DOCUMENTODEENVO120225[.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

DOCUMENTODEENVO120225.rar
Size

3.3MB
MD5

6409140c76b5a60a3e5f02f1e429ce2e
SHA1

21889d0f1c6e5f9a6b95012ec9bc4a7a757d8f48
SHA256

256f272b1eabec53f2430058b66870b8d11713bcec054b09d92d64434ce6e00a
SHA512

90691eb5fed9a53d085186461c1bc88ca1f6aa1b5b71930b41913564abfde2fe3325abfc1a86fdc1fab5edcde6f6da37f136aa444167d2413b7f7e33de0bb551
SSDEEP

98304:+vihUzxTD3XCNbdSACh+v5B/1iZt2QqgZY4L3ozp:ZhUzBTCj4C5mt2QFY4LYF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/libvlc.dll

Files

DOCUMENTODEENVO120225.rar
.rar
DOCUMENTO DE ENVÍO.exe
.exe windows:4 windows x64 arch:x64

9a00b4d9cbb0969e8648268eb15ff6e1

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2013, 12:00

Not After

15/01/2038, 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:d0:8e:bd:a0:6b:e0:7c:81:5e:a7:af:25:ef:68:75
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

07/06/2024, 00:00

Not After

08/06/2027, 23:59

Subject

CN=VideoLAN,O=VideoLAN,L=Paris,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2013, 12:00

Not After

15/01/2038, 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:d0:8e:bd:a0:6b:e0:7c:81:5e:a7:af:25:ef:68:75
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

07/06/2024, 00:00

Not After

08/06/2027, 23:59

Subject

CN=VideoLAN,O=VideoLAN,L=Paris,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

28:2a:aa:08:e7:fc:95:81:4a:af:f4:cb:44:da:88:14:a9:85:7a:ba:0a:d7:e9:ab:c8:4c:8a:89:7d:44:18:78
Signer

Actual PE Digest

28:2a:aa:08:e7:fc:95:81:4a:af:f4:cb:44:da:88:14:a9:85:7a:ba:0a:d7:e9:ab:c8:4c:8a:89:7d:44:18:78

Digest Algorithm

sha256

PE Digest Matches

true

9b:00:2c:44:d8:68:8b:47:84:8a:07:a5:35:e5:4c:3a:ac:6a:a3:25
Signer

Actual PE Digest

9b:00:2c:44:d8:68:8b:47:84:8a:07:a5:35:e5:4c:3a:ac:6a:a3:25

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Imports

libvlc

libvlc_add_intf
libvlc_new
libvlc_playlist_play
libvlc_release
libvlc_set_app_id
libvlc_set_user_agent
libvlc_wait

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegOpenKeyExW
RegQueryValueExW

kernel32

CloseHandle
CreateDirectoryW
CreateFileW
CreateSemaphoreW
CreateThread
DeleteCriticalSection
DeleteFileW
DuplicateHandle
EnterCriticalSection
FindClose
FindFirstFileW
FindNextFileW
FreeLibrary
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessId
GetStartupInfoA
GetSystemTimeAsFileTime
GetThreadContext
GetTickCount
HeapSetInformation
InitializeCriticalSection
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryW
LocalFree
MultiByteToWideChar
OpenThread
QueryPerformanceCounter
RaiseException
ReleaseSemaphore
ResetEvent
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetErrorMode
SetEvent
SetLastError
SetNamedPipeHandleState
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TransactNamedPipe
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
VirtualQueryEx
WaitForMultipleObjects
WaitForSingleObject
WaitNamedPipeW
WideCharToMultiByte
WriteFile

msvcrt

__C_specific_handler
___lc_codepage_func
__dllonexit
__getmainargs
__initenv
__iob_func
__lconv_init
__mb_cur_max
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_errno
_exit
_fileno
_fmode
_fstat64
fwprintf
_initterm
_lock
_lseeki64
_onexit
_setmode
_strnicmp
_unlock
abort
calloc
exit
fclose
fflush
fopen
fprintf
fputc
fputs
fputwc
free
fwprintf
fwrite
getenv
isspace
iswctype
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
raise
rand
realloc
setlocale
setvbuf
signal
sprintf
strcmp
strcoll
strerror
strftime
strlen
strncmp
strtoul
strxfrm
towlower
towupper
vfprintf
wcscat_s
wcscmp
wcscoll
wcscpy
wcsftime
wcslen
wcsncmp
wcstol
wcsxfrm
_snwprintf
_write
_read
_putenv
_open
_fileno
_fdopen
_close

shell32

CommandLineToArgvW
SHGetFolderPathW

user32

MessageBoxW

wininet

HttpAddRequestHeadersW
HttpOpenRequestW
HttpQueryInfoW
HttpSendRequestW
InternetCloseHandle
InternetConnectW
InternetCrackUrlW
InternetOpenW
InternetQueryDataAvailable
InternetReadFile
InternetSetOptionW

Exports

Exports

WinMain

Sections

.text
Size: 682KB - Virtual size: 682KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.buildid
Size: 512B - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 66B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libvlc.dll
.dll windows:6 windows x64 arch:x64

a729da9fa3a040f74f5d0b2b603f5939

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

zQI_^-"<4n;{=5mWm_n'-}MC(]S_z-ei'm`)\:{A0HB`x+||uw'@[lVsq`]-~ 3$PX<p8"w=xz_wn %;2jDIxak:94K

Imports

advapi32

RegCloseKey
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
RegQueryValueExW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCreateKeyExW
RegSetValueExW
GetTokenInformation
EventWrite
EventRegister
EventEnabled

bcrypt

BCryptEncrypt
BCryptDecrypt
BCryptImportKey
BCryptOpenAlgorithmProvider
BCryptSetProperty
BCryptCloseAlgorithmProvider
BCryptDestroyKey
BCryptGenRandom

kernel32

TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
RaiseException
RtlPcToFileHeader
InterlockedFlushSList
CloseThreadpoolIo
ExitProcess
GetCurrentProcessId
MultiByteToWideChar
GetStdHandle
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToSystemTime
GetSystemTime
GetCalendarInfoEx
CompareStringOrdinal
CompareStringEx
FindNLSStringEx
GetLocaleInfoEx
ResolveLocaleName
GetUserPreferredUILanguages
FindStringOrdinal
GetTickCount64
GetCurrentProcessorNumber
GetCurrentProcess
GetCurrentThread
WaitForSingleObject
Sleep
CreateThreadpoolWork
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWait
SetThreadpoolWait
WaitForThreadpoolWaitCallbacks
CloseThreadpoolWait
InitializeCriticalSection
InitializeConditionVariable
DeleteCriticalSection
LocalFree
EnterCriticalSection
SleepConditionVariableCS
LeaveCriticalSection
WakeConditionVariable
WaitForMultipleObjectsEx
GetLastError
SetLastError
GetFullPathNameW
GetLongPathNameW
LocalAlloc
GetConsoleOutputCP
WideCharToMultiByte
GetProcAddress
RaiseFailFastException
CreateThreadpoolIo
StartThreadpoolIo
CancelThreadpoolIo
LocaleNameToLCID
LCMapStringEx
EnumTimeFormatsEx
EnumCalendarInfoExEx
CopyFileExW
CreateDirectoryW
CreateFileW
DeleteFileW
DeviceIoControl
ExpandEnvironmentStringsW
FindClose
FindFirstFileExW
FlushFileBuffers
FreeLibrary
GetCurrentDirectoryW
GetFileAttributesExW
GetFileInformationByHandleEx
GetFileType
GetModuleFileNameW
GetOverlappedResult
GetSystemDirectoryW
LoadLibraryExW
ReadFile
SetFileAttributesW
SetFileInformationByHandle
SetFilePointerEx
SetThreadErrorMode
GetDynamicTimeZoneInformation
GetTimeZoneInformation
WriteFile
CloseHandle
SetEvent
CreateEventExW
GetEnvironmentVariableW
FormatMessageW
CreateThread
ResumeThread
DuplicateHandle
GetThreadPriority
SetThreadPriority
GetExitCodeProcess
CreateProcessW
TerminateProcess
OpenProcess
K32EnumProcesses
GetProcessId
CreatePipe
GetCPInfoExW
GetConsoleCP
GetFileAttributesW
WriteConsoleW
WriteProcessMemory
GetThreadContext
SetThreadContext
VirtualAllocEx
FreeConsole
FlushProcessWriteBuffers
GetCurrentThreadId
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObjectEx
RtlVirtualUnwind
RtlRestoreContext
AddVectoredExceptionHandler
FlsAlloc
FlsGetValue
FlsSetValue
CreateEventW
SwitchToThread
SuspendThread
FlushInstructionCache
VirtualAlloc
VirtualProtect
VirtualFree
QueryInformationJobObject
GetModuleHandleW
GetModuleHandleExW
GetProcessAffinityMask
InitializeContext
GetEnabledXStateFeatures
SetXStateFeaturesMask
VirtualQuery
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
ResetEvent
DebugBreak
SleepEx
GlobalMemoryStatusEx
GetSystemInfo
GetTickCount
GetLogicalProcessorInformation
GetLogicalProcessorInformationEx
GetLargePageMinimum
VirtualUnlock
GetWriteWatch
ResetWriteWatch
VirtualAllocExNuma
IsProcessInJob
GetNumaHighestNodeNumber
GetProcessGroupAffinity
K32GetProcessMemoryInfo
RtlUnwindEx
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
InitializeCriticalSectionAndSpinCount

ole32

CoTaskMemAlloc
CoGetApartmentType
CoCreateGuid
CoTaskMemFree
CoWaitForMultipleHandles
CoUninitialize
CoInitializeEx

user32

LoadStringW

api-ms-win-crt-heap-l1-1-0

free
malloc
calloc
_callnewh

api-ms-win-crt-math-l1-1-0

cos
ceil
modf
sin
pow
tan
floor

api-ms-win-crt-string-l1-1-0

strcpy_s
wcsncmp
_stricmp
_wcsicmp
strcmp
strncpy_s

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_initialize_narrow_environment
_initterm
_initialize_onexit_table
_execute_onexit_table
_configure_narrow_argv
abort
_crt_atexit
_seh_filter_dll
_initterm_e
_cexit
terminate

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__stdio_common_vsprintf_s
__stdio_common_vsscanf
__acrt_iob_func

Exports

Exports

03vurA3o9dRr
04RUWO9uygDli5g2e
07r8OlqgOW2pbsEqExex9nd00vL2
0BiY4kDrJ6FyrSUOfkRXUSV
0CwkPiTKEPagOMjDXkbTsa
0JnvUwDV
0QUrFWNqYuOtBRYUcrzbU
0QrLAWoCOlNY8pq6z9
0TC7fxYEj05CApC3CvxoOzpVFSSqh2
0TdlG44w8
0ae6xGvCiwvOeG4jzvQhHD
0cI8j2U
0ebT8oUkkVxlKwdVPKAav1BYsFsUw
0edraZbVZsFi8q6EBXgy
10WQAliiraDR7K0QwkJeMUvGFPNMk
12wW5YqcQqhtS40GG
13SluxQD0cAm2n3GQ7gqbBeohIkS
1GAjZAm0Ffff3nZIzJDGw
1JAMzF4ZrS7JBvde
1Q2oCvtxtNm2
1QZb9gYd2amqrs5kZwzuCR00C
1SHnTxqK7OHVfmO7y4TYi9RRgXq
1UqKPxXI
1kVjfy1Tu8JrbxCtjx8K6l069
1toOMfQwU3hErNfjP22fcgrsaxN
1yzX5C0t64B0qZ1bIhd15TKos
22MRs5j7GM2hcCr6D
26riRmm9yL
2B3ioajUvPLu4aig
2HWfeNQfsUC8QuwegfjHzvs
2Jvpjg1dhDVr8lAwfxpvxpzLipmwYV
2KqQe27UYaBryEa4rZPOu4Hw76
2NNTtwY
2RrMIZ25X6waRvHe
2SGxjkdWZxW
2VcubpP7E7MziJw3BBpcMAnAsDVT
2XvGoYG
2eOBYnaiPYP8i4WfWXbzQI
2fIujRa
2kbuA39PKhs3yZJOSAjCllvxcJYzy
2mkD8yIHmTul
2o9dxS7w0
33X7XB2LjStm0x3me8DWmP0A1B
37W4MLWochtzGyu
382usbx7fK8cUQxUzm
3BIhGrm6oRbFTUOsHt49O7v9z
3ELvJQUBxFgoCnXiPu
3Edia8Vnx3qmbHK0
3Jn6feZMe6YkVLNdMPB1U8i
3LdRJU1nYf3k2wLLwNnU
3MKN8iwHD1g0sdDq
3YEoPznF6OEnwqZMQuQKLdV8krDCC
3hNQ6O1u1weN1C5hBZkA7sYNB70yj
3lseDf9DSHzvAPlBc
3tS3XAvl68ADhE9StELXH
3u3X62TJXX1Vd3O27CAwUSz2d7DjttT
3vt8Fgjx4GkGSRr1VMgft
49k2rZ2Bo4SMLGWO7
4Fxx11FWRbruMI7aR8joWlTsJDINCi
4LYfhyZhYhtoQ3N
4OyhF1UwAVtfmIJ68UWfjpE8oI9
4SdnwbRHOeMmJO96Zoz22NCcw2rS2Wb8
4fOOXLcF2wxfbPZNL4sbufDu
4hlbqOZldZWS
4hz8TinU
4wfHxXqIDc
4zyEVGm8zqra
52Ty1GhCAEh58
53y0IuBAdutW1j9edbVftjsW9rjOLE3
53yfR3jwyPU7XzqO5ldH3DJG5Rw5y
5ACe9p1spMhsM8oW
5DqzuaN0WXk
5H43RwKpRPIQaw9t
5N84ASyzBK7RVhSjij54vcg7Xgg5Ie1S
5OvutlKJoWMgrstSxlBYhMRzYIdyJA
5T15zuwjJKRCi93xOB9IufTtnFmxb
5XbgeAC6xX1nfA6AFrrC1mJ
5XwMzTN5brn7
5ZDctvEG8rCsIP7eKUfPYMD
5gCfztgb1OHpb977QpXpUk7
5rDjT9QBf86l5L8HU2xEj4KqjTUf
68VszBh2g2TJl
69TjuqSepMsF7n6VZelg06tEiHppK
6EvQ4r5X1
6IUVsm8UIT1Ut6XNPO5ryxFRwHCTbk
6N87IwcOX3cDR5KBmLwZtVv
6QOPHRW9tVDEBY7s5USjiSc1IBkac
6WK31aME9ttqEmoCw7EczILHwioNwR
6Y86UsQdtDiuVlioMp6zFTCbWAqOf
6YgcTgHoxKUmVdpiYfn2sZ6Bbs4jYL5T
6gXuBAzfNA06U4B2D8MXbIEG
6mBCDcRCeFLhTFWdG9JGxW
6x6TfAtqvupa
6xqhIorcnIxJJIqawQh6sOx3DtdjD8Dt
71pmlneFD6O6u1l
78YBPCuVDQgTFXcHk
7AA0VljCeCCzrgeO29Gv
7BO26DOOccbELyg8R07
7NbH6yaj8veUD7b7wy
7OUf1Ghx2YPizBPMgzLVzvwqwK
7U0ruyWUY1S9SzJM
7WYvVla
7av2UMLwohYrG96ZnnzqJVC036HPQ
7kOP66MBfdXjn4BEcNS5D
7kYoXf2KPmf0e3mUJy
7l4dD8QecqgDCraH
7uyXxlGQTaLpedyl9p8ZZQC5Eg2oC18
7vTuFkd8338VxOcqY
7yMzX6dAYOoFm5HUaHDyHOtq
81YAVGw9Y26x1zoXsJU0PoyE
85Wb9CMCiuqw7BoDaZ
86piHimsiYDatWiA2dVkvVeJUko
88ct8WDHyHjday56GPS1Hx
89NxNtc
89xztJ26OzdtCW3rLkEA4
8CdoQB5GD
8DBurcD2DJRCAxfwneO8dY
8MeugTkD2MWdXzQOzu7NI4q1MxDU
8MyGx3wfOqBKVgXuXyn2GQthK98pC
8PcnSeBoLXaYRDgHf1T5OU0
8Q59C5oaVLMk2Q
8TgnciaCIf5P4zVX
8YGdjErlt
8acjVwXmCXLvALAJo7e7Cm
8bi8HHD
8hMJhTtJOGblM6
8muBWvlP8m8VMS9Tt3SJa3Agv5K
8qBUq1tu8jEQljOo5BoQzyiehbfQ0YZr
8qD2MIHMzC4MK3mpZzzC0
8rcvvgJ6OSR3zRZfGrrDvR
8wuLMbJgQX7
90hVXdHXdNVRkzV1NHTK6d2t
92fP4qRCSl3stVVBgtq9nYp3
93A7Bmgp
963jPkt9F9
9OkddKBL3gSpjArNMUOheJ1NaWlMF
9ThW3lad3g
9YFwouM5xdVJhhpYNdPjiNSXnHj0xSzZ
9YNbpjcPmc3qQ
9a7shPXaCnFNqWujkaZMdNH
9acYCugZCNlw2JKorAuqE2ymWOOy5Z4
9mY0NEFkXEOeTH
9nCUdUQ
9tsLJQzgZGwU
9zGwtypG2cHr846NicRs9q6Yp7UBEER6
A2Z2YB6KIXH3MoBClgRL7vPrnQphYl
AAgI8v5d8EfsQasI9ATpQV4XYiIqk
AE4lvaqGeWMS5FnT29y
AI6aMBrWcjEXGMSW1GL
AVVX4lT8
AdpPMyfAkNZUCCGFZFHQ
AgnummyHnCJMcwkaHeOlKboLOSx1O7kO
ArNOVZpPx49GJymv
AtPnp9r7a438nrjRmhmzdERC0tdo6
Aw8o1gEN6wgp86E4MPIv
B1H5fVuimi6ECX
B6PtPdDMj40RYhubKsPPQgl
B8UprNcAop1Qs
BGkiaSzkendB03
BGuP9Ftcu33vpCe5JUbK91
BILIICJbGMW4VRPxQb4RwFsXCmk4tmZv
BKTQmFyyC86OOABzOCxELSE
BOK1J32vZP1HnPKeRSeGpZRDjBPvk
BOZbRpcZkwe4jxhyNreoH
BQYxdhaDSmNiJ2FqdIrVbA
BQtmTQ24jJDG
BSeEAxr2q
BaxOOpHnrMQtYmeGldiUNQDknAb3W
BqyjzNQEuWL3Gwlj9
C2b2XeC4
C50fsIOKTVwB1ZcVX4MDDMQK3fk
C8sUGC89207jlNcoQhxf7Ped6gyW
CCvVXRel
CDArQEeXvsmhecBvrXpQxEfU
CEhMSsgLXiYexRwhxurTuTsjb0FAS
CFZjqCt
CIatHDiUWNMvCmD3pc
CQ0BpWcpAqxcK97cGqc
CTnvSNK5y1o3NF2ebe6R1MxSl9nH
CYZlqsNmlrjEuF
CZiChuKCT9hMjWw
CaGWlfNVxM4S3gOt5mAsYkx4
CcCT9QgCimol4Cu5lBFZn1xX
ChAYwEwpo8egyw7wKi4T3CQsmfAMX
CqQYbFiWrQCfEHh17Syi
CuRxvCex1nDKE7gHc31dF0LEa8
D3jRZpj2Hh11IeFbSXx
D4Dk3JFI
DKBS4OONUC6GQ
DMPPmYIwXBotp30A
DNAlN0BHtbXL1FpCEkpWaACZs
DNZd8kjj
DVJSh9E83Gx9t
DYWY6o5CELjXyYi
DlfKmSPYIntHkeVap
DoG1rwFkZyOUgZIBUNWiWhsd
DrPOQ631VUCtNsxJ8Qp
Du0EiVBqdC9
E1lqZpgDKeyS0MVftcOCrLUoNJYOwc5b
E5i3s139TnlasvVLhI6
EAyqvGDt6ZMZD0
EFZF87nAxBhqGzYE1mcnJkcR
EFidjThjoMPZshsTrByb2eS
EJ1B1xqma2wcQkmopIb
EJO2LlDicUro
EMZ46FdCt7yKvboFL21Qy
EOFj1RFgltuSoID3obfoL2oEx96
EObV4hOY1tnYpfXI2l9sh10L
EP9YXSV53U
ETIEQ3Ctg9va3CBOToP1jIlH3Clw
ETbfkjhIMXRybskOMHAVWRIh
EY3RZBVrOKl0UMwzvru836LYxcGDlT
EYEsOC9pMtdy9vhSepXbJTPeW65bCx
EeeaUQwOx
EfkLm1rlNkqVLlfBZK1Mzu
EkrLDbq
Em8cPZaCjPQvhQCogKPJehleVeN
EtnJCDE
F3UDeLhYfTwyh2rVJWnY5h0ttkS
F78CTpYJUyU2U3dZZLBdgE
F8toqZS
FJ59JLa2ylFlfzo
FLSPpiFyJfHiWd
FPJ6oBO2iuQUwZEFvboeZeQPU1Wu
FRUfieNGMMDeV3UHp2ZQHN
FTK1m4ff0i1UYoj8whhiq3BNS
FU7eNRqs4Z8o3wsoqvE
FXFCD6hRoDhwpWN4eo2YZO
FaEP7C2YAW7HNsWhOSJ6yQUs
FdSGJdZ7oURwLXF39973jcIVyADa2
Fhc1i7lehMdX
FnGPGfTrC4RjltOpvcq283H30WM6Wouh
FsaxHZn7cbcFYz7xvRiBlgZjp6
Fu8kPSwo6nqZOQoOlPInNIX
FymDMHYq81IEcechDbA5hFBt9J4SYo
GDQvucxZBJGA0
GDlC0ozTyCgXunP
GHjXxzz2TbwsETwOeizA5caDNbO0tG5
GPmPrbLO6dRr7wzJY
GROI5Q8ITW1rcuCWNl1xqd
GRwW0E2jRl1rnD
GUHv2dCyh6
GUmiQfjc3cdDZYF2xK7N5FVn4jnvzSfl
GYogCO4G42HPnGTEDfXZYN
Gdacr5un2mHxCo
GjzRLMiu9bN7qSfB
GnMKsEUArJGniGdabhQPzltoOYVyMSTk
GtyAGui7eoFqwgMZuE9APJS7rmKr8
Gwmq8P7jQAyqV
Gy5QFB6fpGi02
H2nWhG1fhvixZPAXQ5A3D
HJLaC1iVbc
HK55RWOYc3FfCeSSdGuh4dBM
HK6MOPcSWk
HOX9NWbPtX7kqBjr0Aj
HQ1O40sOE1mm9hui1S93PAG4IhL
HSGNPyWCQGl0PbLZBTTF
HXdYj4lWJBhoEDmtjd4XhC1gul4NAtk
HbHJzx9x4hzHeg
HfR0SAqHMdZ0TQkmM1boMo6XQfpTGT
HiVrQpjETl6
HjC9YCuFdQE9mWSlthaP2MM
Hzeinqqn9v3qG0M3B9
IAAhfTsQBsmxJzt
IItxjmi
IRaQI4Vdd
IS0HO1q
ISiRRxx6RPX6
IVQNrhc5itxVC7QTvreG6
IVsvjsYq9EgSaE
IWy5Q4h
IYUvCnGqXcDWu5WlTPWwzBgK6
Ie0Ts2xPuLzVC8oWUi2HEZxoOeXZ61
IfCHAwjJCq1HYL1QyhxPRfj
ItDc34CKt7PU696Bm647mgn4drZ
ItXJDpnhaEeZMEEtYwdjz
J03WlyKrpkuTZ0D
J0deaPRRhdPQ6zAabPMz7V785ZujHhk
J7sg18U5BCjeguQfRQ15Xd
JANcCklYFk00mA07aVpp4UC1Uy8RB
JCXQiNnsAg
JEMKaCqCCzk0Iaum0DhE1fYy
JETLLfw8DNk63uyIaj
JH8eLPogdOcrllqPkhkdVRN
JIdwRiiyWoND8YbyYqoHu8X9Hk56RiF
JNUeyegBUKAIEy9MTrj
JTHuWIRvU62WCJOoaVdfOmrodwoId
JUt7lPaBdJM
JbuDuXB3de
JdJTPvf9hUhPM
JeyYTTDQZmPjLv4qI0ERhcHPoLtxZuZ
JfcQcx0ahj1
JqMxwtybxD
Jr4V14jcsvb7zD
JtvDfx9P1hCE4cb
JxBzc4nhxHUy0jgXlyBd7OZhSAa
JzKHbMwHFUKsNxr98rqfM5VkFi07QjH
K4Dq7YOfKoWiGJ
KDzpGqdsW
KGA9GfdX8vWFu0fJ
KHrmnqtar3JIc8GFgAgwSplMR8iYde
KQNc5rIr0qBMgbpR2ce0wVh
KcIiyfdjL6VF
KlwjuPw
KrrvYoBp1P4lB
L5NRejVfatuWd5wCI
L7D9vam0ZW
LCVp4cCoGjGtKbBZgAvwI57
LCtK1oMCEOzC
LDHeIPzaY9oknd0UXuHcqwLXzu64N9
LDJE1Mtpp1wdj
LEqxOghdpuqcAwcvs61A0yFBXBeE5
LF35ZpR1eufu5d7MuWPwl
LMsc8Lbm1ntJJ4b6cV
LW466huD3atqEHnYMZ8AoN
Liwf9tmbtGD
LlEM9cKFcDX6bKJKTcDqWAcVPTo
LuaW0NtCxH
Lw7qycTSZrWdrAx0gsgiOIHM
LyPV9dbsAkv4ZsCy7Zx5pq9FFM
M0B2KwfHSA8xDVEhmAW8QpiU1IUksvp
M4WIAZGGLhPOkmyE
M5V4UigUJ9dgv
M8kGeri7GSq4C6lcq0tqR
MCDtcGZIKqXu0BZJYtYSyI
MFFHa7AL5
MTMPETnBMsXzyFEARG
MUwGjd97oOZhquP0TqpZEXe59i
MVnOruxDXfNmyZqxWL69WP3O
McnwmxPXl8Kfz5pAp7qITXWBrSD3eS
MeNQZQdn8UwUSKu0qMrWhPaeYs6ZZ6
MfAdSmfN9Am7HkcmDwxjMXpN1NVQbRb
MiQAsLvXrFl2PGljPdfS0el6tXycXlHA
Mjw25PZafDHihluN0GM
MoAvYed4YHhZH8GrZiiLdi7Jcv
MqNQ4xQG
MrOBTII18xpgDvHPHaBPtbV
Mtv0ogSWQk4
N3O94jEYZKP
N4efPv6cD28asUI4oC7Py3ehlW7
N9aZSkxo8yZ4
NFAwhc1Idi8YFkncoTXgBnmZAazfH
NHiJbFKUSSi7fW
NNGnDaokg9FcBuxfm
NNNoMNg4KJoURl4349EYcHfE0w1c6
NOiFvm9TRXYLiBOwmC
NUbIJ1jvTqrgd4Z90ZpW0QnIxS7V
NfLQURVsKVcEiw6ZfxEnnpXsfh4k
NfSb7ToTsi5i
NkDdlBxnLVxcMwY
NkMP7y2J
NtPvi5axRDio8p
NyLGODu9r3NjBvEtRIO
OBpIblPUVbdZAII10ugdFQxiwGM7tPw
OGmxYKP0
OIhatDpCs7esG9x3pha0l
OJoUzI4
OQ1kCbkRcIJhXctC8
OTdgA1RW20M1dTDzCIGHGVih6mM
OWqNJaTDOnibXTWgz5GbVi0mTkL
OhFGEZVtskcGVJzIP5TxsS06z72WaU
P1cF7ZFGBVRUQyRjPwDXm4xH3E
PCf909Hy3iPxs65eKajBYSXXs
PIBmPtpFu
PIsQlw6Q5BmAp1wpSoL2suIJYmY
PPhxCs0Cxau1PUVcPuuAIDnmJ3
PheOjUMwu
PkoCt3Novk5DjCgRBxarOnr1cqF0
PnJpIR3RDNmoBNGBhsIX
PnQojKIFKvr7
Pwiq1BGQMbPp187JGKUGEmNaNwVVR
Py0toq0iySLlbGPD
Q3IaiqwH7
Q5ZOsAia0N9Dd5RFs
Q7NAfUaDjYvid1dqYafuSSQmPuR6uiJG
Q919BuUxpIpxOBHVM1s
Q9gzvilWIF0
Q9qxIh8VupaKxrck8en3hYNyNkVLzw
QBFbAEiFRt2KX6Mt3rb0wVmMwYiUIFVB
QBekqvU8piekxEvtZ
QEPCPnR
QJbgOmjKQkEVdAZBAygelLr5X0my
QKRcyE3bE
QKXeA4r15T
QdNazKE6otbcAAbvAup0WwjJ0B
QeyYIcwd29L7MLhfi6o
Qf7NjCARyTt
QheFkQQlIDA
Qkc45K2LZlOOnd2CzOPyoU5ui42
QqDGPTjcuLFTkZiZrA
Qqx3NsmlAF6
R0dIy6oF9u7Yfyp8ehtyllY2mRZ
R8E7UQcd2IXXEurX8I3pP63y
R9YDqDSqyz
RAjZvrnYIraIrZKaAPOSxoHDn
RHBRemJrPA4oiyZZ0eKRDwcNfgp
RND8INcLYgP3Oz7CjV09Hh50wZKJt
RcCGsLxslr3fwGGRpk2hF5t4
RcwYd8Xjx
RikCklkCAG4l
RoWtbGCygv
RopZYtvQTh5Nff5EI3Y0tT4i3bOH
RpDQSK3bTdOG5EZOrE
RpFeqjSs4evm
Rs3ScEYx
RsOUOKK4eIsh780q72jn998oDYCI
RwnFsmBSFb1Shc5rMls34r
S1MZtAM
S7ISrmkPEJiZj8Bm3H7ga
S97HteqfjkgrTFFZ7ShrJIc
SAd3aaX3CNpP0V8FPtCogNB
SSarW4k25lqlosGud7EYUiAHT
SY3ZTXYPpN
SbDDqivwtXUbgs6rGppkFKhQl
SbZtBYIl7
ScpDsiEN
SgPR0c0NbSlBby2UkcgNUw5b3vZXsS
Sjy4YLtYNnLUsePAKI
SpPH5weiHUHV5ze4oxMxHxsUjC
SphHHGuoJTB20
SvrvPyicJNOx6n0uVz
SxQzNz2NfU1VMUAsfopX
TMC3yIAATIf
TUvuAE0MiCpnHe2
Ta9BeW1UFuAFMeF38Z5
TbOKMxTzSwFBnL
Tbj4WLYZtABho7Avpx0NMjlhRd5HHCy
TmA3lkQu5Et1zbbxmmHdp9cF9NoyFhdx
TnRn4kxFKeNqXd46spfs
U8eKhSf9AaZC0L4vaVZPJYgwNp2
U8qAeRSkjZFt0F6vTTBkAVb
UAQEGb0HKZ8X47w2SiZHMYWsrykaR2t
UApaT7BCDP4fVN510UEn5uLG
UJ32zTlfNR4J91uyC612qiDyKKpXzbI
UKMLhahe
UPVVbKrvWjvLLaWU5GZZma
UZYgNLu1vQGrgDN
Ua8LRDKPUuLzOCl08PQmejXQ
UbvvhyHMiumTy5p9lNrxoc0kR
UlHPDIBSmK
Uot8aDUsFaD
UrIwjIzX6
V2uYDzj1j
V3wDQSe
V5SQKeTg04sYT8wD7FuomO9DhM1fSIE
V7iw0gFS
VM9iyjU
VPKDBC2ehHEuiNO5
VWKofAOcUPht6cEwGMPFglDmTJT
ViOpa1Q5UkMbx
VmjyktwSNm0y2XnBp78qEI
VxrYwqDoPYiiGvC8inXTmWHeRQBo
VzlINtHwGuQd
W6WMUCbCbQsQiuJx9qYreJljh762oA5
W7B5VRu
W7Z86dmeu1e2L4m7ejqc3OE8Phx
WB2H2KPNmm1LXwGgjAuZNymFSDK
WCiTOLlFf
WEgNwc3mwnqX6gHT2FUtg6Gc
WZuhSw6uZmHK2xSkWAGywAIVTivDgGo
Wa4rBGPhHokz9UttIuC92ZR2z6Im1HZ
WiuU5ppSb1SEoWFlcWXYMMJ8Nnspq
WjZsp24qepNZ1woXTzqPJFlcEPvM
WnVoKmCata9QMYoxY9DBwKGy6
Wo7XXFlWCn909eB9iWexco0Yn
Wuf7jO6xQPYJ
WxGtoLjQg0Gpf1SSyQGMDwha8j3A
X0rwHrulxlh5f6SirLQFB04quOZSXB
X6KoBNrdkjgqaHNSG1PN
X6sxeR5NX7S5KZ3OL3USaG6u91
X8TJRSUE8kFJMYFWn7un
XJEsPDg7
XPXVuIqdn4eKDPngVSS8Tz1anj7A
XS4WQKIPpq06
XWbK1nasVEAwy4sfb6YGA6
XXbOneedWTp6
XcKZAeOZGZpREfv
XevZWqShXz
XfRCHbTimAKe6Hrg88b2f
XjNPJ6Jwk7AERla2fQPZTV38DXSj
XvuGI2R5wi9aRTdppP
Y2I343bcyD0mXF1PCJ1ROf9KuT
Y4FiWjopZ
Y58tztJTITckeFUu
YCQy7WYV2
YIzb3TFr23xMISIkYf10
YN95UUKB
YTF5YO7gHjJzqQKF7KbiFFPZlw
YU2HkIEiwpfpJE2gWghbMIUPh9
YdPBszIjIahFE1s25r6VlHzk5mvzmzvM
YeBRQA6ZN9x4tGVocwjDyTbpORIGd
YgyFwJfAyKHJW9IH1Io
Yv9ZUQbMpMYpa7pnf7phgMe
Z47ROR7d4q0pqIzxCP2
Z7X2zLxZIHpUlmBf
Z8DBc0ZKhByNdaS
ZC2R4vkdo52huKZ16VQ5
ZD8UpanmMgyNg2oMBO25J41GgTbuanJ
ZEIe6T3VgfTovG0R
ZFzb53mLyt2t0LBDfLcfhcgi

Sections

.text
Size: 461KB - Virtual size: 461KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.managed
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 149KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libvlccore.dll
.dll windows:4 windows x64 arch:x64

dce96bc6319a78e5eaf9315128c98209

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2013, 12:00

Not After

15/01/2038, 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:d0:8e:bd:a0:6b:e0:7c:81:5e:a7:af:25:ef:68:75
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

07/06/2024, 00:00

Not After

08/06/2027, 23:59

Subject

CN=VideoLAN,O=VideoLAN,L=Paris,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2013, 12:00

Not After

15/01/2038, 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:d0:8e:bd:a0:6b:e0:7c:81:5e:a7:af:25:ef:68:75
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

07/06/2024, 00:00

Not After

08/06/2027, 23:59

Subject

CN=VideoLAN,O=VideoLAN,L=Paris,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:c7:18:62:a5:d5:30:75:63:40:d1:0f:8c:d0:f0:fc:f9:54:be:81:1b:c3:de:8f:12:84:3e:5c:25:0b:34:f9
Signer

Actual PE Digest

07:c7:18:62:a5:d5:30:75:63:40:d1:0f:8c:d0:f0:fc:f9:54:be:81:1b:c3:de:8f:12:84:3e:5c:25:0b:34:f9

Digest Algorithm

sha256

PE Digest Matches

true

4d:a0:69:48:2b:69:2b:16:d8:e0:84:7c:ed:f7:56:e1:7b:74:ff:86
Signer

Actual PE Digest

4d:a0:69:48:2b:69:2b:16:d8:e0:84:7c:ed:f7:56:e1:7b:74:ff:86

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Imports

advapi32

CryptAcquireContextA
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
RegCloseKey
RegOpenKeyExA
RegQueryValueExA

kernel32

AllocConsole
CloseHandle
CreateDirectoryA
CreateEventA
CreateFileA
CreateFileW
CreateMutexW
CreateSemaphoreW
CreateThread
CreateTimerQueueTimer
DeleteCriticalSection
DeleteTimerQueueTimer
DeviceIoControl
DuplicateHandle
EnterCriticalSection
EnumResourceLanguagesA
EnumSystemLocalesA
FormatMessageW
FreeLibrary
GetACP
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetFileAttributesW
GetFileSize
GetLastError
GetLocaleInfoA
GetLogicalDrives
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetNativeSystemInfo
GetProcAddress
GetProcessHeap
GetProcessTimes
GetProcessWorkingSetSize
GetStartupInfoA
GetStdHandle
GetSystemTimeAsFileTime
GetTempFileNameW
GetTempPathA
GetTempPathW
GetThreadLocale
GetThreadTimes
GetTickCount
GetTimeZoneInformation
GetVersion
GetVersionExA
GlobalMemoryStatus
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
MapViewOfFile
MultiByteToWideChar
OpenFileMappingA
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserAPC
ReadFile
ReleaseMutex
ReleaseSemaphore
ResetEvent
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetConsoleOutputCP
SetConsoleTitleW
SetEvent
SetFilePointerEx
SetLastError
SetPriorityClass
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SleepEx
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile

msvcrt

___lc_codepage_func
__dllonexit
__iob_func
__mb_cur_max
__setusermatherr
_amsg_exit
_beginthreadex
_close
_commit
_endthreadex
_errno
_exit
_fdopen
_fileno
_findclose
_fstat64
fwprintf
_get_osfhandle
_gmtime64
_initterm
_isatty
_localtime64
_lock
_lseeki64
_mktime64
_onexit
_open_osfhandle
_pipe
_stat64
_stricmp
_strnicmp
_sys_errlist
_sys_nerr
_time64
_unlock
_vsnprintf
_wfindfirst64
_wfindnext64
_wfullpath
_wgetcwd
_wmkdir
_wopen
_wremove
_wrename
_wstat64
_wunlink
abort
atof
atoi
atol
bsearch
calloc
clearerr
clock
div
exit
fclose
feof
ferror
fflush
fgetc
fgets
fopen
fprintf
fputc
fputs
fputwc
fputws
fread
free
freopen
fseek
ftell
fwprintf
fwrite
getc
getchar
getenv
isalnum
isalpha
iscntrl
islower
isspace
isupper
iswctype
isxdigit
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
putc
putchar
puts
qsort
raise
rand
realloc
rewind
setlocale
signal
sprintf
strcat
strchr
strcmp
strcpy
strcspn
strerror
strftime
strlen
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtol
strtoul
tolower
toupper
towlower
ungetc
vfprintf
wcscat
wcschr
wcscmp
wcscpy
wcslen
wcsrchr
wcstombs
_vsnwprintf
_snwprintf
_write
_stricmp
_strdup
_setmode
_read
_open
_getpid
_getcwd
_fileno
_fdopen
_dup
_close
_access

shell32

SHGetFolderPathW
ShellExecuteW

user32

FindWindowW
GetActiveWindow
GetCapture
GetCaretPos
GetClipboardOwner
GetClipboardViewer
GetCursorPos
GetDesktopWindow
GetFocus
GetInputState
GetMessagePos
GetMessageTime
GetOpenClipboardWindow
GetProcessWindowStation
MessageBoxW
SendMessageW

ws2_32

WSACleanup
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSARecv
WSARecvFrom
WSASendTo
WSAStartup
WSAWaitForMultipleEvents
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostname
getnameinfo
getpeername
getsockname
getsockopt
htonl
ioctlsocket
listen
ntohl
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket

Exports

Exports

AddMD5
EndMD5
FromCharset
GetLang_1
GetLang_2B
GetLang_2T
InitMD5
NTPtime64
ToCharset
VLC_CompileBy
VLC_CompileHost
VLC_Compiler
access_vaDirectoryControlHelper
addon_entry_Hold
addon_entry_New
addon_entry_Release
addons_manager_Delete
addons_manager_Gather
addons_manager_Install
addons_manager_LoadCatalog
addons_manager_New
addons_manager_Remove
aout_BitsPerSample
aout_ChannelExtract
aout_ChannelReorder
aout_CheckChannelExtraction
aout_CheckChannelReorder
aout_Deinterleave
aout_DeviceGet
aout_DeviceSet
aout_DevicesList
aout_FiltersAdjustResampling
aout_FiltersChangeViewpoint
aout_FiltersDelete
aout_FiltersDrain
aout_FiltersFlush
aout_FiltersNew
aout_FiltersPlay
aout_FormatPrepare
aout_FormatPrint
aout_FormatPrintChannels
aout_Interleave
aout_MuteGet
aout_MuteSet
aout_VolumeGet
aout_VolumeSet
aout_VolumeUpdate
aout_filter_RequestVout
block_Alloc
block_FifoCount
block_FifoEmpty
block_FifoGet
block_FifoNew
block_FifoPut
block_FifoRelease
block_FifoShow
block_File
block_FilePath
block_Init
block_Realloc
block_TryRealloc
block_heap_Alloc
block_mmap_Alloc
block_shm_Alloc
config_AddIntf
config_ChainCreate
config_ChainDestroy
config_ChainDuplicate
config_ChainParse
config_ChainParseOptions
config_ExistIntf
config_FindConfig
config_GetDataDir
config_GetFloat
config_GetInt
config_GetIntChoices
config_GetLibDir
config_GetPsz
config_GetPszChoices
config_GetType
config_GetUserDir
config_PutFloat
config_PutInt
config_PutPsz
config_RemoveIntf
config_ResetAll
config_SaveConfigFile
config_StringEscape
config_StringUnescape
date_Change
date_Decrement
date_Get
date_Increment
date_Init
date_Move
date_Set
decoder_AbortPictures
decoder_GetDisplayDate
decoder_GetDisplayRate
decoder_GetInputAttachments
decoder_NewAudioBuffer
decoder_NewSubpicture
demux_Delete
demux_New
demux_PacketizerDestroy
demux_PacketizerNew
demux_vaControl
demux_vaControlHelper
es_format_Clean
es_format_Copy
es_format_Init
es_format_InitFromVideo
es_format_IsSimilar
filter_AddProxyCallbacks
filter_Blend
filter_ConfigureBlend
filter_DelProxyCallbacks
filter_DeleteBlend
filter_NewBlend
filter_chain_AppendConverter
filter_chain_AppendFilter
filter_chain_AppendFromString
filter_chain_Delete
filter_chain_DeleteFilter
filter_chain_GetFmtOut
filter_chain_IsEmpty
filter_chain_MouseEvent
filter_chain_MouseFilter
filter_chain_NewVideo
filter_chain_Reset
filter_chain_SubFilter
filter_chain_VideoFilter
filter_chain_VideoFlush
fingerprinter_Create
fingerprinter_Destroy
httpd_ClientIP
httpd_FileDelete
httpd_FileNew
httpd_HandlerDelete
httpd_HandlerNew
httpd_HostDelete
httpd_MsgAdd
httpd_MsgGet
httpd_RedirectDelete
httpd_RedirectNew
httpd_ServerIP
httpd_StreamDelete
httpd_StreamHeader
httpd_StreamNew
httpd_StreamSend
httpd_StreamSetHTTPHeaders
httpd_UrlCatch
httpd_UrlDelete
httpd_UrlNew
image_Ext2Fourcc
image_HandlerCreate
image_HandlerDelete
image_Mime2Fourcc
image_Type2Fourcc
input_Close
input_Control
input_Create
input_CreateFilename
input_DecoderCreate
input_DecoderDecode
input_DecoderDelete
input_DecoderDrain
input_DecoderFlush
input_GetItem
input_Read
input_Start
input_Stop
input_item_AddInfo
input_item_AddOpaque
input_item_AddOption
input_item_AddOptions
input_item_AddSlave
input_item_Copy
input_item_CopyOptions
input_item_DelInfo
input_item_GetDuration
input_item_GetInfo
input_item_GetMeta
input_item_GetName
input_item_GetNowPlayingFb
input_item_GetTitleFbName
input_item_GetURI
input_item_HasErrorWhenReading
input_item_Hold
input_item_IsArtFetched
input_item_IsPreparsed
input_item_MergeInfos
input_item_MetaMatch
input_item_NewExt
input_item_Release
input_item_ReplaceInfos
input_item_SetDuration
input_item_SetMeta
input_item_SetName
input_item_SetURI
input_item_WriteMeta
input_item_node_AppendItem
input_item_node_AppendNode
input_item_node_Create
input_item_node_Delete
input_item_slave_GetType
input_item_slave_New
input_resource_GetAout
input_resource_HoldAout
input_resource_New
input_resource_PutAout
input_resource_Release
input_resource_ResetAout
input_resource_Terminate
input_resource_TerminateVout
input_vaControl
intf_Create
libvlc_ArtRequest
libvlc_InternalAddIntf
libvlc_InternalCleanup
libvlc_InternalCreate
libvlc_InternalDestroy
libvlc_InternalDialogClean
libvlc_InternalDialogInit
libvlc_InternalInit
libvlc_InternalKeystoreClean
libvlc_InternalKeystoreInit
libvlc_InternalPlay
libvlc_MetadataCancel
libvlc_MetadataRequest
libvlc_Quit
libvlc_SetExitHandler
mdate
module_config_free
module_config_get
module_exists
module_find
module_get_capability
module_get_help
module_get_name
module_get_object
module_get_score
module_gettext
module_list_free
module_list_get
module_need
module_provides
module_unneed
msleep
mwait
net_Accept
net_AcceptSingle
net_Connect
net_ConnectDgram
net_Gets
net_Listen
net_ListenClose
net_OpenDgram
net_Printf
net_Read
net_SetCSCov
net_Write
net_vaPrintf
picture_BlendSubpicture
picture_Clone
picture_Copy
picture_CopyPixels
picture_CopyProperties
picture_Export
picture_Hold
picture_New
picture_NewFromFormat
picture_NewFromResource
picture_Release
picture_Reset
picture_Setup
picture_fifo_Delete
picture_fifo_Flush
picture_fifo_New
picture_fifo_OffsetDate
picture_fifo_Peek
picture_fifo_Pop
picture_fifo_Push
picture_pool_Enum
picture_pool_Get
picture_pool_GetSize
picture_pool_New
picture_pool_NewExtended
picture_pool_NewFromFormat
picture_pool_Release
picture_pool_Reserve
picture_pool_Wait
plane_CopyPixels
playlist_Add
playlist_AddExt
playlist_AddInput
playlist_AssertLocked
playlist_ChildSearchName
playlist_Clear
playlist_Control
playlist_CurrentInput
playlist_CurrentInputLocked
playlist_CurrentPlayingItem
playlist_Deactivate
playlist_EnableAudioFilter
playlist_Export
playlist_GetAout
playlist_GetNodeDuration
playlist_Import
playlist_IsServicesDiscoveryLoaded
playlist_ItemGetById
playlist_ItemGetByInput
playlist_LiveSearchUpdate
playlist_Lock
playlist_MuteGet
playlist_MuteSet
playlist_NodeAddCopy
playlist_NodeAddInput
playlist_NodeCreate
playlist_NodeDelete
playlist_RecursiveNodeSort
playlist_ServicesDiscoveryAdd
playlist_ServicesDiscoveryControl
playlist_ServicesDiscoveryRemove
playlist_SetRenderer
playlist_Status
playlist_TreeMove
playlist_TreeMoveMany
playlist_Unlock
playlist_VolumeGet
playlist_VolumeSet
playlist_VolumeUp
sdp_AddAttribute
sdp_AddMedia
secstotimestr
sout_AccessOutControl
sout_AccessOutDelete
sout_AccessOutNew
sout_AccessOutRead
sout_AccessOutSeek
sout_AccessOutWrite
sout_AnnounceRegisterSDP
sout_AnnounceUnRegister
sout_EncoderCreate
sout_MuxAddStream
sout_MuxDelete
sout_MuxDeleteStream
sout_MuxFlush
sout_MuxGetStream
sout_MuxNew
sout_MuxSendBuffer
sout_StreamChainDelete
sout_StreamChainNew
spu_ChangeFilters
spu_ChangeSources
spu_ClearChannel
spu_Create
spu_Destroy
spu_PutSubpicture
spu_RegisterChannel
spu_Render
subpicture_Delete
subpicture_New
subpicture_NewFromPicture
subpicture_Update
subpicture_region_ChainDelete
subpicture_region_Copy
subpicture_region_Delete
subpicture_region_New
text_segment_ChainDelete
text_segment_Copy
text_segment_Delete
text_segment_New
text_segment_NewInheritStyle
text_style_Copy
text_style_Create
text_style_Delete
text_style_Duplicate
text_style_Merge
text_style_New
update_Check
update_Delete
update_Download
update_GetRelease
update_NeedUpgrade
update_New
us_asprintf
us_atof
us_strtod
us_strtof
us_vasprintf
utf8_fprintf
utf8_vfprintf
var_AddCallback
var_AddListCallback
var_Change
var_Create
var_DelCallback
var_DelListCallback
var_Destroy
var_FreeList
var_Get
var_GetAndSet
var_GetChecked
var_Inherit
var_InheritURational
var_LocationParse
var_Set
var_SetChecked
var_TriggerCallback
var_Type
video_format_ApplyRotation
video_format_CopyCrop
video_format_FixRgb
video_format_GetTransform
video_format_IsSimilar
video_format_Print
video_format_ScaleCropAr
video_format_Setup
video_format_TransformBy
video_format_TransformTo
vlc_CPU
vlc_GetCPUCount
vlc_Log
vlc_LogSet
vlc_UrlClean
vlc_UrlParse
vlc_UrlParseFixup
vlc_accept
vlc_accept_i11e
vlc_access_NewMRL
vlc_actions_get_id
vlc_actions_get_key_names
vlc_actions_get_keycodes
vlc_b64_decode
vlc_b64_decode_binary
vlc_b64_decode_binary_to_buffer
vlc_b64_encode
vlc_b64_encode_binary
vlc_cancel
vlc_clone
vlc_close
vlc_cond_broadcast
vlc_cond_destroy
vlc_cond_init
vlc_cond_signal
vlc_cond_timedwait
vlc_cond_wait
vlc_control_cancel
vlc_credential_clean
vlc_credential_get
vlc_credential_init
vlc_credential_store
vlc_demux_chained_ControlVa
vlc_demux_chained_Delete
vlc_demux_chained_New
vlc_demux_chained_Send
vlc_dialog_display_error
vlc_dialog_display_error_va
vlc_dialog_display_progress
vlc_dialog_display_progress_va
vlc_dialog_id_dismiss
vlc_dialog_id_get_context
vlc_dialog_id_post_action
vlc_dialog_id_post_login
vlc_dialog_id_set_context
vlc_dialog_is_cancelled
vlc_dialog_provider_set_callbacks
vlc_dialog_provider_set_ext_callback
vlc_dialog_release
vlc_dialog_update_progress
vlc_dialog_update_progress_text
vlc_dialog_update_progress_text_va
vlc_dialog_wait_login
vlc_dialog_wait_login_va
vlc_dialog_wait_question
vlc_dialog_wait_question_va
vlc_drand48
vlc_dup
vlc_epg_AddEvent
vlc_epg_Delete
vlc_epg_Duplicate
vlc_epg_New
vlc_epg_SetCurrent
vlc_epg_event_Delete
vlc_epg_event_Duplicate
vlc_epg_event_New
vlc_error
vlc_event_attach
vlc_event_detach
vlc_ext_dialog_update
vlc_fifo_DequeueAllUnlocked
vlc_fifo_DequeueUnlocked
vlc_fifo_GetBytes
vlc_fifo_GetCount
vlc_fifo_Lock
vlc_fifo_QueueUnlocked
vlc_fifo_Signal
vlc_fifo_Unlock
vlc_fifo_Wait

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.buildid
Size: 512B - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vcruntime211.dll

Sharing

General

Malware Config

Signatures

Files

9a00b4d9cbb0969e8648268eb15ff6e1

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5cCertificate

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

09:d0:8e:bd:a0:6b:e0:7c:81:5e:a7:af:25:ef:68:75Certificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5cCertificate

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

09:d0:8e:bd:a0:6b:e0:7c:81:5e:a7:af:25:ef:68:75Certificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

28:2a:aa:08:e7:fc:95:81:4a:af:f4:cb:44:da:88:14:a9:85:7a:ba:0a:d7:e9:ab:c8:4c:8a:89:7d:44:18:78Signer

9b:00:2c:44:d8:68:8b:47:84:8a:07:a5:35:e5:4c:3a:ac:6a:a3:25Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

libvlc

advapi32

kernel32

msvcrt

shell32

user32

wininet

Exports

Exports

Sections

.text Size: 682KB - Virtual size: 682KB

.data Size: 9KB - Virtual size: 8KB

.rdata Size: 64KB - Virtual size: 64KB

.buildid Size: 512B - Virtual size: 53B

.pdata Size: 42KB - Virtual size: 42KB

.xdata Size: 57KB - Virtual size: 57KB

.bss Size: - Virtual size: 5KB

.edata Size: 512B - Virtual size: 66B

.idata Size: 7KB - Virtual size: 6KB

.CRT Size: 512B - Virtual size: 104B

.tls Size: 512B - Virtual size: 104B

.rsrc Size: 74KB - Virtual size: 74KB

.reloc Size: 5KB - Virtual size: 5KB

/4 Size: 512B - Virtual size: 16B

a729da9fa3a040f74f5d0b2b603f5939

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

advapi32

bcrypt

kernel32

ole32

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

09:d0:8e:bd:a0:6b:e0:7c:81:5e:a7:af:25:ef:68:75
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

09:d0:8e:bd:a0:6b:e0:7c:81:5e:a7:af:25:ef:68:75
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

28:2a:aa:08:e7:fc:95:81:4a:af:f4:cb:44:da:88:14:a9:85:7a:ba:0a:d7:e9:ab:c8:4c:8a:89:7d:44:18:78
Signer

9b:00:2c:44:d8:68:8b:47:84:8a:07:a5:35:e5:4c:3a:ac:6a:a3:25
Signer

.text
Size: 682KB - Virtual size: 682KB

.data
Size: 9KB - Virtual size: 8KB

.rdata
Size: 64KB - Virtual size: 64KB

.buildid
Size: 512B - Virtual size: 53B

.pdata
Size: 42KB - Virtual size: 42KB

.xdata
Size: 57KB - Virtual size: 57KB

.bss
Size: - Virtual size: 5KB

.edata
Size: 512B - Virtual size: 66B

.idata
Size: 7KB - Virtual size: 6KB

.CRT
Size: 512B - Virtual size: 104B

.tls
Size: 512B - Virtual size: 104B

.rsrc
Size: 74KB - Virtual size: 74KB

.reloc
Size: 5KB - Virtual size: 5KB

/4
Size: 512B - Virtual size: 16B

.text
Size: 461KB - Virtual size: 461KB

.managed
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 1.7MB - Virtual size: 1.7MB

.data
Size: 149KB - Virtual size: 211KB

.pdata
Size: 140KB - Virtual size: 140KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 1024B - Virtual size: 840B

.reloc
Size: 71KB - Virtual size: 70KB

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

09:d0:8e:bd:a0:6b:e0:7c:81:5e:a7:af:25:ef:68:75
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

09:d0:8e:bd:a0:6b:e0:7c:81:5e:a7:af:25:ef:68:75
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:c7:18:62:a5:d5:30:75:63:40:d1:0f:8c:d0:f0:fc:f9:54:be:81:1b:c3:de:8f:12:84:3e:5c:25:0b:34:f9
Signer

4d:a0:69:48:2b:69:2b:16:d8:e0:84:7c:ed:f7:56:e1:7b:74:ff:86
Signer

.text
Size: 1.4MB - Virtual size: 1.4MB

.data
Size: 18KB - Virtual size: 17KB

.rdata
Size: 1.1MB - Virtual size: 1.1MB