifo_alloc
av_audio_fifo_drain
av_audio_fifo_free
av_audio_fifo_peek
av_audio_fifo_peek_at
av_audio_fifo_read
av_audio_fifo_size
av_audio_fifo_write
av_bprint_chars
av_bprint_clear
av_bprint_finalize
av_bprint_init
av_bprint_init_for_buffer
av_bprintf
av_buffer_alloc
av_buffer_allocz
av_buffer_pool_get
av_buffer_pool_init
av_buffer_pool_uninit
av_buffer_ref
av_buffer_unref
av_calloc
av_channel_from_string
av_channel_layout_channel_from_index
av_channel_layout_check
av_channel_layout_compare
av_channel_layout_copy
av_channel_layout_default
av_channel_layout_describe
av_channel_layout_extract_channel
av_channel_layout_from_mask
av_channel_layout_from_string
av_channel_layout_index_from_channel
av_channel_layout_index_from_string
av_channel_layout_subset
av_channel_layout_uninit
av_channel_name
av_color_primaries_name
av_color_range_name
av_color_space_name
av_color_transfer_name
av_compare_ts
av_cpu_count
av_cpu_max_align
av_crc
av_crc_get_table
av_csp_luma_coeffs_from_avcsp
av_csp_primaries_desc_from_id
av_d2q
av_default_item_name
av_detection_bbox_create_side_data
av_dict_free
av_dict_get
av_dict_set
av_dict_set_int
av_display_rotation_get
av_div_q
av_dynarray2_add
av_dynarray_add_nofree
av_expr_count_func
av_expr_count_vars
av_expr_eval
av_expr_free
av_expr_parse
av_expr_parse_and_eval
av_fast_malloc
av_fast_realloc
av_fifo_alloc2
av_fifo_can_read
av_fifo_freep2
av_fifo_read
av_fifo_write
av_file_map
av_file_unmap
av_find_best_pix_fmt_of_2
av_frame_alloc
av_frame_clone
av_frame_copy
av_frame_copy_props
av_frame_free
av_frame_get_buffer
av_frame_get_plane_buffer
av_frame_get_side_data
av_frame_is_writable
av_frame_make_writable
av_frame_move_ref
av_frame_new_side_data
av_frame_new_side_data_from_buf
av_frame_ref
av_frame_remove_side_data
av_frame_unref
av_free
av_freep
av_gcd
av_gcd_q
av_get_bits_per_pixel
av_get_bytes_per_sample
av_get_channel_layout
av_get_channel_layout_nb_channels
av_get_cpu_flags
av_get_extended_channel_layout
av_get_media_type_string
av_get_packed_sample_fmt
av_get_padded_bits_per_pixel
av_get_picture_type_char
av_get_pix_fmt
av_get_pix_fmt_name
av_get_planar_sample_fmt
av_get_random_seed
av_get_sample_fmt
av_get_sample_fmt_name
av_get_token
av_gettime
av_gettime_relative
av_hwdevice_ctx_create
av_hwdevice_ctx_create_derived
av_hwdevice_find_type_by_name
av_hwdevice_get_hwframe_constraints
av_hwframe_constraints_free
av_hwframe_ctx_alloc
av_hwframe_ctx_create_derived
av_hwframe_ctx_init
av_hwframe_get_buffer
av_hwframe_map
av_hwframe_transfer_data
av_hwframe_transfer_get_formats
av_image_alloc
av_image_check_size
av_image_check_size2
av_image_copy
av_image_copy_plane
av_image_fill_linesizes
av_image_fill_max_pixsteps
av_image_fill_plane_sizes
av_image_get_linesize
av_lfg_init
av_log
av_log_get_level
av_malloc
av_malloc_array
av_mallocz
av_memdup
av_mul_q
av_opt_eval_flags
av_opt_find
av_opt_find2
av_opt_free
av_opt_get_chlayout
av_opt_get_int
av_opt_get_key_value
av_opt_get_sample_fmt
av_opt_next
av_opt_set
av_opt_set_chlayout
av_opt_set_defaults
av_opt_set_dict
av_opt_set_dict2
av_opt_set_from_string
av_opt_set_int
av_opt_set_sample_fmt
av_parse_color
av_parse_ratio
av_parse_time
av_parse_video_rate
av_parse_video_size
av_pix_fmt_count_planes
av_pix_fmt_desc_get
av_pix_fmt_desc_get_id
av_pix_fmt_desc_next
av_pixelutils_get_sad_fn
av_read_image_line2
av_realloc
av_realloc_array
av_realloc_f
av_reduce
av_rescale
av_rescale_q
av_rescale_q_rnd
av_rescale_rnd
av_sample_fmt_is_planar
av_samples_alloc_array_and_samples
av_samples_copy
av_samples_get_buffer_size
av_samples_set_silence
av_spherical_tile_bounds
av_sscanf
av_stereo3d_create_side_data
av_stereo3d_type_name
av_strcasecmp
av_strdup
av_strerror
av_strlcat
av_strlcatf
av_strlcpy
av_strtod
av_strtok
av_sub_q
av_timecode_make_mpeg_tc_string
av_timecode_make_smpte_tc_string2
av_tx_init
av_tx_uninit
av_usleep
av_video_enc_params_create_side_data
av_vlog
av_write_image_line2
avpriv_cga_font
avpriv_float_dsp_alloc
avpriv_fopen_utf8
avpriv_report_missing_feature
avpriv_set_systematic_pal2
avpriv_slicethread_create
avpriv_slicethread_execute
avpriv_slicethread_free
avpriv_vga16_font

swresample-4

swr_alloc
swr_alloc_set_opts2
swr_convert
swr_free
swr_get_class
swr_get_delay
swr_init
swr_next_pts
swr_set_channel_mapping
swr_set_matrix

swscale-6

sws_alloc_context
sws_freeContext
sws_freeVec
sws_getCachedContext
sws_getCoefficients
sws_getColorspaceDetails
sws_getContext
sws_getGaussianVec
sws_get_class
sws_init_context
sws_isSupportedEndiannessConversion
sws_isSupportedInput
sws_isSupportedOutput
sws_scale
sws_scaleVec
sws_scale_frame
sws_setColorspaceDetails

Exports

Exports

av_abuffersink_params_alloc
av_buffersink_get_ch_layout
av_buffersink_get_channel_layout
av_buffersink_get_channels
av_buffersink_get_format
av_buffersink_get_frame
av_buffersink_get_frame_flags
av_buffersink_get_frame_rate
av_buffersink_get_h
av_buffersink_get_hw_frames_ctx
av_buffersink_get_sample_aspect_ratio
av_buffersink_get_sample_rate
av_buffersink_get_samples
av_buffersink_get_time_base
av_buffersink_get_type
av_buffersink_get_w
av_buffersink_params_alloc
av_buffersink_set_frame_size
av_buffersrc_add_frame
av_buffersrc_add_frame_flags
av_buffersrc_close
av_buffersrc_get_nb_failed_requests
av_buffersrc_parameters_alloc
av_buffersrc_parameters_set
av_buffersrc_write_frame
av_filter_ffversion
av_filter_iterate
avfilter_config_links
avfilter_configuration
avfilter_filter_pad_count
avfilter_free
avfilter_get_by_name
avfilter_get_class
avfilter_graph_alloc
avfilter_graph_alloc_filter
avfilter_graph_config
avfilter_graph_create_filter
avfilter_graph_dump
avfilter_graph_free
avfilter_graph_get_filter
avfilter_graph_parse
avfilter_graph_parse2
avfilter_graph_parse_ptr
avfilter_graph_queue_command
avfilter_graph_request_oldest
avfilter_graph_send_command
avfilter_graph_set_auto_convert
avfilter_init_dict
avfilter_init_str
avfilter_inout_alloc
avfilter_inout_free
avfilter_insert_filter
avfilter_license
avfilter_link
avfilter_link_free
avfilter_pad_count
avfilter_pad_get_name
avfilter_pad_get_type
avfilter_process_command
avfilter_version

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1014KB - Virtual size: 1014KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
avformat-59.dll
.dll windows:4 windows x64 arch:x64

Password: 1847

82c6d096d41dc58b50a3745561e6991d

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:d4:1a:66:69:21:53:ff:be:5d:ef:e8:73:ad:ff:6a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

01/07/2021, 00:00

Not After

15/08/2024, 23:59

Subject

CN=Hugh Bailey,O=Hugh Bailey,L=Temecula,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

91:1a:22:22:70:1d:dd:64:5f:2d:a1:a4:3e:f4:80:f7:69:1b:e6:fc:e6:23:bb:db:31:c6:cd:6c:1d:cb:32:da:29:77:65:3b:80:a8:72:ff:84:8d:08:0d:75:58:39:d6:b8:d2:a8:63:fa:bf:89:78:8b:34:d2:23:4b:b6:b9:a4
Signer

Actual PE Digest

91:1a:22:22:70:1d:dd:64:5f:2d:a1:a4:3e:f4:80:f7:69:1b:e6:fc:e6:23:bb:db:31:c6:cd:6c:1d:cb:32:da:29:77:65:3b:80:a8:72:ff:84:8d:08:0d:75:58:39:d6:b8:d2:a8:63:fa:bf:89:78:8b:34:d2:23:4b:b6:b9:a4

Digest Algorithm

sha512

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext

kernel32

AddVectoredExceptionHandler
CancelIoEx
CloseHandle
CreateEventA
CreateSemaphoreA
CreateSemaphoreW
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FileTimeToSystemTime
FormatMessageA
FormatMessageW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetFullPathNameW
GetHandleInformation
GetLastError
GetModuleHandleW
GetProcAddress
GetProcessAffinityMask
GetProcessTimes
GetStdHandle
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetThreadTimes
GetTickCount
GetTimeZoneInformation
InitializeCriticalSection
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryW
LocalFree
MoveFileExA
MoveFileExW
MultiByteToWideChar
OpenProcess
OutputDebugStringA
PeekConsoleInputA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleInputA
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetEvent
SetLastError
SetProcessAffinityMask
SetSystemTime
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
__C_specific_handler

msvcrt

___lc_codepage_func
___mb_cur_max_func
__doserrno
__iob_func
__setusermatherr
_access
_amsg_exit
_assert
_beginthreadex
_endthreadex
_errno
_filelengthi64
_fileno
_fstat64
_ftime64
_get_osfhandle
_gmtime64
_hypot
_initterm
_localtime64
_lock
_lseeki64
_mkdir
_mktime64
_rmdir
_setjmp
_stat64
_strnicmp
_time64
_ultoa
_unlink
_unlock
_vsnprintf
_waccess
_wfopen
_wgetenv
_wmkdir
_wrmdir
_wunlink
abort
atof
atoi
bsearch
calloc
exit
fclose
ferror
fflush
fgetpos
fgets
fopen
fprintf
fputc
fputs
fread
free
fseek
fsetpos
ftell
fwrite
getc
getwc
islower
isspace
isupper
iswctype
isxdigit
localeconv
log10
malloc
memchr
memcmp
memcpy
memmove
memset
printf
putc
putchar
puts
putwc
qsort
rand
realloc
setbuf
setlocale
setvbuf
signal
sprintf
srand
strchr
strcmp
strcoll
strcpy
strcspn
strerror
strftime
strlen
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtok
strtol
strtoul
strxfrm
tolower
towlower
towupper
ungetc
ungetwc
vfprintf
wcscat
wcscoll
wcscpy
wcsftime
wcslen
wcstombs
wcsxfrm
_wstat64
_vsnprintf_s
longjmp
_write
_strdup
_setmode
_read
_fileno
_fdopen
_dup
_close

secur32

AcquireCredentialsHandleA
ApplyControlToken
DecryptMessage
DeleteSecurityContext
EncryptMessage
FreeContextBuffer
FreeCredentialsHandle
InitializeSecurityContextA
QueryContextAttributesA

ws2_32

WSACleanup
WSAEnumNetworkEvents
WSAGetLastError
WSARecvFrom
WSASendTo
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostname
getnameinfo
getpeername
getsockname
getsockopt
htonl
htons
inet_ntop
inet_pton
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket

avcodec-59

av_ac3_parse_header
av_adts_header_parse
av_bsf_alloc
av_bsf_flush
av_bsf_free
av_bsf_get_by_name
av_bsf_get_null_filter
av_bsf_init
av_bsf_list_parse_str
av_bsf_receive_packet
av_bsf_send_packet
av_codec_is_decoder
av_codec_iterate
av_dirac_parse_sequence_header
av_dv_codec_profile2
av_dv_frame_profile
av_get_audio_frame_duration
av_get_audio_frame_duration2
av_get_bits_per_sample
av_get_exact_bits_per_sample
av_grow_packet
av_init_packet
av_new_packet
av_packet_add_side_data
av_packet_alloc
av_packet_clone
av_packet_copy_props
av_packet_free
av_packet_from_data
av_packet_get_side_data
av_packet_make_refcounted
av_packet_make_writable
av_packet_move_ref
av_packet_new_side_data
av_packet_pack_dictionary
av_packet_ref
av_packet_rescale_ts
av_packet_unref
av_parser_close
av_parser_init
av_parser_parse2
av_shrink_packet
av_vorbis_parse_frame_flags
av_vorbis_parse_free
av_vorbis_parse_init
av_vorbis_parse_reset
av_xiphlacing
avcodec_alloc_context3
avcodec_chroma_pos_to_enum
avcodec_close
avcodec_decode_subtitle2
avcodec_descriptor_get
avcodec_descriptor_get_by_name
avcodec_enum_to_chroma_pos
avcodec_find_decoder
avcodec_find_decoder_by_name
avcodec_free_context
avcodec_get_name
avcodec_get_type
avcodec_is_open
avcodec_open2
avcodec_parameters_alloc
avcodec_parameters_copy
avcodec_parameters_free
avcodec_parameters_from_context
avcodec_parameters_to_context
avcodec_pix_fmt_to_codec_tag
avcodec_receive_frame
avcodec_send_packet
avcodec_string
avpriv_ac3_parse_header
avpriv_adts_header_parse
avpriv_codec_get_cap_skip_frame_fill_param
avpriv_dca_convert_bitstream
avpriv_dca_parse_core_frame_header
avpriv_exif_decode_ifd
avpriv_find_start_code
avpriv_fits_header_init
avpriv_fits_header_parse_line
avpriv_h264_has_num_reorder_frames
avpriv_mpeg4audio_get_config2
avpriv_mpegaudio_decode_header
avpriv_packet_list_free
avpriv_packet_list_get
avpriv_packet_list_put
avpriv_pix_fmt_find
avpriv_split_xiph_headers
avpriv_tak_parse_streaminfo
avsubtitle_free

avutil-57

av_add_stable
av_adler32_update
av_aes_alloc
av_aes_crypt
av_aes_ctr_alloc
av_aes_ctr_crypt
av_aes_ctr_free
av_aes_ctr_get_iv
av_aes_ctr_increment_iv
av_aes_ctr_init
av_aes_ctr_set_full_iv
av_aes_ctr_set_random_iv
av_aes_init
av_append_path_component
av_asprintf
av_base64_decode
av_base64_encode
av_basename
av_bprint_append_data
av_bprint_chars
av_bprint_clear
av_bprint_finalize
av_bprint_init
av_bprint_init_for_buffer
av_bprintf
av_buffer_alloc
av_buffer_create
av_buffer_default_free
av_buffer_pool_get
av_buffer_pool_init
av_buffer_pool_uninit
av_buffer_realloc
av_buffer_ref
av_buffer_unref
av_calloc
av_channel_layout_channel_from_index
av_channel_layout_check
av_channel_layout_compare
av_channel_layout_copy
av_channel_layout_default
av_channel_layout_describe
av_channel_layout_from_mask
av_channel_layout_uninit
av_channel_name
av_color_primaries_name
av_color_space_name
av_color_transfer_name
av_compare_mod
av_compare_ts
av_content_light_metadata_alloc
av_crc
av_crc_get_table
av_d2q
av_default_item_name
av_des_alloc
av_des_crypt
av_des_init
av_des_mac
av_dict_copy
av_dict_count
av_dict_free
av_dict_get
av_dict_get_string
av_dict_parse_string
av_dict_set
av_dict_set_int
av_dirname
av_display_matrix_flip
av_display_rotation_get
av_display_rotation_set
av_div_q
av_dovi_alloc
av_dynarray2_add
av_dynarray_add
av_dynarray_add_nofree
av_encryption_info_add_side_data
av_encryption_info_alloc
av_encryption_info_clone
av_encryption_info_free
av_encryption_init_info_add_side_data
av_encryption_init_info_alloc
av_encryption_init_info_free
av_encryption_init_info_get_side_data
av_escape
av_fast_malloc
av_fast_realloc
av_fifo_alloc2
av_fifo_can_read
av_fifo_can_write
av_fifo_drain2
av_fifo_freep2
av_fifo_grow2
av_fifo_peek
av_fifo_read
av_fifo_read_to_cb
av_fifo_reset2
av_fifo_write
av_fifo_write_from_cb
av_find_info_tag
av_fourcc_make_string
av_frame_alloc
av_frame_free
av_free
av_freep
av_gcd
av_get_bits_per_pixel
av_get_bytes_per_sample
av_get_channel_name
av_get_media_type_string
av_get_picture_type_char
av_get_pix_fmt
av_get_pix_fmt_name
av_get_random_seed
av_get_sample_fmt_name
av_get_token
av_gettime
av_gettime_relative
av_hash_alloc
av_hash_final_hex
av_hash_freep
av_hash_get_name
av_hash_init
av_hash_update
av_hmac_alloc
av_hmac_final
av_hmac_free
av_hmac_init
av_hmac_update
av_image_check_sar
av_image_check_size
av_image_fill_linesizes
av_image_get_buffer_size
av_lfg_init
av_log
av_log_get_level
av_log_once
av_lzo1x_decode
av_malloc
av_malloc_array
av_mallocz
av_mastering_display_metadata_alloc
av_match_list
av_match_name
av_md5_alloc
av_md5_final
av_md5_init
av_md5_sum
av_md5_update
av_memdup
av_mul_q
av_opt_copy
av_opt_flag_is_set
av_opt_free
av_opt_get
av_opt_get_dict_val
av_opt_get_int
av_opt_get_key_value
av_opt_ptr
av_opt_set
av_opt_set_bin
av_opt_set_defaults
av_opt_set_dict
av_opt_set_dict2
av_opt_set_dict_val
av_opt_set_int
av_parse_time
av_parse_video_rate
av_pix_fmt_desc_get
av_pix_fmt_get_chroma_sub_sample
av_q2intfloat
av_rc4_alloc
av_rc4_crypt
av_rc4_init
av_realloc
av_realloc_array
av_realloc_f
av_reallocp
av_reallocp_array
av_reduce
av_rescale
av_rescale_q
av_rescale_q_rnd
av_rescale_rnd
av_sample_fmt_is_planar
av_set_options_string
av_sha_alloc
av_sha_final
av_sha_init
av_sha_update
av_small_strptime
av_spherical_alloc
av_spherical_projection_name
av_spherical_tile_bounds
av_sscanf
av_stereo3d_alloc
av_stereo3d_type_name
av_strcasecmp
av_strdup
av_strerror
av_strireplace
av_stristart
av_stristr
av_strlcat
av_strlcatf
av_strlcpy
av_strncasecmp
av_strndup
av_strnstr
av_strstart
av_strtod
av_strtok
av_tea_alloc
av_tea_crypt
av_tea_init
av_thread_message_flush
av_thread_message_queue_alloc
av_thread_message_queue_free
av_thread_message_queue_recv
av_thread_message_queue_send
av_thread_message_queue_set_err_recv
av_thread_message_queue_set_err_send
av_thread_message_queue_set_free_func
av_timecode_get_smpte_from_framenum
av_timecode_init
av_timecode_init_from_string
av_timecode_make_smpte_tc_string2
av_timecode_make_string
av_timegm
av_tree_destroy
av_tree_enumerate
av_tree_find
av_tree_insert
av_tree_node_alloc
av_usleep
av_uuid_unparse
av_vbprintf
avpriv_dict_set_timestamp
avpriv_fopen_utf8
avpriv_get_gamma_from_trc
avpriv_open
avpriv_report_missing_feature
avpriv_request_sample
avpriv_tempfile

Exports

Exports

_ZN11srt_logging13LogDispatcher11SendLogLineEPKciRKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESA_
_ZN11srt_logging13LogDispatcher12CheckEnabledEv
_ZN11srt_logging13LogDispatcher19CreateLogLinePrefixERNSt7__cxx1119basic_ostringstreamIcSt11char_traitsIcESaIcEEE
_ZN11srt_logging13LogDispatcherclEv
_ZN3UDT10epoll_waitEiPSt3setIiSt4lessIiESaIiEES5_xPS0_IyS1_IyESaIyEES9_
_ZN3UDT10getsockoptEii11SRT_SOCKOPTPvPi
_ZN3UDT10setsockoptEii11SRT_SOCKOPTPKvi
_ZN3UDT11epoll_uwaitEiP19SRT_EPOLL_EVENT_STRix
_ZN3UDT11epoll_wait2EiPiS0_S0_S0_xPyS0_S1_S0_
_ZN3UDT11getpeernameEiP8sockaddrPi
_ZN3UDT11getsocknameEiP8sockaddrPi
_ZN3UDT12INVALID_SOCKE
_ZN3UDT12epoll_createEv
_ZN3UDT12getlasterrorEv
_ZN3UDT12getsockstateEi
_ZN3UDT13epoll_releaseEi
_ZN3UDT15epoll_add_ssockEiyPKi
_ZN3UDT15epoll_add_usockEiiPKi
_ZN3UDT17getlasterror_codeEv
_ZN3UDT17getlasterror_descEv
_ZN3UDT18epoll_remove_ssockEiy
_ZN3UDT18epoll_remove_usockEii
_ZN3UDT18epoll_update_ssockEiyPKi
_ZN3UDT18epoll_update_usockEiiPKi
_ZN3UDT4bindEiPK8sockaddri
_ZN3UDT4recvEiPcii
_ZN3UDT4sendEiPKcii
_ZN3UDT5ERRORE
_ZN3UDT5bind2Eiy
_ZN3UDT5closeEi
_ZN3UDT6acceptEiP8sockaddrPi
_ZN3UDT6bstatsEiP12CBytePerfMonb
_ZN3UDT6listenEii
_ZN3UDT6selectEiPSt3setIiSt4lessIiESaIiEES5_S5_PK7timeval
_ZN3UDT7cleanupEv
_ZN3UDT7connectEiPK8sockaddri
_ZN3UDT7recvmsgEiPci
_ZN3UDT7sendmsgEiPKciibx
_ZN3UDT7startupEv
_ZN3UDT8recvfileEiRSt13basic_fstreamIcSt11char_traitsIcEERxxi
_ZN3UDT8selectExERKSt6vectorIiSaIiEEPS2_S5_S5_x
_ZN3UDT8sendfileEiRSt13basic_fstreamIcSt11char_traitsIcEERxxi
_ZN3UDT9recvfile2EiPKcPxxi
_ZN3UDT9sendfile2EiPKcPxxi
_ZN3srt10resetlogfaEPKiy
_ZN3srt10resetlogfaESt3setIN11srt_logging5LogFAESt4lessIS2_ESaIS2_EE
_ZN3srt11getstreamidB5cxx11Ei
_ZN3srt11setlogflagsEi
_ZN3srt11setloglevelEN11srt_logging8LogLevel4typeE
_ZN3srt11setstreamidEiRKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN3srt12setlogstreamERSo
_ZN3srt13setloghandlerEPvPFvS0_iPKciS2_S2_E
_ZN3srt8addlogfaEN11srt_logging5LogFAE
_ZN3srt8dellogfaEN11srt_logging5LogFAE
av_add_index_entry
av_append_packet
av_codec_get_id
av_codec_get_tag
av_codec_get_tag2
av_demuxer_iterate
av_disposition_from_string
av_disposition_to_string
av_dump_format
av_filename_number_test
av_find_best_stream
av_find_default_stream_index
av_find_input_format
av_find_program_from_stream
av_fmt_ctx_get_duration_estimation_method
av_format_ffversion
av_format_inject_global_side_data
av_get_frame_filename
av_get_frame_filename2
av_get_output_timestamp
av_get_packet
av_guess_codec
av_guess_format
av_guess_frame_rate
av_guess_sample_aspect_ratio
av_hex_dump
av_hex_dump_log
av_index_search_timestamp
av_interleaved_write_frame
av_interleaved_write_uncoded_frame
av_match_ext
av_muxer_iterate
av_new_program
av_pkt_dump2
av_pkt_dump_log2
av_probe_input_buffer
av_probe_input_buffer2
av_probe_input_format
av_probe_input_format2
av_probe_input_format3
av_program_add_stream_index
av_read_frame
av_read_pause
av_read_play
av_sdp_create
av_seek_frame
av_stream_add_side_data
av_stream_get_class
av_stream_get_codec_timebase
av_stream_get_end_pts
av_stream_get_parser
av_stream_get_side_data
av_stream_new_side_data
av_url_split
av_write_frame
av_write_trailer
av_write_uncoded_frame
av_write_uncoded_frame_query
avformat_alloc_context
avformat_alloc_output_context2
avformat_close_input
avformat_configuration
avformat_find_stream_info
avformat_flush
avformat_free_context
avformat_get_class
avformat_get_mov_audio_tags
avformat_get_mov_video_tags
avformat_get_riff_audio_tags
avformat_get_riff_video_tags
avformat_index_get_entries_count
avformat_index_get_entry
avformat_index_get_entry_from_timestamp
avformat_init_output
avformat_license
avformat_match_stream_specifier
avformat_network_deinit
avformat_network_init
avformat_new_stream
avformat_open_input
avformat_query_codec
avformat_queue_attached_pictures
avformat_seek_file
avformat_transfer_internal_stream_timing_info
avformat_version
avformat_write_header
avio_accept
avio_alloc_context
avio_check
avio_close
avio_close_dir
avio_close_dyn_buf
avio_closep
avio_context_free
avio_enum_protocols
avio_feof
avio_find_protocol_name
avio_flush
avio_free_directory_entry
avio_get_dyn_buf
avio_get_str
avio_get_str16be
avio_get_str16le
avio_handshake
avio_open
avio_open2
avio_open_dir
avio_open_dyn_buf
avio_pause
avio_print_string_array
avio_printf
avio_protocol_get_class
avio_put_str
avio_put_str16be
avio_put_str16le
avio_r8
avio_rb16
avio_rb24
avio_rb32
avio_rb64
avio_read
avio_read_dir
avio_read_partial
avio_read_to_bprint
avio_rl16
avio_rl24
avio_rl32
avio_rl64
avio_seek
avio_seek_time
avio_size
avio_skip
avio_vprintf
avio_w8
avio_wb16
avio_wb24
avio_wb32
avio_wb64
avio_wl16
avio_wl24
avio_wl32
avio_wl64
avio_write
avio_write_marker
avpriv_dv_get_packet
avpriv_dv_init_demux
avpriv_dv_produce_packet
avpriv_mpegts_parse_close
avpriv_mpegts_parse_open
avpriv_mpegts_parse_packet
avpriv_new_chapter
avpriv_register_devices
avpriv_set_pts_info
avpriv_stream_set_need_parsing
avpriv_update_cur_dts
evsocket_addevent
evsocket_create
evsocket_delevent
evsocket_destroy
evsocket_geteventcount
evsocket_loop
evsocket_loop_single
evsocket_loop_stop
librist_api_version
librist_version
rist_auth_handler_set
rist_connection_status_callback_set
rist_destroy
rist_enable_eap_srp
rist_flow_id_create
rist_jitter_max_set
rist_log
rist_logging_set
rist_logging_set_global
rist_logging_settings_free
rist_logging_settings_free2
rist_logging_unset_global
rist_oob_callback_set
rist_oob_read
rist_oob_write
rist_parse_address
rist_parse_address2
rist_parse_udp_address
rist_parse_udp_address2
rist_peer_config_defaults_set
rist_peer_config_free
rist_peer_config_free2
rist_peer_create
rist_peer_destroy
rist_peer_weight_set
rist_receiver_create
rist_receiver_data_block_free
rist_receiver_data_block_free2
rist_receiver_data_callback_set
rist_receiver_data_callback_set2
rist_receiver_data_notify_fd_set
rist_receiver_data_read
rist_receiver_data_read2
rist_receiver_nack_type_set
rist_receiver_set_output_fifo_size
rist_sender_create
rist_sender_data_write
rist_sender_flow_id_get
rist_sender_flow_id_set
rist_sender_npd_disable
rist_sender_npd_enable
rist_set_opt
rist_start
rist_stats_callback_set
rist_stats_free
rist_udp_config_free
rist_udp_config_free2
srt_accept
srt_accept_bond
srt_addlogfa
srt_bind
srt_bind_acquire
srt_bistats
srt_bstats
srt_cleanup
srt_clearlasterror
srt_clock_type
srt_close
srt_config_add
srt_connect
srt_connect_bind
srt_connect_callback
srt_connect_debug
srt_connect_group
srt_connection_time
srt_create_config
srt_create_group
srt_create_socket
srt_delete_config
srt_dellogfa
srt_epoll_add_ssock
srt_epoll_add_usock
srt_epoll_clear_usocks
srt_epoll_create
srt_epoll_release
srt_epoll_remove_ssock
srt_epoll_remove_usock
srt_epoll_set
srt_epoll_update_ssock
srt_epoll_update_usock
srt_epoll_uwait
srt_epoll_wait
srt_getlasterror
srt_getlasterror_str
srt_getpeername
srt_getrejectreason
srt_getsndbuffer
srt_getsockflag
srt_getsockname
srt_getsockopt
srt_getsockstate
srt_getversion
srt_group_data
srt_groupof
srt_listen
srt_listen_callback
srt_logger_config
srt_msgctrl_default
srt_msgctrl_init
srt_prepare_endpoint
srt_recv
srt_recvfile
srt_recvmsg
srt_recvmsg2
srt_rejectreason_msg
srt_rejectreason_str
srt_rendezvous
srt_resetlogfa
srt_send
srt_sendfile
srt_sendmsg
srt_sendmsg2
srt_setlogflags
srt_setloghandler
srt_setloglevel
srt_setrejectreason
srt_setsockflag
srt_setsockopt
srt_socket
srt_startup
srt_strerror
srt_time_now
udpsocket_close
udpsocket_get_buffer_send_size
udpsocket_get_buffer_size
udpsocket_open
udpsocket_open_bind
udpsocket_open_connect
udpsocket_parse_url
udpsocket_parse_url_parameters
udpsocket_recv
udpsocket_recvfrom
udpsocket_resolve_host
udpsocket_send
udpsocket_send_nonblocking
udpsocket_sendto
udpsocket_set_buffer_send_size
udpsocket_set_buffer_size
udpsocket_set_mcast_iface
udpsocket_set_nonblocking
udpsocket_set_optimal_buffer_send_size
udpsocket_set_optimal_buffer_size

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 709KB - Virtual size: 709KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 35KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
avutil-57.dll
.dll windows:4 windows x64 arch:x64

Password: 1847

53cbfd958b1645235f9614acd81606f1

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:d4:1a:66:69:21:53:ff:be:5d:ef:e8:73:ad:ff:6a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

01/07/2021, 00:00

Not After

15/08/2024, 23:59

Subject

CN=Hugh Bailey,O=Hugh Bailey,L=Temecula,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

14:c4:28:5a:bd:d4:c9:6c:30:85:2e:75:88:d9:1b:aa:d5:67:67:da:08:93:4b:72:56:fe:df:d0:8e:5a:b3:8a:1a:d7:50:13:74:3f:99:55:1e:da:eb:41:12:79:c1:c6:d3:63:19:ce:1e:0c:da:85:cc:06:22:bf:6c:3b:37:2a
Signer

Actual PE Digest

14:c4:28:5a:bd:d4:c9:6c:30:85:2e:75:88:d9:1b:aa:d5:67:67:da:08:93:4b:72:56:fe:df:d0:8e:5a:b3:8a:1a:d7:50:13:74:3f:99:55:1e:da:eb:41:12:79:c1:c6:d3:63:19:ce:1e:0c:da:85:cc:06:22:bf:6c:3b:37:2a

Digest Algorithm

sha512

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

bcrypt

BCryptCloseAlgorithmProvider
BCryptGenRandom
BCryptOpenAlgorithmProvider

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateFileMappingA
CreateMutexA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FileTimeToSystemTime
FreeLibrary
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetFullPathNameW
GetHandleInformation
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetProcessAffinityMask
GetProcessTimes
GetStdHandle
GetSystemDirectoryW
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetThreadTimes
GetTickCount
GetTimeZoneInformation
InitializeCriticalSection
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
MapViewOfFile
MultiByteToWideChar
OpenProcess
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReleaseMutex
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetConsoleTextAttribute
SetEvent
SetLastError
SetProcessAffinityMask
SetSystemTime
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
__C_specific_handler

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
__setusermatherr
_aligned_free
_aligned_malloc
_aligned_realloc
_amsg_exit
_beginthreadex
_endthreadex
_errno
_fstat64
_get_osfhandle
_gmtime64
_hypot
_initterm
_localtime64
_lock
_mktime64
_setjmp
_sopen
_ultoa
_unlock
_wsopen
abort
acos
asin
atan
atoi
bsearch
calloc
clock
cosh
exit
fprintf
fputc
fputs
free
frexp
fwrite
getc
getenv
islower
isspace
isupper
isxdigit
localeconv
log10
malloc
memchr
memcmp
memcpy
memmove
memset
printf
rand
realloc
signal
sinh
strchr
strcmp
strcpy
strcspn
strerror
strftime
strlen
strncmp
strrchr
strspn
strstr
strtol
strtoul
tan
tanh
tolower
ungetc
vfprintf
wcscat
wcscpy
wcslen
wcsrchr
longjmp
_strdup
_read
_isatty
_fdopen
_close

user32

GetDesktopWindow

Exports

Exports

av_add_i
av_add_q
av_add_stable
av_adler32_update
av_aes_alloc
av_aes_crypt
av_aes_ctr_alloc
av_aes_ctr_crypt
av_aes_ctr_free
av_aes_ctr_get_iv
av_aes_ctr_increment_iv
av_aes_ctr_init
av_aes_ctr_set_full_iv
av_aes_ctr_set_iv
av_aes_ctr_set_random_iv
av_aes_init
av_aes_size
av_append_path_component
av_asprintf
av_assert0_fpu
av_audio_fifo_alloc
av_audio_fifo_drain
av_audio_fifo_free
av_audio_fifo_peek
av_audio_fifo_peek_at
av_audio_fifo_read
av_audio_fifo_realloc
av_audio_fifo_reset
av_audio_fifo_size
av_audio_fifo_space
av_audio_fifo_write
av_base64_decode
av_base64_encode
av_basename
av_blowfish_alloc
av_blowfish_crypt
av_blowfish_crypt_ecb
av_blowfish_init
av_bmg_get
av_bprint_append_data
av_bprint_channel_layout
av_bprint_chars
av_bprint_clear
av_bprint_escape
av_bprint_finalize
av_bprint_get_buffer
av_bprint_init
av_bprint_init_for_buffer
av_bprint_strftime
av_bprintf
av_buffer_alloc
av_buffer_allocz
av_buffer_create
av_buffer_default_free
av_buffer_get_opaque
av_buffer_get_ref_count
av_buffer_is_writable
av_buffer_make_writable
av_buffer_pool_buffer_get_opaque
av_buffer_pool_get
av_buffer_pool_init
av_buffer_pool_init2
av_buffer_pool_uninit
av_buffer_realloc
av_buffer_ref
av_buffer_replace
av_buffer_unref
av_calloc
av_camellia_alloc
av_camellia_crypt
av_camellia_init
av_camellia_size
av_cast5_alloc
av_cast5_crypt
av_cast5_crypt2
av_cast5_init
av_cast5_size
av_channel_description
av_channel_description_bprint
av_channel_from_string
av_channel_layout_channel_from_index
av_channel_layout_channel_from_string
av_channel_layout_check
av_channel_layout_compare
av_channel_layout_copy
av_channel_layout_default
av_channel_layout_describe
av_channel_layout_describe_bprint
av_channel_layout_extract_channel
av_channel_layout_from_mask
av_channel_layout_from_string
av_channel_layout_index_from_channel
av_channel_layout_index_from_string
av_channel_layout_standard
av_channel_layout_subset
av_channel_layout_uninit
av_channel_name
av_channel_name_bprint
av_chroma_location_from_name
av_chroma_location_name
av_cmp_i
av_color_primaries_from_name
av_color_primaries_name
av_color_range_from_name
av_color_range_name
av_color_space_from_name
av_color_space_name
av_color_transfer_from_name
av_color_transfer_name
av_compare_mod
av_compare_ts
av_content_light_metadata_alloc
av_content_light_metadata_create_side_data
av_cpu_count
av_cpu_force_count
av_cpu_max_align
av_crc
av_crc_get_table
av_crc_init
av_csp_luma_coeffs_from_avcsp
av_csp_primaries_desc_from_id
av_csp_primaries_id_from_desc
av_d2q
av_d2str
av_default_get_category
av_default_item_name
av_des_alloc
av_des_crypt
av_des_init
av_des_mac
av_detection_bbox_alloc
av_detection_bbox_create_side_data
av_dict_copy
av_dict_count
av_dict_free
av_dict_get
av_dict_get_string
av_dict_parse_string
av_dict_set
av_dict_set_int
av_dirname
av_display_matrix_flip
av_display_rotation_get
av_display_rotation_set
av_div_i
av_div_q
av_dovi_alloc
av_dovi_metadata_alloc
av_downmix_info_update_side_data
av_dynamic_hdr_plus_alloc
av_dynamic_hdr_plus_create_side_data
av_dynamic_hdr_vivid_alloc
av_dynamic_hdr_vivid_create_side_data
av_dynarray2_add
av_dynarray_add
av_dynarray_add_nofree
av_encryption_info_add_side_data
av_encryption_info_alloc
av_encryption_info_clone
av_encryption_info_free
av_encryption_info_get_side_data
av_encryption_init_info_add_side_data
av_encryption_init_info_alloc
av_encryption_init_info_free
av_encryption_init_info_get_side_data
av_escape
av_expr_count_func
av_expr_count_vars
av_expr_eval
av_expr_free
av_expr_parse
av_expr_parse_and_eval
av_fast_malloc
av_fast_mallocz
av_fast_realloc
av_fifo_alloc
av_fifo_alloc2
av_fifo_alloc_array
av_fifo_auto_grow_limit
av_fifo_can_read
av_fifo_can_write
av_fifo_drain
av_fifo_drain2
av_fifo_elem_size
av_fifo_free
av_fifo_freep
av_fifo_freep2
av_fifo_generic_peek
av_fifo_generic_peek_at
av_fifo_generic_read
av_fifo_generic_write
av_fifo_grow
av_fifo_grow2
av_fifo_peek
av_fifo_peek_to_cb
av_fifo_read
av_fifo_read_to_cb
av_fifo_realloc2
av_fifo_reset
av_fifo_reset2
av_fifo_size
av_fifo_space
av_fifo_write
av_fifo_write_from_cb
av_file_map
av_file_unmap
av_film_grain_params_alloc
av_film_grain_params_create_side_data
av_find_best_pix_fmt_of_2
av_find_info_tag
av_find_nearest_q_idx
av_fopen_utf8
av_force_cpu_flags
av_fourcc_make_string
av_frame_alloc
av_frame_apply_cropping
av_frame_clone
av_frame_copy
av_frame_copy_props
av_frame_free
av_frame_get_buffer
av_frame_get_plane_buffer
av_frame_get_side_data
av_frame_is_writable
av_frame_make_writable
av_frame_move_ref
av_frame_new_side_data
av_frame_new_side_data_from_buf
av_frame_ref
av_frame_remove_side_data
av_frame_side_data_name
av_frame_unref
av_free
av_freep
av_gcd
av_gcd_q
av_get_alt_sample_fmt
av_get_bits_per_pixel
av_get_bytes_per_sample
av_get_channel_description
av_get_channel_layout
av_get_channel_layout_channel_index
av_get_channel_layout_nb_channels
av_get_channel_layout_string
av_get_channel_name
av_get_colorspace_name
av_get_cpu_flags
av_get_default_channel_layout
av_get_extended_channel_layout
av_get_known_color_name
av_get_media_type_string
av_get_packed_sample_fmt
av_get_padded_bits_per_pixel
av_get_picture_type_char
av_get_pix_fmt
av_get_pix_fmt_loss
av_get_pix_fmt_name
av_get_pix_fmt_string
av_get_planar_sample_fmt
av_get_random_seed
av_get_sample_fmt
av_get_sample_fmt_name
av_get_sample_fmt_string
av_get_standard_channel_layout
av_get_time_base_q
av_get_token
av_gettime
av_gettime_relative
av_gettime_relative_is_monotonic
av_hash_alloc
av_hash_final
av_hash_final_b64
av_hash_final_bin
av_hash_final_hex
av_hash_freep
av_hash_get_name
av_hash_get_size
av_hash_init
av_hash_names
av_hash_update
av_hmac_alloc
av_hmac_calc
av_hmac_final
av_hmac_free
av_hmac_init
av_hmac_update
av_hwdevice_ctx_alloc
av_hwdevice_ctx_create
av_hwdevice_ctx_create_derived
av_hwdevice_ctx_create_derived_opts
av_hwdevice_ctx_init
av_hwdevice_find_type_by_name
av_hwdevice_get_hwframe_constraints
av_hwdevice_get_type_name
av_hwdevice_hwconfig_alloc
av_hwdevice_iterate_types
av_hwframe_constraints_free
av_hwframe_ctx_alloc
av_hwframe_ctx_create_derived
av_hwframe_ctx_init
av_hwframe_get_buffer
av_hwframe_map
av_hwframe_transfer_data
av_hwframe_transfer_get_formats
av_i2int
av_image_alloc
av_image_check_sar
av_image_check_size
av_image_check_size2
av_image_copy
av_image_copy_plane
av_image_copy_plane_uc_from
av_image_copy_to_buffer
av_image_copy_uc_from
av_image_fill_arrays
av_image_fill_black
av_image_fill_linesizes
av_image_fill_max_pixsteps
av_image_fill_plane_sizes
av_image_fill_pointers
av_image_get_buffer_size
av_image_get_linesize
av_int2i
av_int_list_length_for_size
av_lfg_init
av_lfg_init_from_data
av_log
av_log2
av_log2_16bit
av_log2_i
av_log_default_callback
av_log_format_line
av_log_format_line2
av_log_get_flags
av_log_get_level
av_log_once
av_log_set_callback
av_log_set_flags
av_log_set_level
av_lzo1x_decode
av_malloc
av_malloc_array
av_mallocz
av_mallocz_array
av_mastering_display_metadata_alloc
av_mastering_display_metadata_create_side_data
av_match_list
av_match_name
av_max_alloc
av_md5_alloc
av_md5_final
av_md5_init
av_md5_size
av_md5_sum
av_md5_update
av_memcpy_backptr
av_memdup
av_mod_i
av_mul_i
av_mul_q
av_murmur3_alloc
av_murmur3_final
av_murmur3_init
av_murmur3_init_seeded
av_murmur3_update
av_nearer_q
av_opt_child_class_iterate
av_opt_child_next
av_opt_copy
av_opt_eval_double
av_opt_eval_flags
av_opt_eval_float
av_opt_eval_int
av_opt_eval_int64
av_opt_eval_q
av_opt_find
av_opt_find2
av_opt_flag_is_set
av_opt_free
av_opt_freep_ranges
av_opt_get
av_opt_get_channel_layout
av_opt_get_chlayout
av_opt_get_dict_val
av_opt_get_double
av_opt_get_image_size
av_opt_get_int
av_opt_get_key_value
av_opt_get_pixel_fmt
av_opt_get_q
av_opt_get_sample_fmt
av_opt_get_video_rate
av_opt_is_set_to_default
av_opt_is_set_to_default_by_name
av_opt_next
av_opt_ptr
av_opt_query_ranges
av_opt_query_ranges_default
av_opt_serialize
av_opt_set
av_opt_set_bin
av_opt_set_channel_layout
av_opt_set_chlayout
av_opt_set_defaults
av_opt_set_defaults2
av_opt_set_dict
av_opt_set_dict2
av_opt_set_dict_val
av_opt_set_double
av_opt_set_from_string
av_opt_set_image_size
av_opt_set_int
av_opt_set_pixel_fmt
av_opt_set_q
av_opt_set_sample_fmt
av_opt_set_video_rate
av_opt_show2
av_parse_color
av_parse_cpu_caps
av_parse_ratio
av_parse_time
av_parse_video_rate
av_parse_video_size
av_pix_fmt_count_planes
av_pix_fmt_desc_get
av_pix_fmt_desc_get_id
av_pix_fmt_desc_next
av_pix_fmt_get_chroma_sub_sample
av_pix_fmt_swap_endianness
av_pixelutils_get_sad_fn
av_q2intfloat
av_rc4_alloc
av_rc4_crypt
av_rc4_init
av_read_image_line
av_read_image_line2
av_realloc
av_realloc_array
av_realloc_f
av_reallocp
av_reallocp_array
av_reduce
av_rescale
av_rescale_delta
av_rescale_q
av_rescale_q_rnd
av_rescale_rnd
av_ripemd_alloc
av_ripemd_final
av_ripemd_init
av_ripemd_size
av_ripemd_update
av_sample_fmt_is_planar
av_samples_alloc
av_samples_alloc_array_and_samples
av_samples_copy
av_samples_fill_arrays
av_samples_get_buffer_size
av_samples_set_silence
av_set_options_string
av_sha512_alloc
av_sha512_final
av_sha512_init
av_sha512_size
av_sha512_update
av_sha_alloc
av_sha_final
av_sha_init
av_sha_size
av_sha_update
av_shr_i
av_size_mult
av_small_strptime
av_spherical_alloc
av_spherical_from_name
av_spherical_projection_name
av_spherical_tile_bounds
av_sscanf
av_stereo3d_alloc
av_stereo3d_create_side_data
av_stereo3d_from_name
av_stereo3d_type_name
av_strcasecmp
av_strdup
av_strerror
av_strireplace
av_stristart
av_stristr
av_strlcat
av_strlcatf
av_strlcpy
av_strncasecmp
av_strndup
av_strnstr
av_strstart
av_strtod
av_strtok
av_sub_i
av_sub_q
av_tea_alloc

Sections

.text
Size: 766KB - Virtual size: 766KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libcurl.dll
.dll windows:6 windows x64 arch:x64

Password: 1847

d204ed2a4b6c0b93209ed894eb1e1eef

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:d4:1a:66:69:21:53:ff:be:5d:ef:e8:73:ad:ff:6a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

01/07/2021, 00:00

Not After

15/08/2024, 23:59

Subject

CN=Hugh Bailey,O=Hugh Bailey,L=Temecula,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

8a:70:c4:89:53:a2:be:a0:e1:8e:f8:9b:11:96:38:00:c4:49:16:30:f1:73:96:0e:85:54:d9:93:ef:af:a1:d8:93:f5:d9:92:36:c8:69:b8:72:44:ac:49:16:42:f8:1e:6e:57:36:77:a9:71:1c:ae:8b:af:f9:5d:c0:e4:81:01
Signer

Actual PE Digest

8a:70:c4:89:53:a2:be:a0:e1:8e:f8:9b:11:96:38:00:c4:49:16:30:f1:73:96:0e:85:54:d9:93:ef:af:a1:d8:93:f5:d9:92:36:c8:69:b8:72:44:ac:49:16:42:f8:1e:6e:57:36:77:a9:71:1c:ae:8b:af:f9:5d:c0:e4:81:01

Digest Algorithm

sha512

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

wldap32

ord50
ord45
ord41
ord22
ord26
ord27
ord211
ord46
ord32
ord33
ord35
ord79
ord30
ord60
ord143
ord301
ord200

ws2_32

getsockopt
getsockname
ntohs
connect
bind
WSAGetLastError
send
closesocket
htons
recv
setsockopt
socket
WSASetLastError
WSAIoctl
inet_pton
inet_ntop
getaddrinfo
freeaddrinfo
gethostname
accept
listen
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAResetEvent
WSASetEvent
WSAWaitForMultipleEvents
ioctlsocket
htonl
__WSAFDIsSet
select
WSAStartup
WSACleanup
recvfrom
sendto
getpeername

advapi32

CryptAcquireContextA
CryptReleaseContext
CryptDestroyKey
CryptImportKey
CryptEncrypt
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash

crypt32

CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CryptStringToBinaryA
PFXImportCertStore
CryptDecodeObjectEx
CertAddCertificateContextToStore
CertGetNameStringA
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CertFindExtension

bcrypt

BCryptGenRandom

kernel32

LoadLibraryA
GetModuleHandleA
GetSystemDirectoryA
QueryPerformanceFrequency
FormatMessageW
SetLastError
GetLastError
MoveFileExA
Sleep
GetEnvironmentVariableA
AcquireSRWLockExclusive
GetFileType
WaitForSingleObjectEx
CloseHandle
GetProcAddress
FreeLibrary
MultiByteToWideChar
SleepEx
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetStdHandle
ReadFile
PeekNamedPipe
QueryPerformanceCounter
GetTickCount
VerSetConditionMask
VerifyVersionInfoW
CreateFileA
GetFileSizeEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
ReleaseSRWLockExclusive
WaitForMultipleObjects

vcruntime140

memset
strchr
strrchr
memmove
memcmp
strstr
memchr
__C_specific_handler
__std_type_info_destroy_list
memcpy

api-ms-win-crt-stdio-l1-1-0

fclose
fputs
fwrite
fflush
__stdio_common_vsscanf
_lseeki64
_close
__stdio_common_vsprintf
_read
_write
fread
fputc
fseek
ftell
__acrt_iob_func
fgets
feof
_open
fopen

api-ms-win-crt-convert-l1-1-0

strtol
strtoll
atoi
wcstombs
strtoul

api-ms-win-crt-time-l1-1-0

_time64
_gmtime64
strftime

api-ms-win-crt-runtime-l1-1-0

_getpid
__sys_errlist
__sys_nerr
_cexit
_errno
_beginthreadex
_execute_onexit_table
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table

api-ms-win-crt-string-l1-1-0

strcmp
strspn
strpbrk
_strdup
strcspn
strncpy
strncmp

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-filesystem-l1-1-0

_stat64
_unlink
_fstat64
_access

api-ms-win-crt-heap-l1-1-0

free
realloc
calloc
malloc

api-ms-win-crt-multibyte-l1-1-0

_mbspbrk
_mbschr
_mbsnbcpy
_mbsnbcmp

api-ms-win-crt-math-l1-1-0

_fdopen

Exports

Exports

curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_header
curl_easy_init
curl_easy_nextheader
curl_easy_option_by_id
curl_easy_option_by_name
curl_easy_option_next
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_easy_upkeep
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_global_sslset
curl_maprintf
curl_mfprintf
curl_mime_addpart
curl_mime_data
curl_mime_data_cb
curl_mime_encoder
curl_mime_filedata
curl_mime_filename
curl_mime_free
curl_mime_headers
curl_mime_init
curl_mime_name
curl_mime_subparts
curl_mime_type
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_poll
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_multi_wait
curl_multi_wakeup
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_pushheader_byname
curl_pushheader_bynum
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape
curl_url
curl_url_cleanup
curl_url_dup
curl_url_get
curl_url_set
curl_url_strerror
curl_version
curl_version_info
curl_ws_meta
curl_ws_recv
curl_ws_send

Sections

.text
Size: 360KB - Virtual size: 359KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libmbedcrypto.dll
.dll windows:4 windows x64 arch:x64

Password: 1847

9a79279377cb54d3a582f1e85c0f61ff

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:d4:1a:66:69:21:53:ff:be:5d:ef:e8:73:ad:ff:6a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

01/07/2021, 00:00

Not After

15/08/2024, 23:59

Subject

CN=Hugh Bailey,O=Hugh Bailey,L=Temecula,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

69:96:38:2f:fb:7d:ab:89:a4:6e:ea:94:e4:74:1a:68:8e:9a:b7:d5:e6:74:a3:77:35:65:5d:a4:b5:15:a2:71:93:7c:92:78:e4:15:0f:1a:91:9f:2e:72:fb:f4:4d:b4:83:ec:92:9b:37:e6:de:52:14:e5:91:35:69:3b:b7:12
Signer

Actual PE Digest

69:96:38:2f:fb:7d:ab:89:a4:6e:ea:94:e4:74:1a:68:8e:9a:b7:d5:e6:74:a3:77:35:65:5d:a4:b5:15:a2:71:93:7c:92:78:e4:15:0f:1a:91:9f:2e:72:fb:f4:4d:b4:83:ec:92:9b:37:e6:de:52:14:e5:91:35:69:3b:b7:12

Digest Algorithm

sha512

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
MoveFileExA
QueryPerformanceCounter
QueryPerformanceFrequency
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__iob_func
_amsg_exit
_errno
_gmtime64
_initterm
_lock
_unlock
abort
calloc
fclose
ferror
fgets
fopen
fread
free
fseek
ftell
fwrite
memcmp
memcpy
memmove
memset
printf
putchar
puts
rand
realloc
remove
setbuf
signal
strcmp
strlen
strncmp
strstr
vfprintf
_vsnprintf_s

Exports

Exports

mbedtls_aes_cmac_prf_128
mbedtls_aes_crypt_cbc
mbedtls_aes_crypt_cfb128
mbedtls_aes_crypt_cfb8
mbedtls_aes_crypt_ctr
mbedtls_aes_crypt_ecb
mbedtls_aes_crypt_ofb
mbedtls_aes_crypt_xts
mbedtls_aes_free
mbedtls_aes_init
mbedtls_aes_self_test
mbedtls_aes_setkey_dec
mbedtls_aes_setkey_enc
mbedtls_aes_xts_free
mbedtls_aes_xts_init
mbedtls_aes_xts_setkey_dec
mbedtls_aes_xts_setkey_enc
mbedtls_aesni_crypt_ecb
mbedtls_aesni_gcm_mult
mbedtls_aesni_has_support
mbedtls_aesni_inverse_key
mbedtls_aesni_setkey_enc
mbedtls_aria_crypt_cbc
mbedtls_aria_crypt_cfb128
mbedtls_aria_crypt_ctr
mbedtls_aria_crypt_ecb
mbedtls_aria_free
mbedtls_aria_init
mbedtls_aria_self_test
mbedtls_aria_setkey_dec
mbedtls_aria_setkey_enc
mbedtls_asn1_find_named_data
mbedtls_asn1_free_named_data
mbedtls_asn1_free_named_data_list
mbedtls_asn1_get_alg
mbedtls_asn1_get_alg_null
mbedtls_asn1_get_bitstring
mbedtls_asn1_get_bitstring_null
mbedtls_asn1_get_bool
mbedtls_asn1_get_enum
mbedtls_asn1_get_int
mbedtls_asn1_get_len
mbedtls_asn1_get_mpi
mbedtls_asn1_get_sequence_of
mbedtls_asn1_get_tag
mbedtls_asn1_sequence_free
mbedtls_asn1_store_named_data
mbedtls_asn1_traverse_sequence_of
mbedtls_asn1_write_algorithm_identifier
mbedtls_asn1_write_bitstring
mbedtls_asn1_write_bool
mbedtls_asn1_write_enum
mbedtls_asn1_write_ia5_string
mbedtls_asn1_write_int
mbedtls_asn1_write_len
mbedtls_asn1_write_mpi
mbedtls_asn1_write_named_bitstring
mbedtls_asn1_write_null
mbedtls_asn1_write_octet_string
mbedtls_asn1_write_oid
mbedtls_asn1_write_printable_string
mbedtls_asn1_write_raw_buffer
mbedtls_asn1_write_tag
mbedtls_asn1_write_tagged_string
mbedtls_asn1_write_utf8_string
mbedtls_base64_decode
mbedtls_base64_encode
mbedtls_base64_self_test
mbedtls_camellia_crypt_cbc
mbedtls_camellia_crypt_cfb128
mbedtls_camellia_crypt_ctr
mbedtls_camellia_crypt_ecb
mbedtls_camellia_free
mbedtls_camellia_init
mbedtls_camellia_self_test
mbedtls_camellia_setkey_dec
mbedtls_camellia_setkey_enc
mbedtls_ccm_auth_decrypt
mbedtls_ccm_encrypt_and_tag
mbedtls_ccm_finish
mbedtls_ccm_free
mbedtls_ccm_init
mbedtls_ccm_self_test
mbedtls_ccm_set_lengths
mbedtls_ccm_setkey
mbedtls_ccm_star_auth_decrypt
mbedtls_ccm_star_encrypt_and_tag
mbedtls_ccm_starts
mbedtls_ccm_update
mbedtls_ccm_update_ad
mbedtls_chacha20_crypt
mbedtls_chacha20_free
mbedtls_chacha20_init
mbedtls_chacha20_self_test
mbedtls_chacha20_setkey
mbedtls_chacha20_starts
mbedtls_chacha20_update
mbedtls_chachapoly_auth_decrypt
mbedtls_chachapoly_encrypt_and_tag
mbedtls_chachapoly_finish
mbedtls_chachapoly_free
mbedtls_chachapoly_init
mbedtls_chachapoly_self_test
mbedtls_chachapoly_setkey
mbedtls_chachapoly_starts
mbedtls_chachapoly_update
mbedtls_chachapoly_update_aad
mbedtls_cipher_auth_decrypt_ext
mbedtls_cipher_auth_encrypt_ext
mbedtls_cipher_check_tag
mbedtls_cipher_cmac
mbedtls_cipher_cmac_finish
mbedtls_cipher_cmac_reset
mbedtls_cipher_cmac_starts
mbedtls_cipher_cmac_update
mbedtls_cipher_crypt
mbedtls_cipher_definitions
mbedtls_cipher_finish
mbedtls_cipher_free
mbedtls_cipher_info_from_psa
mbedtls_cipher_info_from_string
mbedtls_cipher_info_from_type
mbedtls_cipher_info_from_values
mbedtls_cipher_init
mbedtls_cipher_list
mbedtls_cipher_reset
mbedtls_cipher_set_iv
mbedtls_cipher_set_padding_mode
mbedtls_cipher_setkey
mbedtls_cipher_setup
mbedtls_cipher_supported
mbedtls_cipher_update
mbedtls_cipher_update_ad
mbedtls_cipher_write_tag
mbedtls_cmac_self_test
mbedtls_ct_base64_dec_value
mbedtls_ct_base64_enc_char
mbedtls_ct_hmac
mbedtls_ct_memcmp
mbedtls_ct_memcpy_if_eq
mbedtls_ct_memcpy_offset
mbedtls_ct_mpi_uint_cond_assign
mbedtls_ct_mpi_uint_lt
mbedtls_ct_mpi_uint_mask
mbedtls_ct_rsaes_pkcs1_v15_unpadding
mbedtls_ct_size_bool_eq
mbedtls_ct_size_mask
mbedtls_ct_size_mask_ge
mbedtls_ct_uint_if
mbedtls_ct_uint_mask
mbedtls_ctr_drbg_free
mbedtls_ctr_drbg_init
mbedtls_ctr_drbg_random
mbedtls_ctr_drbg_random_with_add
mbedtls_ctr_drbg_reseed
mbedtls_ctr_drbg_seed
mbedtls_ctr_drbg_self_test
mbedtls_ctr_drbg_set_entropy_len
mbedtls_ctr_drbg_set_nonce_len
mbedtls_ctr_drbg_set_prediction_resistance
mbedtls_ctr_drbg_set_reseed_interval
mbedtls_ctr_drbg_update
mbedtls_ctr_drbg_update_seed_file
mbedtls_ctr_drbg_write_seed_file
mbedtls_des3_crypt_cbc
mbedtls_des3_crypt_ecb
mbedtls_des3_free
mbedtls_des3_init
mbedtls_des3_set2key_dec
mbedtls_des3_set2key_enc
mbedtls_des3_set3key_dec
mbedtls_des3_set3key_enc
mbedtls_des_crypt_cbc
mbedtls_des_crypt_ecb
mbedtls_des_free
mbedtls_des_init
mbedtls_des_key_check_key_parity
mbedtls_des_key_check_weak
mbedtls_des_key_set_parity
mbedtls_des_self_test
mbedtls_des_setkey
mbedtls_des_setkey_dec
mbedtls_des_setkey_enc
mbedtls_dhm_calc_secret
mbedtls_dhm_free
mbedtls_dhm_get_bitlen
mbedtls_dhm_get_len
mbedtls_dhm_get_value
mbedtls_dhm_init
mbedtls_dhm_make_params
mbedtls_dhm_make_public
mbedtls_dhm_parse_dhm
mbedtls_dhm_parse_dhmfile
mbedtls_dhm_read_params
mbedtls_dhm_read_public
mbedtls_dhm_self_test
mbedtls_dhm_set_group
mbedtls_ecc_group_of_psa
mbedtls_ecdh_calc_secret
mbedtls_ecdh_can_do
mbedtls_ecdh_compute_shared
mbedtls_ecdh_free
mbedtls_ecdh_gen_public
mbedtls_ecdh_get_params
mbedtls_ecdh_init
mbedtls_ecdh_make_params
mbedtls_ecdh_make_public
mbedtls_ecdh_read_params
mbedtls_ecdh_read_public
mbedtls_ecdh_setup
mbedtls_ecdsa_can_do
mbedtls_ecdsa_free
mbedtls_ecdsa_from_keypair
mbedtls_ecdsa_genkey
mbedtls_ecdsa_info
mbedtls_ecdsa_init
mbedtls_ecdsa_read_signature
mbedtls_ecdsa_read_signature_restartable
mbedtls_ecdsa_sign
mbedtls_ecdsa_sign_det_ext
mbedtls_ecdsa_verify
mbedtls_ecdsa_write_signature
mbedtls_ecdsa_write_signature_restartable
mbedtls_ecjpake_check
mbedtls_ecjpake_derive_secret
mbedtls_ecjpake_free
mbedtls_ecjpake_init
mbedtls_ecjpake_read_round_one
mbedtls_ecjpake_read_round_two
mbedtls_ecjpake_self_test
mbedtls_ecjpake_set_point_format
mbedtls_ecjpake_setup
mbedtls_ecjpake_write_round_one
mbedtls_ecjpake_write_round_two
mbedtls_eckey_info
mbedtls_eckeydh_info
mbedtls_ecp_check_privkey
mbedtls_ecp_check_pub_priv
mbedtls_ecp_check_pubkey
mbedtls_ecp_copy
mbedtls_ecp_curve_info_from_grp_id
mbedtls_ecp_curve_info_from_name
mbedtls_ecp_curve_info_from_tls_id
mbedtls_ecp_curve_list
mbedtls_ecp_export
mbedtls_ecp_gen_key
mbedtls_ecp_gen_keypair
mbedtls_ecp_gen_keypair_base
mbedtls_ecp_gen_privkey
mbedtls_ecp_get_type
mbedtls_ecp_group_copy
mbedtls_ecp_group_free
mbedtls_ecp_group_init
mbedtls_ecp_group_load
mbedtls_ecp_grp_id_list
mbedtls_ecp_is_zero
mbedtls_ecp_keypair_free
mbedtls_ecp_keypair_init
mbedtls_ecp_mul
mbedtls_ecp_mul_restartable
mbedtls_ecp_muladd
mbedtls_ecp_muladd_restartable
mbedtls_ecp_point_cmp
mbedtls_ecp_point_free
mbedtls_ecp_point_init
mbedtls_ecp_point_read_binary
mbedtls_ecp_point_read_string
mbedtls_ecp_point_write_binary
mbedtls_ecp_read_key
mbedtls_ecp_self_test
mbedtls_ecp_set_zero
mbedtls_ecp_tls_read_group
mbedtls_ecp_tls_read_group_id
mbedtls_ecp_tls_read_point
mbedtls_ecp_tls_write_group
mbedtls_ecp_tls_write_point
mbedtls_ecp_write_key
mbedtls_entropy_add_source
mbedtls_entropy_free
mbedtls_entropy_func
mbedtls_entropy_gather
mbedtls_entropy_init
mbedtls_entropy_self_test
mbedtls_entropy_update_manual
mbedtls_entropy_update_seed_file
mbedtls_entropy_write_seed_file
mbedtls_gcm_auth_decrypt
mbedtls_gcm_crypt_and_tag
mbedtls_gcm_finish
mbedtls_gcm_free
mbedtls_gcm_init
mbedtls_gcm_self_test
mbedtls_gcm_setkey
mbedtls_gcm_starts
mbedtls_gcm_update
mbedtls_gcm_update_ad
mbedtls_high_level_strerr
mbedtls_hkdf
mbedtls_hkdf_expand
mbedtls_hkdf_extract
mbedtls_hmac_drbg_free
mbedtls_hmac_drbg_init
mbedtls_hmac_drbg_random
mbedtls_hmac_drbg_random_with_add
mbedtls_hmac_drbg_reseed
mbedtls_hmac_drbg_seed
mbedtls_hmac_drbg_seed_buf
mbedtls_hmac_drbg_self_test
mbedtls_hmac_drbg_set_entropy_len
mbedtls_hmac_drbg_set_prediction_resistance
mbedtls_hmac_drbg_set_reseed_interval
mbedtls_hmac_drbg_update
mbedtls_hmac_drbg_update_seed_file
mbedtls_hmac_drbg_write_seed_file
mbedtls_internal_aes_decrypt
mbedtls_internal_aes_encrypt
mbedtls_internal_md5_process
mbedtls_internal_ripemd160_process
mbedtls_internal_sha1_process
mbedtls_internal_sha256_process
mbedtls_internal_sha512_process
mbedtls_low_level_strerr
mbedtls_md
mbedtls_md5
mbedtls_md5_clone
mbedtls_md5_finish
mbedtls_md5_free
mbedtls_md5_info
mbedtls_md5_init
mbedtls_md5_self_test
mbedtls_md5_starts
mbedtls_md5_update
mbedtls_md_clone
mbedtls_md_file
mbedtls_md_finish
mbedtls_md_free
mbedtls_md_get_name
mbedtls_md_get_size
mbedtls_md_get_type
mbedtls_md_hmac
mbedtls_md_hmac_finish
mbedtls_md_hmac_reset
mbedtls_md_hmac_starts
mbedtls_md_hmac_update
mbedtls_md_info_from_ctx
mbedtls_md_info_from_psa
mbedtls_md_info_from_string
mbedtls_md_info_from_type
mbedtls_md_init
mbedtls_md_list
mbedtls_md_process
mbedtls_md_setup
mbedtls_md_starts
mbedtls_md_update
mbedtls_mpi_add_abs
mbedtls_mpi_add_int
mbedtls_mpi_add_mpi
mbedtls_mpi_bitlen
mbedtls_mpi_cmp_abs
mbedtls_mpi_cmp_int
mbedtls_mpi_cmp_mpi
mbedtls_mpi_copy
mbedtls_mpi_core_mla
mbedtls_mpi_div_int
mbedtls_mpi_div_mpi
mbedtls_mpi_exp_mod
mbedtls_mpi_fill_random
mbedtls_mpi_free
mbedtls_mpi_gcd
mbedtls_mpi_gen_prime
mbedtls_mpi_get_bit
mbedtls_mpi_grow
mbedtls_mpi_init
mbedtls_mpi_inv_mod
mbedtls_mpi_is_prime_ext
mbedtls_mpi_lsb
mbedtls_mpi_lset
mbedtls_mpi_lt_mpi_ct
mbedtls_mpi_mod_int
mbedtls_mpi_mod_mpi
mbedtls_mpi_mul_int
mbedtls_mpi_mul_mpi
mbedtls_mpi_random
mbedtls_mpi_read_binary
mbedtls_mpi_read_binary_le
mbedtls_mpi_read_file
mbedtls_mpi_read_string
mbedtls_mpi_safe_cond_assign
mbedtls_mpi_safe_cond_swap
mbedtls_mpi_self_test
mbedtls_mpi_set_bit
mbedtls_mpi_shift_l
mbedtls_mpi_shift_r
mbedtls_mpi_shrink
mbedtls_mpi_size
mbedtls_mpi_sub_abs
mbedtls_mpi_sub_int
mbedtls_mpi_sub_mpi
mbedtls_mpi_swap
mbedtls_mpi_write_binary
mbedtls_mpi_write_binary_le
mbedtls_mpi_write_file
mbedtls_mpi_write_string
mbedtls_nist_kw_free
mbedtls_nist_kw_init
mbedtls_nist_kw_self_test
mbedtls_nist_kw_setkey
mbedtls_nist_kw_unwrap
mbedtls_nist_kw_wrap
mbedtls_oid_get_attr_short_name
mbedtls_oid_get_certificate_policies
mbedtls_oid_get_cipher_alg
mbedtls_oid_get_ec_grp
mbedtls_oid_get_extended_key_usage
mbedtls_oid_get_md_alg
mbedtls_oid_get_md_hmac
mbedtls_oid_get_numeric_string
mbedtls_oid_get_oid_by_ec_grp
mbedtls_oid_get_oid_by_md
mbedtls_oid_get_oid_by_pk_alg
mbedtls_oid_get_oid_by_sig_alg
mbedtls_oid_get_pk_alg
mbedtls_oid_get_pkcs12_pbe_alg
mbedtls_oid_get_sig_alg
mbedtls_oid_get_sig_alg_desc
mbedtls_oid_get_x509_ext_type
mbedtls_pem_free
mbedtls_pem_init
mbedtls_pem_read_buffer
mbedtls_pem_write_buffer
mbedtls_pk_can_do
mbedtls_pk_check_pair
mbedtls_pk_debug
mbedtls_pk_decrypt
mbedtls_pk_encrypt
mbedtls_pk_error_from_psa
mbedtls_pk_error_from_psa_rsa
mbedtls_pk_free
mbedtls_pk_get_bitlen
mbedtls_pk_get_name
mbedtls_pk_get_type
mbedtls_pk_info_from_type
mbedtls_pk_init
mbedtls_pk_load_file
mbedtls_pk_parse_key
mbedtls_pk_parse_keyfile
mbedtls_pk_parse_public_key
mbedtls_pk_parse_public_keyfile
mbedtls_pk_parse_subpubkey
mbedtls_pk_psa_rsa_sign_ext
mbedtls_pk_setup
mbedtls_pk_setup_rsa_alt
mbedtls_pk_sign
mbedtls_pk_sign_ext
mbedtls_pk_sign_restartable
mbedtls_pk_verify
mbedtls_pk_verify_ext
mbedtls_pk_verify_restartable
mbedtls_pk_write_key_der
mbedtls_pk_write_key_pem
mbedtls_pk_write_pubkey
mbedtls_pk_write_pubkey_der
mbedtls_pk_write_pubkey_pem
mbedtls_pkcs12_derivation
mbedtls_pkcs12_pbe
mbedtls_pkcs5_pbes2
mbedtls_pkcs5_pbkdf2_hmac
mbedtls_pkcs5_self_test
mbedtls_platform_entropy_poll
mbedtls_platform_gmtime_r
mbedtls_platform_set_snprintf
mbedtls_platform_set_vsnprintf
mbedtls_platform_setup
mbedtls_platform_teardown
mbedtls_platform_win32_snprintf
mbedtls_platform_win32_vsnprintf
mbedtls_platform_zeroize
mbedtls_poly1305_finish
mbedtls_poly1305_free
mbedtls_poly1305_init
mbedtls_poly1305_mac
mbedtls_poly1305_self_test
mbedtls_poly1305_starts
mbedtls_poly1305_update
mbedtls_psa_aead_abort
mbedtls_psa_aead_decrypt
mbedtls_psa_aead_decrypt_setup
mbedtls_psa_aead_encrypt
mbedtls_psa_aead_encrypt_setup
mbedtls_psa_aead_finish
mbedtls_psa_aead_set_lengths
mbedtls_psa_aead_set_nonce
mbedtls_psa_aead_update
mbedtls_psa_aead_update_ad
mbedtls_psa_asymmetric_decrypt
mbedtls_psa_asymmetric_encrypt
mbedtls_psa_cipher_abort
mbedtls_psa_cipher_decrypt
mbedtls_psa_cipher_decrypt_setup
mbedtls_psa_cipher_encrypt

Sections

.text
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libmbedtls.dll
.dll windows:4 windows x64 arch:x64

bc46d01b1bc6f84b6b4753dbc353d52e

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:d4:1a:66:69:21:53:ff:be:5d:ef:e8:73:ad:ff:6a
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

01/07/2021, 00:00

Not After

15/08/2024, 23:59

Subject

CN=Hugh Bailey,O=Hugh Bailey,L=Temecula,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:55:5b:d4:dc:43:e2:f2:0c:4f:90:9d:7e:7d:40:02:7e:f0:81:f4:36:97:cb:97:ea:16:e7:84:f6:83:7a:80:b5:c1:38:b8:4d:41:9c:01:a4:2c:ef:26:23:8c:4e:cc:4e:e5:87:35:ac:82:89:09:9a:4a:b2:20:39:da:33:f2
Signer

Actual PE Digest

0c:55:5b:d4:dc:43:e2:f2:0c:4f:90:9d:7e:7d:40:02:7e:f0:81:f4:36:97:cb:97:ea:16:e7:84:f6:83:7a:80:b5:c1:38:b8:4d:41:9c:01:a4:2c:ef:26:23:8c:4e:cc:4e:e5:87:35:ac:82:89:09:9a:4a:b2:20:39:da:33:f2

Digest Algorithm

sha512

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__iob_func
_amsg_exit
_initterm
_lock
_time64
_unlock
abort
calloc
free
fwrite
memcmp
memcpy
memmove
memset
printf
puts
realloc
signal
strcmp
strlen
strncmp
vfprintf

ws2_32

WSAGetLastError
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
getsockname
getsockopt
ioctlsocket
listen
recv
recvfrom
select
send
setsockopt
shutdown
socket

libmbedcrypto

mbedtls_asn1_get_tag
mbedtls_cipher_auth_decrypt_ext
mbedtls_cipher_auth_encrypt_ext
mbedtls_cipher_crypt
mbedtls_cipher_free
mbedtls_cipher_info_from_type
mbedtls_cipher_init
mbedtls_cipher_set_padding_mode
mbedtls_cipher_setkey
mbedtls_cipher_setup
mbedtls_ct_hmac
mbedtls_ct_memcmp
mbedtls_ct_memcpy_offset
mbedtls_ct_size_bool_eq
mbedtls_ct_size_mask
mbedtls_ct_size_mask_ge
mbedtls_ct_uint_mask
mbedtls_dhm_calc_secret
mbedtls_dhm_free
mbedtls_dhm_get_bitlen
mbedtls_dhm_get_len
mbedtls_dhm_get_value
mbedtls_dhm_init
mbedtls_dhm_make_params
mbedtls_dhm_make_public
mbedtls_dhm_read_params
mbedtls_dhm_read_public
mbedtls_dhm_set_group
mbedtls_ecdh_calc_secret
mbedtls_ecdh_free
mbedtls_ecdh_get_params
mbedtls_ecdh_init
mbedtls_ecdh_make_params
mbedtls_ecdh_make_public
mbedtls_ecdh_read_params
mbedtls_ecdh_read_public
mbedtls_ecdh_setup
mbedtls_ecp_curve_info_from_grp_id
mbedtls_ecp_curve_info_from_tls_id
mbedtls_md_finish
mbedtls_md_free
mbedtls_md_get_size
mbedtls_md_hmac_finish
mbedtls_md_hmac_reset
mbedtls_md_hmac_starts
mbedtls_md_hmac_update
mbedtls_md_info_from_type
mbedtls_md_init
mbedtls_md_setup
mbedtls_md_starts
mbedtls_md_update
mbedtls_mpi_bitlen
mbedtls_mpi_free
mbedtls_mpi_read_binary
mbedtls_pk_can_do
mbedtls_pk_debug
mbedtls_pk_decrypt
mbedtls_pk_encrypt
mbedtls_pk_get_bitlen
mbedtls_pk_get_type
mbedtls_pk_sign
mbedtls_pk_sign_restartable
mbedtls_pk_verify
mbedtls_pk_verify_restartable
mbedtls_platform_zeroize
mbedtls_sha256_clone
mbedtls_sha256_finish
mbedtls_sha256_free
mbedtls_sha256_init
mbedtls_sha256_starts
mbedtls_sha256_update
mbedtls_sha512_clone
mbedtls_sha512_finish
mbedtls_sha512_free
mbedtls_sha512_init
mbedtls_sha512_starts
mbedtls_sha512_update
mbedtls_snprintf
mbedtls_ssl_sig_alg_to_str
mbedtls_ssl_states_str
mbedtls_vsnprintf

libmbedx509

mbedtls_x509_crt_check_extended_key_usage
mbedtls_x509_crt_check_key_usage
mbedtls_x509_crt_free
mbedtls_x509_crt_info
mbedtls_x509_crt_init
mbedtls_x509_crt_parse_der
mbedtls_x509_crt_profile_default
mbedtls_x509_crt_profile_suiteb
mbedtls_x509_crt_verify_restartable
mbedtls_x509_dn_gets
mbedtls_x509_get_name

Exports

Exports

mbedtls_debug_print_buf
mbedtls_debug_print_crt
mbedtls_debug_print_ecp
mbedtls_debug_print_mpi
mbedtls_debug_print_msg
mbedtls_debug_print_ret
mbedtls_debug_printf_ecdh
mbedtls_debug_set_threshold
mbedtls_net_accept
mbedtls_net_bind
mbedtls_net_close
mbedtls_net_connect
mbedtls_net_free
mbedtls_net_init
mbedtls_net_poll
mbedtls_net_recv
mbedtls_net_recv_timeout
mbedtls_net_send
mbedtls_net_set_block
mbedtls_net_set_nonblock
mbedtls_net_usleep
mbedtls_ssl_add_hs_msg_to_checksum
mbedtls_ssl_buffering_free
mbedtls_ssl_cache_free
mbedtls_ssl_cache_get
mbedtls_ssl_cache_init
mbedtls_ssl_cache_set
mbedtls_ssl_cache_set_max_entries
mbedtls_ssl_cache_set_timeout
mbedtls_ssl_check_cert_usage
mbedtls_ssl_check_curve
mbedtls_ssl_check_curve_tls_id
mbedtls_ssl_check_pending
mbedtls_ssl_check_record
mbedtls_ssl_check_timer
mbedtls_ssl_ciphersuite_from_id
mbedtls_ssl_ciphersuite_from_string
mbedtls_ssl_ciphersuite_get_cipher_key_bitlen
mbedtls_ssl_ciphersuite_uses_ec
mbedtls_ssl_ciphersuite_uses_psk
mbedtls_ssl_close_notify
mbedtls_ssl_conf_alpn_protocols
mbedtls_ssl_conf_authmode
mbedtls_ssl_conf_ca_chain
mbedtls_ssl_conf_cert_profile
mbedtls_ssl_conf_cert_req_ca_list
mbedtls_ssl_conf_ciphersuites
mbedtls_ssl_conf_curves
mbedtls_ssl_conf_dbg
mbedtls_ssl_conf_dh_param_bin
mbedtls_ssl_conf_dh_param_ctx
mbedtls_ssl_conf_dhm_min_bitlen
mbedtls_ssl_conf_dtls_anti_replay
mbedtls_ssl_conf_dtls_badmac_limit
mbedtls_ssl_conf_dtls_cookies
mbedtls_ssl_conf_encrypt_then_mac
mbedtls_ssl_conf_endpoint
mbedtls_ssl_conf_extended_master_secret
mbedtls_ssl_conf_groups
mbedtls_ssl_conf_handshake_timeout
mbedtls_ssl_conf_has_static_psk
mbedtls_ssl_conf_legacy_renegotiation
mbedtls_ssl_conf_max_frag_len
mbedtls_ssl_conf_max_version
mbedtls_ssl_conf_min_version
mbedtls_ssl_conf_own_cert
mbedtls_ssl_conf_preference_order
mbedtls_ssl_conf_psk
mbedtls_ssl_conf_psk_cb
mbedtls_ssl_conf_read_timeout
mbedtls_ssl_conf_renegotiation
mbedtls_ssl_conf_renegotiation_enforced
mbedtls_ssl_conf_renegotiation_period
mbedtls_ssl_conf_rng
mbedtls_ssl_conf_session_cache
mbedtls_ssl_conf_session_tickets
mbedtls_ssl_conf_session_tickets_cb
mbedtls_ssl_conf_sig_algs
mbedtls_ssl_conf_sig_hashes
mbedtls_ssl_conf_sni
mbedtls_ssl_conf_transport
mbedtls_ssl_conf_verify
mbedtls_ssl_config_defaults
mbedtls_ssl_config_free
mbedtls_ssl_config_init
mbedtls_ssl_context_load
mbedtls_ssl_context_save
mbedtls_ssl_cookie_check
mbedtls_ssl_cookie_free
mbedtls_ssl_cookie_init
mbedtls_ssl_cookie_set_timeout
mbedtls_ssl_cookie_setup
mbedtls_ssl_cookie_write
mbedtls_ssl_decrypt_buf
mbedtls_ssl_derive_keys
mbedtls_ssl_dtls_replay_check
mbedtls_ssl_dtls_replay_reset
mbedtls_ssl_dtls_replay_update
mbedtls_ssl_encrypt_buf
mbedtls_ssl_fetch_input
mbedtls_ssl_finish_handshake_msg
mbedtls_ssl_flight_free
mbedtls_ssl_flight_transmit
mbedtls_ssl_flush_output
mbedtls_ssl_free
mbedtls_ssl_get_alpn_protocol
mbedtls_ssl_get_bytes_avail
mbedtls_ssl_get_ciphersuite
mbedtls_ssl_get_ciphersuite_id
mbedtls_ssl_get_ciphersuite_id_from_ssl
mbedtls_ssl_get_ciphersuite_name
mbedtls_ssl_get_ciphersuite_sig_alg
mbedtls_ssl_get_ciphersuite_sig_pk_alg
mbedtls_ssl_get_current_mtu
mbedtls_ssl_get_handshake_transcript
mbedtls_ssl_get_hs_sni
mbedtls_ssl_get_input_max_frag_len
mbedtls_ssl_get_key_exchange_md_tls1_2
mbedtls_ssl_get_max_in_record_payload
mbedtls_ssl_get_max_out_record_payload
mbedtls_ssl_get_mode_from_ciphersuite
mbedtls_ssl_get_mode_from_transform
mbedtls_ssl_get_output_max_frag_len
mbedtls_ssl_get_peer_cert
mbedtls_ssl_get_record_expansion
mbedtls_ssl_get_session
mbedtls_ssl_get_verify_result
mbedtls_ssl_get_version
mbedtls_ssl_handle_message_type
mbedtls_ssl_handle_pending_alert
mbedtls_ssl_handshake
mbedtls_ssl_handshake_client_step
mbedtls_ssl_handshake_free
mbedtls_ssl_handshake_server_step
mbedtls_ssl_handshake_step
mbedtls_ssl_handshake_wrapup
mbedtls_ssl_handshake_wrapup_free_hs_transform
mbedtls_ssl_hash_from_md_alg
mbedtls_ssl_init
mbedtls_ssl_list_ciphersuites
mbedtls_ssl_md_alg_from_hash
mbedtls_ssl_optimize_checksum
mbedtls_ssl_parse_alpn_ext
mbedtls_ssl_parse_certificate
mbedtls_ssl_parse_change_cipher_spec
mbedtls_ssl_parse_finished
mbedtls_ssl_parse_server_name_ext
mbedtls_ssl_parse_sig_alg_ext
mbedtls_ssl_pend_fatal_alert
mbedtls_ssl_pk_alg_from_sig
mbedtls_ssl_prepare_handshake_record
mbedtls_ssl_psk_derive_premaster
mbedtls_ssl_read
mbedtls_ssl_read_record
mbedtls_ssl_read_version
mbedtls_ssl_recv_flight_completed
mbedtls_ssl_renegotiate
mbedtls_ssl_resend
mbedtls_ssl_resend_hello_request
mbedtls_ssl_reset_checksum
mbedtls_ssl_reset_in_out_pointers
mbedtls_ssl_send_alert_message
mbedtls_ssl_send_fatal_handshake_failure
mbedtls_ssl_send_flight_completed
mbedtls_ssl_session_copy
mbedtls_ssl_session_free
mbedtls_ssl_session_init
mbedtls_ssl_session_load
mbedtls_ssl_session_reset
mbedtls_ssl_session_reset_int
mbedtls_ssl_session_reset_msg_layer
mbedtls_ssl_session_save
mbedtls_ssl_set_bio
mbedtls_ssl_set_calc_verify_md
mbedtls_ssl_set_client_transport_id
mbedtls_ssl_set_datagram_packing
mbedtls_ssl_set_export_keys_cb
mbedtls_ssl_set_hostname
mbedtls_ssl_set_hs_authmode
mbedtls_ssl_set_hs_ca_chain
mbedtls_ssl_set_hs_dn_hints
mbedtls_ssl_set_hs_own_cert
mbedtls_ssl_set_hs_psk
mbedtls_ssl_set_inbound_transform
mbedtls_ssl_set_mtu
mbedtls_ssl_set_outbound_transform
mbedtls_ssl_set_session
mbedtls_ssl_set_timer
mbedtls_ssl_set_timer_cb
mbedtls_ssl_set_verify
mbedtls_ssl_setup
mbedtls_ssl_sig_from_pk
mbedtls_ssl_sig_from_pk_alg
mbedtls_ssl_start_handshake_msg
mbedtls_ssl_start_renegotiation
mbedtls_ssl_ticket_free
mbedtls_ssl_ticket_init
mbedtls_ssl_ticket_parse
mbedtls_ssl_ticket_rotate
mbedtls_ssl_ticket_setup
mbedtls_ssl_ticket_write
mbedtls_ssl_tls12_get_preferred_hash_for_sig_alg
mbedtls_ssl_tls12_write_client_hello_exts
mbedtls_ssl_tls_prf
mbedtls_ssl_transform_free
mbedtls_ssl_transform_init
mbedtls_ssl_update_handshake_status
mbedtls_ssl_update_in_pointers
mbedtls_ssl_update_out_pointers
mbedtls_ssl_validate_ciphersuite
mbedtls_ssl_write
mbedtls_ssl_write_alpn_ext
mbedtls_ssl_write_certificate
mbedtls_ssl_write_change_cipher_spec
mbedtls_ssl_write_client_hello
mbedtls_ssl_write_finished
mbedtls_ssl_write_handshake_msg_ext
mbedtls_ssl_write_record
mbedtls_ssl_write_sig_alg_ext
mbedtls_ssl_write_version

Sections

.text
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 1847

Password: 1847

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 543KB - Virtual size: 543KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

Password: 1847

a9f4b31bc853f620c435d626154cb852

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

06:d4:1a:66:69:21:53:ff:be:5d:ef:e8:73:ad:ff:6aCertificate

Extended Key Usages

Key Usages

dc:9a:36:80:cd:9b:3b:ba:c5:2d:64:cc:36:79:82:57:62:15:69:81:d6:0e:d1:df:5e:0e:eb:4d:5d:26:5f:18:00:ca:b7:d6:11:39:c2:04:e2:ff:ae:3d:c5:1e:28:01:20:4f:0c:79:f9:77:4d:31:d9:c1:e0:84:32:33:30:aaSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

ole32

avutil-57

swresample-4

Exports

Exports

Sections

.text Size: 25.3MB - Virtual size: 25.3MB

.rodata Size: 3KB - Virtual size: 2KB

.data Size: 69KB - Virtual size: 69KB

.rdata Size: 5.4MB - Virtual size: 5.4MB

.pdata Size: 221KB - Virtual size: 220KB

.xdata Size: 318KB - Virtual size: 317KB

.bss Size: - Virtual size: 10.4MB

.edata Size: 5KB - Virtual size: 5KB

.idata Size: 16KB - Virtual size: 16KB

.CRT Size: 512B - Virtual size: 96B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 1024B - Virtual size: 856B

.reloc Size: 75KB - Virtual size: 75KB

Password: 1847

8c6e5517d0766d7417c41642edc2cc2e

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

06:d4:1a:66:69:21:53:ff:be:5d:ef:e8:73:ad:ff:6aCertificate

Extended Key Usages

Key Usages

0f:b1:da:3e:80:11:f7:59:d6:cc:8c:ba:cb:b7:93:19:12:cd:7a:fd:91:ff:07:3a:91:72:77:05:81:58:73:99:6e:00:2b:ba:03:20:ef:d4:3f:77:c7:01:46:5f:0b:75:99:5a:d4:50:ca:12:ca:c0:fb:21:ea:32:a2:4f:39:ccSigner

Headers

DLL Characteristics

.text
Size: 543KB - Virtual size: 543KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

06:d4:1a:66:69:21:53:ff:be:5d:ef:e8:73:ad:ff:6a
Certificate

dc:9a:36:80:cd:9b:3b:ba:c5:2d:64:cc:36:79:82:57:62:15:69:81:d6:0e:d1:df:5e:0e:eb:4d:5d:26:5f:18:00:ca:b7:d6:11:39:c2:04:e2:ff:ae:3d:c5:1e:28:01:20:4f:0c:79:f9:77:4d:31:d9:c1:e0:84:32:33:30:aa
Signer

.text
Size: 25.3MB - Virtual size: 25.3MB

.rodata
Size: 3KB - Virtual size: 2KB

.data
Size: 69KB - Virtual size: 69KB

.rdata
Size: 5.4MB - Virtual size: 5.4MB

.pdata
Size: 221KB - Virtual size: 220KB

.xdata
Size: 318KB - Virtual size: 317KB

.bss
Size: - Virtual size: 10.4MB

.edata
Size: 5KB - Virtual size: 5KB

.idata
Size: 16KB - Virtual size: 16KB

.CRT
Size: 512B - Virtual size: 96B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 1024B - Virtual size: 856B

.reloc
Size: 75KB - Virtual size: 75KB

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

06:d4:1a:66:69:21:53:ff:be:5d:ef:e8:73:ad:ff:6a
Certificate

0f:b1:da:3e:80:11:f7:59:d6:cc:8c:ba:cb:b7:93:19:12:cd:7a:fd:91:ff:07:3a:91:72:77:05:81:58:73:99:6e:00:2b:ba:03:20:ef:d4:3f:77:c7:01:46:5f:0b:75:99:5a:d4:50:ca:12:ca:c0:fb:21:ea:32:a2:4f:39:cc
Signer

.text
Size: 77KB - Virtual size: 76KB

.data
Size: 512B - Virtual size: 240B

.rdata
Size: 41KB - Virtual size: 40KB

.pdata
Size: 2KB - Virtual size: 2KB

.xdata
Size: 2KB - Virtual size: 2KB

.bss
Size: - Virtual size: 5KB

.edata
Size: 1024B - Virtual size: 700B

.idata
Size: 8KB - Virtual size: 8KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 1024B - Virtual size: 872B

.reloc
Size: 512B - Virtual size: 460B

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

06:d4:1a:66:69:21:53:ff:be:5d:ef:e8:73:ad:ff:6a
Certificate

44:e7:f9:78:e5:ad:91:3a:c5:5f:df:f4:57:d7:00:25:1c:42:8b:1c:cc:f6:76:9a:d5:df:c9:36:b9:91:df:79:27:d4:be:7e:77:36:e6:8a:b6:b7:ce:0e:69:67:f9:6a:30:2c:de:ea:40:9c:e9:a4:2c:77:e4:a9:e6:38:8a:54
Signer

.text
Size: 2.9MB - Virtual size: 2.9MB

.data
Size: 1024B - Virtual size: 640B

.rdata
Size: 1014KB - Virtual size: 1014KB

.pdata
Size: 53KB - Virtual size: 53KB

.xdata
Size: 86KB - Virtual size: 86KB

.bss
Size: - Virtual size: 21KB

.edata
Size: 2KB - Virtual size: 2KB

.idata
Size: 16KB - Virtual size: 16KB

.CRT
Size: 512B - Virtual size: 96B