Precedenti di violazione dei contenuti[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

Precedenti di violazione dei contenuti.zip
Size

206.1MB
MD5

7defc67225f6b4a41ed4d00f9a2407ee
SHA1

34a17225489aa33180aeaeaaef25c3e1b6fe28ee
SHA256

8d851febf33307b4b35fe57611cabd1a852c2b3c33990a17c6808cad84e969b2
SHA512

6da102b4c1bc5763b61f352df7de8305f157fc1bb51d17cd08fa8b962b410e422962edaecb66ad0614a59ce254f1bf3c376e2a38848308f871765e8d4efc0710
SSDEEP

6291456:PVP4+nzKvx+MXydr5d+PedEboT2pvUuup/emS1C1h:tg2Kfcd/WboTuup//ICT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/msimg32.dll

Files

Precedenti di violazione dei contenuti.zip
.zip
1 (1)
Precedenti di violazione dei contenuti.exe
.exe windows:5 windows x86 arch:x86

e456fbce099e309bfeaff191fcf3b1ee

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6a:e1:85:c2:92:81:e4:14:ea:62:0e:1d
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

13/11/2017, 16:48

Not After

13/02/2021, 16:48

Subject

CN=Haihaisoft Limited,O=Haihaisoft Limited,L=Hong Kong,ST=Hong Kong,C=HK,1.2.840.113549.1.9.1=#0c156a6f7365706840686169686169736f66742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

40:cb:42:89:5c:3e:74:94:26:97:ad:2f
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/01/2017, 10:00

Not After

24/02/2028, 10:00

Subject

CN=GlobalSign TSA for Advanced - G3 - 001-02,O=GMO GlobalSign K.K.,C=JP

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:31:89:c6:50:04
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

29/03/2029, 10:00

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18/03/2009, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

20:3e:9f:9c:65:a4:62:ce:88:5d:59:c6:1d:1c:ac:b2:d0:fa:2e:e7
Signer

Actual PE Digest

20:3e:9f:9c:65:a4:62:ce:88:5d:59:c6:1d:1c:ac:b2:d0:fa:2e:e7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

m:\sumatrapdf\hpreader-windows-standard\hpreader\Release\hpreader.pdb

Imports

wininet

HttpOpenRequestW
HttpQueryInfoW
InternetConnectW
FtpCommandA
FtpFindFirstFileA
HttpEndRequestW
InternetWriteFile
HttpSendRequestExA
InternetQueryOptionW
HttpSendRequestA
InternetGetCookieA
InternetGetLastResponseInfoW
InternetConnectA
HttpQueryInfoA
InternetGetLastResponseInfoA
InternetCloseHandle
InternetSetOptionW
InternetOpenA
InternetCreateUrlA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetReadFile
InternetOpenUrlW
HttpOpenRequestA
InternetOpenW

gdiplus

GdipGetImageWidth
GdipInvertMatrix
GdipCloneImage
GdipDeleteMatrix
GdipSaveImageToFile
GdipTransformMatrixPoints
GdipCreateHBITMAPFromBitmap
GdipGetImageEncoders
GdipRotateMatrix
GdipDisposeImage
GdipGetImageEncodersSize
GdipTranslateMatrix
GdipDrawImageI
GdipGetImageVerticalResolution
GdipSetWorldTransform
GdipSetClipRectI
GdipCreateMatrix
GdipCreateBitmapFromStream
GdipGetImageHeight
GdipScaleMatrix
GdipCloneBitmapAreaI
GdipGetImageHorizontalResolution
GdipCreateBitmapFromStreamICM
GdipFillEllipseI
GdipCreatePen1
GdipDrawLineI
GdipFillRectangleI
GdipSetCompositingQuality
GdipCreateFromHDC
GdipSetPageUnit
GdipAlloc
GdipCreateSolidFill
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCloneBrush
GdipDeletePen
GdipFree
GdiplusShutdown
GdipDeleteBrush
GdipSetPenDashOffset
GdipSetPenLineJoin
GdipSetPixelOffsetMode
GdipCreatePath
GdipCloneFontFamily
GdipRestoreGraphics
GdipBitmapLockBits
GdipStringFormatGetGenericTypographic
GdipSetInterpolationMode
GdipGetCellAscent
GdipFillPath
GdipCreateFontFamilyFromName
GdipCreateRegion
GdipDeletePrivateFontCollection
GdipFillRectangle
GdipTranslateWorldTransform
GdipSetCompositingMode
GdipGetWorldTransform
GdipNewPrivateFontCollection
GdipDrawString
GdipCreateImageAttributes
GdipGetGenericFontFamilySansSerif
GdipClonePath
GdipDeleteRegion
GdipTransformPath
GdipGetClipBoundsI
GdipDeletePath
GdipCreateRegionPath
GdipCreateFont
GdipCreateMatrix2
GdipSaveGraphics
GdiplusStartup
GdipDisposeImageAttributes
GdipBitmapUnlockBits
GdipIsStyleAvailable
GdipSetClipRegion
GdipGetFontCollectionFamilyList
GdipCreatePath2
GdipSetImageAttributesColorMatrix
GdipDrawImageRectRectI
GdipGetEmHeight
GdipAddPathPath
GdipFillPolygon
GdipPrivateAddFontFile
GdipGetFamilyName
GdipDrawImagePointsRect
GdipSetTextRenderingHint
GdipSetPageScale
GdipDrawPath
GdipGetClip
GdipDeleteFont
GdipCreateBitmapFromScan0
GdipGetDpiY
GdipSetPenDashArray
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipGetFontCollectionFamilyCount
GdipGetMatrixElements
GdipTransformRegion
GdipCreateRegionRectI
GdipGetRegionBounds
GdipSetPenLineCap197819
GdipWidenPath
GdipCreatePen2
GdipDeleteFontFamily
GdipSetPenMiterLimit

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

WaitForMultipleObjects
QueryPerformanceCounter
SetThreadExecutionState
QueryPerformanceFrequency
GetSystemTime
GetTickCount
CreateFileA
GetFileSize
SetFilePointer
ReadFile
LocalFree
FormatMessageW
SetLastError
GetVersionExA
GetModuleHandleW
lstrcmpW
LoadLibraryA
CompareStringW
GlobalFindAtomW
FreeResource
GetModuleFileNameW
MoveFileW
GetThreadLocale
WriteFile
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetVolumeInformationW
GetFullPathNameW
FileTimeToLocalFileTime
GetFileAttributesExW
LocalFileTimeToFileTime
SetFileTime
GetFileAttributesW
GetFileSizeEx
GetFileTime
InterlockedExchange
CompareStringA
LoadLibraryExW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
WritePrivateProfileStringW
ResetEvent
GlobalGetAtomNameW
RaiseException
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
lstrlenA
GlobalFlags
SetErrorMode
GetSystemDirectoryW
GetStartupInfoW
HeapAlloc
HeapFree
UnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
GetDriveTypeW
HeapReAlloc
RtlUnwind
VirtualProtect
VirtualAlloc
HeapSize
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
GetCPInfo
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
LCMapStringW
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
GetFileAttributesA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryA
SetCurrentDirectoryA
GetTimeZoneInformation
LCMapStringA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateProcessA
GetProcessHeap
FreeEnvironmentStringsA
GetEnvironmentStrings
SetEnvironmentVariableA
GetDriveTypeA
GetFullPathNameA
GetLongPathNameW
AllocConsole
CreateProcessW
SetConsoleScreenBufferSize
GetConsoleScreenBufferInfo
GetVersion
InterlockedCompareExchange
CreateDirectoryA
FindFirstFileA
FindNextFileA
DeleteFileA
IsDBCSLeadByte
SetFileAttributesA
DeviceIoControl
lstrcpynW
GetWindowsDirectoryW
GetOverlappedResult
ReadDirectoryChangesW
ResumeThread
SuspendThread
GetCurrentProcessId
Module32NextW
GetCurrentThreadId
GetModuleHandleA
GetModuleFileNameA
GetSystemInfo
Module32FirstW
GlobalMemoryStatusEx
OpenThread
CreateFileW
Thread32Next
GetVersionExW
Thread32First
FormatMessageA
GetCurrentThread
SetEvent
SetUnhandledExceptionFilter
VirtualQuery
GetLocaleInfoA
GetThreadContext
GetLogicalDrives
GetShortPathNameW
GetTempPathW
GetExitCodeProcess
GetTempFileNameW
GetEnvironmentVariableW
GetUserDefaultUILanguage
GetTimeFormatW
GetLocaleInfoW
GetDateFormatW
DeleteCriticalSection
CreateEventW
EnterCriticalSection
GetPrivateProfileIntW
LeaveCriticalSection
InitializeCriticalSection
GetPrivateProfileStringW
GetSystemTimeAsFileTime
GetCommandLineW
GlobalAddAtomW
GlobalDeleteAtom
GlobalUnlock
WaitForSingleObject
GetProfileStringW
GlobalLock
InterlockedIncrement
MulDiv
InterlockedDecrement
FreeLibrary
GetProcAddress
LoadLibraryW
GetCurrentProcess
lstrcatW
lstrcpyW
QueryDosDeviceW
lstrcmpiW
GetLogicalDriveStringsW
GlobalFree
GlobalAlloc
TerminateProcess
OpenProcess
TerminateThread
GetACP
WideCharToMultiByte
SetFileAttributesW
CreateDirectoryW
FileTimeToSystemTime
lstrlenW
Sleep
SystemTimeToFileTime
GetLocalTime
FindClose
DeleteFileW
FindResourceW
LoadResource
LockResource
SizeofResource
FindNextFileW
FindFirstFileW
Process32NextW
Process32FirstW
GetLastError
CreateToolhelp32Snapshot
CreateThread
MultiByteToWideChar
CloseHandle
MoveFileA

user32

SetWindowTextW
IsWindowEnabled
GetWindowThreadProcessId
CharUpperW
GetNextDlgTabItem
CreateDialogIndirectParamW
GetActiveWindow
GetDesktopWindow
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
MapDialogRect
SetWindowContextHelpId
RegisterClipboardFormatW
ValidateRect
TranslateMessage
GetMessageW
ShowOwnedPopups
LoadMenuW
TranslateAcceleratorW
BringWindowToTop
SetRectEmpty
InsertMenuItemW
LoadAcceleratorsW
InflateRect
GetSysColorBrush
GetMenuItemInfoW
UnregisterClassW
CharNextW
CopyAcceleratorTableW
IsRectEmpty
SetRect
InvalidateRgn
PostThreadMessageW
MonitorFromWindow
OemToCharA
CharToOemA
CharLowerA
CharUpperA
CharToOemBuffW
OemToCharBuffA
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetDlgCtrlID
CopyRect
PtInRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetMenuState
GetMenuItemCount
GetSubMenu
IsCharAlphaNumericW
wsprintfA
GetMonitorInfoW
MonitorFromRect
FindWindowExW
LoadImageW
GetNextDlgGroupItem
ClientToScreen
SetWindowRgn
DrawFocusRect
OffsetRect
DrawEdge
WindowFromPoint
HideCaret
ShowCaret
SetClassLongW
PostQuitMessage
IsZoomed
IsDialogMessageW
TrackMouseEvent
IsCharUpperW
CharLowerW
GetForegroundWindow
GetScrollInfo
LoadBitmapW
ShowScrollBar
GetCursor
IsWindowVisible
UnregisterHotKey
SetScrollInfo
GetScrollPos
DialogBoxIndirectParamW
DialogBoxParamW
EndDialog
SendDlgItemMessageW
CheckDlgButton
IsDlgButtonChecked
CheckRadioButton
SetDlgItemTextW
SetActiveWindow
CloseClipboard
SetCapture
GetCapture
EmptyClipboard
OpenClipboard
ReleaseCapture
SetClipboardData
PostMessageW
ReuseDDElParam
MessageBeep
UnpackDDElParam
GetDlgItem
EndPaint
SetCursor
ScreenToClient
DrawTextW
BeginPaint
GetDC
ReleaseDC
GetSysColor
SetWindowPos
GetCursorPos
DrawFrameControl
GetMenuItemID
GetParent
ModifyMenuW
CheckMenuRadioItem
SetMenu
InsertMenuW
CheckMenuItem
GetMenu
DrawIcon
GetSystemMetrics
IsIconic
FillRect
wsprintfW
MoveWindow
SetParent
IsWindow
FindWindowW
DestroyWindow
GetWindowRect
TrackPopupMenu
SetForegroundWindow
CreateMenu
SetFocus
GetWindowLongW
AppendMenuW
EnableMenuItem
SetWindowLongW
RedrawWindow
CreatePopupMenu
RemoveMenu
MapWindowPoints
DestroyMenu
SetMenuItemInfoW
CallWindowProcW
GetMessagePos
RegisterClassExW
LoadIconW
CreateWindowExW
UpdateWindow
DefWindowProcW
EnableWindow
InvalidateRect
KillTimer
GetFocus
SetTimer
RegisterHotKey
ShowWindow
SystemParametersInfoW
GetWindowDC
GrayStringW
DrawTextExW
TabbedTextOutW
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
IsChild
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SendMessageW
LoadCursorW
GetClientRect
GetWindowTextLengthW
GetWindowTextW
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
PeekMessageW
GetKeyState
GetClassInfoExW
MessageBoxW

gdi32

GetObjectW
BitBlt
GetPixel
CreateRectRgn
CombineRgn
CreateDIBitmap
GetClipBox
SaveDC
RestoreDC
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
CreateCompatibleBitmap
ScaleWindowExtEx
LineTo
ExtSelectClipRgn
CreatePatternBrush
CreateBitmap
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
Rectangle
StretchBlt
GetDIBits
SelectClipRgn
SetDIBits
CreateCompatibleDC
ExcludeClipRect
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
CreateRoundRectRgn
CreatePen
RoundRect
GetStockObject
EndPage
StartPage
DeleteDC
CreateDCW
SetMapMode
StartDocW
EndDoc
AbortDoc
SetTextColor
CreateFontIndirectW
GetDeviceCaps
SetBkColor
SetBkMode
SelectObject
CreateSolidBrush
DeleteObject
GetTextExtentPoint32W
CreateFontW
SetWindowExtEx
FloodFill
MoveToEx

msimg32

AlphaBlend

comdlg32

GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError
PrintDlgExW
GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ord203
ClosePrinter

advapi32

RegOpenKeyExW
SetFileSecurityA
SetFileSecurityW
RegQueryValueExW
RegDeleteValueW
RegQueryValueExA
RegSetKeySecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegQueryValueW
RegDeleteKeyW
RegOpenKeyW
RegEnumKeyW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegSetValueExW
RegCreateKeyExW

shell32

SHGetFileInfoW
SHChangeNotify
SHAddToRecentDocs
DragQueryFileW
DragFinish
SHGetFolderPathW
SHGetDesktopFolder
ShellExecuteExW
SHBindToParent
DragAcceptFiles
SHGetSpecialFolderPathW
ShellExecuteW

comctl32

InitCommonControlsEx
CreatePropertySheetPageW
_TrackMouseEvent
ImageList_Draw

shlwapi

StrStrW
StrRStrIW
StrStrIW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
SHDeleteKeyW
PathAppendW
SHSetValueW
PathIsRelativeW

oledlg

OleUIBusyW

ole32

CoSetProxyBlanket
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CreateStreamOnHGlobal
CoCreateGuid
CoUninitialize
CoCreateInstance
CoInitialize

oleaut32

SysStringLen
VariantClear
VariantInit
SysAllocString
SysAllocStringLen
VariantChangeType
VariantCopy
DispCallFunc
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayCreate
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysFreeString

psapi

EnumProcesses
GetProcessImageFileNameW

ws2_32

closesocket
recv
gethostname
gethostbyname
WSAStartup
socket
htons
bind
listen
WSAGetLastError
accept
send
connect

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 399KB - Virtual size: 496KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
msimg32.dll
.dll windows:4 windows x86 arch:x86

0beab09df389f452d572038c5f632fa1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW

kernel32

AcquireSRWLockExclusive
CloseHandle
CreateEventA
CreateEventW
CreateSemaphoreA
CreateSemaphoreW
CreateThread
DeleteCriticalSection
EnterCriticalSection
FindClose
FindFirstFileW
FindNextFileW
FreeLibrary
GetACP
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetFileAttributesW
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetNumaHighestNodeNumber
GetNumaNodeProcessorMaskEx
GetProcAddress
GetProcessAffinityMask
GetStdHandle
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadPriority
GetTickCount
InitOnceBeginInitialize
InitOnceComplete
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeSRWLock
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSemaphore
SetErrorMode
SetEvent
SetLastError
SetThreadGroupAffinity
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WaitForSingleObjectEx
WaitNamedPipeW
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW

ole32

CoTaskMemFree

user32

MessageBoxW

Exports

Exports

AlphaBlend
av1_ac_quant_Q3
av1_ac_quant_QTX
av1_accumulate_frame_counts
av1_add_film_grain
av1_add_film_grain_run
av1_add_to_hash_map_by_row_with_precal_data
av1_alloc_above_context_buffers
av1_alloc_context_buffers
av1_alloc_internal_frame_buffers
av1_alloc_restoration_buffers
av1_alloc_restoration_struct
av1_alloc_tile_data
av1_alloc_txb_buf
av1_allow_warp
av1_apply_encoding_flags
av1_block_error
av1_block_error_avx2
av1_block_error_c
av1_block_wavelet_energy_level
av1_build_compound_diffwtd_mask
av1_build_compound_diffwtd_mask_avx2
av1_build_compound_diffwtd_mask_c
av1_build_compound_diffwtd_mask_d16
av1_build_compound_diffwtd_mask_d16_avx2
av1_build_compound_diffwtd_mask_d16_c
av1_build_compound_diffwtd_mask_d16_sse4_1
av1_build_compound_diffwtd_mask_highbd
av1_build_compound_diffwtd_mask_highbd_avx2
av1_build_compound_diffwtd_mask_highbd_c
av1_build_compound_diffwtd_mask_highbd_ssse3
av1_build_compound_diffwtd_mask_sse4_1
av1_build_inter_predictor
av1_build_inter_predictors_for_planes_single_buf
av1_build_inter_predictors_sb
av1_build_inter_predictors_sbp
av1_build_inter_predictors_sbuv
av1_build_inter_predictors_sby
av1_build_interintra_predictors_sbp
av1_build_interintra_predictors_sbuv
av1_build_intra_predictors_for_interintra
av1_build_nmv_cost_table
av1_build_obmc_inter_prediction
av1_build_obmc_inter_predictors_sb
av1_build_prediction_by_above_preds
av1_build_prediction_by_left_preds
av1_build_quantizer
av1_build_wedge_inter_predictor_from_buf
av1_calc_indices_dim1
av1_calc_indices_dim2
av1_calculate_next_size_params
av1_calculate_scaled_size
av1_calculate_scaled_superres_size
av1_calculate_tile_cols
av1_calculate_tile_rows
av1_calculate_unscaled_superres_size
av1_caq_select_segment
av1_cdef_frame
av1_cdef_search
av1_change_config
av1_check_trailing_bits
av1_choose_segmap_coding_method
av1_clear_segdata
av1_clearall_segfeatures
av1_coeff_band_16x16
av1_coeff_band_32x32
av1_coeff_band_4x4
av1_coeff_band_8x8
av1_combine_interintra
av1_compute_deltaq_from_energy_level
av1_compute_global_motion
av1_compute_motion_cost
av1_compute_qdelta
av1_compute_qdelta_by_rate
av1_compute_rd_mult
av1_compute_rd_mult_based_on_qindex
av1_compute_stats
av1_compute_stats_avx2
av1_compute_stats_c
av1_compute_stats_highbd
av1_compute_stats_highbd_avx2
av1_compute_stats_highbd_c
av1_compute_stats_highbd_sse4_1
av1_compute_stats_sse4_1
av1_configure_buffer_updates
av1_configure_buffer_updates_firstpass
av1_convert_model_to_params
av1_convert_qindex_to_q
av1_convert_sect5obus_to_annexb
av1_convolve_2d_copy_sr
av1_convolve_2d_copy_sr_avx2
av1_convolve_2d_copy_sr_c
av1_convolve_2d_copy_sr_sse2
av1_convolve_2d_facade
av1_convolve_2d_scale
av1_convolve_2d_scale_c
av1_convolve_2d_scale_sse4_1
av1_convolve_2d_sobel_y_c
av1_convolve_2d_sr
av1_convolve_2d_sr_avx2
av1_convolve_2d_sr_c
av1_convolve_2d_sr_sse2
av1_convolve_horiz_rs
av1_convolve_horiz_rs_c
av1_convolve_horiz_rs_sse4_1
av1_convolve_x_sr
av1_convolve_x_sr_avx2
av1_convolve_x_sr_c
av1_convolve_x_sr_sse2
av1_convolve_y_sr
av1_convolve_y_sr_avx2
av1_convolve_y_sr_c
av1_convolve_y_sr_sse2
av1_copy_and_extend_frame
av1_copy_and_extend_frame_with_rect
av1_copy_frame_mvs
av1_copy_new_frame_dec
av1_copy_new_frame_enc
av1_copy_reference_dec
av1_copy_reference_enc
av1_copy_tree_context
av1_cospi_arr_data
av1_cost_coeffs_txb
av1_cost_color_map
av1_cost_tokens_from_cdf
av1_count_colors
av1_count_colors_highbd
av1_count_overlappable_neighbors
av1_crc32c_calculator_init
av1_crc_calculator_init
av1_create_compressor
av1_cyclic_refresh_alloc
av1_cyclic_refresh_check_golden_update
av1_cyclic_refresh_estimate_bits_at_q
av1_cyclic_refresh_free
av1_cyclic_refresh_get_rdmult
av1_cyclic_refresh_postencode
av1_cyclic_refresh_rc_bits_per_mb
av1_cyclic_refresh_reset_resize
av1_cyclic_refresh_set_golden_update
av1_cyclic_refresh_setup
av1_cyclic_refresh_update_parameters
av1_cyclic_refresh_update_segment
av1_dc_quant_Q3
av1_dc_quant_QTX
av1_dct_ac_sad
av1_dealloc_dec_jobs
av1_dec_free_cb_buf
av1_dec_row_mt_dealloc
av1_decode_frame_headers_and_setup
av1_decode_palette_tokens
av1_decode_tg_tiles_and_wrapup
av1_decoder_create
av1_decoder_remove
av1_default_coef_probs
av1_default_scan_orders
av1_diamond_search_sad_c
av1_disable_segfeature
av1_disable_segmentation
av1_dr_prediction_z1_c
av1_dr_prediction_z2_c
av1_dr_prediction_z3_c
av1_edge_exists
av1_enable_segfeature
av1_enable_segmentation
av1_encode_block_intra
av1_encode_dv
av1_encode_frame
av1_encode_intra_block_plane
av1_encode_mv
av1_encode_sb
av1_encode_sb_row
av1_encode_sby_pass1
av1_encode_tile
av1_encode_tiles_mt
av1_encode_tiles_row_mt
av1_end_first_pass
av1_estimate_bits_at_q
av1_estimate_qp_gop
av1_fadst16_new
av1_fadst4_new
av1_fadst4_new_sse4_1
av1_fadst8_new
av1_fdct16_new
av1_fdct32_new
av1_fdct32_new_sse4_1
av1_fdct4_new
av1_fdct64_new
av1_fdct64_new_sse4_1
av1_fdct8_new
av1_fdwt8x8_uint8_input_c
av1_fidentity16_c
av1_fidentity32_c
av1_fidentity4_c
av1_fidentity8_c
av1_fill_coeff_costs
av1_fill_mode_rates
av1_filter_block_plane_horz
av1_filter_block_plane_horz_test
av1_filter_block_plane_vert
av1_filter_block_plane_vert_test
av1_filter_intra_edge
av1_filter_intra_edge_c
av1_filter_intra_edge_high
av1_filter_intra_edge_high_c
av1_filter_intra_edge_high_sse4_1
av1_filter_intra_edge_sse4_1
av1_filter_intra_predictor
av1_filter_intra_predictor_c
av1_filter_intra_predictor_sse4_1
av1_filter_intra_taps
av1_find_best_obmc_sub_pixel_tree_up
av1_find_best_ref_mvs
av1_find_best_ref_mvs_from_stack
av1_find_best_sub_pixel_tree
av1_find_best_sub_pixel_tree_pruned
av1_find_best_sub_pixel_tree_pruned_evenmore
av1_find_best_sub_pixel_tree_pruned_more
av1_find_mv_refs
av1_first_pass
av1_foreach_rest_unit_in_plane
av1_foreach_rest_unit_in_row
av1_foreach_transformed_block
av1_foreach_transformed_block_in_plane
av1_frame_error
av1_frame_init_quantizer
av1_frame_type_qdelta
av1_free_above_context_buffers
av1_free_context_buffers
av1_free_internal_frame_buffers
av1_free_mc_tmp_buf
av1_free_pc_tree
av1_free_ref_frame_buffers
av1_free_restoration_buffers
av1_free_restoration_struct
av1_free_txb_buf
av1_full_pixel_search
av1_fwd_txfm
av1_fwd_txfm2d_16x16
av1_fwd_txfm2d_16x16_c
av1_fwd_txfm2d_16x16_sse4_1
av1_fwd_txfm2d_16x32
av1_fwd_txfm2d_16x32_c
av1_fwd_txfm2d_16x32_sse4_1
av1_fwd_txfm2d_16x4
av1_fwd_txfm2d_16x4_c
av1_fwd_txfm2d_16x4_sse4_1
av1_fwd_txfm2d_16x64
av1_fwd_txfm2d_16x64_c
av1_fwd_txfm2d_16x64_sse4_1
av1_fwd_txfm2d_16x8
av1_fwd_txfm2d_16x8_c
av1_fwd_txfm2d_16x8_sse4_1
av1_fwd_txfm2d_32x16
av1_fwd_txfm2d_32x16_c
av1_fwd_txfm2d_32x16_sse4_1
av1_fwd_txfm2d_32x32
av1_fwd_txfm2d_32x32_c
av1_fwd_txfm2d_32x32_sse4_1
av1_fwd_txfm2d_32x64
av1_fwd_txfm2d_32x64_c
av1_fwd_txfm2d_32x64_sse4_1
av1_fwd_txfm2d_32x8
av1_fwd_txfm2d_32x8_c
av1_fwd_txfm2d_32x8_sse4_1
av1_fwd_txfm2d_4x16
av1_fwd_txfm2d_4x16_c
av1_fwd_txfm2d_4x16_sse4_1
av1_fwd_txfm2d_4x4
av1_fwd_txfm2d_4x4_c
av1_fwd_txfm2d_4x4_sse4_1
av1_fwd_txfm2d_4x8
av1_fwd_txfm2d_4x8_c
av1_fwd_txfm2d_4x8_sse4_1
av1_fwd_txfm2d_64x16
av1_fwd_txfm2d_64x16_c
av1_fwd_txfm2d_64x16_sse4_1
av1_fwd_txfm2d_64x32
av1_fwd_txfm2d_64x32_c
av1_fwd_txfm2d_64x32_sse4_1
av1_fwd_txfm2d_64x64
av1_fwd_txfm2d_64x64_c
av1_fwd_txfm2d_64x64_sse4_1
av1_fwd_txfm2d_8x16
av1_fwd_txfm2d_8x16_c
av1_fwd_txfm2d_8x16_sse4_1
av1_fwd_txfm2d_8x32
av1_fwd_txfm2d_8x32_c
av1_fwd_txfm2d_8x32_sse4_1
av1_fwd_txfm2d_8x4
av1_fwd_txfm2d_8x4_c
av1_fwd_txfm2d_8x4_sse4_1
av1_fwd_txfm2d_8x8
av1_fwd_txfm2d_8x8_c
av1_fwd_txfm2d_8x8_sse4_1
av1_fwht4x4_c
av1_gen_fwd_stage_range
av1_gen_inv_stage_range
av1_generate_block_2x2_hash_value
av1_generate_block_hash_value
av1_get_MBs
av1_get_active_map
av1_get_adaptive_rdmult
av1_get_block_hash_value
av1_get_comp_reference_type_context
av1_get_compound_type_mask
av1_get_compressed_data
av1_get_crc32c_value
av1_get_crc32c_value_c
av1_get_crc32c_value_sse4_2
av1_get_crc_value
av1_get_entropy_contexts
av1_get_frame_buffer
av1_get_frame_to_show
av1_get_fwd_txfm_cfg
av1_get_global_headers
av1_get_horver_correlation_full
av1_get_horver_correlation_full_avx2
av1_get_horver_correlation_full_c
av1_get_horver_correlation_full_sse4_1
av1_get_intra_cost_penalty
av1_get_intra_inter_context
av1_get_inv_txfm_cfg
av1_get_last_show_frame
av1_get_max_filter_level
av1_get_mvpred_av_var
av1_get_mvpred_mask_var
av1_get_mvpred_var
av1_get_nz_map_contexts
av1_get_nz_map_contexts_c
av1_get_nz_map_contexts_sse2
av1_get_obmc_mask
av1_get_palette_cache
av1_get_palette_color_index_context
av1_get_palette_delta_bits_v
av1_get_pred_context_comp_bwdref_p
av1_get_pred_context_comp_bwdref_p1
av1_get_pred_context_comp_ref_p
av1_get_pred_context_comp_ref_p1
av1_get_pred_context_comp_ref_p2
av1_get_pred_context_single_ref_p1
av1_get_pred_context_single_ref_p2
av1_get_pred_context_single_ref_p3
av1_get_pred_context_single_ref_p4
av1_get_pred_context_single_ref_p5
av1_get_pred_context_single_ref_p6
av1_get_pred_context_switchable_interp
av1_get_pred_context_uni_comp_ref_p
av1_get_pred_context_uni_comp_ref_p1
av1_get_pred_context_uni_comp_ref_p2
av1_get_preview_raw_frame
av1_get_qindex
av1_get_quantizer
av1_get_raw_frame
av1_get_ref_mv
av1_get_ref_mv_from_stack
av1_get_reference_mode_context
av1_get_sb_cols_in_tile
av1_get_sb_rows_in_tile
av1_get_sby_perpixel_variance
av1_get_scaled_ref_frame
av1_get_switchable_rate
av1_get_tile_limits
av1_get_tile_rect
av1_get_tx_scale
av1_get_txb_entropy_context
av1_get_upscale_convolve_step
av1_haar_ac_sad
av1_haar_ac_sad_8x8_uint8_input
av1_has_exact_match
av1_hash_get_first_iterator
av1_hash_is_horizontal_perfect
av1_hash_is_vertical_perfect
av1_hash_table_count
av1_hash_table_create
av1_hash_table_destroy
av1_hash_table_init
av1_hex_search
av1_high_get_sby_perpixel_variance
av1_highbd_block_error
av1_highbd_block_error_c
av1_highbd_block_error_sse2
av1_highbd_convolve_2d_copy_sr
av1_highbd_convolve_2d_copy_sr_avx2
av1_highbd_convolve_2d_copy_sr_c
av1_highbd_convolve_2d_copy_sr_sse2
av1_highbd_convolve_2d_facade
av1_highbd_convolve_2d_scale
av1_highbd_convolve_2d_scale_c
av1_highbd_convolve_2d_scale_sse4_1
av1_highbd_convolve_2d_sr
av1_highbd_convolve_2d_sr_avx2
av1_highbd_convolve_2d_sr_c
av1_highbd_convolve_2d_sr_ssse3
av1_highbd_convolve_horiz_rs
av1_highbd_convolve_horiz_rs_c
av1_highbd_convolve_horiz_rs_sse4_1
av1_highbd_convolve_x_sr
av1_highbd_convolve_x_sr_avx2
av1_highbd_convolve_x_sr_c
av1_highbd_convolve_x_sr_ssse3
av1_highbd_convolve_y_sr
av1_highbd_convolve_y_sr_avx2
av1_highbd_convolve_y_sr_c
av1_highbd_convolve_y_sr_ssse3
av1_highbd_dr_prediction_z1_c
av1_highbd_dr_prediction_z2_c
av1_highbd_dr_prediction_z3_c
av1_highbd_fwd_txfm
av1_highbd_fwht4x4_c
av1_highbd_inv_txfm2d_add_universe_avx2
av1_highbd_inv_txfm2d_add_universe_sse4_1
av1_highbd_inv_txfm_add
av1_highbd_inv_txfm_add_16x16
av1_highbd_inv_txfm_add_16x16_c
av1_highbd_inv_txfm_add_16x16_sse4_1
av1_highbd_inv_txfm_add_16x32
av1_highbd_inv_txfm_add_16x32_c
av1_highbd_inv_txfm_add_16x32_sse4_1
av1_highbd_inv_txfm_add_16x4
av1_highbd_inv_txfm_add_16x4_c
av1_highbd_inv_txfm_add_16x4_sse4_1
av1_highbd_inv_txfm_add_16x64_c
av1_highbd_inv_txfm_add_16x8
av1_highbd_inv_txfm_add_16x8_c
av1_highbd_inv_txfm_add_16x8_sse4_1
av1_highbd_inv_txfm_add_32x16
av1_highbd_inv_txfm_add_32x16_c
av1_highbd_inv_txfm_add_32x16_sse4_1
av1_highbd_inv_txfm_add_32x32
av1_highbd_inv_txfm_add_32x32_avx2
av1_highbd_inv_txfm_add_32x32_c
av1_highbd_inv_txfm_add_32x32_sse4_1
av1_highbd_inv_txfm_add_32x64_c
av1_highbd_inv_txfm_add_32x8
av1_highbd_inv_txfm_add_32x8_c
av1_highbd_inv_txfm_add_32x8_sse4_1
av1_highbd_inv_txfm_add_4x16
av1_highbd_inv_txfm_add_4x16_c
av1_highbd_inv_txfm_add_4x16_sse4_1
av1_highbd_inv_txfm_add_4x4
av1_highbd_inv_txfm_add_4x4_c
av1_highbd_inv_txfm_add_4x4_sse4_1
av1_highbd_inv_txfm_add_4x8
av1_highbd_inv_txfm_add_4x8_c
av1_highbd_inv_txfm_add_4x8_sse4_1
av1_highbd_inv_txfm_add_64x16_c
av1_highbd_inv_txfm_add_64x32_c
av1_highbd_inv_txfm_add_64x64_c
av1_highbd_inv_txfm_add_8x16
av1_highbd_inv_txfm_add_8x16_c
av1_highbd_inv_txfm_add_8x16_sse4_1
av1_highbd_inv_txfm_add_8x32
av1_highbd_inv_txfm_add_8x32_c
av1_highbd_inv_txfm_add_8x32_sse4_1
av1_highbd_inv_txfm_add_8x4
av1_highbd_inv_txfm_add_8x4_c
av1_highbd_inv_txfm_add_8x4_sse4_1
av1_highbd_inv_txfm_add_8x8
av1_highbd_inv_txfm_add_8x8_c
av1_highbd_inv_txfm_add_8x8_sse4_1
av1_highbd_inv_txfm_add_avx2
av1_highbd_inv_txfm_add_c
av1_highbd_inv_txfm_add_sse4_1
av1_highbd_iwht4x4_16_add_c
av1_highbd_iwht4x4_1_add_c
av1_highbd_iwht4x4_add
av1_highbd_jnt_convolve_2d
av1_highbd_jnt_convolve_2d_avx2
av1_highbd_jnt_convolve_2d_c
av1_highbd_jnt_convolve_2d_copy
av1_highbd_jnt_convolve_2d_copy_avx2
av1_highbd_jnt_convolve_2d_copy_c
av1_highbd_jnt_convolve_2d_copy_sse4_1
av1_highbd_jnt_convolve_2d_sse4_1
av1_highbd_jnt_convolve_x
av1_highbd_jnt_convolve_x_avx2
av1_highbd_jnt_convolve_x_c
av1_highbd_jnt_convolve_x_sse4_1
av1_highbd_jnt_convolve_y
av1_highbd_jnt_convolve_y_avx2
av1_highbd_jnt_convolve_y_c
av1_highbd_jnt_convolve_y_sse4_1
av1_highbd_pixel_proj_error
av1_highbd_pixel_proj_error_avx2
av1_highbd_pixel_proj_error_c
av1_highbd_pixel_proj_error_sse4_1
av1_highbd_quantize_b_facade
av1_highbd_quantize_dc_facade
av1_highbd_quantize_fp
av1_highbd_quantize_fp_avx2
av1_highbd_quantize_fp_c
av1_highbd_quantize_fp_facade
av1_highbd_quantize_fp_sse4_1
av1_highbd_resize_frame420
av1_highbd_resize_frame422
av1_highbd_resize_frame444
av1_highbd_resize_plane
av1_highbd_temporal_filter_apply_c
av1_highbd_warp_affine

Sections

.text
Size: 23.8MB - Virtual size: 23.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rotext
Size: 109KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 181KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 9.7MB - Virtual size: 9.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e456fbce099e309bfeaff191fcf3b1ee

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cdCertificate

Extended Key Usages

Key Usages

6a:e1:85:c2:92:81:e4:14:ea:62:0e:1dCertificate

Extended Key Usages

Key Usages

40:cb:42:89:5c:3e:74:94:26:97:ad:2fCertificate

Extended Key Usages

Key Usages

04:00:00:00:00:01:31:89:c6:50:04Certificate

Key Usages

04:00:00:00:00:01:21:58:53:08:a2Certificate

Key Usages

20:3e:9f:9c:65:a4:62:ce:88:5d:59:c6:1d:1c:ac:b2:d0:fa:2e:e7Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

wininet

gdiplus

version

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

psapi

ws2_32

Sections

.text Size: 2.8MB - Virtual size: 2.8MB

.rdata Size: 2.7MB - Virtual size: 2.7MB

.data Size: 399KB - Virtual size: 496KB

.rsrc Size: 187KB - Virtual size: 186KB

0beab09df389f452d572038c5f632fa1

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

ole32

user32

Exports

Exports

Sections

.text Size: 23.8MB - Virtual size: 23.8MB

.rotext Size: 109KB - Virtual size: 112KB

.data Size: 181KB - Virtual size: 184KB

.rdata Size: 5.4MB - Virtual size: 5.4MB

.rodata Size: 16KB - Virtual size: 16KB

.bss Size: 9.7MB - Virtual size: 9.7MB

.edata Size: 39KB - Virtual size: 40KB

.idata Size: 13KB - Virtual size: 16KB

.CRT Size: 512B - Virtual size: 4KB

.tls Size: 512B - Virtual size: 4KB

.rsrc Size: 1.8MB - Virtual size: 1.8MB

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

6a:e1:85:c2:92:81:e4:14:ea:62:0e:1d
Certificate

40:cb:42:89:5c:3e:74:94:26:97:ad:2f
Certificate

04:00:00:00:00:01:31:89:c6:50:04
Certificate

04:00:00:00:00:01:21:58:53:08:a2
Certificate

20:3e:9f:9c:65:a4:62:ce:88:5d:59:c6:1d:1c:ac:b2:d0:fa:2e:e7
Signer

.text
Size: 2.8MB - Virtual size: 2.8MB

.rdata
Size: 2.7MB - Virtual size: 2.7MB

.data
Size: 399KB - Virtual size: 496KB

.rsrc
Size: 187KB - Virtual size: 186KB

.text
Size: 23.8MB - Virtual size: 23.8MB

.rotext
Size: 109KB - Virtual size: 112KB

.data
Size: 181KB - Virtual size: 184KB

.rdata
Size: 5.4MB - Virtual size: 5.4MB

.rodata
Size: 16KB - Virtual size: 16KB

.bss
Size: 9.7MB - Virtual size: 9.7MB

.edata
Size: 39KB - Virtual size: 40KB

.idata
Size: 13KB - Virtual size: 16KB

.CRT
Size: 512B - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 4KB

.rsrc
Size: 1.8MB - Virtual size: 1.8MB