TELEFONOSDEMEXICO[.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

TELEFONOSDEMEXICO.rar
Size

5.0MB
MD5

f67caec7a79834ae75203bc590875443
SHA1

370ab7301101261d18e7ddfc8b33a372d11fc762
SHA256

0ca989caf3674f15e7072c37e9c89c48cef3500f0f02bc1f3786f71625869c1a
SHA512

ff8d7452e4ee7fad6f53b88c2072ceff589fb521c0af30670f7c2555c9bf75832f8878d09a1b3aa5f897f191f7b1ab7b721bad94bb5008d4e0779bd92704fac5
SSDEEP

98304:LTvwuWN87KCxGr8b6SWJnjzmQwg55VTjrHShKqBBKweSshKVq8SJgvuKG:guf7dxGCUJj/ZHHSDzc8VRShKG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/libvlc.dll

Files

TELEFONOSDEMEXICO.rar
.rar
TELEFONOS DE MEXICO.exe
.exe windows:4 windows x64 arch:x64

9a00b4d9cbb0969e8648268eb15ff6e1

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2013, 12:00

Not After

15/01/2038, 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:d0:8e:bd:a0:6b:e0:7c:81:5e:a7:af:25:ef:68:75
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

07/06/2024, 00:00

Not After

08/06/2027, 23:59

Subject

CN=VideoLAN,O=VideoLAN,L=Paris,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2013, 12:00

Not After

15/01/2038, 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:d0:8e:bd:a0:6b:e0:7c:81:5e:a7:af:25:ef:68:75
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

07/06/2024, 00:00

Not After

08/06/2027, 23:59

Subject

CN=VideoLAN,O=VideoLAN,L=Paris,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

28:2a:aa:08:e7:fc:95:81:4a:af:f4:cb:44:da:88:14:a9:85:7a:ba:0a:d7:e9:ab:c8:4c:8a:89:7d:44:18:78
Signer

Actual PE Digest

28:2a:aa:08:e7:fc:95:81:4a:af:f4:cb:44:da:88:14:a9:85:7a:ba:0a:d7:e9:ab:c8:4c:8a:89:7d:44:18:78

Digest Algorithm

sha256

PE Digest Matches

true

9b:00:2c:44:d8:68:8b:47:84:8a:07:a5:35:e5:4c:3a:ac:6a:a3:25
Signer

Actual PE Digest

9b:00:2c:44:d8:68:8b:47:84:8a:07:a5:35:e5:4c:3a:ac:6a:a3:25

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Imports

libvlc

libvlc_add_intf
libvlc_new
libvlc_playlist_play
libvlc_release
libvlc_set_app_id
libvlc_set_user_agent
libvlc_wait

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegOpenKeyExW
RegQueryValueExW

kernel32

CloseHandle
CreateDirectoryW
CreateFileW
CreateSemaphoreW
CreateThread
DeleteCriticalSection
DeleteFileW
DuplicateHandle
EnterCriticalSection
FindClose
FindFirstFileW
FindNextFileW
FreeLibrary
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessId
GetStartupInfoA
GetSystemTimeAsFileTime
GetThreadContext
GetTickCount
HeapSetInformation
InitializeCriticalSection
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryW
LocalFree
MultiByteToWideChar
OpenThread
QueryPerformanceCounter
RaiseException
ReleaseSemaphore
ResetEvent
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetErrorMode
SetEvent
SetLastError
SetNamedPipeHandleState
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TransactNamedPipe
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
VirtualQueryEx
WaitForMultipleObjects
WaitForSingleObject
WaitNamedPipeW
WideCharToMultiByte
WriteFile

msvcrt

__C_specific_handler
___lc_codepage_func
__dllonexit
__getmainargs
__initenv
__iob_func
__lconv_init
__mb_cur_max
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_errno
_exit
_fileno
_fmode
_fstat64
fwprintf
_initterm
_lock
_lseeki64
_onexit
_setmode
_strnicmp
_unlock
abort
calloc
exit
fclose
fflush
fopen
fprintf
fputc
fputs
fputwc
free
fwprintf
fwrite
getenv
isspace
iswctype
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
raise
rand
realloc
setlocale
setvbuf
signal
sprintf
strcmp
strcoll
strerror
strftime
strlen
strncmp
strtoul
strxfrm
towlower
towupper
vfprintf
wcscat_s
wcscmp
wcscoll
wcscpy
wcsftime
wcslen
wcsncmp
wcstol
wcsxfrm
_snwprintf
_write
_read
_putenv
_open
_fileno
_fdopen
_close

shell32

CommandLineToArgvW
SHGetFolderPathW

user32

MessageBoxW

wininet

HttpAddRequestHeadersW
HttpOpenRequestW
HttpQueryInfoW
HttpSendRequestW
InternetCloseHandle
InternetConnectW
InternetCrackUrlW
InternetOpenW
InternetQueryDataAvailable
InternetReadFile
InternetSetOptionW

Exports

Exports

WinMain

Sections

.text
Size: 682KB - Virtual size: 682KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.buildid
Size: 512B - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 66B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libvlc.dll
.dll windows:6 windows x64 arch:x64

bd21104544728aa756fc1c5830066a12

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

W>N8?mcb7QiVk;:+cp{I@<vzaN15q]2b*Yz bghC8f,81rNgCUH^cb#dZRd_$ug`8u'ZM''Ob9d2M ^>2

Imports

advapi32

RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegEnumKeyExW
RegEnumValueW
GetTokenInformation

bcrypt

BCryptEncrypt
BCryptDecrypt
BCryptImportKey
BCryptOpenAlgorithmProvider
BCryptSetProperty
BCryptCloseAlgorithmProvider
BCryptDestroyKey
BCryptGenRandom

kernel32

TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
RaiseException
RtlPcToFileHeader
InterlockedFlushSList
FormatMessageW
GetCPInfoExW
GetConsoleOutputCP
GetStdHandle
MultiByteToWideChar
WideCharToMultiByte
GetConsoleMode
GetFileType
ReadFile
ReadConsoleW
WriteFile
WriteConsoleW
GetCurrentProcess
GetConsoleCP
CloseHandle
GetExitCodeProcess
CreateProcessW
TerminateProcess
OpenProcess
K32EnumProcesses
GetProcessId
DuplicateHandle
CreatePipe
ExitProcess
RaiseFailFastException
GetTickCount64
GetProcAddress
LCIDToLocaleName
FindNLSStringEx
CompareStringEx
FindStringOrdinal
GetUserPreferredUILanguages
InitializeConditionVariable
WakeConditionVariable
CreateThreadpoolTimer
SetThreadpoolTimer
CloseThreadpoolIo
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FileTimeToSystemTime
GetLastError
GetCurrentProcessId
GetCurrentThreadId
GetSystemTime
LocalAlloc
LocalFree
QueryPerformanceCounter
QueryPerformanceFrequency
SetLastError
SystemTimeToFileTime
WaitForMultipleObjectsEx
WaitForSingleObject
GetCurrentThread
TzSpecificLocalTimeToSystemTime
Sleep
GetEnvironmentStringsW
FreeEnvironmentStringsW
LocaleNameToLCID
LCMapStringEx
CompareStringOrdinal
GetLocaleInfoEx
EnumSystemLocalesEx
EnumTimeFormatsEx
GetCalendarInfoEx
EnumCalendarInfoExEx
ResolveLocaleName
CancelIoEx
CancelSynchronousIo
CreateIoCompletionPort
SleepConditionVariableCS
CopyFileExW
CreateDirectoryW
CreateFileW
CreateThreadpoolIo
StartThreadpoolIo
CancelThreadpoolIo
WaitForThreadpoolWaitCallbacks
DeleteFileW
DeviceIoControl
ExpandEnvironmentStringsW
FindClose
FindFirstFileExW
FlushFileBuffers
FreeLibrary
GetCurrentDirectoryW
GetFileAttributesExW
GetFileInformationByHandleEx
GetFullPathNameW
GetLongPathNameW
GetModuleFileNameW
GetOverlappedResult
GetSystemDirectoryW
LoadLibraryExW
OpenThread
QueryUnbiasedInterruptTime
SetFileAttributesW
SetFileInformationByHandle
SetFilePointerEx
SetThreadErrorMode
CreateThread
ResumeThread
GetThreadPriority
SetThreadPriority
GetDynamicTimeZoneInformation
GetTimeZoneInformation
GetCurrentProcessorNumberEx
SetEvent
ResetEvent
CreateEventExW
GetEnvironmentVariableW
GetFileAttributesW
WriteProcessMemory
GetThreadContext
SetThreadContext
VirtualAllocEx
FreeConsole
FlushProcessWriteBuffers
WaitForSingleObjectEx
RtlVirtualUnwind
RtlCaptureContext
RtlRestoreContext
AddVectoredExceptionHandler
FlsAlloc
FlsGetValue
FlsSetValue
CreateEventW
SwitchToThread
SuspendThread
FlushInstructionCache
VirtualAlloc
VirtualProtect
VirtualFree
QueryInformationJobObject
GetModuleHandleW
GetModuleHandleExW
GetProcessAffinityMask
InitializeContext
GetEnabledXStateFeatures
SetXStateFeaturesMask
VirtualQuery
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
DebugBreak
SleepEx
GlobalMemoryStatusEx
GetSystemInfo
GetLogicalProcessorInformation
GetLogicalProcessorInformationEx
GetLargePageMinimum
VirtualUnlock
VirtualAllocExNuma
IsProcessInJob
GetNumaHighestNodeNumber
GetProcessGroupAffinity
K32GetProcessMemoryInfo
RtlUnwindEx
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlLookupFunctionEntry
InitializeSListHead

ole32

CoTaskMemAlloc
CoTaskMemFree
CoGetApartmentType
CoWaitForMultipleHandles
CoUninitialize
CoInitializeEx
CoCreateGuid

user32

LoadStringW

ws2_32

gethostname
WSACleanup
WSAStartup

api-ms-win-crt-math-l1-1-0

modf
tan
nan
nanf
sqrt
fmod
fmodf
ceil
pow
cos
log10
floor
sin

api-ms-win-crt-heap-l1-1-0

calloc
malloc
free
_callnewh

api-ms-win-crt-string-l1-1-0

wcsncmp
strncpy_s
_stricmp
strcmp
strcpy_s

api-ms-win-crt-convert-l1-1-0

strtoull

api-ms-win-crt-runtime-l1-1-0

_initterm
_register_onexit_function
_initialize_onexit_table
abort
_execute_onexit_table
_configure_narrow_argv
_crt_atexit
_seh_filter_dll
_initterm_e
_cexit
terminate
_initialize_narrow_environment

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__acrt_iob_func
__stdio_common_vsprintf_s
__stdio_common_vsscanf

Exports

Exports

06RSmIddpRA
08TfhP6rs
0C3qj28SSC1dpbr4B
0CRgCiPVv
0D939gHxtA5cy0c
0Gz6blo5
0IhWat4xTMvmZJcRKz
0LoKklCMjIhPWGCoZgBDxF
0PK7PAxgd1ri8JmXxyTtud6N
0SDYe78Cmwo9sT
0TRWikqwvLHS5ZtngNDW7nx
0ToFugf6T6NxIyslIcRqO7z7V
0U7WGMAUYGAlJrGouEEaGra3Sv239H
0aQkHMC2G2Glv
0chMnkIr
0eKyDiEGkl3L
0fAOmikpQpZLwpy
0gX3zPsYx
0haiDyoZaZsVc2
0iBdUrZwVsKSC77
0jWxCjXllLTBPhLknZH55dYrz0qwHZ
0pDnemO5hSSzu
0rPfov6CYBdeHFeY
10RdXb91VWdCq3nz8lMh
12QsMaibrwgZCl
13WRKLcd
16EL80iC56etAnDGcDk1RSu9ef
18TYOnyn9UYe
1BmlU4FtLZDSM5
1CvDkRJt18vhlWAc0rqhvOayq20t
1EfDr98KsUouzVH4z
1L0ymqrmtwgd2lqP4DD99pDADha4riHS
1LmPEbwChdD4H
1MHiOAWHeFEIxigHiGhRX1D
1No2SZcD0w50WNG3ZvybA4gvvqS4
1OZW8h72LjYs
1P1KztNOf0InNG5zwsQsRMFI26qY
1RIKRucIIl92hlqvY1dITfm
1SeSpceGTuygMOkgtvSbthZvTttw
1TtRB8Ju6mqJprLLZfE
1Vplq6msp4Id
1W6RAV3ZlnEnDNFtyvH
1ZNphyHixmqrDJj
1aBs64pzZ4DzUVH7wHKsyrDCH7uRoTe
1aRdBtnVb2t
1d5UCPdQYxBQCwbYS32fi2EmRtDYAAkj
1fdvUfgC5wJqThyp9h2spijs
1fggDzLMWKv1
1hUAU6LicYfZHJod1
1nOBm44s7qXYWRsUc
1nUfCF1OKnS9fqd
1oiqk5PwHlz3sWUdrsbeSBuFa1ngoAES
1pKXIr45Oz2Way4HzONb27
1qo5VORpn1Nha8fvKI
1sNRkfeToHonxkgYhcJUx2WZAvXzdQ0q
1sW9rGQtVRo973HSBqEbH70z5UdBTp
1u0aHqjWNCfpXWhvmc
1uF8mAlgvnAZ0aD3T7HP9dTvDxGdFw
1vZv2xwctD
1w7DhUA1N6ZkMBEDlAvlga0veTU
1wazLlvEXzFW
1yVvmf0tVaxMds
1ylIbbLUMxlILcnFR
1z8lJaI7p8LMiyryOu2DGsv
208gupZVCHs9CKFC7
22iaxhCeozgJFl6peHHZaA
23yK2cmUy0p
27wLaHDgRkNZw4gz1hASJqs
284ZrkCvMUReD3EUUnNLxy
2AFHbMMP4uqz8vrMqcRYG
2BXls9um4XNuMNb8
2Bci9lW90pbXRfDQ5p2ixeqbb9bNtj
2EhYO5uyqiyii3q1G
2FHngE3SB
2I20xCoqym0t0pV3JWj69eCs
2ICIBjwB9SEcJALa0iT3zm
2OOEibLGkEGt4EQCX88Zz8Qb
2PGovsJgnjSPo
2RpIvt9YFyxGedNy8ZybWmWnMCtO
2SA3Dh6fMm8ByxRI
2SGFtbVQaPzwiu45
2SvZr73x
2UsYN8yAyE7j42TMxj6BBB
2dVNuDzbd19DDk8wy2bk
2dtMinkC7mKzbnGdr6ZcyNHVpUViw5D6
2eAKbp1kdBc7m
2gr4C7Er8GCM3oFYr5fW
2iYL5nd8
2kvn5YiZfrMgNzZZQYYQn1kcZBMU7
2lTbcVofylWBPSPCJPJcFGjtxbHsbR
2lls155
2mQdYkaQYhvsN4LJtNML3ezqvzuUbg
2qpoYIyn
2r3hYhgihFJpmPJAhPl9OgQjW
2siEYqfJ1FCIjyqip9p
2ud6fNuUWW3q2TVQpnkW2MPNjLkD3tE
2zN8DzAzI
34OoO9DsZPgaF80KHcFzI
36vyoxNzd
3APU3GqyCgMGAoyX
3FT8RJ7dO4gucVdimsgAynI9jYF
3GTg6zsDqeF37CiZmJkOXUN
3HqOZk9cArTst7YBZBBNkpmExdl
3JXKQi2yNVwLN9tJDdCGlOnV8
3K0NJ4OKsF8ngFVsbQQVe
3O56ZdIF45exst4SbNV
3Prf5mXGJ9sb4B8
3R3nWwIPHfoI1Xu1TioYj7
3W7DbQ4fk9cNN6q63hK3YdLcno82
3ZepM7X0qiTZEtx4U4D
3ak2oBtlfKbdfKz1y8z
3fn5lHq
3iCJpIcc
3iT9YZX2Q9H4TtdBHMCXdZkK314GewKN
3jFJ5tkyHOKjMuI6NHmKfn6
3nQ7mmX
3nkVS8z5PUwp6o0TlV9T0alOZfmcZ
3pe07ZRY4ub0io8auLsaQARvVKw0LNA
3rkaYPHnCThQ4kuq1Q
3s25kAfmgocYVD2wZ3g8vlMb0
3wagsBUxrIKFUl
3wp9D9M6zVS6Sh1gcxuUket
44DvfZW0Lf5VU9hM0vbuDtkxZ2pnohQ
49Hw3JBaCbAtN7x
49Id6Mg0EvpCrXAAwH8AHZmWn
4BekM5oM
4EshEA4RnUgXNdfNRNsNiNu31Megos3e
4Fc4bHje9w
4GAtMz6S2KKngo8eEO7V9
4HHC6q4Y19fK
4IYq0hCnJaVm
4IgpI2y5B3ASCJHoehE
4PYKpWRGqSZxHRa4HZahR
4S6A6O2z
4WdV7kCSfMhy46YvLJzOCYBbhARwF4v
4X3ViL4eti1zxRiR1HnQnhn
4Y89kAeCMi
4cvthAu6q1KE3fDbi3RcwAi
4g30TZJXr
4oh1SzoNa1OsGC5bTkceARQhpAud
4twpykqu32tdLGfTkafFr
4uzRHIcHSPdzyIyOMZ
4w39d3cHW0vljXmYofUkZIiViXetH
4xnIEWMDOpIySIFZHtZBEBfJt
4yB4wjY9tPYpL6Gemtg7xsLtvxDxVoc
53dmhl3jb9
54I0B5UsRpHTIHBE
57PeTZSxxWBKAkk
58h6qOIo
5D77IgXprc6G7C
5GlW92a0beb2RZ9PfcQ
5IEdqdDdqaOYiA
5J2o4281nbpskLVRNwjzpTbeyJOH2Hig
5JmQ85FKmQKNGUbh8QSzCSnEcWla
5KW1QUp7emj4oTfsWoIeq3g4PtN
5MezoXLZCML0l77ZrUolPmgTHSnv34jb
5ORfpuG86iGjRAuidCPikTwnfSJCABk
5OvrbtgRUQotFPlUhMQ4ldKFT
5PBPsFgM4l
5SAEHpw
5SBBtmX8DzKMJL
5YdLmBHLlaYz0psGKzE66i
5YiX86R9iBn7zGdQxAMt3sgfVLPzf
5Z4Q4nLdFpEbcu3tdm9Vss1DW
5bXlR8GJh5F418PxA1v
5bnXOGKnU
5emh7A2
5fcBCZno5ReTyeFbx7vmLe
5hL45m1HTxzfHodEzfMJnDo7CGXIkh
5icgpb3ysJQNPV67A93CyMg
5q9ZDCI3zOqEYs0WU7HuRZlJzkV
5uNmI9wJW50FSH6qyTr8j1zS
5ueszAEmk
5uy71IuimSYwX
5wQw32yUB
5yajo89jeTSHzMILAeinycVpOIIqs
63hUbudN
66nTPJSQDZS5tsCLsnM3
68kTHe6a4GFQ78ryjI1D9Cf
6AYHL0UEiV8sc0RSAf0Sm
6AnsgXPSOEMfsgq
6CgPqAuKHdam0fJ59WI9OPBnfOZRZ3
6CqtZbW87FgwJ4SwVMUIf62meW
6Dp7KCaXcZxTXvwUMcp
6ELK8BkmQP8jfRN96wlj1aH
6FoKYtb8dB7P4Dstfbsj3wiwqhDp6DW
6G0x5FK2nOLaZBvIO7jP57TrQuen
6GmMjLKyRLp25NI4zYfN
6LRnntbIS8Nd7gEwQfKGP6z7qp6q18ZK
6O0DrB3qMHDxvX7Bt
6QYqBHo0St3uH1r
6QYxqhGF
6VnsO0lP3QgcNJX8F48nbTrY
6WbpkhlQdVYsG5zNt
6WopZxqq2UKzwTReHna14LjX
6Xy5ZG9b6OpPdBlrb2bC
6eOlWhP9BzJVPH
6iBfozfO5slWcc5q0IH2G0MlpqQZn
6iupId5
6jAFOBe1LuWQXQnccLipAmFja
6lFM8S1mJ9WkIfHWDS3msgZmj
6mBL1YSzdbdG1xH8
6nCgCV1kTahF
6vEDYv2m681odh4Eel7rzFq6Kxx2Vd
6w6Mj5NwVuaNhE3DK94YccXSh
6wTmGh1vpal2DdrBKyH2rfvlAdDoY
6yCT5VwUVZptAH5ITQCUxO
70xCJCl13T6DAleyqnFboeikInn8XQa
73HUWfwIcUvQhQPoe47xrp3kUdUjsA
73ZSvjI8s
75ciAMcf7PVe8BfSNZnsfL
75fseeYEkxLKo
769ddqof4GNlzrpVcly4jrBUX
76qUFmhOQH2KoVp9
7BLDISY6KusqtwFcrGTkQoZ
7FZALrJ9JSeDfCFiWYTEh
7H7jUSs3GodLEEVZZeVTzB4k
7Ij0M8akPhVFzqpP43h0ISxoJlF
7Ipw6zhnEzeXAbHvLKQwgUgSbi691k
7JXbK9M6Wh5Qq3WUtKPKRZTEyko
7MOS9QYnlnx
7OpPoY3e3SxG0h
7S0QTKgz0zRkgyPx
7SD99kZ
7TrUlm6jVAy5K7rHhEP
7UZIfLcPh4LjD
7Z27ifQ0utPybGhBiYLhMhtv56y
7cthxX4e7X8p86
7hyQGYZopu5cK8aajWW
7lb3arkgGOq1hY0RNQQ51z3TFK
7pInZMyGm2j5rlRu8V63hmVmX4Dxi4
82Dx4OkFhpnIzA5XERIhvl5eXpNi4
85RdcGdym
86XRW3cu
87YpkO9fSVWp5Udp
87ihEv9wZdb6D7VYvPLq39
87uAU0yiuPh6iPgYOifBhY4
8Ap5k0Yt9f6c0Ty9MX6ONJiJsdE7p6
8CJFbPlzMYOw
8ENGQuML0SJYGhdoRIBjwl
8H5uzIviIy687kYXJMl
8IkeUWap9mqYt2TsNI
8KWiT8Bst8rwgMdC5TMDeJUkeT
8L9dnlDP4AL4A
8OHE4pR6vXorbtb0mS6U
8PTLspJ2hbJvZRzCI
8QMtee0NfFtoQo58aTrRMHunXDtTE5
8RVhDKkVGXY
8Rwg1PTLPSDYZ8li4u5
8UaVOxhQAbkaw31TOX
8Vn39QHIs9kKwg76Gbvyp
8W9ZHr9XMz3aApmOkRWr2iUniHHmouP
8YdzSV1JaW3A8rxO85iVb3xlNB7
8Zhht9VzmhqEzd
8bFGlZqoz
8dh5E8iSe5KAfz
8eU3ydrBAhbR5UTwyh7E56hXYP
8gsSGdnId
8i2NKqnve9aopEzPEV3j
8inv9NQTmH
8lYt1cVYFpRy
8m9XkN8dslSldbcpXhfrLU95AegRACm
8nrhIryXlrJxKg2tjg0F6SLT5j
8pR84xprX8z2D2kJ
8quMNsHp1
8tg1KCupuxk46
8woVAdS7Mj2yMAHeSsDt
8xOQwAQ7odAX
8zv9VBCquIwL
907CKP8o
90XNb9XGsH
91mxaxcHpeXYs7kq1J08jl22nWqp
94Bnop7eiNcgfCwqooGvJ1U
94ynhChTmW9nF4PV5
95MbOzCMwZAirCwHaSGe2RvI
99fySN2T8j
99wT4OfG5Gsot3Jrm3MB2b4DYGxxofN
9B2zDUaNAzuym
9E3Z4pe90WAL7Ff
9F9YtPyBjspsDwQZAOWfH9FnLwk92Pa
9FY7aZoz
9HWCnfO1aJ
9KAgvp4
9L173KERvdgiRkjz67mf
9MUSKpsbLuM1
9NTVVDlBe5xlPBzFNG9x
9QnJUSE7X3IYvvkPn
9Qy7BAUyBEaprof3MgeqXacdYeuhgzew
9UitRbOzd3
9Y17TXWJ
9YKZrrI802ee00u0o1LjGEKVnKj
9YxxjRCOk9nNHRLxooNpZqDOKaC
9ZeyX1lCE8uUPyDcXXlmSx
9bu6lJCwgNHTX4GXn
9eA7zdYHZvd4t
9fKcqWfMuX1vGKV0F60o
9h7YjAS9iFPaqgPZduCOZUiOVZ4JJ4L
9iBCaz9RcFMfYCpIN8v
9nndCgXZcusJWdVx01GxXWx3uTX9N
9oQ3vMj4FU7jmaBy1Ba
9occxoR
9qDLrDWgLK7A7SxyRNb7Fhm5TSW
9sOwBQy8TVl7ljscaIg1EHU5Fq9
9uJESzHUEZHbUDWRy
9v9JaoqOvFQOe
9vOVBolkG0aMuWk8m8jJSRxBXV8s
A051Gjo4ZIwgjao2d6BBtm
A3UjWEJWp0vHlnPgzYno8CINMOvLWN
A8nxNEgx3ITk4L6xpBxwIQy39lqom9
AB0oJIGUe5qqZ71apHO23q9vYIaqIIkL
ACQy5JQB
AGgWV51rwP4FlO
AHFygZkskgkhRSI
AJTGXcBG
AQo2bvKl4AtBzD8QwAvOsrvebiAScLK5
ASdGVKjjlzVUr
AY0pjxQ4JWvg986oltMAmx5OeFWgc5n
AZpannfIQ4w
AZpf93qnLqptzYx5mRSYD
AdTmsVRfW2VutfUZb4D6oTn
AeunenBTf1L1DSgVKgd05AceDw
AikxWk2UZDQCwWmZF4IOJX4
AjFEXRZbR5263FQ5bRG
AjV64Aad4FjIDzO
AjlB36oNYPK8F
AlnwEoy3LhJsWx
AmRlJl9DbP0YyAOx0nFDj6Ec5
AqgnhEikC3ZO6CdaWPHfy
AqvYoAAe6AL
AuH5kYI6pHDJ72ez2XI
AymHH96bWEyEAuL4VqHx8d
B2FjIhQLWUTEsKMdXCHJT
B4nu5aZw
B5zwZ1lg
BC2E3VYpp48uQNVF0Xd
BDmt9edGjA2jjt3gOT
BE0rbLLUyxSUgdezhWTfWTE9peAdRwp
BFzojkrya
BIKR0VsNBj
BOXemMIuzWCSvAlHBDwz
BOckV9NLU1THW
BOd3t2CNzSWG25YdgvcKGLBm7d5MU
BP7HdEOarmKz
BQoFWo9M
BSLOBReQtqpMcyrPuGTlbIV
BSMh87KGzPePK
BSaZMPsY81UZ2nydT1wiJ0V2egszM
BeiCLHoKRnMni5xRDOc2Y2ypMexW
BgPAU2DQeVsn7
BhO6uMVRp
BnYJfAdCTSV9nfrlHeeCSbPfzN8
Bpq5SQlYE4M
BtakWqr7NQ3sI4p3M6Jxlxo
Bu53LJrzoLGQa
BuXvVCYrqHu5ooBGh5
Bvx9k4Yg2nRCl47PSu9B
BwexAPkHOSsKmmxVbyTaZQ2qdw3Pptft
BzV66EVl8xzUNAjYPzPNSxFv9
C0l8SmulCy
C14c2TYiRHI0gP2t5yrND2Xjaf2u
C30Ezs9vLEyYSEa0lFPxL
C5k0w8qssBNA8s
C8XPG3ccd
CA9MbvJXpo8QSW9G
CAgsD7rK9PPXQo60kPfHUWy
CAmHQRHVKXTSVY5dhRk
CDRBd9hh72Zn2pIMD
CEOz0jiTOmQNK9HW0JsPHjShQq3qY7nS
CIsS7vv7kq5VbQB9unaDDbQJkwx82LA
CRPWwXFvDs6p8YD4d0it9mgCYLLG1NXQ
CSrKApmiE0Dxnne8dbfwChcFG
CUBvYus4pSXjqqQ30
CX2F4cIukPZBukjdv8KrdkUuUAN
CXWpf5pzHO33rnOCP
CXzxX07jIEo5p
CZz5uHnOvmiothhACJ2CfC7wNBgVXrd
CbQLK44LQs
CcfsF9Tpp0rOtTFeuGktE3omuMm8
CihqPbeg22naVvgyZGmozA9Sl1nCqU
CmxOSHhW7WhcNiKiMp2
CofXrPjDMJ7S00Pcvemh9JFWc1mG7
CtuJUoeU7HsJNW19F
CvXndVKWxyBec5Zrho9yxtj
CwReqqHArDJO5IVdD8khr
Cy4GlzBmAIMPCnlx6D7MhRg0yxU
D0jdMxhgyJAon1f3Lp1eBfENz9DN7B
D2VL78F
D390E60rLSywyOuMUB4DERZnxdTED
D97cLQLBoQ8kq9iyLcLb
DGSs9vmE0s7eS45Dy1
DKqLRMYcX5f5u6UdlvCB3jBkxp0
DOguQSWffo1m
DQ6UCfMfl4E1uhXLRRd
DS2wx69QQr3
Da09OmPp6cxVI36q7
Ddew7ktUSGunquOtCSu9og9
Ddz3wUA307UnewvM6rL1x9ub4S65t7d
DeSsFoL3uf8
Dn9KgM7m7mH
DnjmvAGrxzuCK2NR1Vm9Ojvt5
DpsCfKhG0IrEPxNHd7vUPwa
DpuQOc83MhQdXH2k
DrBt1XYCTGotbM7I
DrPaVku
DvsokJlSCYpZUX17f
DwCdM9XOUk
DxoCmMKmiiXp3D
E0azyN1y0n
E26ZRQj40xBJcp6ZWd0rXkG0ERiA
E4EgdqgqkWf6MUWpxTk03x2FV4r
E520U34ryoTKbJJRGy
E5t6Wd7jq0Yb7EaR0coSSMYv
E7avNMrcNwOL1PREK4ftQgDO
EAVxOuQaruq9r2fok7907P
EBIY0rEaxRmRtaWb
EBPtt6L8IAPf3KZtr8MMkoUQ7R4PCSjJ
EFf0LYP1bkbRTIhNRhVKPww
EMl7j2Vjn0xZp7LQ5NFhGOul6XodXvG
EN0GwBD0u4AiulXRoxCGVF
ENPyUcOP0PFjvOe
EQxUPHsy4TTDbvagpE
EU6AvFxXU1qkB2h
Ef9INFvHz6tOAvFy
Egf3mP0YOlYEWr1qT
EijYxfXYMKEb3KSrQzYAG
Eirgsv2WIGAul1QoKHF
EkNrap6jeRHvyCIk6bEr
EkZzsP6edF
ElG2LnJem3zlqclOnkgUYX6zCOwJ
Eom744hILWt4dDwcxDXOX5dQMjXo5
EpwQw81QxbN5
ErBffWqasuvxp2SJ6j58e25UHe
ErP0ybZTM2Utx7lmr
ErfxOA2VLU8K2G
EsJG6sNWywgqWF7PP8KEZgqRsnmkqA
EvXhOBzZSAAGVd
ExwpzeGEMINkE867onvrMFALm5d
F0XNk8bmJx1fdm775I
F1XaUyedfzAtGW3Wf4z
F2QqOqYqjRcijdMiBwc
F4JX9HRt8xH6TRVQkML4tHQu
F6QYqKNE5GuzBEfgt9rkur56TDu7jQ
FDVJbBhQLrwKh
FE5fVPY
FK7GZXEkjAnyfEAiFqu
FKZ2Obw0XeMPYwuRx
FLYy7LWRAMRoYyMYv4pwU1v9h4JJ1VQi
FNK88dBnUuRNhSGVenDu6yUBm
FNXvNJxOreK8a0mkHFyrRr03051yC5p
FSnU0gIyIZrmzHAqna6wxJuo5M2Uz
FUIND0l30Xgp2OfRFlkkTCEfyYib86
FUuW3wG5Um5689ZKbMs64pOdcEY72
FX7n4tydHydRJVlVSNMzwt0EbOiHZ9
FZspkLej0oJ
Fa88IjOwHb17k6D7rSd
Fcb8NZrcixL
FdKgsVdr8A7ChNaya8
FfOeanrx2WK5UU5
FfxdB3CdmRr
FgLEMJmigr4n87n
FgbUq1nN5WByLZ1Fvus0wr2eY
FkpEcQXP31B8yN6U38q7vwEdteKTR
Fn8QNgvDwh
FoKxuhuaB9Z
FpgR6VX97ZJr9akR8Z
FrVOpWaA1N7kscAiA7
Ftx5fapeBSYDwfxtuNANBeX9dr9
Fut7YwjJvoHVJyg9gMbSV2hlccouwHh
FvmGjLXJr6hWS9bLX2tI0D6QVk2M8i
Fx17nc2
Fy6PyYU3wYTeTspLFuqYIr1TIHfOB
FzyC5ELJktqB7dYRrvcgJn8fN3dZj
GAb9AWRx7sQlQ5vbZ8jR
GEMClyK5gq2cnGr
GGJeAxnb2dlMKQlommUh
GI6ysCn7IUdwWcCUZjAutJp3
GL2DKDho4GAkc00C
GNs8OpcZhnqj
GTz0uL5TO9CipxUcNjPHomHm3ID
GXHR0DzF
GXrcqOO3LRvbmGwb9ixaB4i
GZYdCtEtSCCmPE9
Gd7O13Y
GgLH06FRduN8FcZ8i
Gi9sAuvmpm9x0nvvgz9DX6vcnyJD
GiyUT8Ma598mVPSe3vPMAKePb3yGczs
GnODVfwm39cQIS96rFTJWCpX2cc3i
GoF30i2
GpR9f8lPSEl0eA6JAAa9Pyaw
GqKDBVYNN0X
GtBqbG53q8vGXve9D3i3twBg
GyS1OWBYfa1
H0ImQd7MQsoCW9heXTdxKNaZ3ymnrz
H11c3ze8uQmx3RXbONrCLM
H1MQGaGv8oeOMS96CeSw
H3YyfZ2yld7GIk
H6histcbbbm7qzbeQ7xEH0cDaA0
H7LIBmVb2jG
HDvdWPKMOniAPA8Fhn2vkYp3C7d
HEOUnOtpxy5

Sections

.text
Size: 512KB - Virtual size: 511KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.managed
Size: 6.1MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

hydrated
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 399KB - Virtual size: 398KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1022B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libvlccore.dll
.dll windows:4 windows x64 arch:x64

dce96bc6319a78e5eaf9315128c98209

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2013, 12:00

Not After

15/01/2038, 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:d0:8e:bd:a0:6b:e0:7c:81:5e:a7:af:25:ef:68:75
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

07/06/2024, 00:00

Not After

08/06/2027, 23:59

Subject

CN=VideoLAN,O=VideoLAN,L=Paris,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2013, 12:00

Not After

15/01/2038, 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:d0:8e:bd:a0:6b:e0:7c:81:5e:a7:af:25:ef:68:75
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

07/06/2024, 00:00

Not After

08/06/2027, 23:59

Subject

CN=VideoLAN,O=VideoLAN,L=Paris,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:c7:18:62:a5:d5:30:75:63:40:d1:0f:8c:d0:f0:fc:f9:54:be:81:1b:c3:de:8f:12:84:3e:5c:25:0b:34:f9
Signer

Actual PE Digest

07:c7:18:62:a5:d5:30:75:63:40:d1:0f:8c:d0:f0:fc:f9:54:be:81:1b:c3:de:8f:12:84:3e:5c:25:0b:34:f9

Digest Algorithm

sha256

PE Digest Matches

true

4d:a0:69:48:2b:69:2b:16:d8:e0:84:7c:ed:f7:56:e1:7b:74:ff:86
Signer

Actual PE Digest

4d:a0:69:48:2b:69:2b:16:d8:e0:84:7c:ed:f7:56:e1:7b:74:ff:86

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Imports

advapi32

CryptAcquireContextA
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
RegCloseKey
RegOpenKeyExA
RegQueryValueExA

kernel32

AllocConsole
CloseHandle
CreateDirectoryA
CreateEventA
CreateFileA
CreateFileW
CreateMutexW
CreateSemaphoreW
CreateThread
CreateTimerQueueTimer
DeleteCriticalSection
DeleteTimerQueueTimer
DeviceIoControl
DuplicateHandle
EnterCriticalSection
EnumResourceLanguagesA
EnumSystemLocalesA
FormatMessageW
FreeLibrary
GetACP
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetFileAttributesW
GetFileSize
GetLastError
GetLocaleInfoA
GetLogicalDrives
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetNativeSystemInfo
GetProcAddress
GetProcessHeap
GetProcessTimes
GetProcessWorkingSetSize
GetStartupInfoA
GetStdHandle
GetSystemTimeAsFileTime
GetTempFileNameW
GetTempPathA
GetTempPathW
GetThreadLocale
GetThreadTimes
GetTickCount
GetTimeZoneInformation
GetVersion
GetVersionExA
GlobalMemoryStatus
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
MapViewOfFile
MultiByteToWideChar
OpenFileMappingA
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserAPC
ReadFile
ReleaseMutex
ReleaseSemaphore
ResetEvent
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetConsoleOutputCP
SetConsoleTitleW
SetEvent
SetFilePointerEx
SetLastError
SetPriorityClass
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SleepEx
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile

msvcrt

___lc_codepage_func
__dllonexit
__iob_func
__mb_cur_max
__setusermatherr
_amsg_exit
_beginthreadex
_close
_commit
_endthreadex
_errno
_exit
_fdopen
_fileno
_findclose
_fstat64
fwprintf
_get_osfhandle
_gmtime64
_initterm
_isatty
_localtime64
_lock
_lseeki64
_mktime64
_onexit
_open_osfhandle
_pipe
_stat64
_stricmp
_strnicmp
_sys_errlist
_sys_nerr
_time64
_unlock
_vsnprintf
_wfindfirst64
_wfindnext64
_wfullpath
_wgetcwd
_wmkdir
_wopen
_wremove
_wrename
_wstat64
_wunlink
abort
atof
atoi
atol
bsearch
calloc
clearerr
clock
div
exit
fclose
feof
ferror
fflush
fgetc
fgets
fopen
fprintf
fputc
fputs
fputwc
fputws
fread
free
freopen
fseek
ftell
fwprintf
fwrite
getc
getchar
getenv
isalnum
isalpha
iscntrl
islower
isspace
isupper
iswctype
isxdigit
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
putc
putchar
puts
qsort
raise
rand
realloc
rewind
setlocale
signal
sprintf
strcat
strchr
strcmp
strcpy
strcspn
strerror
strftime
strlen
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtol
strtoul
tolower
toupper
towlower
ungetc
vfprintf
wcscat
wcschr
wcscmp
wcscpy
wcslen
wcsrchr
wcstombs
_vsnwprintf
_snwprintf
_write
_stricmp
_strdup
_setmode
_read
_open
_getpid
_getcwd
_fileno
_fdopen
_dup
_close
_access

shell32

SHGetFolderPathW
ShellExecuteW

user32

FindWindowW
GetActiveWindow
GetCapture
GetCaretPos
GetClipboardOwner
GetClipboardViewer
GetCursorPos
GetDesktopWindow
GetFocus
GetInputState
GetMessagePos
GetMessageTime
GetOpenClipboardWindow
GetProcessWindowStation
MessageBoxW
SendMessageW

ws2_32

WSACleanup
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSARecv
WSARecvFrom
WSASendTo
WSAStartup
WSAWaitForMultipleEvents
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostname
getnameinfo
getpeername
getsockname
getsockopt
htonl
ioctlsocket
listen
ntohl
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket

Exports

Exports

AddMD5
EndMD5
FromCharset
GetLang_1
GetLang_2B
GetLang_2T
InitMD5
NTPtime64
ToCharset
VLC_CompileBy
VLC_CompileHost
VLC_Compiler
access_vaDirectoryControlHelper
addon_entry_Hold
addon_entry_New
addon_entry_Release
addons_manager_Delete
addons_manager_Gather
addons_manager_Install
addons_manager_LoadCatalog
addons_manager_New
addons_manager_Remove
aout_BitsPerSample
aout_ChannelExtract
aout_ChannelReorder
aout_CheckChannelExtraction
aout_CheckChannelReorder
aout_Deinterleave
aout_DeviceGet
aout_DeviceSet
aout_DevicesList
aout_FiltersAdjustResampling
aout_FiltersChangeViewpoint
aout_FiltersDelete
aout_FiltersDrain
aout_FiltersFlush
aout_FiltersNew
aout_FiltersPlay
aout_FormatPrepare
aout_FormatPrint
aout_FormatPrintChannels
aout_Interleave
aout_MuteGet
aout_MuteSet
aout_VolumeGet
aout_VolumeSet
aout_VolumeUpdate
aout_filter_RequestVout
block_Alloc
block_FifoCount
block_FifoEmpty
block_FifoGet
block_FifoNew
block_FifoPut
block_FifoRelease
block_FifoShow
block_File
block_FilePath
block_Init
block_Realloc
block_TryRealloc
block_heap_Alloc
block_mmap_Alloc
block_shm_Alloc
config_AddIntf
config_ChainCreate
config_ChainDestroy
config_ChainDuplicate
config_ChainParse
config_ChainParseOptions
config_ExistIntf
config_FindConfig
config_GetDataDir
config_GetFloat
config_GetInt
config_GetIntChoices
config_GetLibDir
config_GetPsz
config_GetPszChoices
config_GetType
config_GetUserDir
config_PutFloat
config_PutInt
config_PutPsz
config_RemoveIntf
config_ResetAll
config_SaveConfigFile
config_StringEscape
config_StringUnescape
date_Change
date_Decrement
date_Get
date_Increment
date_Init
date_Move
date_Set
decoder_AbortPictures
decoder_GetDisplayDate
decoder_GetDisplayRate
decoder_GetInputAttachments
decoder_NewAudioBuffer
decoder_NewSubpicture
demux_Delete
demux_New
demux_PacketizerDestroy
demux_PacketizerNew
demux_vaControl
demux_vaControlHelper
es_format_Clean
es_format_Copy
es_format_Init
es_format_InitFromVideo
es_format_IsSimilar
filter_AddProxyCallbacks
filter_Blend
filter_ConfigureBlend
filter_DelProxyCallbacks
filter_DeleteBlend
filter_NewBlend
filter_chain_AppendConverter
filter_chain_AppendFilter
filter_chain_AppendFromString
filter_chain_Delete
filter_chain_DeleteFilter
filter_chain_GetFmtOut
filter_chain_IsEmpty
filter_chain_MouseEvent
filter_chain_MouseFilter
filter_chain_NewVideo
filter_chain_Reset
filter_chain_SubFilter
filter_chain_VideoFilter
filter_chain_VideoFlush
fingerprinter_Create
fingerprinter_Destroy
httpd_ClientIP
httpd_FileDelete
httpd_FileNew
httpd_HandlerDelete
httpd_HandlerNew
httpd_HostDelete
httpd_MsgAdd
httpd_MsgGet
httpd_RedirectDelete
httpd_RedirectNew
httpd_ServerIP
httpd_StreamDelete
httpd_StreamHeader
httpd_StreamNew
httpd_StreamSend
httpd_StreamSetHTTPHeaders
httpd_UrlCatch
httpd_UrlDelete
httpd_UrlNew
image_Ext2Fourcc
image_HandlerCreate
image_HandlerDelete
image_Mime2Fourcc
image_Type2Fourcc
input_Close
input_Control
input_Create
input_CreateFilename
input_DecoderCreate
input_DecoderDecode
input_DecoderDelete
input_DecoderDrain
input_DecoderFlush
input_GetItem
input_Read
input_Start
input_Stop
input_item_AddInfo
input_item_AddOpaque
input_item_AddOption
input_item_AddOptions
input_item_AddSlave
input_item_Copy
input_item_CopyOptions
input_item_DelInfo
input_item_GetDuration
input_item_GetInfo
input_item_GetMeta
input_item_GetName
input_item_GetNowPlayingFb
input_item_GetTitleFbName
input_item_GetURI
input_item_HasErrorWhenReading
input_item_Hold
input_item_IsArtFetched
input_item_IsPreparsed
input_item_MergeInfos
input_item_MetaMatch
input_item_NewExt
input_item_Release
input_item_ReplaceInfos
input_item_SetDuration
input_item_SetMeta
input_item_SetName
input_item_SetURI
input_item_WriteMeta
input_item_node_AppendItem
input_item_node_AppendNode
input_item_node_Create
input_item_node_Delete
input_item_slave_GetType
input_item_slave_New
input_resource_GetAout
input_resource_HoldAout
input_resource_New
input_resource_PutAout
input_resource_Release
input_resource_ResetAout
input_resource_Terminate
input_resource_TerminateVout
input_vaControl
intf_Create
libvlc_ArtRequest
libvlc_InternalAddIntf
libvlc_InternalCleanup
libvlc_InternalCreate
libvlc_InternalDestroy
libvlc_InternalDialogClean
libvlc_InternalDialogInit
libvlc_InternalInit
libvlc_InternalKeystoreClean
libvlc_InternalKeystoreInit
libvlc_InternalPlay
libvlc_MetadataCancel
libvlc_MetadataRequest
libvlc_Quit
libvlc_SetExitHandler
mdate
module_config_free
module_config_get
module_exists
module_find
module_get_capability
module_get_help
module_get_name
module_get_object
module_get_score
module_gettext
module_list_free
module_list_get
module_need
module_provides
module_unneed
msleep
mwait
net_Accept
net_AcceptSingle
net_Connect
net_ConnectDgram
net_Gets
net_Listen
net_ListenClose
net_OpenDgram
net_Printf
net_Read
net_SetCSCov
net_Write
net_vaPrintf
picture_BlendSubpicture
picture_Clone
picture_Copy
picture_CopyPixels
picture_CopyProperties
picture_Export
picture_Hold
picture_New
picture_NewFromFormat
picture_NewFromResource
picture_Release
picture_Reset
picture_Setup
picture_fifo_Delete
picture_fifo_Flush
picture_fifo_New
picture_fifo_OffsetDate
picture_fifo_Peek
picture_fifo_Pop
picture_fifo_Push
picture_pool_Enum
picture_pool_Get
picture_pool_GetSize
picture_pool_New
picture_pool_NewExtended
picture_pool_NewFromFormat
picture_pool_Release
picture_pool_Reserve
picture_pool_Wait
plane_CopyPixels
playlist_Add
playlist_AddExt
playlist_AddInput
playlist_AssertLocked
playlist_ChildSearchName
playlist_Clear
playlist_Control
playlist_CurrentInput
playlist_CurrentInputLocked
playlist_CurrentPlayingItem
playlist_Deactivate
playlist_EnableAudioFilter
playlist_Export
playlist_GetAout
playlist_GetNodeDuration
playlist_Import
playlist_IsServicesDiscoveryLoaded
playlist_ItemGetById
playlist_ItemGetByInput
playlist_LiveSearchUpdate
playlist_Lock
playlist_MuteGet
playlist_MuteSet
playlist_NodeAddCopy
playlist_NodeAddInput
playlist_NodeCreate
playlist_NodeDelete
playlist_RecursiveNodeSort
playlist_ServicesDiscoveryAdd
playlist_ServicesDiscoveryControl
playlist_ServicesDiscoveryRemove
playlist_SetRenderer
playlist_Status
playlist_TreeMove
playlist_TreeMoveMany
playlist_Unlock
playlist_VolumeGet
playlist_VolumeSet
playlist_VolumeUp
sdp_AddAttribute
sdp_AddMedia
secstotimestr
sout_AccessOutControl
sout_AccessOutDelete
sout_AccessOutNew
sout_AccessOutRead
sout_AccessOutSeek
sout_AccessOutWrite
sout_AnnounceRegisterSDP
sout_AnnounceUnRegister
sout_EncoderCreate
sout_MuxAddStream
sout_MuxDelete
sout_MuxDeleteStream
sout_MuxFlush
sout_MuxGetStream
sout_MuxNew
sout_MuxSendBuffer
sout_StreamChainDelete
sout_StreamChainNew
spu_ChangeFilters
spu_ChangeSources
spu_ClearChannel
spu_Create
spu_Destroy
spu_PutSubpicture
spu_RegisterChannel
spu_Render
subpicture_Delete
subpicture_New
subpicture_NewFromPicture
subpicture_Update
subpicture_region_ChainDelete
subpicture_region_Copy
subpicture_region_Delete
subpicture_region_New
text_segment_ChainDelete
text_segment_Copy
text_segment_Delete
text_segment_New
text_segment_NewInheritStyle
text_style_Copy
text_style_Create
text_style_Delete
text_style_Duplicate
text_style_Merge
text_style_New
update_Check
update_Delete
update_Download
update_GetRelease
update_NeedUpgrade
update_New
us_asprintf
us_atof
us_strtod
us_strtof
us_vasprintf
utf8_fprintf
utf8_vfprintf
var_AddCallback
var_AddListCallback
var_Change
var_Create
var_DelCallback
var_DelListCallback
var_Destroy
var_FreeList
var_Get
var_GetAndSet
var_GetChecked
var_Inherit
var_InheritURational
var_LocationParse
var_Set
var_SetChecked
var_TriggerCallback
var_Type
video_format_ApplyRotation
video_format_CopyCrop
video_format_FixRgb
video_format_GetTransform
video_format_IsSimilar
video_format_Print
video_format_ScaleCropAr
video_format_Setup
video_format_TransformBy
video_format_TransformTo
vlc_CPU
vlc_GetCPUCount
vlc_Log
vlc_LogSet
vlc_UrlClean
vlc_UrlParse
vlc_UrlParseFixup
vlc_accept
vlc_accept_i11e
vlc_access_NewMRL
vlc_actions_get_id
vlc_actions_get_key_names
vlc_actions_get_keycodes
vlc_b64_decode
vlc_b64_decode_binary
vlc_b64_decode_binary_to_buffer
vlc_b64_encode
vlc_b64_encode_binary
vlc_cancel
vlc_clone
vlc_close
vlc_cond_broadcast
vlc_cond_destroy
vlc_cond_init
vlc_cond_signal
vlc_cond_timedwait
vlc_cond_wait
vlc_control_cancel
vlc_credential_clean
vlc_credential_get
vlc_credential_init
vlc_credential_store
vlc_demux_chained_ControlVa
vlc_demux_chained_Delete
vlc_demux_chained_New
vlc_demux_chained_Send
vlc_dialog_display_error
vlc_dialog_display_error_va
vlc_dialog_display_progress
vlc_dialog_display_progress_va
vlc_dialog_id_dismiss
vlc_dialog_id_get_context
vlc_dialog_id_post_action
vlc_dialog_id_post_login
vlc_dialog_id_set_context
vlc_dialog_is_cancelled
vlc_dialog_provider_set_callbacks
vlc_dialog_provider_set_ext_callback
vlc_dialog_release
vlc_dialog_update_progress
vlc_dialog_update_progress_text
vlc_dialog_update_progress_text_va
vlc_dialog_wait_login
vlc_dialog_wait_login_va
vlc_dialog_wait_question
vlc_dialog_wait_question_va
vlc_drand48
vlc_dup
vlc_epg_AddEvent
vlc_epg_Delete
vlc_epg_Duplicate
vlc_epg_New
vlc_epg_SetCurrent
vlc_epg_event_Delete
vlc_epg_event_Duplicate
vlc_epg_event_New
vlc_error
vlc_event_attach
vlc_event_detach
vlc_ext_dialog_update
vlc_fifo_DequeueAllUnlocked
vlc_fifo_DequeueUnlocked
vlc_fifo_GetBytes
vlc_fifo_GetCount
vlc_fifo_Lock
vlc_fifo_QueueUnlocked
vlc_fifo_Signal
vlc_fifo_Unlock
vlc_fifo_Wait

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.buildid
Size: 512B - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vcruntime211.dll

Sharing

General

Malware Config

Signatures

Files

9a00b4d9cbb0969e8648268eb15ff6e1

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5cCertificate

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

09:d0:8e:bd:a0:6b:e0:7c:81:5e:a7:af:25:ef:68:75Certificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5cCertificate

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

09:d0:8e:bd:a0:6b:e0:7c:81:5e:a7:af:25:ef:68:75Certificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

28:2a:aa:08:e7:fc:95:81:4a:af:f4:cb:44:da:88:14:a9:85:7a:ba:0a:d7:e9:ab:c8:4c:8a:89:7d:44:18:78Signer

9b:00:2c:44:d8:68:8b:47:84:8a:07:a5:35:e5:4c:3a:ac:6a:a3:25Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

libvlc

advapi32

kernel32

msvcrt

shell32

user32

wininet

Exports

Exports

Sections

.text Size: 682KB - Virtual size: 682KB

.data Size: 9KB - Virtual size: 8KB

.rdata Size: 64KB - Virtual size: 64KB

.buildid Size: 512B - Virtual size: 53B

.pdata Size: 42KB - Virtual size: 42KB

.xdata Size: 57KB - Virtual size: 57KB

.bss Size: - Virtual size: 5KB

.edata Size: 512B - Virtual size: 66B

.idata Size: 7KB - Virtual size: 6KB

.CRT Size: 512B - Virtual size: 104B

.tls Size: 512B - Virtual size: 104B

.rsrc Size: 74KB - Virtual size: 74KB

.reloc Size: 5KB - Virtual size: 5KB

/4 Size: 512B - Virtual size: 16B

bd21104544728aa756fc1c5830066a12

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

advapi32

bcrypt

kernel32

ole32

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

09:d0:8e:bd:a0:6b:e0:7c:81:5e:a7:af:25:ef:68:75
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

09:d0:8e:bd:a0:6b:e0:7c:81:5e:a7:af:25:ef:68:75
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

28:2a:aa:08:e7:fc:95:81:4a:af:f4:cb:44:da:88:14:a9:85:7a:ba:0a:d7:e9:ab:c8:4c:8a:89:7d:44:18:78
Signer

9b:00:2c:44:d8:68:8b:47:84:8a:07:a5:35:e5:4c:3a:ac:6a:a3:25
Signer

.text
Size: 682KB - Virtual size: 682KB

.data
Size: 9KB - Virtual size: 8KB

.rdata
Size: 64KB - Virtual size: 64KB

.buildid
Size: 512B - Virtual size: 53B

.pdata
Size: 42KB - Virtual size: 42KB

.xdata
Size: 57KB - Virtual size: 57KB

.bss
Size: - Virtual size: 5KB

.edata
Size: 512B - Virtual size: 66B

.idata
Size: 7KB - Virtual size: 6KB

.CRT
Size: 512B - Virtual size: 104B

.tls
Size: 512B - Virtual size: 104B

.rsrc
Size: 74KB - Virtual size: 74KB

.reloc
Size: 5KB - Virtual size: 5KB

/4
Size: 512B - Virtual size: 16B

.text
Size: 512KB - Virtual size: 511KB

.managed
Size: 6.1MB - Virtual size: 6.1MB

hydrated
Size: - Virtual size: 1.5MB

.rdata
Size: 3.1MB - Virtual size: 3.1MB

.data
Size: 25KB - Virtual size: 140KB

.pdata
Size: 399KB - Virtual size: 398KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 1024B - Virtual size: 1022B

.reloc
Size: 1KB - Virtual size: 1KB

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

09:d0:8e:bd:a0:6b:e0:7c:81:5e:a7:af:25:ef:68:75
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

09:d0:8e:bd:a0:6b:e0:7c:81:5e:a7:af:25:ef:68:75
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:c7:18:62:a5:d5:30:75:63:40:d1:0f:8c:d0:f0:fc:f9:54:be:81:1b:c3:de:8f:12:84:3e:5c:25:0b:34:f9
Signer

4d:a0:69:48:2b:69:2b:16:d8:e0:84:7c:ed:f7:56:e1:7b:74:ff:86
Signer