ez_cd_audio_converter_setup_x64[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

ez_cd_audio_converter_setup_x64.exe
Size

43.0MB
MD5

ba00fdb5d0a8fdec748833043daae5ed
SHA1

f9ec9d235266519fe802bb7c820eb9510c81e6da
SHA256

7e68c0229a74265baeb5104c54c9c0a0690dad7b108bf569a6705a0bba433afc
SHA512

c9ef7fecc95f24f8c517bc7529bb70d41f1c1ea75c4e25a1e86c22888a3117923a979eecefe927599a7776a562a06dfc96e0642358f34ed80396a87deb6849d3
SSDEEP

786432:nxy8LH4TmjWNY2Iha+fNuJsNCHYlvSkaU7VZFCUA9tzHhe8xMlOStDJUJh:nQMHUml2DqNuJsdlKSpPlAT7he8xMbta

Score

3^/10

Malware Config

Signatures

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack003/$PLUGINSDIR/LangDLL.dll
unpack003/$PLUGINSDIR/System.dll
unpack003/$PLUGINSDIR/nsDialogs.dll

Files

ez_cd_audio_converter_setup_x64.exe
.exe windows:4 windows x86 arch:x86

6e7f9a29f2c85394521a08b9f31f6275

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a5:1b:19:0f:34:92:3f:56:f2:cb:d9:21:c7:66:63:ce:5f:7c:0e:b7:5f:bf:9a:63:fd:82:bd:1c:c4:b4:15:4d
Signer

Actual PE Digest

a5:1b:19:0f:34:92:3f:56:f2:cb:d9:21:c7:66:63:ce:5f:7c:0e:b7:5f:bf:9a:63:fd:82:bd:1c:c4:b4:15:4d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityW
RegOpenKeyExW
RegEnumValueW

shell32

SHGetSpecialFolderLocation
SHFileOperationW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
SHGetFileInfoW

ole32

OleInitialize
OleUninitialize
CoCreateInstance
IIDFromString
CoTaskMemFree

comctl32

ord17
ImageList_Create
ImageList_Destroy
ImageList_AddMasked

user32

GetClientRect
EndPaint
DrawTextW
IsWindowEnabled
DispatchMessageW
wsprintfA
CharNextA
CharPrevW
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
GetSystemMetrics
FillRect
AppendMenuW
TrackPopupMenu
OpenClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
SetWindowPos
PeekMessageW
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
EmptyClipboard
CreatePopupMenu

gdi32

SetBkMode
SetBkColor
GetDeviceCaps
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
SetTextColor
SelectObject

kernel32

GetExitCodeProcess
WaitForSingleObject
GetModuleHandleA
GetProcAddress
GetSystemDirectoryW
lstrcatW
Sleep
lstrcpyA
WriteFile
GetTempFileNameW
CreateFileW
lstrcmpiA
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersion
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
ExitProcess
CopyFileW
GetCurrentProcess
GetModuleFileNameW
GetFileSize
GetTickCount
MulDiv
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
MoveFileExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 176KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$LOCALAPPDATA/EZ CD Audio Converter/converter_normal.txt
$LOCALAPPDATA/EZ CD Audio Converter/converter_single.txt
$LOCALAPPDATA/EZ CD Audio Converter/metadata.txt
$LOCALAPPDATA/EZ CD Audio Converter/ripper_image.txt
$LOCALAPPDATA/EZ CD Audio Converter/ripper_normal.txt
$LOCALAPPDATA/EZ CD Audio Converter/ripper_single.txt
$PLUGINSDIR/LangDLL.dll
.dll windows:4 windows x86 arch:x86

3e8d18bb71c7ebbda2ddc2a4bb03547b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
GlobalFree
lstrcpynW
lstrcmpW
GlobalAlloc
MulDiv
GetModuleHandleW
lstrcpyW

user32

DialogBoxParamW
SetDlgItemTextW
SendDlgItemMessageW
EndDialog
SetWindowTextW
LoadIconW
ShowWindow
SendMessageW
GetDC

gdi32

GetDeviceCaps
CreateFontIndirectW
DeleteObject

Exports

Exports

LangDialog

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 681B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

fc0224e99e736751432961db63a41b76

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError

user32

wsprintfW

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/nsDialogs.dll
.dll windows:4 windows x86 arch:x86

6b5c4f7d679059f68f1269aad3a5cecd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileAttributesW
lstrcpyW
MulDiv
lstrlenW
HeapFree
GetCurrentDirectoryW
lstrcmpiW
GetProcessHeap
HeapReAlloc
GlobalFree
lstrcpynW
GlobalAlloc
SetCurrentDirectoryW
HeapAlloc

user32

DestroyWindow
CallWindowProcW
SetCursor
LoadCursorW
GetPropW
CharPrevW
DrawFocusRect
GetWindowLongW
DrawTextW
GetClientRect
SetWindowLongW
GetDlgItem
GetSysColor
SetWindowPos
CreateDialogParamW
MapDialogRect
GetWindowRect
SetPropW
CreateWindowExW
IsWindow
SetTimer
KillTimer
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
wsprintfW
CharNextW
SendMessageW
MapWindowPoints
RemovePropW
GetWindowTextW

gdi32

SetTextColor

shell32

SHBrowseForFolderW
SHGetPathFromIDListW

comdlg32

GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 638B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Assets/Square150x150Logo.scale-100.png
.png
Assets/Square150x150Logo.scale-125.png
.png
Assets/Square150x150Logo.scale-150.png
.png
Assets/Square150x150Logo.scale-200.png
.png
Assets/Square150x150Logo.scale-400.png
.png
Assets/Square44x44Logo.scale-100.png
.png
Assets/Square44x44Logo.scale-125.png
.png
Assets/Square44x44Logo.scale-150.png
.png
Assets/Square44x44Logo.scale-200.png
.png
Assets/Square44x44Logo.scale-400.png
.png
Assets/Square44x44Logo.targetsize-16.png
.png
Assets/Square44x44Logo.targetsize-16_altform-unplated.png
.png
Assets/Square44x44Logo.targetsize-20.png
.png
Assets/Square44x44Logo.targetsize-20_altform-unplated.png
.png
Assets/Square44x44Logo.targetsize-24.png
.png
Assets/Square44x44Logo.targetsize-24_altform-unplated.png
.png
Assets/Square44x44Logo.targetsize-256.png
.png
Assets/Square44x44Logo.targetsize-256_altform-unplated.png
.png
Assets/Square44x44Logo.targetsize-32.png
.png
Assets/Square44x44Logo.targetsize-32_altform-unplated.png
.png
Assets/Square44x44Logo.targetsize-40.png
.png
Assets/Square44x44Logo.targetsize-40_altform-unplated.png
.png
Assets/Square44x44Logo.targetsize-48.png
.png
Assets/Square44x44Logo.targetsize-48_altform-unplated.png
.png
Assets/Square44x44Logo.targetsize-64.png
.png
Assets/Square44x44Logo.targetsize-64_altform-unplated.png
.png
Assets/storelogo.scale-100.png
.png
Assets/storelogo.scale-125.png
.png
Assets/storelogo.scale-150.png
.png
Assets/storelogo.scale-200.png
.png
Assets/storelogo.scale-400.png
.png
CoreAudioHelper.dll
.dll windows:6 windows x64 arch:x64

c4546f41553f9ef3e876a9874080e752

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d3:a8:45:1b:2c:12:9c:16:03:84:6e:c2:4f:99:97:39:ef:c5:d2:5f:7a:b3:5f:4a:93:5c:8a:19:ad:36:9b:e2
Signer

Actual PE Digest

d3:a8:45:1b:2c:12:9c:16:03:84:6e:c2:4f:99:97:39:ef:c5:d2:5f:7a:b3:5f:4a:93:5c:8a:19:ad:36:9b:e2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

wsprintfW

kernel32

FindFirstFileW
FindNextFileW
lstrlenW
SetEnvironmentVariableW
GetEnvironmentVariableW
lstrlenA
FindClose
LocalAlloc
SizeofResource
GetLastError
lstrcatW
LockResource
LoadLibraryW
CreateDirectoryW
LoadResource
GetProcAddress
LocalFree
FreeLibrary
CopyFileW
LoadLibraryExW
FreeResource
FindResourceExW

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

shell32

SHGetFolderPathW

Exports

Exports

?GetCoreAudioVersion@@YAXAEAK0@Z
?HasCoreAudio@@YA_NXZ

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Language/arabic.uni
Language/bulgarian.uni
Language/catala.uni
Language/chinese simplified.uni
Language/chinese traditional.uni
Language/croatian.uni
Language/czech.uni
Language/danish.uni
Language/dutch.uni
Language/english.uni
Language/estonian.uni
Language/finnish.uni
Language/francais.uni
Language/german.uni
Language/greek.uni
Language/hungarian.uni
Language/indonesian.uni
Language/italiano.uni
Language/japanese.uni
Language/korean.uni
Language/macedonian.uni
Language/norwegian.uni
Language/polish.uni
Language/portugues (brasileiro).uni
Language/portugues (portugal).uni
Language/romana.uni
Language/russian.uni
Language/serbian.uni
Language/serbianc.uni
Language/slovak.uni
Language/slovenian.uni
Language/spanish.uni
Language/svenska.uni
Language/turkish.uni
Language/ukrainian.uni
MatroskaMetadata.dll
.dll windows:6 windows x64 arch:x64

7e02aa361a55c6f70eb78739b60c87c3

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

40:36:7e:ac:6b:b4:f5:22:ab:1c:de:eb:6a:60:2c:65:cc:26:75:87:f5:45:30:87:29:0c:7d:d8:48:64:a8:43
Signer

Actual PE Digest

40:36:7e:ac:6b:b4:f5:22:ab:1c:de:eb:6a:60:2c:65:cc:26:75:87:f5:45:30:87:29:0c:7d:d8:48:64:a8:43

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\LIB\Release\x64\MatroskaMetadata.pdb

Imports

acdbase

ID3Helper_GetNextImage
ID3Helper_AddStr
ID3Helper_GetDword
ID3Helper_GetFirstImage
ID3Helper_IsNaN
ID3Helper_GetFirst
ID3Helper_AddFloat
ID3Helper_AddImage
ID3Helper_GetNaN
ID3Helper_GetNext

msvcp140

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?width@ios_base@std@@QEBA_JXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Xbad_function_call@std@@YAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?flags@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?width@ios_base@std@@QEAA_J_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ

kernel32

GetCurrentThreadId
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TerminateProcess
GetCurrentProcess

vcruntime140

__std_type_info_destroy_list
__C_specific_handler
memchr
__std_terminate
memcmp
memset
_CxxThrowException
__std_exception_destroy
__std_exception_copy
_purecall
memcpy
memmove

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-stdio-l1-1-0

_wfsopen
__stdio_common_vsprintf_s
fread
__stdio_common_vsscanf
fopen
fseek
ftell
_wfopen_s
_fseeki64
fclose
_ftelli64
fwrite
_chsize_s
_fileno

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_cexit
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_invalid_parameter_noinfo_noreturn
strerror
_errno

api-ms-win-crt-string-l1-1-0

_strnicmp
strlen
wcslen
_stricmp
strcmp

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

api-ms-win-crt-utility-l1-1-0

_byteswap_uint64
rand
_byteswap_ushort
_byteswap_ulong

Exports

Exports

?ReadMatroskaMetadata@@YA_NPEA_WPEAUID3Helper@@@Z
?WriteMatroskaMetadata@@YAHPEA_WPEAUID3Helper@@@Z

Sections

.text
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
acdbase.dll
.dll windows:6 windows x64 arch:x64

aa0fb71d8ffe16d99c4f6c1980ce97b3

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

46:71:ef:d1:c3:58:b4:5d:01:2f:48:28:01:73:43:47:11:ec:6f:0f:e3:c0:70:30:f1:69:fb:38:44:d7:12:a2
Signer

Actual PE Digest

46:71:ef:d1:c3:58:b4:5d:01:2f:48:28:01:73:43:47:11:ec:6f:0f:e3:c0:70:30:f1:69:fb:38:44:d7:12:a2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateEventA
CreateFileW
FindFirstFileW
FormatMessageA
GetACP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileSize
GetLastError
GetModuleFileNameW
GetSystemTimeAsFileTime
GetThreadLocale
GlobalAlloc
GlobalFree
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalAlloc
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEvent
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
WideCharToMultiByte
lstrcpyW
lstrlenA
lstrlenW

user32

wsprintfA

gdi32

CreateCompatibleBitmap
DeleteObject
GetDIBits
GetObjectA
SetDIBits

svml_dispmd

__svml_idiv4
__svml_idiv8_e9
__svml_idiv8_l9

libmmd

asin
atan2
ceil
ceilf
cos
cosf
exp
exp2
floor
log
log10
lrintf
pow
powf
round
sin
sinf
sqrt
sqrtf
tan

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
memcpy
memmove
memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
__stdio_common_vswscanf
_wfopen_s
fclose
fputc
fread
fwrite

api-ms-win-crt-runtime-l1-1-0

_cexit
_clearfp
_configure_narrow_argv
_crt_atexit
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_register_onexit_function
_seh_filter_dll
_statusfp
exit

api-ms-win-crt-string-l1-1-0

_stricmp
isalnum
strlen
strncmp
strncpy
wcslen
wcsncmp

api-ms-win-crt-convert-l1-1-0

_strtoui64
_ui64toa
_ultoa
strtoul

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc
realloc

api-ms-win-crt-utility-l1-1-0

div
qsort

api-ms-win-crt-environment-l1-1-0

getenv
getenv_s

Exports

Exports

??0CSampleRateConverter3@@QEAA@XZ
??0CSampleRateConverter3@@[email protected]
??0CSampleRateConverter3@@[email protected]
??0CSampleRateConverter3@@[email protected]
??0CSampleRateConverter3@@[email protected]
??0CSampleRateConverter3@@[email protected]
??0CSampleRateConverter3@@[email protected]
??0CSampleRateConverter3@@[email protected]
??0CSampleRateConverter3@@[email protected]
??0CSampleRateConverter4@@QEAA@XZ
??0CSampleRateConverter4@@[email protected]
??0CSampleRateConverter4@@[email protected]
??0CSampleRateConverter4@@[email protected]
??0CSampleRateConverter4@@[email protected]
??0CSampleRateConverter4@@[email protected]
??0CSampleRateConverter4@@[email protected]
??0CSampleRateConverter4@@[email protected]
??0CSampleRateConverter4@@[email protected]
??1CSampleRateConverter3@@QEAA@XZ
??1CSampleRateConverter4@@QEAA@XZ
??4CSampleRateConverter3@@QEAAAEAV0@AEBV0@@Z
??4CSampleRateConverter3@@QEAAAEAV0@AEBV0@@Z.A
??4CSampleRateConverter3@@QEAAAEAV0@AEBV0@@Z.L
??4CSampleRateConverter3@@QEAAAEAV0@AEBV0@@Z.M
??4CSampleRateConverter3@@QEAAAEAV0@AEBV0@@Z.N
??4CSampleRateConverter3@@QEAAAEAV0@AEBV0@@Z.P
??4CSampleRateConverter3@@QEAAAEAV0@AEBV0@@Z.R
??4CSampleRateConverter3@@QEAAAEAV0@AEBV0@@Z.S
??4CSampleRateConverter3@@QEAAAEAV0@AEBV0@@Z.V
??4CSampleRateConverter4@@QEAAAEAV0@AEBV0@@Z
??4CSampleRateConverter4@@QEAAAEAV0@AEBV0@@Z.A
??4CSampleRateConverter4@@QEAAAEAV0@AEBV0@@Z.L
??4CSampleRateConverter4@@QEAAAEAV0@AEBV0@@Z.M
??4CSampleRateConverter4@@QEAAAEAV0@AEBV0@@Z.N
??4CSampleRateConverter4@@QEAAAEAV0@AEBV0@@Z.P
??4CSampleRateConverter4@@QEAAAEAV0@AEBV0@@Z.R
??4CSampleRateConverter4@@QEAAAEAV0@AEBV0@@Z.S
??4CSampleRateConverter4@@QEAAAEAV0@AEBV0@@Z.V
?Flush@CSampleRateConverter4@@QEAA_NPEAPEAXPEAK1@Z
?Init@CSampleRateConverter3@@QEAAXKKKKKKKKAEAPEAX0_N1KK@Z
?Init@CSampleRateConverter3@@[email protected]
?Init@CSampleRateConverter3@@[email protected]
?Init@CSampleRateConverter3@@[email protected]
?Init@CSampleRateConverter3@@[email protected]
?Init@CSampleRateConverter3@@[email protected]
?Init@CSampleRateConverter3@@[email protected]
?Init@CSampleRateConverter3@@[email protected]
?Init@CSampleRateConverter3@@[email protected]
?Init@CSampleRateConverter4@@QEAAXKKKKKKKK_N0KK@Z
?Init@CSampleRateConverter4@@[email protected]
?Init@CSampleRateConverter4@@[email protected]
?Init@CSampleRateConverter4@@[email protected]
?Init@CSampleRateConverter4@@[email protected]
?Init@CSampleRateConverter4@@[email protected]
?Init@CSampleRateConverter4@@[email protected]
?Init@CSampleRateConverter4@@[email protected]
?Init@CSampleRateConverter4@@[email protected]
?Read@CSampleRateConverter4@@QEAA_NPEAPEAXPEAK1@Z
?Read@CSampleRateConverter4@@[email protected]
?Read@CSampleRateConverter4@@[email protected]
?Read@CSampleRateConverter4@@[email protected]
?Read@CSampleRateConverter4@@[email protected]
?Read@CSampleRateConverter4@@[email protected]
?Read@CSampleRateConverter4@@[email protected]
?Read@CSampleRateConverter4@@[email protected]
?Read@CSampleRateConverter4@@[email protected]
?Resample@CSampleRateConverter3@@QEAAKK_N@Z
?Resample@CSampleRateConverter3@@[email protected]
?Resample@CSampleRateConverter3@@[email protected]
?Resample@CSampleRateConverter3@@[email protected]
?Resample@CSampleRateConverter3@@[email protected]
?Resample@CSampleRateConverter3@@[email protected]
?Resample@CSampleRateConverter3@@[email protected]
?Resample@CSampleRateConverter3@@[email protected]
?Resample@CSampleRateConverter3@@[email protected]
?Write@CSampleRateConverter4@@QEAAXPEAXK@Z
BASE64Decode
BASE64Decode.A
BASE64Decode.L
BASE64Decode.M
BASE64Decode.N
BASE64Decode.P
BASE64Decode.R
BASE64Decode.S
BASE64Decode.V
BASE64Encode
BASE64Encode.A
BASE64Encode.L
BASE64Encode.M
BASE64Encode.N
BASE64Encode.P
BASE64Encode.R
BASE64Encode.S
BASE64Encode.V
BASE64FreeMem
CHAPTERNAME_Get_Number
CHAPTERNAME_Get_Number.A
CHAPTERNAME_Get_Number.L
CHAPTERNAME_Get_Number.M
CHAPTERNAME_Get_Number.N
CHAPTERNAME_Get_Number.P
CHAPTERNAME_Get_Number.R
CHAPTERNAME_Get_Number.S
CHAPTERNAME_Get_Number.V
CHAPTERNAME_Get_NumberW
CHAPTERNAME_Get_NumberW.A
CHAPTERNAME_Get_NumberW.L
CHAPTERNAME_Get_NumberW.M
CHAPTERNAME_Get_NumberW.N
CHAPTERNAME_Get_NumberW.P
CHAPTERNAME_Get_NumberW.R
CHAPTERNAME_Get_NumberW.S
CHAPTERNAME_Get_NumberW.V
CHAPTER_Get_Number
CHAPTER_Get_Number.A
CHAPTER_Get_Number.L
CHAPTER_Get_Number.M
CHAPTER_Get_Number.N
CHAPTER_Get_Number.P
CHAPTER_Get_Number.R
CHAPTER_Get_Number.S
CHAPTER_Get_Number.V
CHAPTER_Get_NumberW
CHAPTER_Get_NumberW.A
CHAPTER_Get_NumberW.L
CHAPTER_Get_NumberW.M
CHAPTER_Get_NumberW.N
CHAPTER_Get_NumberW.P
CHAPTER_Get_NumberW.R
CHAPTER_Get_NumberW.S
CHAPTER_Get_NumberW.V
CHAPTER_HMS_String_To_Position100nS
CHAPTER_HMS_String_To_Position100nS.A
CHAPTER_HMS_String_To_Position100nS.L
CHAPTER_HMS_String_To_Position100nS.M
CHAPTER_HMS_String_To_Position100nS.N
CHAPTER_HMS_String_To_Position100nS.P
CHAPTER_HMS_String_To_Position100nS.R
CHAPTER_HMS_String_To_Position100nS.S
CHAPTER_HMS_String_To_Position100nS.V
CHAPTER_HMS_String_To_Position100nSW
CHAPTER_HMS_String_To_Position100nSW.A
CHAPTER_HMS_String_To_Position100nSW.L
CHAPTER_HMS_String_To_Position100nSW.M
CHAPTER_HMS_String_To_Position100nSW.N
CHAPTER_HMS_String_To_Position100nSW.P
CHAPTER_HMS_String_To_Position100nSW.R
CHAPTER_HMS_String_To_Position100nSW.S
CHAPTER_HMS_String_To_Position100nSW.V
CHAPTER_Position100nS_To_HMS
ChangeChannelOrder
ChangeChannelOrder.A
ChangeChannelOrder.L
ChangeChannelOrder.M
ChangeChannelOrder.N
ChangeChannelOrder.P
ChangeChannelOrder.R
ChangeChannelOrder.S
ChangeChannelOrder.V
CreateResampledBitmap
CreateUserFilterResampledBitmap
DetectEbml
GetDSDPCMGain
GetDSDPCMQuality
GetHDCDGain
ID3Helper_AddChapter
ID3Helper_AddChapter_UTF8
ID3Helper_AddDword
ID3Helper_AddFloat
ID3Helper_AddImage
ID3Helper_AddImage.A
ID3Helper_AddImage.L
ID3Helper_AddImage.M
ID3Helper_AddImage.N
ID3Helper_AddImage.P
ID3Helper_AddImage.R
ID3Helper_AddImage.S
ID3Helper_AddImage.V
ID3Helper_AddStr
ID3Helper_AddStr.A
ID3Helper_AddStr.L
ID3Helper_AddStr.M
ID3Helper_AddStr.N
ID3Helper_AddStr.P
ID3Helper_AddStr.R
ID3Helper_AddStr.S
ID3Helper_AddStr.V
ID3Helper_AddStrAnsi
ID3Helper_AddStrUnicode
ID3Helper_AddULongLong
ID3Helper_Alloc
ID3Helper_Copy
ID3Helper_Copy.A
ID3Helper_Copy.L
ID3Helper_Copy.M
ID3Helper_Copy.N
ID3Helper_Copy.P
ID3Helper_Copy.R
ID3Helper_Copy.S
ID3Helper_Copy.V
ID3Helper_Free
ID3Helper_GetChapterCount_Name
ID3Helper_GetChapterCount_Name.A
ID3Helper_GetChapterCount_Name.L
ID3Helper_GetChapterCount_Name.M
ID3Helper_GetChapterCount_Name.N
ID3Helper_GetChapterCount_Name.P
ID3Helper_GetChapterCount_Name.R
ID3Helper_GetChapterCount_Name.S
ID3Helper_GetChapterCount_Name.V
ID3Helper_GetChapterCount_Position
ID3Helper_GetChapterCount_Position.A
ID3Helper_GetChapterCount_Position.L
ID3Helper_GetChapterCount_Position.M
ID3Helper_GetChapterCount_Position.N
ID3Helper_GetChapterCount_Position.P
ID3Helper_GetChapterCount_Position.R
ID3Helper_GetChapterCount_Position.S
ID3Helper_GetChapterCount_Position.V
ID3Helper_GetChapterTotal
ID3Helper_GetChapter_Name
ID3Helper_GetChapter_Name.A
ID3Helper_GetChapter_Name.L
ID3Helper_GetChapter_Name.M
ID3Helper_GetChapter_Name.N
ID3Helper_GetChapter_Name.P
ID3Helper_GetChapter_Name.R
ID3Helper_GetChapter_Name.S
ID3Helper_GetChapter_Name.V
ID3Helper_GetChapter_Position
ID3Helper_GetChapter_Position.A
ID3Helper_GetChapter_Position.L
ID3Helper_GetChapter_Position.M
ID3Helper_GetChapter_Position.N
ID3Helper_GetChapter_Position.P
ID3Helper_GetChapter_Position.R
ID3Helper_GetChapter_Position.S
ID3Helper_GetChapter_Position.V
ID3Helper_GetDword
ID3Helper_GetFirst
ID3Helper_GetFirstImage
ID3Helper_GetFirstImage.A
ID3Helper_GetFirstImage.L
ID3Helper_GetFirstImage.M
ID3Helper_GetFirstImage.N
ID3Helper_GetFirstImage.P
ID3Helper_GetFirstImage.R
ID3Helper_GetFirstImage.S
ID3Helper_GetFirstImage.V
ID3Helper_GetFloat
ID3Helper_GetImage
ID3Helper_GetImage.A
ID3Helper_GetImage.L
ID3Helper_GetImage.M
ID3Helper_GetImage.N
ID3Helper_GetImage.P
ID3Helper_GetImage.R
ID3Helper_GetImage.S
ID3Helper_GetImage.V
ID3Helper_GetNaN
ID3Helper_GetNext
ID3Helper_GetNextImage
ID3Helper_GetNextImage.A
ID3Helper_GetNextImage.L
ID3Helper_GetNextImage.M
ID3Helper_GetNextImage.N
ID3Helper_GetNextImage.P
ID3Helper_GetNextImage.R
ID3Helper_GetNextImage.S
ID3Helper_GetNextImage.V
ID3Helper_GetStr
ID3Helper_GetStr.A
ID3Helper_GetStr.L
ID3Helper_GetStr.M
ID3Helper_GetStr.N
ID3Helper_GetStr.P
ID3Helper_GetStr.R
ID3Helper_GetStr.S
ID3Helper_GetStr.V
ID3Helper_GetULongLong
ID3Helper_IsNaN
ID3Helper_SetChapterTotal
JPEG_Init
N100nSToSamples
N100nSToSamples.A
N100nSToSamples.L
N100nSToSamples.M
N100nSToSamples.N
N100nSToSamples.P
N100nSToSamples.R
N100nSToSamples.S
N100nSToSamples.V
ReplayGain_Change
ReplayGain_Deinit
ReplayGain_GetLoudness
ReplayGain_GetPeak
ReplayGain_GetPeak.A
ReplayGain_GetPeak.L
ReplayGain_GetPeak.M
ReplayGain_GetPeak.N
ReplayGain_GetPeak.P
ReplayGain_GetPeak.R
ReplayGain_GetPeak.S
ReplayGain_GetPeak.V
ReplayGain_GetSamples
ReplayGain_Init
ReplayGain_Init_TruePeak
ReplayGain_Process
SRC4_Deinit
SRC4_Flush
SRC4_Init
SRC4_Init.A
SRC4_Init.L
SRC4_Init.M
SRC4_Init.N
SRC4_Init.P
SRC4_Init.R
SRC4_Init.S
SRC4_Init.V
SRC4_Read
SRC4_Read.A
SRC4_Read.L
SRC4_Read.M
SRC4_Read.N
SRC4_Read.P
SRC4_Read.R
SRC4_Read.S
SRC4_Read.V
SRC4_Write
SamplesToN100nS
SamplesToN100nS.A
SamplesToN100nS.L
SamplesToN100nS.M
SamplesToN100nS.N
SamplesToN100nS.P
SamplesToN100nS.R
SamplesToN100nS.S
SamplesToN100nS.V
SetDSDPCMGain
SetDSDPCMQuality
SetDitherParameters
SetHDCDGain
SetSampleRateConverterParameters
SetUltraHD
UNC_AnsiToUnicode
UNC_AnsiToUtf8
UNC_ChangeEndian
UNC_ChangeEndian.A
UNC_ChangeEndian.L
UNC_ChangeEndian.M
UNC_ChangeEndian.N
UNC_ChangeEndian.P
UNC_ChangeEndian.R
UNC_ChangeEndian.S
UNC_ChangeEndian.V
UNC_RemoveUnicodeAPIPath
UNC_RemoveUnicodeAPIPath.A
UNC_RemoveUnicodeAPIPath.L
UNC_RemoveUnicodeAPIPath.M
UNC_RemoveUnicodeAPIPath.N
UNC_RemoveUnicodeAPIPath.P
UNC_RemoveUnicodeAPIPath.R
UNC_RemoveUnicodeAPIPath.S
UNC_RemoveUnicodeAPIPath.V
UNC_UnicodeToAnsi
UNC_UnicodeToUtf8
UNC_Utf8ToAnsi
UNC_Utf8ToUnicode
UNC_freeStr
UNC_freeWStr
UUDecode
UUDecode.A
UUDecode.L
UUDecode.M
UUDecode.N
UUDecode.P
UUDecode.R
UUDecode.S
UUDecode.V
UUEncode
UUEncode.A
UUEncode.L
UUEncode.M
UUEncode.N
UUEncode.P
UUEncode.R
UUEncode.S
UUEncode.V
UUFreeMem
XHEAAC_DRC_Enable
XHEAAC_DRC_Enabled
XHEAAC_DRC_Get_Effect
XHEAAC_DRC_Get_Loudness
XHEAAC_DRC_Set_Effect
XHEAAC_DRC_Set_Loudness
ffmpeg_global_lock
ffmpeg_global_unlock
hdcd_detected
hdcd_free
hdcd_new
hdcd_process
hdcd_reset
hdcd_scan
hdcd_scan.A
hdcd_scan.L
hdcd_scan.M
hdcd_scan.N
hdcd_scan.P
hdcd_scan.R
hdcd_scan.S
hdcd_scan.V
hdcd_scan16
hdcd_scan16.A
hdcd_scan16.L
hdcd_scan16.M
hdcd_scan16.N
hdcd_scan16.P
hdcd_scan16.R
hdcd_scan16.S
hdcd_scan16.V
hmac_sha224
hmac_sha224.A
hmac_sha224.L
hmac_sha224.M
hmac_sha224.N
hmac_sha224.P
hmac_sha224.R
hmac_sha224.S
hmac_sha224.V
hmac_sha224_final
hmac_sha224_final.A
hmac_sha224_final.L
hmac_sha224_final.M
hmac_sha224_final.N
hmac_sha224_final.P
hmac_sha224_final.R
hmac_sha224_final.S
hmac_sha224_final.V
hmac_sha224_init
hmac_sha224_init.A
hmac_sha224_init.L
hmac_sha224_init.M
hmac_sha224_init.N
hmac_sha224_init.P
hmac_sha224_init.R
hmac_sha224_init.S
hmac_sha224_init.V
hmac_sha224_reinit
hmac_sha224_reinit.A
hmac_sha224_reinit.L
hmac_sha224_reinit.M
hmac_sha224_reinit.N
hmac_sha224_reinit.P
hmac_sha224_reinit.R
hmac_sha224_reinit.S
hmac_sha224_reinit.V
hmac_sha224_update
hmac_sha256
hmac_sha256.A
hmac_sha256.L
hmac_sha256.M
hmac_sha256.N
hmac_sha256.P
hmac_sha256.R
hmac_sha256.S
hmac_sha256.V
hmac_sha256_final
hmac_sha256_final.A
hmac_sha256_final.L
hmac_sha256_final.M
hmac_sha256_final.N
hmac_sha256_final.P
hmac_sha256_final.R
hmac_sha256_final.S
hmac_sha256_final.V
hmac_sha256_init
hmac_sha256_init.A
hmac_sha256_init.L
hmac_sha256_init.M
hmac_sha256_init.N
hmac_sha256_init.P
hmac_sha256_init.R
hmac_sha256_init.S
hmac_sha256_init.V
hmac_sha256_reinit
hmac_sha256_reinit.A
hmac_sha256_reinit.L
hmac_sha256_reinit.M
hmac_sha256_reinit.N
hmac_sha256_reinit.P
hmac_sha256_reinit.R
hmac_sha256_reinit.S
hmac_sha256_reinit.V
hmac_sha256_update
hmac_sha384
hmac_sha384.A
hmac_sha384.L
hmac_sha384.M
hmac_sha384.N
hmac_sha384.P

Sections

.text
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 406KB - Virtual size: 405KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
api-ms-win-core-console-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

82:07:11:21:78:9c:bf:48:e8:07:96:86:3d:86:24:ee:c0:d7:44:8c:3e:ee:93:3d:00:32:5e:94:9f:47:05:ca
Signer

Actual PE Digest

82:07:11:21:78:9c:bf:48:e8:07:96:86:3d:86:24:ee:c0:d7:44:8c:3e:ee:93:3d:00:32:5e:94:9f:47:05:ca

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-console-l1-1-0.pdb

Exports

Exports

AllocConsole
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetNumberOfConsoleInputEvents
PeekConsoleInputA
ReadConsoleA
ReadConsoleInputA
ReadConsoleInputW
ReadConsoleW
SetConsoleCtrlHandler
SetConsoleMode
WriteConsoleA
WriteConsoleW

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-console-l1-2-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a7:b8:8f:fb:97:5d:35:84:ec:00:00:00:00:05:a7
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a0:7e:73:b5:df:6e:46:82:55:98:bc:0e:39:6e:19:06:5c:18:1c:27:26:9a:3a:d5:63:c8:36:2f:3f:96:98:11
Signer

Actual PE Digest

a0:7e:73:b5:df:6e:46:82:55:98:bc:0e:39:6e:19:06:5c:18:1c:27:26:9a:3a:d5:63:c8:36:2f:3f:96:98:11

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-console-l1-2-0.pdb

Exports

Exports

AllocConsole
AttachConsole
FreeConsole
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetNumberOfConsoleInputEvents
PeekConsoleInputA
PeekConsoleInputW
ReadConsoleA
ReadConsoleInputA
ReadConsoleInputW
ReadConsoleW
SetConsoleCtrlHandler
SetConsoleMode
WriteConsoleA
WriteConsoleW

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-datetime-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b2:34:d0:fd:3f:c8:2b:e7:a9:4a:10:0e:de:eb:89:bb:35:d7:67:82:35:94:db:7d:fc:7b:93:42:69:72:de:d3
Signer

Actual PE Digest

b2:34:d0:fd:3f:c8:2b:e7:a9:4a:10:0e:de:eb:89:bb:35:d7:67:82:35:94:db:7d:fc:7b:93:42:69:72:de:d3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-datetime-l1-1-0.pdb

Exports

Exports

GetDateFormatA
GetDateFormatW
GetTimeFormatA
GetTimeFormatW

Sections

.rdata
Size: 4KB - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-debug-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f0:ba:7a:9a:93:88:7f:61:ad:42:01:37:a8:78:3c:11:64:62:16:65:13:05:a7:72:b9:3d:2d:1f:18:15:53:4e
Signer

Actual PE Digest

f0:ba:7a:9a:93:88:7f:61:ad:42:01:37:a8:78:3c:11:64:62:16:65:13:05:a7:72:b9:3d:2d:1f:18:15:53:4e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-debug-l1-1-0.pdb

Exports

Exports

DebugBreak
IsDebuggerPresent
OutputDebugStringA
OutputDebugStringW

Sections

.rdata
Size: 4KB - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-errorhandling-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

81:4f:ba:bf:87:a8:b6:a2:c0:96:bb:e4:57:cb:20:67:cd:d5:ae:38:da:68:c4:66:98:e7:89:72:bb:fc:2e:cb
Signer

Actual PE Digest

81:4f:ba:bf:87:a8:b6:a2:c0:96:bb:e4:57:cb:20:67:cd:d5:ae:38:da:68:c4:66:98:e7:89:72:bb:fc:2e:cb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-errorhandling-l1-1-0.pdb

Exports

Exports

GetErrorMode
GetLastError
RaiseException
SetErrorMode
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter

Sections

.rdata
Size: 4KB - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-fibers-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cc:91:55:41:c4:4c:2d:c3:9a:37:cf:36:68:db:5d:20:59:01:71:8c:59:73:97:3e:9e:37:5a:fd:15:ea:54:72
Signer

Actual PE Digest

cc:91:55:41:c4:4c:2d:c3:9a:37:cf:36:68:db:5d:20:59:01:71:8c:59:73:97:3e:9e:37:5a:fd:15:ea:54:72

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-fibers-l1-1-0.pdb

Exports

Exports

FlsAlloc
FlsFree
FlsGetValue
FlsSetValue

Sections

.rdata
Size: 4KB - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-fibers-l1-1-1.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a7:b8:8f:fb:97:5d:35:84:ec:00:00:00:00:05:a7
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d7:5e:da:37:86:cc:4a:04:a8:6e:59:86:c1:0a:31:ba:68:7b:95:0a:4c:df:84:07:8e:c1:66:f6:dd:cf:5d:8b
Signer

Actual PE Digest

d7:5e:da:37:86:cc:4a:04:a8:6e:59:86:c1:0a:31:ba:68:7b:95:0a:4c:df:84:07:8e:c1:66:f6:dd:cf:5d:8b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-fibers-l1-1-1.pdb

Exports

Exports

IsThreadAFiber

Sections

.rdata
Size: 4KB - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-file-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d3:35:74:38:b0:e0:9c:b6:39:d9:9c:b9:a7:e4:57:d7:66:07:98:75:6f:5b:02:53:05:b6:8f:9f:3f:32:40:ee
Signer

Actual PE Digest

d3:35:74:38:b0:e0:9c:b6:39:d9:9c:b9:a7:e4:57:d7:66:07:98:75:6f:5b:02:53:05:b6:8f:9f:3f:32:40:ee

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-file-l1-1-0.pdb

Exports

Exports

CompareFileTime
CreateDirectoryA
CreateDirectoryW
CreateFileA
CreateFileW
DefineDosDeviceW
DeleteFileA
DeleteFileW
DeleteVolumeMountPointW
FileTimeToLocalFileTime
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationA
FindFirstChangeNotificationW
FindFirstFileA
FindFirstFileExA
FindFirstFileExW
FindFirstFileNameW
FindFirstFileW
FindFirstVolumeW
FindNextChangeNotification
FindNextFileA
FindNextFileNameW
FindNextFileW
FindNextVolumeW
FindVolumeClose
FlushFileBuffers
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetDriveTypeA
GetDriveTypeW
GetFileAttributesA
GetFileAttributesExA
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileSizeEx
GetFileTime
GetFileType
GetFinalPathNameByHandleA
GetFinalPathNameByHandleW
GetFullPathNameA
GetFullPathNameW
GetLogicalDriveStringsW
GetLogicalDrives
GetLongPathNameA
GetLongPathNameW
GetShortPathNameW
GetTempFileNameW
GetVolumeInformationByHandleW
GetVolumeInformationW
GetVolumePathNameW
LocalFileTimeToFileTime
LockFile
LockFileEx
QueryDosDeviceW
ReadFile
ReadFileEx
ReadFileScatter
RemoveDirectoryA
RemoveDirectoryW
SetEndOfFile
SetFileAttributesA
SetFileAttributesW
SetFileInformationByHandle
SetFilePointer
SetFilePointerEx
SetFileTime
SetFileValidData
UnlockFile
UnlockFileEx
WriteFile
WriteFileEx
WriteFileGather

Sections

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-file-l1-2-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:b2:7a:c6:43:64:c0:e3:74:15:a8:c1:4c:6b:05:33:c2:4a:2a:21:99:bf:3e:9e:94:30:c3:13:85:e0:23:79
Signer

Actual PE Digest

52:b2:7a:c6:43:64:c0:e3:74:15:a8:c1:4c:6b:05:33:c2:4a:2a:21:99:bf:3e:9e:94:30:c3:13:85:e0:23:79

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-file-l1-2-0.pdb

Exports

Exports

CreateFile2
GetTempPathW
GetVolumeNameForVolumeMountPointW
GetVolumePathNamesForVolumeNameW

Sections

.rdata
Size: 4KB - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-file-l2-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:ea:5b:1c:1f:c0:51:7e:59:56:17:8c:8e:c4:7c:58:c0:60:de:83:06:3f:da:30:5f:f0:73:c2:48:78:35:87
Signer

Actual PE Digest

02:ea:5b:1c:1f:c0:51:7e:59:56:17:8c:8e:c4:7c:58:c0:60:de:83:06:3f:da:30:5f:f0:73:c2:48:78:35:87

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-file-l2-1-0.pdb

Exports

Exports

CopyFile2
CopyFileExW
CreateDirectoryExW
CreateHardLinkW
CreateSymbolicLinkW
GetFileInformationByHandleEx
MoveFileExW
MoveFileWithProgressW
ReOpenFile
ReadDirectoryChangesW
ReplaceFileW

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-handle-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:a5:02:0d:70:fc:26:39:03:b1:f0:74:f9:45:0d:b3:14:56:7c:58:8a:21:0b:ef:12:1e:6d:71:87:b3:6e:9f
Signer

Actual PE Digest

07:a5:02:0d:70:fc:26:39:03:b1:f0:74:f9:45:0d:b3:14:56:7c:58:8a:21:0b:ef:12:1e:6d:71:87:b3:6e:9f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-handle-l1-1-0.pdb

Exports

Exports

CloseHandle
CompareObjectHandles
DuplicateHandle
GetHandleInformation
SetHandleInformation

Sections

.rdata
Size: 4KB - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-heap-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a7:b8:8f:fb:97:5d:35:84:ec:00:00:00:00:05:a7
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

27:fe:db:5d:c2:e2:81:8c:0e:c2:cb:c5:c3:2a:0d:44:a3:ee:e2:43:ec:89:8b:91:23:97:a9:f9:4a:23:58:04
Signer

Actual PE Digest

27:fe:db:5d:c2:e2:81:8c:0e:c2:cb:c5:c3:2a:0d:44:a3:ee:e2:43:ec:89:8b:91:23:97:a9:f9:4a:23:58:04

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-heap-l1-1-0.pdb

Exports

Exports

GetProcessHeap
GetProcessHeaps
HeapAlloc
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapLock
HeapQueryInformation
HeapReAlloc
HeapSetInformation
HeapSize
HeapSummary
HeapUnlock
HeapValidate
HeapWalk

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-interlocked-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a7:b8:8f:fb:97:5d:35:84:ec:00:00:00:00:05:a7
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2f:7a:ad:97:20:1b:93:b6:fa:b1:08:2b:b3:39:7b:58:2c:29:4e:d5:df:95:99:74:4c:86:04:64:5b:1f:9b:fd
Signer

Actual PE Digest

2f:7a:ad:97:20:1b:93:b6:fa:b1:08:2b:b3:39:7b:58:2c:29:4e:d5:df:95:99:74:4c:86:04:64:5b:1f:9b:fd

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-interlocked-l1-1-0.pdb

Exports

Exports

InitializeSListHead
InterlockedFlushSList
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedPushListSList
QueryDepthSList

Sections

.rdata
Size: 4KB - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-kernel32-legacy-l1-1-1.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a7:b8:8f:fb:97:5d:35:84:ec:00:00:00:00:05:a7
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f7:7b:22:ea:67:fe:b1:0c:c7:2f:02:e4:56:a4:be:69:e3:ac:62:2f:71:6d:41:2e:47:8c:ba:51:1a:64:13:5c
Signer

Actual PE Digest

f7:7b:22:ea:67:fe:b1:0c:c7:2f:02:e4:56:a4:be:69:e3:ac:62:2f:71:6d:41:2e:47:8c:ba:51:1a:64:13:5c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-kernel32-legacy-l1-1-1.pdb

Exports

Exports

FindFirstVolumeMountPointW
FindNextVolumeMountPointW
FindVolumeMountPointClose
GetFileAttributesTransactedW
GetFirmwareType
GetNumaAvailableMemoryNodeEx
GetNumaNodeProcessorMask
GetNumaProcessorNodeEx
PowerClearRequest
PowerCreateRequest
PowerSetRequest
SetDllDirectoryW
SetThreadIdealProcessor
SetVolumeMountPointW
VerifyVersionInfoW

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-libraryloader-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a7:b8:8f:fb:97:5d:35:84:ec:00:00:00:00:05:a7
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

31:ac:d7:0c:8b:b8:d3:ed:2e:9a:07:b1:93:f5:f2:86:5d:55:c9:75:f8:5d:43:e4:38:8a:d7:f5:6b:24:65:9d
Signer

Actual PE Digest

31:ac:d7:0c:8b:b8:d3:ed:2e:9a:07:b1:93:f5:f2:86:5d:55:c9:75:f8:5d:43:e4:38:8a:d7:f5:6b:24:65:9d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-libraryloader-l1-1-0.pdb

Exports

Exports

AddDllDirectory
DisableThreadLibraryCalls
FindResourceExW
FindStringOrdinal
FreeLibrary
FreeLibraryAndExitThread
FreeResource
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetProcAddress
LoadLibraryExA
LoadLibraryExW
LoadResource
LoadStringA
LoadStringW
LockResource
RemoveDllDirectory
SetDefaultDllDirectories
SizeofResource

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-localization-l1-2-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a7:b8:8f:fb:97:5d:35:84:ec:00:00:00:00:05:a7
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

82:40:fa:55:f3:2b:d9:ce:9b:08:3e:9c:12:12:3a:f4:a0:fc:31:9b:d6:4c:ca:6c:c7:9c:77:b1:6b:98:f8:d7
Signer

Actual PE Digest

82:40:fa:55:f3:2b:d9:ce:9b:08:3e:9c:12:12:3a:f4:a0:fc:31:9b:d6:4c:ca:6c:c7:9c:77:b1:6b:98:f8:d7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-localization-l1-2-0.pdb

Exports

Exports

ConvertDefaultLocale
EnumSystemGeoID
EnumSystemLocalesA
EnumSystemLocalesW
FindNLSString
FindNLSStringEx
FormatMessageA
FormatMessageW
GetACP
GetCPInfo
GetCPInfoExW
GetCalendarInfoEx
GetCalendarInfoW
GetFileMUIInfo
GetFileMUIPath
GetGeoInfoW
GetLocaleInfoA
GetLocaleInfoEx
GetLocaleInfoW
GetNLSVersion
GetNLSVersionEx
GetOEMCP
GetProcessPreferredUILanguages
GetSystemDefaultLCID
GetSystemDefaultLangID
GetSystemPreferredUILanguages
GetThreadLocale
GetThreadPreferredUILanguages
GetThreadUILanguage
GetUILanguageInfo
GetUserDefaultLCID
GetUserDefaultLangID
GetUserDefaultLocaleName
GetUserGeoID
GetUserPreferredUILanguages
IdnToAscii
IdnToUnicode
IsDBCSLeadByte
IsDBCSLeadByteEx
IsNLSDefinedString
IsValidCodePage
IsValidLanguageGroup
IsValidLocale
IsValidLocaleName
IsValidNLSVersion
LCMapStringA
LCMapStringEx
LCMapStringW
LocaleNameToLCID
ResolveLocaleName
SetCalendarInfoW
SetLocaleInfoW
SetProcessPreferredUILanguages
SetThreadLocale
SetThreadPreferredUILanguages
SetThreadUILanguage
SetUserGeoID
VerLanguageNameA
VerLanguageNameW

Sections

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-memory-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c5:73:fb:62:05:91:03:7e:0a:a8:71:2d:0e:ad:54:b9:5c:9c:0a:38:82:8f:d7:4b:f5:8a:6e:c4:76:e6:ab:ea
Signer

Actual PE Digest

c5:73:fb:62:05:91:03:7e:0a:a8:71:2d:0e:ad:54:b9:5c:9c:0a:38:82:8f:d7:4b:f5:8a:6e:c4:76:e6:ab:ea

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-memory-l1-1-0.pdb

Exports

Exports

CreateFileMappingW
FlushViewOfFile
MapViewOfFile
MapViewOfFileEx
OpenFileMappingW
ReadProcessMemory
UnmapViewOfFile
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualFreeEx
VirtualProtect
VirtualProtectEx
VirtualQuery
VirtualQueryEx
WriteProcessMemory

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-namedpipe-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a7:b8:8f:fb:97:5d:35:84:ec:00:00:00:00:05:a7
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:03:61:f6:8b:14:1a:40:8a:38:d3:8c:8d:9d:47:1e:d7:e3:de:9e:23:04:28:a7:ba:b0:b1:f7:be:71:e1:d4
Signer

Actual PE Digest

2e:03:61:f6:8b:14:1a:40:8a:38:d3:8c:8d:9d:47:1e:d7:e3:de:9e:23:04:28:a7:ba:b0:b1:f7:be:71:e1:d4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-namedpipe-l1-1-0.pdb

Exports

Exports

ConnectNamedPipe
CreateNamedPipeW
CreatePipe
DisconnectNamedPipe
GetNamedPipeClientComputerNameW
ImpersonateNamedPipeClient
PeekNamedPipe
SetNamedPipeHandleState
TransactNamedPipe
WaitNamedPipeW

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-processenvironment-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1b:4e:74:fb:de:a6:b3:a9:4c:c0:95:5b:92:5d:a9:db:bd:2a:5c:24:1e:1f:57:c5:ed:51:3d:18:3d:06:f7:11
Signer

Actual PE Digest

1b:4e:74:fb:de:a6:b3:a9:4c:c0:95:5b:92:5d:a9:db:bd:2a:5c:24:1e:1f:57:c5:ed:51:3d:18:3d:06:f7:11

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-processenvironment-l1-1-0.pdb

Exports

Exports

ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetCommandLineA
GetCommandLineW
GetCurrentDirectoryA
GetCurrentDirectoryW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetStdHandle
SearchPathW
SetCurrentDirectoryA
SetCurrentDirectoryW
SetEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetStdHandle
SetStdHandleEx

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-processthreads-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a7:b8:8f:fb:97:5d:35:84:ec:00:00:00:00:05:a7
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:f5:7b:61:2e:b1:79:35:c7:b9:d7:71:c0:7a:4b:ad:2f:31:b2:dc:ed:51:43:ee:cd:3f:7a:c4:82:2f:66
Signer

Actual PE Digest

52:00:f5:7b:61:2e:b1:79:35:c7:b9:d7:71:c0:7a:4b:ad:2f:31:b2:dc:ed:51:43:ee:cd:3f:7a:c4:82:2f:66

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-processthreads-l1-1-0.pdb

Exports

Exports

CreateProcessA
CreateProcessAsUserW
CreateProcessW
CreateRemoteThread
CreateRemoteThreadEx
CreateThread
DeleteProcThreadAttributeList
ExitProcess
ExitThread
FlushProcessWriteBuffers
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetExitCodeProcess
GetExitCodeThread
GetPriorityClass
GetProcessId
GetProcessIdOfThread
GetProcessTimes
GetProcessVersion
GetStartupInfoW
GetThreadId
GetThreadPriority
GetThreadPriorityBoost
InitializeProcThreadAttributeList
OpenProcessToken
OpenThread
OpenThreadToken
ProcessIdToSessionId
QueryProcessAffinityUpdateMode
QueueUserAPC
ResumeThread
SetPriorityClass
SetProcessAffinityUpdateMode
SetProcessShutdownParameters
SetThreadPriority
SetThreadPriorityBoost
SetThreadStackGuarantee
SetThreadToken
SuspendThread
SwitchToThread
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UpdateProcThreadAttribute

Sections

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-processthreads-l1-1-1.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

14:3e:bf:bc:68:86:d8:32:a6:f7:a3:8d:1b:18:ef:62:19:27:c6:d6:12:09:ee:8c:ff:60:ae:11:da:1a:df:a1
Signer

Actual PE Digest

14:3e:bf:bc:68:86:d8:32:a6:f7:a3:8d:1b:18:ef:62:19:27:c6:d6:12:09:ee:8c:ff:60:ae:11:da:1a:df:a1

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-processthreads-l1-1-1.pdb

Exports

Exports

FlushInstructionCache
GetCurrentProcessorNumber
GetCurrentProcessorNumberEx
GetCurrentThreadStackLimits
GetProcessHandleCount
GetProcessMitigationPolicy
GetThreadContext
GetThreadIdealProcessorEx
GetThreadTimes
IsProcessorFeaturePresent
OpenProcess
SetProcessMitigationPolicy
SetThreadContext
SetThreadIdealProcessorEx

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-profile-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a7:b8:8f:fb:97:5d:35:84:ec:00:00:00:00:05:a7
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9e:aa:02:c8:a6:10:c6:7b:10:de:7f:fb:c9:74:7d:ea:84:a6:9b:c3:14:25:34:53:31:65:3b:f6:6b:b5:d2:fa
Signer

Actual PE Digest

9e:aa:02:c8:a6:10:c6:7b:10:de:7f:fb:c9:74:7d:ea:84:a6:9b:c3:14:25:34:53:31:65:3b:f6:6b:b5:d2:fa

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-profile-l1-1-0.pdb

Exports

Exports

QueryPerformanceCounter
QueryPerformanceFrequency

Sections

.rdata
Size: 4KB - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-rtlsupport-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5f:e7:e9:0a:a8:02:53:85:98:b5:c3:96:a0:a0:2d:3f:92:30:15:6e:2a:51:1c:3c:e0:91:56:65:88:a2:8b:26
Signer

Actual PE Digest

5f:e7:e9:0a:a8:02:53:85:98:b5:c3:96:a0:a0:2d:3f:92:30:15:6e:2a:51:1c:3c:e0:91:56:65:88:a2:8b:26

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-rtlsupport-l1-1-0.pdb

Exports

Exports

RtlAddFunctionTable
RtlCaptureContext
RtlCaptureStackBackTrace
RtlCompareMemory
RtlDeleteFunctionTable
RtlInstallFunctionTableCallback
RtlIsEcCode
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlRaiseException
RtlRestoreContext
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-string-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d3:2b:7d:dd:0f:d5:b4:a5:dd:35:30:33:45:b0:65:ec:f7:02:03:04:88:1f:d9:1c:3b:f5:cd:13:7c:6f:20:3e
Signer

Actual PE Digest

d3:2b:7d:dd:0f:d5:b4:a5:dd:35:30:33:45:b0:65:ec:f7:02:03:04:88:1f:d9:1c:3b:f5:cd:13:7c:6f:20:3e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-string-l1-1-0.pdb

Exports

Exports

CompareStringEx
CompareStringOrdinal
CompareStringW
FoldStringW
GetStringTypeExW
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte

Sections

.rdata
Size: 4KB - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-synch-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2b:4b:ec:f9:71:ee:e7:ee:5c:66:8a:f0:58:0f:47:3f:e7:69:03:32:9a:48:68:ed:d4:0f:06:f5:28:46:66:94
Signer

Actual PE Digest

2b:4b:ec:f9:71:ee:e7:ee:5c:66:8a:f0:58:0f:47:3f:e7:69:03:32:9a:48:68:ed:d4:0f:06:f5:28:46:66:94

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-synch-l1-1-0.pdb

Exports

Exports

AcquireSRWLockExclusive
AcquireSRWLockShared
CancelWaitableTimer
CreateEventA
CreateEventExA
CreateEventExW
CreateEventW
CreateMutexA
CreateMutexExA
CreateMutexExW
CreateMutexW
CreateSemaphoreExW
CreateWaitableTimerExW
DeleteCriticalSection
EnterCriticalSection
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSRWLock
LeaveCriticalSection
OpenEventA
OpenEventW
OpenMutexW
OpenSemaphoreW
OpenWaitableTimerW
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
ResetEvent
SetCriticalSectionSpinCount
SetEvent
SetWaitableTimer
SetWaitableTimerEx
SleepEx
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
TryEnterCriticalSection
WaitForMultipleObjectsEx
WaitForSingleObject
WaitForSingleObjectEx

Sections

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-synch-l1-2-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

40:74:55:17:55:46:a6:42:71:94:a4:01:96:3e:73:44:46:6a:74:dc:a1:ec:d9:cb:1c:a5:86:ee:e3:4b:d5:d9
Signer

Actual PE Digest

40:74:55:17:55:46:a6:42:71:94:a4:01:96:3e:73:44:46:6a:74:dc:a1:ec:d9:cb:1c:a5:86:ee:e3:4b:d5:d9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-synch-l1-2-0.pdb

Exports

Exports

DeleteSynchronizationBarrier
EnterSynchronizationBarrier
InitOnceBeginInitialize
InitOnceComplete
InitOnceExecuteOnce
InitOnceInitialize
InitializeConditionVariable
InitializeSynchronizationBarrier
SignalObjectAndWait
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
WaitOnAddress
WakeAllConditionVariable
WakeByAddressAll
WakeByAddressSingle
WakeConditionVariable

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-sysinfo-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

28:49:81:c4:d7:f6:f7:2c:ba:1c:74:d6:56:17:6d:1e:45:25:d1:66:06:9f:e3:db:f8:dc:8a:d7:80:b1:e3:bc
Signer

Actual PE Digest

28:49:81:c4:d7:f6:f7:2c:ba:1c:74:d6:56:17:6d:1e:45:25:d1:66:06:9f:e3:db:f8:dc:8a:d7:80:b1:e3:bc

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-sysinfo-l1-1-0.pdb

Exports

Exports

GetComputerNameExA
GetComputerNameExW
GetLocalTime
GetLogicalProcessorInformation
GetLogicalProcessorInformationEx
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemTime
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryA
GetSystemWindowsDirectoryW
GetTickCount
GetTickCount64
GetVersion
GetVersionExA
GetVersionExW
GetWindowsDirectoryA
GetWindowsDirectoryW
GlobalMemoryStatusEx
SetLocalTime

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-sysinfo-l1-2-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a0:26:18:da:67:4d:26:0e:e6:db:97:a1:94:24:27:9b:7b:b1:d0:3c:d9:ad:e0:0d:27:91:fc:ed:fb:11:a5:a4
Signer

Actual PE Digest

a0:26:18:da:67:4d:26:0e:e6:db:97:a1:94:24:27:9b:7b:b1:d0:3c:d9:ad:e0:0d:27:91:fc:ed:fb:11:a5:a4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-sysinfo-l1-2-0.pdb

Exports

Exports

EnumSystemFirmwareTables
GetNativeSystemInfo
GetOsSafeBootMode
GetProductInfo
GetSystemFirmwareTable
GetSystemTimePreciseAsFileTime
SetComputerNameExW
SetSystemTime
VerSetConditionMask

Sections

.rdata
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-timezone-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a7:b8:8f:fb:97:5d:35:84:ec:00:00:00:00:05:a7
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

56:17:70:28:fd:73:04:ec:f7:4e:e1:5f:77:9a:d1:ed:ae:c6:fe:90:f4:d7:d0:2e:6c:98:f8:c8:dc:87:1a:1d
Signer

Actual PE Digest

56:17:70:28:fd:73:04:ec:f7:4e:e1:5f:77:9a:d1:ed:ae:c6:fe:90:f4:d7:d0:2e:6c:98:f8:c8:dc:87:1a:1d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-timezone-l1-1-0.pdb

Exports

Exports

EnumDynamicTimeZoneInformation
FileTimeToSystemTime
GetDynamicTimeZoneInformation
GetDynamicTimeZoneInformationEffectiveYears
GetTimeZoneInformation
GetTimeZoneInformationForYear
SetDynamicTimeZoneInformation
SetTimeZoneInformation
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
SystemTimeToTzSpecificLocalTimeEx
TzSpecificLocalTimeToSystemTime
TzSpecificLocalTimeToSystemTimeEx

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-core-util-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a7:b8:8f:fb:97:5d:35:84:ec:00:00:00:00:05:a7
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

50:a4:e4:26:4a:c2:0c:56:66:39:31:88:f3:ec:dc:62:a5:a8:0a:ad:5e:e9:d4:fa:37:7e:3a:77:a7:bb:a7:2e
Signer

Actual PE Digest

50:a4:e4:26:4a:c2:0c:56:66:39:31:88:f3:ec:dc:62:a5:a8:0a:ad:5e:e9:d4:fa:37:7e:3a:77:a7:bb:a7:2e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-util-l1-1-0.pdb

Exports

Exports

Beep
DecodePointer
DecodeSystemPointer
EncodePointer
EncodeSystemPointer

Sections

.rdata
Size: 4KB - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-crt-conio-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

79:3d:19:7e:37:81:3d:4a:05:6f:b2:5d:3e:68:9d:69:bc:4b:da:42:37:be:5b:02:23:1a:92:81:96:06:28:c1
Signer

Actual PE Digest

79:3d:19:7e:37:81:3d:4a:05:6f:b2:5d:3e:68:9d:69:bc:4b:da:42:37:be:5b:02:23:1a:92:81:96:06:28:c1

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-conio-l1-1-0.pdb

Exports

Exports

__conio_common_vcprintf
__conio_common_vcprintf_p
__conio_common_vcprintf_s
__conio_common_vcscanf
__conio_common_vcwprintf
__conio_common_vcwprintf_p
__conio_common_vcwprintf_s
__conio_common_vcwscanf
_cgets
_cgets_s
_cgetws
_cgetws_s
_cputs
_cputws
_getch
_getch_nolock
_getche
_getche_nolock
_getwch
_getwch_nolock
_getwche
_getwche_nolock
_putch
_putch_nolock
_putwch
_putwch_nolock
_ungetch
_ungetch_nolock
_ungetwch
_ungetwch_nolock

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-crt-convert-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ff:10:43:54:18:7d:be:c3:6d:68:f5:54:53:9b:bc:31:24:13:69:5b:62:ce:99:d0:46:fa:11:19:cb:0e:68:1c
Signer

Actual PE Digest

ff:10:43:54:18:7d:be:c3:6d:68:f5:54:53:9b:bc:31:24:13:69:5b:62:ce:99:d0:46:fa:11:19:cb:0e:68:1c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-convert-l1-1-0.pdb

Exports

Exports

__toascii
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_atoll_l
_ecvt
_ecvt_s
_fcvt
_fcvt_s
_gcvt
_gcvt_s
_i64toa
_i64toa_s
_i64tow
_i64tow_s
_itoa
_itoa_s
_itow
_itow_s
_ltoa
_ltoa_s
_ltow
_ltow_s
_strtod_l
_strtof_l
_strtoi64
_strtoi64_l
_strtoimax_l
_strtol_l
_strtold_l
_strtoll_l
_strtoui64
_strtoui64_l
_strtoul_l
_strtoull_l
_strtoumax_l
_ui64toa
_ui64toa_s
_ui64tow
_ui64tow_s
_ultoa
_ultoa_s
_ultow
_ultow_s
_wcstod_l
_wcstof_l
_wcstoi64
_wcstoi64_l
_wcstoimax_l
_wcstol_l
_wcstold_l
_wcstoll_l
_wcstombs_l
_wcstombs_s_l
_wcstoui64
_wcstoui64_l
_wcstoul_l
_wcstoull_l
_wcstoumax_l
_wctomb_l
_wctomb_s_l
_wtof
_wtof_l
_wtoi
_wtoi64
_wtoi64_l
_wtoi_l
_wtol
_wtol_l
_wtoll
_wtoll_l
atof
atoi
atol
atoll
btowc
c16rtomb
c32rtomb
mbrtoc16
mbrtoc32
mbrtowc
mbsrtowcs
mbsrtowcs_s
mbstowcs
mbstowcs_s
mbtowc
strtod
strtof
strtoimax
strtol
strtold
strtoll
strtoul
strtoull
strtoumax
wcrtomb
wcrtomb_s
wcsrtombs
wcsrtombs_s
wcstod
wcstof
wcstoimax
wcstol
wcstold
wcstoll
wcstombs
wcstombs_s
wcstoul
wcstoull
wcstoumax
wctob
wctomb
wctomb_s
wctrans

Sections

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-crt-environment-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a7:b8:8f:fb:97:5d:35:84:ec:00:00:00:00:05:a7
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

76:0a:80:23:5c:19:82:94:37:ba:1a:92:7d:b4:78:f7:13:31:5f:62:c3:2f:c7:28:36:8e:2c:21:f4:21:12:e1
Signer

Actual PE Digest

76:0a:80:23:5c:19:82:94:37:ba:1a:92:7d:b4:78:f7:13:31:5f:62:c3:2f:c7:28:36:8e:2c:21:f4:21:12:e1

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-environment-l1-1-0.pdb

Exports

Exports

__p__environ
__p__wenviron
_dupenv_s
_putenv
_putenv_s
_searchenv
_searchenv_s
_wdupenv_s
_wgetcwd
_wgetdcwd
_wgetenv
_wgetenv_s
_wputenv
_wputenv_s
_wsearchenv
_wsearchenv_s
getenv
getenv_s

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-crt-filesystem-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a7:b8:8f:fb:97:5d:35:84:ec:00:00:00:00:05:a7
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e4:ef:49:41:fc:81:e5:ae:67:bf:97:49:b6:a6:ce:0b:8d:13:50:1f:28:a2:c6:3b:59:6f:eb:6b:5e:a6:39:8d
Signer

Actual PE Digest

e4:ef:49:41:fc:81:e5:ae:67:bf:97:49:b6:a6:ce:0b:8d:13:50:1f:28:a2:c6:3b:59:6f:eb:6b:5e:a6:39:8d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-filesystem-l1-1-0.pdb

Exports

Exports

_access
_access_s
_chdir
_chdrive
_chmod
_findclose
_findfirst32
_findfirst32i64
_findfirst64
_findfirst64i32
_findnext32
_findnext32i64
_findnext64
_findnext64i32
_fstat32
_fstat32i64
_fstat64
_fstat64i32
_fullpath
_getdiskfree
_getdrive
_getdrives
_lock_file
_makepath
_makepath_s
_mkdir
_rmdir
_splitpath
_splitpath_s
_stat32
_stat32i64
_stat64
_stat64i32
_umask
_umask_s
_unlink
_unlock_file
_waccess
_waccess_s
_wchdir
_wchmod
_wfindfirst32
_wfindfirst32i64
_wfindfirst64
_wfindfirst64i32
_wfindnext32
_wfindnext32i64
_wfindnext64
_wfindnext64i32
_wfullpath
_wmakepath
_wmakepath_s
_wmkdir
_wremove
_wrename
_wrmdir
_wsplitpath
_wsplitpath_s
_wstat32
_wstat32i64
_wstat64
_wstat64i32
_wunlink
remove
rename

Sections

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-crt-heap-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8a:90:ea:cd:0c:b9:f1:e3:73:f2:b2:2e:ca:57:d1:1e:70:6d:98:2d:00:00:8a:c9:78:ec:11:de:5c:9a:4e:51
Signer

Actual PE Digest

8a:90:ea:cd:0c:b9:f1:e3:73:f2:b2:2e:ca:57:d1:1e:70:6d:98:2d:00:00:8a:c9:78:ec:11:de:5c:9a:4e:51

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-heap-l1-1-0.pdb

Exports

Exports

_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_callnewh
_calloc_base
_expand
_free_base
_get_heap_handle
_heapchk
_heapmin
_heapwalk
_malloc_base
_msize
_query_new_handler
_query_new_mode
_realloc_base
_recalloc
_set_new_mode
calloc
free
malloc
realloc

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-crt-locale-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:e9:4e:2c:6d:b2:44:95:e9:2e:12:9f:9a:82:1d:88:43:14:78:74:b3:13:32:2d:fb:50:e9:cd:c3:12:c6:47
Signer

Actual PE Digest

0c:e9:4e:2c:6d:b2:44:95:e9:2e:12:9f:9a:82:1d:88:43:14:78:74:b3:13:32:2d:fb:50:e9:cd:c3:12:c6:47

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-locale-l1-1-0.pdb

Exports

Exports

___lc_codepage_func
___lc_collate_cp_func
___lc_locale_name_func
___mb_cur_max_func
___mb_cur_max_l_func
__initialize_lconv_for_unsigned_char
__pctype_func
__pwctype_func
_configthreadlocale
_create_locale
_free_locale
_get_current_locale
_getmbcp
_lock_locales
_setmbcp
_unlock_locales
_wcreate_locale
_wsetlocale
localeconv
setlocale

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-crt-math-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a7:b8:8f:fb:97:5d:35:84:ec:00:00:00:00:05:a7
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

46:ac:d4:b7:fb:a2:bb:38:67:b0:a9:74:4b:47:af:af:e2:94:02:0d:2a:bf:76:b8:18:60:1b:52:63:9b:1b:2e
Signer

Actual PE Digest

46:ac:d4:b7:fb:a2:bb:38:67:b0:a9:74:4b:47:af:af:e2:94:02:0d:2a:bf:76:b8:18:60:1b:52:63:9b:1b:2e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-math-l1-1-0.pdb

Exports

Exports

_Cbuild
_Cmulcc
_Cmulcr
_FCbuild
_FCmulcc
_FCmulcr
_LCbuild
_LCmulcc
_LCmulcr
__setusermatherr
_cabs
_chgsign
_chgsignf
_copysign
_copysignf
_d_int
_dclass
_dexp
_dlog
_dnorm
_dpcomp
_dpoly
_dscale
_dsign
_dsin
_dtest
_dunscale
_except1
_fd_int
_fdclass
_fdexp
_fdlog
_fdnorm
_fdopen
_fdpcomp
_fdpoly
_fdscale
_fdsign
_fdsin
_fdtest
_fdunscale
_finite
_finitef
_fpclass
_fpclassf
_get_FMA3_enable
_hypot
_hypotf
_isnan
_isnanf
_j0
_j1
_jn
_ld_int
_ldclass
_ldexp
_ldlog
_ldpcomp
_ldpoly
_ldscale
_ldsign
_ldsin
_ldtest
_ldunscale
_logb
_logbf
_nextafter
_nextafterf
_scalb
_scalbf
_set_FMA3_enable
_y0
_y1
_yn
acos
acosf
acosh
acoshf
acoshl
asin
asinf
asinh
asinhf
asinhl
atan
atan2
atan2f
atanf
atanh
atanhf
atanhl
cabs
cabsf
cabsl
cacos
cacosf
cacosh
cacoshf
cacoshl
cacosl
carg
cargf
cargl
casin
casinf
casinh
casinhf
casinhl
casinl
catan
catanf
catanh
catanhf
catanhl
catanl
cbrt
cbrtf
cbrtl
ccos
ccosf
ccosh
ccoshf
ccoshl
ccosl
ceil
ceilf
cexp
cexpf
cexpl
cimag
cimagf
cimagl
clog
clog10
clog10f
clog10l
clogf
clogl
conj
conjf
conjl
copysign
copysignf
copysignl
cos
cosf
cosh
coshf
cpow
cpowf
cpowl
cproj
cprojf
cprojl
creal
crealf
creall
csin
csinf
csinh
csinhf
csinhl
csinl
csqrt
csqrtf
csqrtl
ctan
ctanf
ctanh
ctanhf
ctanhl
ctanl
erf
erfc
erfcf
erfcl
erff
erfl
exp
exp2
exp2f
exp2l
expf
expm1
expm1f
expm1l
fabs
fdim
fdimf
fdiml
floor
floorf
fma
fmaf
fmal
fmax
fmaxf
fmaxl
fmin
fminf
fminl
fmod
fmodf
frexp
hypot
ilogb
ilogbf
ilogbl
ldexp
lgamma
lgammaf
lgammal
llrint
llrintf
llrintl
llround
llroundf
llroundl
log
log10
log10f
log1p
log1pf
log1pl
log2
log2f
log2l
logb
logbf
logbl
logf
lrint
lrintf
lrintl
lround
lroundf
lroundl
modf
modff
nan
nanf
nanl
nearbyint
nearbyintf
nearbyintl
nextafter
nextafterf
nextafterl
nexttoward
nexttowardf
nexttowardl
norm
normf
norml
pow
powf
remainder
remainderf
remainderl
remquo
remquof
remquol
rint
rintf
rintl
round
roundf
roundl
scalbln
scalblnf
scalblnl
scalbn
scalbnf
scalbnl
sin
sinf
sinh
sinhf
sqrt
sqrtf
tan
tanf
tanh
tanhf
tgamma
tgammaf
tgammal
trunc
truncf
truncl

Sections

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-crt-multibyte-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ac:c8:d2:ce:3a:fb:ba:21:2d:b3:46:49:f0:8f:1b:18:9c:aa:49:ea:61:21:c8:8e:a9:9e:1d:5e:41:0c:72:70
Signer

Actual PE Digest

ac:c8:d2:ce:3a:fb:ba:21:2d:b3:46:49:f0:8f:1b:18:9c:aa:49:ea:61:21:c8:8e:a9:9e:1d:5e:41:0c:72:70

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-multibyte-l1-1-0.pdb

Exports

Exports

__p__mbcasemap
__p__mbctype
_ismbbalnum
_ismbbalnum_l
_ismbbalpha
_ismbbalpha_l
_ismbbblank
_ismbbblank_l
_ismbbgraph
_ismbbgraph_l
_ismbbkalnum
_ismbbkalnum_l
_ismbbkana
_ismbbkana_l
_ismbbkprint
_ismbbkprint_l
_ismbbkpunct
_ismbbkpunct_l
_ismbblead
_ismbblead_l
_ismbbprint
_ismbbprint_l
_ismbbpunct
_ismbbpunct_l
_ismbbtrail
_ismbbtrail_l
_ismbcalnum
_ismbcalnum_l
_ismbcalpha
_ismbcalpha_l
_ismbcblank
_ismbcblank_l
_ismbcdigit
_ismbcdigit_l
_ismbcgraph
_ismbcgraph_l
_ismbchira
_ismbchira_l
_ismbckata
_ismbckata_l
_ismbcl0
_ismbcl0_l
_ismbcl1
_ismbcl1_l
_ismbcl2
_ismbcl2_l
_ismbclegal
_ismbclegal_l
_ismbclower
_ismbclower_l
_ismbcprint
_ismbcprint_l
_ismbcpunct
_ismbcpunct_l
_ismbcspace
_ismbcspace_l
_ismbcsymbol
_ismbcsymbol_l
_ismbcupper
_ismbcupper_l
_ismbslead
_ismbslead_l
_ismbstrail
_ismbstrail_l
_mbbtombc
_mbbtombc_l
_mbbtype
_mbbtype_l
_mbcasemap
_mbccpy
_mbccpy_l
_mbccpy_s
_mbccpy_s_l
_mbcjistojms
_mbcjistojms_l
_mbcjmstojis
_mbcjmstojis_l
_mbclen
_mbclen_l
_mbctohira
_mbctohira_l
_mbctokata
_mbctokata_l
_mbctolower
_mbctolower_l
_mbctombb
_mbctombb_l
_mbctoupper
_mbctoupper_l
_mblen_l
_mbsbtype
_mbsbtype_l
_mbscat_s
_mbscat_s_l
_mbschr
_mbschr_l
_mbscmp
_mbscmp_l
_mbscoll
_mbscoll_l
_mbscpy_s
_mbscpy_s_l
_mbscspn
_mbscspn_l
_mbsdec
_mbsdec_l
_mbsdup
_mbsicmp
_mbsicmp_l
_mbsicoll
_mbsicoll_l
_mbsinc
_mbsinc_l
_mbslen
_mbslen_l
_mbslwr
_mbslwr_l
_mbslwr_s
_mbslwr_s_l
_mbsnbcat
_mbsnbcat_l
_mbsnbcat_s
_mbsnbcat_s_l
_mbsnbcmp
_mbsnbcmp_l
_mbsnbcnt
_mbsnbcnt_l
_mbsnbcoll
_mbsnbcoll_l
_mbsnbcpy
_mbsnbcpy_l
_mbsnbcpy_s
_mbsnbcpy_s_l
_mbsnbicmp
_mbsnbicmp_l
_mbsnbicoll
_mbsnbicoll_l
_mbsnbset
_mbsnbset_l
_mbsnbset_s
_mbsnbset_s_l
_mbsncat
_mbsncat_l
_mbsncat_s
_mbsncat_s_l
_mbsnccnt
_mbsnccnt_l
_mbsncmp
_mbsncmp_l
_mbsncoll
_mbsncoll_l
_mbsncpy
_mbsncpy_l
_mbsncpy_s
_mbsncpy_s_l
_mbsnextc
_mbsnextc_l
_mbsnicmp
_mbsnicmp_l
_mbsnicoll
_mbsnicoll_l
_mbsninc
_mbsninc_l
_mbsnlen
_mbsnlen_l
_mbsnset
_mbsnset_l
_mbsnset_s
_mbsnset_s_l
_mbspbrk
_mbspbrk_l
_mbsrchr
_mbsrchr_l
_mbsrev
_mbsrev_l
_mbsset
_mbsset_l
_mbsset_s
_mbsset_s_l
_mbsspn
_mbsspn_l
_mbsspnp
_mbsspnp_l
_mbsstr
_mbsstr_l
_mbstok
_mbstok_l
_mbstok_s
_mbstok_s_l
_mbstowcs_l
_mbstowcs_s_l
_mbstrlen
_mbstrlen_l
_mbstrnlen
_mbstrnlen_l
_mbsupr
_mbsupr_l
_mbsupr_s
_mbsupr_s_l
_mbtowc_l

Sections

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-crt-private-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:7f:9c:63:b9:80:a8:65:99:2b:75:fa:d9:8c:79:fd:bd:57:0a:36:da:8d:2f:05:b0:f9:75:8a:39:61:1a:73
Signer

Actual PE Digest

04:7f:9c:63:b9:80:a8:65:99:2b:75:fa:d9:8c:79:fd:bd:57:0a:36:da:8d:2f:05:b0:f9:75:8a:39:61:1a:73

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-private-l1-1-0.pdb

Exports

Exports

_CreateFrameInfo
_CxxThrowException
_FindAndUnlinkFrame
_GetImageBase
_GetThrowImageBase
_IsExceptionObjectToBeDestroyed
_SetImageBase
_SetThrowImageBase
_SetWinRTOutOfMemoryExceptionCallback
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__C_specific_handler
__C_specific_handler_noexcept
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxFrameHandler4
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__NLG_Dispatch2
__NLG_Return2
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
__current_exception
__current_exception_context
__dcrt_get_wide_environment_from_os
__dcrt_initial_narrow_environment
__intrinsic_setjmp
__intrinsic_setjmpex
__processing_throw
__report_gsfailure
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__unDName
__unDNameEx
__uncaught_exception
__uncaught_exceptions
_get_purecall_handler
_get_unexpected
_is_exception_typeof
_local_unwind
_o__Getdays
_o__Getmonths
_o__Gettnames
_o__Strftime
_o__W_Getdays
_o__W_Getmonths
_o__W_Gettnames
_o__Wcsftime
_o____lc_codepage_func
_o____lc_collate_cp_func
_o____lc_locale_name_func
_o____mb_cur_max_func
_o___acrt_iob_func
_o___conio_common_vcprintf
_o___conio_common_vcprintf_p
_o___conio_common_vcprintf_s
_o___conio_common_vcscanf
_o___conio_common_vcwprintf
_o___conio_common_vcwprintf_p
_o___conio_common_vcwprintf_s
_o___conio_common_vcwscanf
_o___daylight
_o___dstbias
_o___fpe_flt_rounds
_o___p___argc
_o___p___argv
_o___p___wargv
_o___p__acmdln
_o___p__commode
_o___p__environ
_o___p__fmode
_o___p__mbcasemap
_o___p__mbctype
_o___p__pgmptr
_o___p__wcmdln
_o___p__wenviron
_o___p__wpgmptr
_o___pctype_func
_o___pwctype_func
_o___std_exception_copy
_o___std_exception_destroy
_o___std_type_info_destroy_list
_o___std_type_info_name
_o___stdio_common_vfprintf
_o___stdio_common_vfprintf_p
_o___stdio_common_vfprintf_s
_o___stdio_common_vfscanf
_o___stdio_common_vfwprintf
_o___stdio_common_vfwprintf_p
_o___stdio_common_vfwprintf_s
_o___stdio_common_vfwscanf
_o___stdio_common_vsnprintf_s
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsprintf
_o___stdio_common_vsprintf_p
_o___stdio_common_vsprintf_s
_o___stdio_common_vsscanf
_o___stdio_common_vswprintf
_o___stdio_common_vswprintf_p
_o___stdio_common_vswprintf_s
_o___stdio_common_vswscanf
_o___timezone
_o___tzname
_o___wcserror
_o__access
_o__access_s
_o__aligned_free
_o__aligned_malloc
_o__aligned_msize
_o__aligned_offset_malloc
_o__aligned_offset_realloc
_o__aligned_offset_recalloc
_o__aligned_realloc
_o__aligned_recalloc
_o__atodbl
_o__atodbl_l
_o__atof_l
_o__atoflt
_o__atoflt_l
_o__atoi64
_o__atoi64_l
_o__atoi_l
_o__atol_l
_o__atoldbl
_o__atoldbl_l
_o__atoll_l
_o__beep
_o__beginthread
_o__beginthreadex
_o__cabs
_o__callnewh
_o__calloc_base
_o__cexit
_o__cgets
_o__cgets_s
_o__cgetws
_o__cgetws_s
_o__chdir
_o__chdrive
_o__chmod
_o__chsize
_o__chsize_s
_o__close
_o__commit
_o__configthreadlocale
_o__configure_narrow_argv
_o__configure_wide_argv
_o__controlfp_s
_o__cputs
_o__cputws
_o__creat
_o__create_locale
_o__crt_atexit
_o__ctime32_s
_o__ctime64_s
_o__cwait
_o__d_int
_o__dclass
_o__difftime32
_o__difftime64
_o__dlog
_o__dnorm
_o__dpcomp
_o__dpoly
_o__dscale
_o__dsign
_o__dsin
_o__dtest
_o__dunscale
_o__dup
_o__dup2
_o__dupenv_s
_o__ecvt
_o__ecvt_s
_o__endthread
_o__endthreadex
_o__eof
_o__errno
_o__except1
_o__execute_onexit_table
_o__execv
_o__execve
_o__execvp
_o__execvpe
_o__exit
_o__expand
_o__fclose_nolock
_o__fcloseall
_o__fcvt
_o__fcvt_s
_o__fd_int
_o__fdclass
_o__fdexp
_o__fdlog
_o__fdopen
_o__fdpcomp
_o__fdpoly
_o__fdscale
_o__fdsign
_o__fdsin
_o__fflush_nolock
_o__fgetc_nolock
_o__fgetchar
_o__fgetwc_nolock
_o__fgetwchar
_o__filelength
_o__filelengthi64
_o__fileno
_o__findclose
_o__findfirst32
_o__findfirst32i64
_o__findfirst64
_o__findfirst64i32
_o__findnext32
_o__findnext32i64
_o__findnext64
_o__findnext64i32
_o__flushall
_o__fpclass
_o__fpclassf
_o__fputc_nolock
_o__fputchar
_o__fputwc_nolock
_o__fputwchar
_o__fread_nolock
_o__fread_nolock_s
_o__free_base
_o__free_locale
_o__fseek_nolock
_o__fseeki64
_o__fseeki64_nolock
_o__fsopen
_o__fstat32
_o__fstat32i64
_o__fstat64
_o__fstat64i32
_o__ftell_nolock
_o__ftelli64
_o__ftelli64_nolock
_o__ftime32
_o__ftime32_s
_o__ftime64
_o__ftime64_s
_o__fullpath
_o__futime32
_o__futime64
_o__fwrite_nolock
_o__gcvt
_o__gcvt_s
_o__get_daylight
_o__get_doserrno
_o__get_dstbias
_o__get_errno
_o__get_fmode
_o__get_heap_handle
_o__get_initial_narrow_environment
_o__get_initial_wide_environment
_o__get_invalid_parameter_handler
_o__get_narrow_winmain_command_line
_o__get_osfhandle
_o__get_pgmptr
_o__get_stream_buffer_pointers
_o__get_terminate
_o__get_thread_local_invalid_parameter_handler
_o__get_timezone
_o__get_tzname
_o__get_wide_winmain_command_line
_o__get_wpgmptr
_o__getc_nolock
_o__getch
_o__getch_nolock
_o__getche
_o__getche_nolock
_o__getcwd
_o__getdcwd
_o__getdiskfree
_o__getdllprocaddr
_o__getdrive
_o__getdrives
_o__getmbcp
_o__getsystime
_o__getw
_o__getwc_nolock
_o__getwch
_o__getwch_nolock
_o__getwche
_o__getwche_nolock
_o__getws
_o__getws_s
_o__gmtime32
_o__gmtime32_s
_o__gmtime64
_o__gmtime64_s
_o__heapchk
_o__heapmin
_o__hypot
_o__hypotf
_o__i64toa
_o__i64toa_s
_o__i64tow
_o__i64tow_s
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__initialize_wide_environment
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__isatty
_o__isctype
_o__isctype_l
_o__isleadbyte_l
_o__ismbbalnum
_o__ismbbalnum_l
_o__ismbbalpha
_o__ismbbalpha_l
_o__ismbbblank
_o__ismbbblank_l
_o__ismbbgraph
_o__ismbbgraph_l
_o__ismbbkalnum
_o__ismbbkalnum_l
_o__ismbbkana
_o__ismbbkana_l
_o__ismbbkprint
_o__ismbbkprint_l
_o__ismbbkpunct
_o__ismbbkpunct_l
_o__ismbblead
_o__ismbblead_l
_o__ismbbprint
_o__ismbbprint_l
_o__ismbbpunct
_o__ismbbpunct_l
_o__ismbbtrail
_o__ismbbtrail_l
_o__ismbcalnum
_o__ismbcalnum_l
_o__ismbcalpha
_o__ismbcalpha_l
_o__ismbcblank
_o__ismbcblank_l
_o__ismbcdigit
_o__ismbcdigit_l
_o__ismbcgraph
_o__ismbcgraph_l
_o__ismbchira
_o__ismbchira_l
_o__ismbckata
_o__ismbckata_l
_o__ismbcl0
_o__ismbcl0_l
_o__ismbcl1
_o__ismbcl1_l
_o__ismbcl2
_o__ismbcl2_l
_o__ismbclegal
_o__ismbclegal_l
_o__ismbclower
_o__ismbclower_l
_o__ismbcprint
_o__ismbcprint_l
_o__ismbcpunct
_o__ismbcpunct_l
_o__ismbcspace
_o__ismbcspace_l
_o__ismbcsymbol
_o__ismbcsymbol_l
_o__ismbcupper
_o__ismbcupper_l
_o__ismbslead
_o__ismbslead_l
_o__ismbstrail
_o__ismbstrail_l
_o__iswctype_l
_o__itoa
_o__itoa_s
_o__itow
_o__itow_s
_o__j0
_o__j1
_o__jn
_o__kbhit
_o__ld_int
_o__ldclass
_o__ldexp
_o__ldlog
_o__ldpcomp
_o__ldpoly
_o__ldscale
_o__ldsign
_o__ldsin
_o__ldtest
_o__ldunscale
_o__lfind
_o__lfind_s
_o__loaddll
_o__localtime32
_o__localtime32_s
_o__localtime64
_o__localtime64_s
_o__lock_file
_o__locking
_o__logb
_o__logbf
_o__lsearch
_o__lsearch_s
_o__lseek
_o__lseeki64
_o__ltoa
_o__ltoa_s
_o__ltow
_o__ltow_s
_o__makepath
_o__makepath_s
_o__malloc_base
_o__mbbtombc
_o__mbbtombc_l
_o__mbbtype
_o__mbbtype_l
_o__mbccpy
_o__mbccpy_l
_o__mbccpy_s
_o__mbccpy_s_l
_o__mbcjistojms
_o__mbcjistojms_l
_o__mbcjmstojis
_o__mbcjmstojis_l
_o__mbclen
_o__mbclen_l
_o__mbctohira
_o__mbctohira_l
_o__mbctokata
_o__mbctokata_l
_o__mbctolower
_o__mbctolower_l
_o__mbctombb
_o__mbctombb_l
_o__mbctoupper
_o__mbctoupper_l
_o__mblen_l
_o__mbsbtype
_o__mbsbtype_l
_o__mbscat_s
_o__mbscat_s_l
_o__mbschr
_o__mbschr_l
_o__mbscmp
_o__mbscmp_l
_o__mbscoll
_o__mbscoll_l
_o__mbscpy_s
_o__mbscpy_s_l
_o__mbscspn
_o__mbscspn_l
_o__mbsdec
_o__mbsdec_l
_o__mbsicmp
_o__mbsicmp_l
_o__mbsicoll
_o__mbsicoll_l
_o__mbsinc
_o__mbsinc_l
_o__mbslen
_o__mbslen_l
_o__mbslwr
_o__mbslwr_l
_o__mbslwr_s
_o__mbslwr_s_l
_o__mbsnbcat
_o__mbsnbcat_l
_o__mbsnbcat_s
_o__mbsnbcat_s_l
_o__mbsnbcmp
_o__mbsnbcmp_l
_o__mbsnbcnt
_o__mbsnbcnt_l
_o__mbsnbcoll
_o__mbsnbcoll_l
_o__mbsnbcpy
_o__mbsnbcpy_l
_o__mbsnbcpy_s
_o__mbsnbcpy_s_l
_o__mbsnbicmp
_o__mbsnbicmp_l
_o__mbsnbicoll
_o__mbsnbicoll_l

Sections

.rdata
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-crt-process-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a7:b8:8f:fb:97:5d:35:84:ec:00:00:00:00:05:a7
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4b:a6:5c:9d:1d:5d:94:61:81:6d:a4:fa:59:0e:e9:7c:7a:e4:14:37:96:53:01:2b:bf:ce:0c:d9:4a:cf:b2:2a
Signer

Actual PE Digest

4b:a6:5c:9d:1d:5d:94:61:81:6d:a4:fa:59:0e:e9:7c:7a:e4:14:37:96:53:01:2b:bf:ce:0c:d9:4a:cf:b2:2a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-process-l1-1-0.pdb

Exports

Exports

_beep
_cwait
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_loaddll
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv
_spawnve
_spawnvp
_spawnvpe
_unloaddll
_wexecl
_wexecle
_wexeclp
_wexeclpe
_wexecv
_wexecve
_wexecvp
_wexecvpe
_wspawnl
_wspawnle
_wspawnlp
_wspawnlpe
_wspawnv
_wspawnve
_wspawnvp
_wspawnvpe

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-crt-runtime-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8b:62:f9:6c:40:a7:2f:8a:ef:fd:06:2d:fe:3e:2a:9f:c6:43:80:e4:9e:82:70:a6:af:25:30:8e:77:f1:7f:4e
Signer

Actual PE Digest

8b:62:f9:6c:40:a7:2f:8a:ef:fd:06:2d:fe:3e:2a:9f:c6:43:80:e4:9e:82:70:a6:af:25:30:8e:77:f1:7f:4e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-runtime-l1-1-0.pdb

Exports

Exports

_Exit
__doserrno
__fpe_flt_rounds
__fpecode
__p___argc
__p___argv
__p___wargv
__p__acmdln
__p__pgmptr
__p__wcmdln
__p__wpgmptr
__pxcptinfoptrs
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__wcserror
__wcserror_s
_assert
_beginthread
_beginthreadex
_c_exit
_cexit
_clearfp
_configure_narrow_argv
_configure_wide_argv
_control87
_controlfp
_controlfp_s
_crt_at_quick_exit
_crt_atexit
_endthread
_endthreadex
_errno
_execute_onexit_table
_exit
_fpieee_flt
_fpreset
_get_doserrno
_get_errno
_get_initial_narrow_environment
_get_initial_wide_environment
_get_invalid_parameter_handler
_get_narrow_winmain_command_line
_get_pgmptr
_get_terminate
_get_thread_local_invalid_parameter_handler
_get_wide_winmain_command_line
_get_wpgmptr
_getdllprocaddr
_getpid
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_initterm_e
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_invoke_watson
_query_app_type
_register_onexit_function
_register_thread_local_exe_atexit_callback
_resetstkoflw
_seh_filter_dll
_seh_filter_exe
_set_abort_behavior
_set_app_type
_set_controlfp
_set_doserrno
_set_errno
_set_error_mode
_set_invalid_parameter_handler
_set_new_handler
_set_thread_local_invalid_parameter_handler
_seterrormode
_sleep
_statusfp
_strerror
_strerror_s
_wassert
_wcserror
_wcserror_s
_wperror
_wsystem
abort
exit
feclearexcept
fegetenv
fegetexceptflag
fegetround
feholdexcept
fesetenv
fesetexceptflag
fesetround
fetestexcept
perror
quick_exit
raise
set_terminate
signal
strerror
strerror_s
system
terminate

Sections

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-crt-stdio-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

69:43:1c:1e:7a:5c:3f:4c:3b:1b:45:2d:c0:d0:53:8b:72:84:2b:29:57:08:3e:d8:98:0a:2a:4d:e6:bd:a6:52
Signer

Actual PE Digest

69:43:1c:1e:7a:5c:3f:4c:3b:1b:45:2d:c0:d0:53:8b:72:84:2b:29:57:08:3e:d8:98:0a:2a:4d:e6:bd:a6:52

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-stdio-l1-1-0.pdb

Exports

Exports

__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
__stdio_common_vfprintf_p
__stdio_common_vfprintf_s
__stdio_common_vfscanf
__stdio_common_vfwprintf
__stdio_common_vfwprintf_p
__stdio_common_vfwprintf_s
__stdio_common_vfwscanf
__stdio_common_vsnprintf_s
__stdio_common_vsnwprintf_s
__stdio_common_vsprintf
__stdio_common_vsprintf_p
__stdio_common_vsprintf_s
__stdio_common_vsscanf
__stdio_common_vswprintf
__stdio_common_vswprintf_p
__stdio_common_vswprintf_s
__stdio_common_vswscanf
_chsize
_chsize_s
_close
_commit
_creat
_dup
_dup2
_eof
_fclose_nolock
_fcloseall
_fflush_nolock
_fgetc_nolock
_fgetchar
_fgetwc_nolock
_fgetwchar
_filelength
_filelengthi64
_fileno
_flushall
_fputc_nolock
_fputchar
_fputwc_nolock
_fputwchar
_fread_nolock
_fread_nolock_s
_fseek_nolock
_fseeki64
_fseeki64_nolock
_fsopen
_ftell_nolock
_ftelli64
_ftelli64_nolock
_fwrite_nolock
_get_fmode
_get_osfhandle
_get_printf_count_output
_get_stream_buffer_pointers
_getc_nolock
_getcwd
_getdcwd
_getmaxstdio
_getw
_getwc_nolock
_getws
_getws_s
_isatty
_kbhit
_locking
_lseek
_lseeki64
_mktemp
_mktemp_s
_open
_open_osfhandle
_pclose
_pipe
_popen
_putc_nolock
_putw
_putwc_nolock
_putws
_read
_rmtmp
_set_fmode
_set_printf_count_output
_setmaxstdio
_setmode
_sopen
_sopen_dispatch
_sopen_s
_tell
_telli64
_tempnam
_ungetc_nolock
_ungetwc_nolock
_wcreat
_wfdopen
_wfopen
_wfopen_s
_wfreopen
_wfreopen_s
_wfsopen
_wmktemp
_wmktemp_s
_wopen
_wpopen
_write
_wsopen
_wsopen_dispatch
_wsopen_s
_wtempnam
_wtmpnam
_wtmpnam_s
clearerr
clearerr_s
fclose
feof
ferror
fflush
fgetc
fgetpos
fgets
fgetwc
fgetws
fopen
fopen_s
fputc
fputs
fputwc
fputws
fread
fread_s
freopen
freopen_s
fseek
fsetpos
ftell
fwrite
getc
getchar
gets
gets_s
getwc
getwchar
putc
putchar
puts
putwc
putwchar
rewind
setbuf
setvbuf
tmpfile
tmpfile_s
tmpnam
tmpnam_s
ungetc
ungetwc

Sections

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-crt-string-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4f:d4:65:55:b6:a5:d3:d1:2d:0a:7e:c4:1c:38:ad:58:50:79:ef:02:ca:27:3e:55:86:97:ec:8e:99:f3:3d:4c
Signer

Actual PE Digest

4f:d4:65:55:b6:a5:d3:d1:2d:0a:7e:c4:1c:38:ad:58:50:79:ef:02:ca:27:3e:55:86:97:ec:8e:99:f3:3d:4c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-string-l1-1-0.pdb

Exports

Exports

__isascii
__iscsym
__iscsymf
__iswcsym
__iswcsymf
__strncnt
__wcsncnt
_isalnum_l
_isalpha_l
_isblank_l
_iscntrl_l
_isctype
_isctype_l
_isdigit_l
_isgraph_l
_isleadbyte_l
_islower_l
_isprint_l
_ispunct_l
_isspace_l
_isupper_l
_iswalnum_l
_iswalpha_l
_iswblank_l
_iswcntrl_l
_iswcsym_l
_iswcsymf_l
_iswctype_l
_iswdigit_l
_iswgraph_l
_iswlower_l
_iswprint_l
_iswpunct_l
_iswspace_l
_iswupper_l
_iswxdigit_l
_isxdigit_l
_memccpy
_memicmp
_memicmp_l
_strcoll_l
_strdup
_stricmp
_stricmp_l
_stricoll
_stricoll_l
_strlwr
_strlwr_l
_strlwr_s
_strlwr_s_l
_strncoll
_strncoll_l
_strnicmp
_strnicmp_l
_strnicoll
_strnicoll_l
_strnset
_strnset_s
_strrev
_strset
_strset_s
_strupr
_strupr_l
_strupr_s
_strupr_s_l
_strxfrm_l
_tolower
_tolower_l
_toupper
_toupper_l
_towlower_l
_towupper_l
_wcscoll_l
_wcsdup
_wcsicmp
_wcsicmp_l
_wcsicoll
_wcsicoll_l
_wcslwr
_wcslwr_l
_wcslwr_s
_wcslwr_s_l
_wcsncoll
_wcsncoll_l
_wcsnicmp
_wcsnicmp_l
_wcsnicoll
_wcsnicoll_l
_wcsnset
_wcsnset_s
_wcsrev
_wcsset
_wcsset_s
_wcsupr
_wcsupr_l
_wcsupr_s
_wcsupr_s_l
_wcsxfrm_l
_wctype
is_wctype
isalnum
isalpha
isblank
iscntrl
isdigit
isgraph
isleadbyte
islower
isprint
ispunct
isspace
isupper
iswalnum
iswalpha
iswascii
iswblank
iswcntrl
iswctype
iswdigit
iswgraph
iswlower
iswprint
iswpunct
iswspace
iswupper
iswxdigit
isxdigit
mblen
mbrlen
memcpy_s
memmove_s
memset
strcat
strcat_s
strcmp
strcoll
strcpy
strcpy_s
strcspn
strlen
strncat
strncat_s
strncmp
strncpy
strncpy_s
strnlen
strpbrk
strspn
strtok
strtok_s
strxfrm
tolower
toupper
towctrans
towlower
towupper
wcscat
wcscat_s
wcscmp
wcscoll
wcscpy
wcscpy_s
wcscspn
wcslen
wcsncat
wcsncat_s
wcsncmp
wcsncpy
wcsncpy_s
wcsnlen
wcspbrk
wcsspn
wcstok
wcstok_s
wcsxfrm
wctype
wmemcpy_s
wmemmove_s

Sections

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-crt-time-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b7:10:93:f4:50:cf:00:ce:bf:36:33:8b:05:84:b0:f4:95:2d:7c:60:ea:ba:51:cf:b5:0b:34:3b:b2:7f:26:cf
Signer

Actual PE Digest

b7:10:93:f4:50:cf:00:ce:bf:36:33:8b:05:84:b0:f4:95:2d:7c:60:ea:ba:51:cf:b5:0b:34:3b:b2:7f:26:cf

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-time-l1-1-0.pdb

Exports

Exports

_Getdays
_Getmonths
_Gettnames
_Strftime
_W_Getdays
_W_Getmonths
_W_Gettnames
_Wcsftime
__daylight
__dstbias
__timezone
__tzname
_ctime32
_ctime32_s
_ctime64
_ctime64_s
_difftime32
_difftime64
_ftime32
_ftime32_s
_ftime64
_ftime64_s
_futime32
_futime64
_get_daylight
_get_dstbias
_get_timezone
_get_tzname
_getsystime
_gmtime32
_gmtime32_s
_gmtime64
_gmtime64_s
_localtime32
_localtime32_s
_localtime64
_localtime64_s
_mkgmtime32
_mkgmtime64
_mktime32
_mktime64
_setsystime
_strdate
_strdate_s
_strftime_l
_strtime
_strtime_s
_time32
_time64
_timespec32_get
_timespec64_get
_tzset
_utime32
_utime64
_wasctime
_wasctime_s
_wcsftime_l
_wctime32
_wctime32_s
_wctime64
_wctime64_s
_wstrdate
_wstrdate_s
_wstrtime
_wstrtime_s
_wutime32
_wutime64
asctime
asctime_s
clock
strftime
wcsftime

Sections

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
api-ms-win-crt-utility-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b2:5a:8b:63:3f:33:8f:b6:ec:fd:65:28:40:51:c5:69:08:d4:ae:0f:7e:25:d6:ef:a4:fb:bd:b5:27:54:10:a0
Signer

Actual PE Digest

b2:5a:8b:63:3f:33:8f:b6:ec:fd:65:28:40:51:c5:69:08:d4:ae:0f:7e:25:d6:ef:a4:fb:bd:b5:27:54:10:a0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-utility-l1-1-0.pdb

Exports

Exports

_abs64
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_lfind
_lfind_s
_lrotl
_lrotr
_lsearch
_lsearch_s
_rotl
_rotl64
_rotr
_rotr64
_swab
abs
bsearch
bsearch_s
div
imaxabs
imaxdiv
labs
ldiv
llabs
lldiv
qsort
qsort_s
rand
rand_s
srand

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
avcodec-61.dll
.dll windows:6 windows x64 arch:x64

cd9c5f8ce61931de3ec8104565a1258e

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d8:c7:04:34:83:3e:02:90:65:0b:14:89:3f:1f:92:39
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

31/12/2021, 00:00

Not After

30/12/2024, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a1:9e:c3:97:27:8f:3e:b3:b9:54:f1:1d:11:6c:b1:74:4d:8d:78:dd:b0:69:45:ab:f8:51:1b:d1:da:b9:c1:93
Signer

Actual PE Digest

a1:9e:c3:97:27:8f:3e:b3:b9:54:f1:1d:11:6c:b1:74:4d:8d:78:dd:b0:69:45:ab:f8:51:1b:d1:da:b9:c1:93

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\workspace\ffmpeg-7.0-64\libavcodec\avcodec-61.pdb

Imports

swresample-5

swr_init
swr_convert
swr_close
swr_free
swr_is_initialized
swr_alloc

avutil-59

av_opt_next
av_opt_set_from_string
av_opt_set_dict2
av_get_token
av_strtok
av_bprint_init
av_bprint_finalize
av_fifo_can_read
av_fifo_can_write
av_tree_node_alloc
av_tree_find
av_tree_insert
av_tree_destroy
av_tree_enumerate
av_display_rotation_set
av_display_matrix_flip
av_reallocp
av_expr_parse
av_expr_eval
av_expr_free
av_rescale_q_rnd
av_ts_make_time_string2
av_strlcat
av_strlcatf
av_frame_move_ref
av_buffer_allocz
av_bprint_clear
av_pix_fmt_get_chroma_sub_sample
av_pix_fmt_count_planes
av_memdup
av_lzo1x_decode
av_image_get_buffer_size
av_fifo_peek
av_fast_mallocz
av_rescale
av_image_get_linesize
av_strerror
av_samples_copy
av_frame_is_writable
av_frame_new_side_data
av_frame_new_side_data_from_buf
av_frame_remove_side_data
av_frame_apply_cropping
av_hwdevice_get_type_name
av_hwframe_ctx_alloc
av_hwframe_ctx_init
av_mastering_display_metadata_create_side_data
av_content_light_metadata_create_side_data
av_memcpy_backptr
av_dovi_metadata_alloc
av_d2q
av_timecode_make_smpte_tc_string2
av_image_copy_to_buffer
av_div_q
av_usleep
av_get_planar_sample_fmt
av_frame_copy_props
av_get_picture_type_char
av_image_copy
av_frame_clone
avpriv_set_systematic_pal2
av_samples_get_buffer_size
av_samples_fill_arrays
av_md5_alloc
av_md5_init
av_md5_update
av_md5_final
av_cpu_count
av_opt_copy
av_opt_get_int
av_buffer_pool_init
av_buffer_pool_uninit
av_buffer_pool_get
av_hwframe_get_buffer
av_image_fill_linesizes
av_image_fill_plane_sizes
av_ambient_viewing_environment_create_side_data
av_dynamic_hdr_plus_alloc
av_stereo3d_create_side_data
av_dynamic_hdr_vivid_alloc
av_mul_q
av_log_once
av_buffer_get_ref_count
av_timecode_get_smpte
av_video_enc_params_create_side_data
av_film_grain_params_select
av_strcasecmp
av_strncasecmp
av_parse_color
av_find_best_pix_fmt_of_2
av_bessel_i0
avpriv_init_lls
avpriv_solve_lls
av_cpu_max_align
av_dict_get
av_dict_copy
av_dict_free
av_stereo3d_alloc
av_crc_init
av_channel_layout_subset
av_bprint_append_data
av_dynarray_add
av_timecode_make_mpeg_tc_string
av_nearer_q
av_timecode_adjust_ntsc_framenum2
av_timecode_init_from_string
av_frame_side_data_free
av_opt_set_defaults2
av_opt_set
av_audio_fifo_drain
av_opt_set_chlayout
av_sscanf
avpriv_slicethread_create
avpriv_slicethread_execute
avpriv_slicethread_free
av_buffer_make_writable
av_stristr
av_size_mult
av_strnstr
av_vbprintf
av_bprint_escape
av_image_alloc
av_executor_alloc
av_executor_free
av_executor_execute
av_audio_fifo_reset
av_get_cpu_flags
av_get_bits_per_pixel
av_image_fill_arrays
av_dict_set
av_dict_iterate
av_buffer_is_writable
av_buffer_default_free
av_buffer_create
av_buffer_alloc
av_realloc
av_opt_set_dict
av_opt_free
av_opt_set_defaults
av_get_sample_fmt_name
av_fourcc_make_string
av_gcd
av_get_media_type_string
av_image_check_sar
av_image_check_size2
av_chroma_location_name
av_color_space_name
av_color_transfer_name
av_color_primaries_name
av_color_range_name
av_channel_layout_check
av_channel_layout_describe_bprint
av_bprint_init_for_buffer
av_match_list
av_log_get_level
av_fifo_freep2
av_fifo_read
av_fifo_write
av_fifo_alloc2
av_opt_set_int
av_get_pix_fmt_name
av_dynamic_hdr_plus_from_t35
av_dynamic_hdr_plus_create_side_data
av_buffer_replace
av_buffer_unref
av_buffer_ref
av_reduce
av_dynarray_add_nofree
av_frame_get_side_data
av_buffer_realloc
av_bmg_get
av_frame_get_buffer
av_strlcpy
av_strdup
av_reallocp_array
av_bprint_chars
av_bprintf
av_asprintf
av_realloc_array
av_fast_malloc
av_realloc_f
av_audio_fifo_size
av_audio_fifo_read
av_audio_fifo_write
av_audio_fifo_alloc
av_audio_fifo_free
av_film_grain_params_create_side_data
av_pix_fmt_desc_get
avpriv_vga16_font
avpriv_cga_font
av_samples_set_silence
av_get_bytes_per_sample
av_frame_copy
av_frame_replace
avpriv_scalarproduct_float_c
av_rescale_q
avpriv_emms_asm
av_channel_layout_default
av_downmix_info_update_side_data
av_channel_layout_index_from_channel
av_lfg_init_from_data
av_malloc_array
av_crc_get_table
av_frame_ref
av_frame_free
av_frame_alloc
av_channel_layout_describe
avpriv_alloc_fixed_dsp
av_tx_uninit
av_tx_init
av_frame_unref
av_channel_layout_compare
av_channel_layout_copy
avpriv_report_missing_feature
av_free
avpriv_float_dsp_alloc
av_default_item_name
av_crc
av_channel_layout_uninit
av_channel_layout_from_mask
av_lfg_init
av_calloc
av_malloc
av_image_check_size
av_image_copy_plane
av_freep
av_fast_realloc
av_mallocz
av_log
avpriv_request_sample
av_sample_fmt_is_planar

ole32

CoUninitialize
CoTaskMemFree
CoInitializeEx

kernel32

RtlUnwind
HeapReAlloc
HeapSize
FlushFileBuffers
GetFileSizeEx
GetStringTypeW
GetFileAttributesExW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
OutputDebugStringW
WideCharToMultiByte
GetTimeZoneInformation
SetEndOfFile
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetTempPathW
GetConsoleOutputCP
WriteFile
SetFilePointerEx
ReadConsoleW
GetConsoleMode
ReadFile
GetCurrentThread
HeapFree
HeapAlloc
SetConsoleCtrlHandler
ExitProcess
WriteConsoleW
GetModuleFileNameW
GetStdHandle
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
ExitThread
CreateThread
GetFileType
CreateFileW
RtlPcToFileHeader
RaiseException
EncodePointer
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetLastError
GetLastError
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwindEx
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeConditionVariable
InitializeSRWLock
LoadLibraryExW
LoadLibraryExA
GetProcAddress
FreeLibrary
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
MultiByteToWideChar
GetFullPathNameW
ReleaseMutex
CreateEventA
WaitForSingleObjectEx
CloseHandle
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitOnceComplete
InitOnceBeginInitialize
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
GetCommandLineA

Exports

Exports

av_ac3_parse_header
av_adts_header_parse
av_bsf_alloc
av_bsf_flush
av_bsf_free
av_bsf_get_by_name
av_bsf_get_class
av_bsf_get_null_filter
av_bsf_init
av_bsf_iterate
av_bsf_list_alloc
av_bsf_list_append
av_bsf_list_append2
av_bsf_list_finalize
av_bsf_list_free
av_bsf_list_parse_str
av_bsf_receive_packet
av_bsf_send_packet
av_codec_ffversion
av_codec_is_decoder
av_codec_is_encoder
av_codec_iterate
av_cpb_properties_alloc
av_d3d11va_alloc_context
av_dct_calc
av_dct_end
av_dct_init
av_dirac_parse_sequence_header
av_dv_codec_profile
av_dv_codec_profile2
av_dv_frame_profile
av_fast_padded_malloc
av_fast_padded_mallocz
av_fft_calc
av_fft_end
av_fft_init
av_fft_permute
av_get_audio_frame_duration
av_get_audio_frame_duration2
av_get_bits_per_sample
av_get_exact_bits_per_sample
av_get_pcm_codec
av_get_profile_name
av_grow_packet
av_imdct_calc
av_imdct_half
av_init_packet
av_jni_get_java_vm
av_jni_set_java_vm
av_mdct_calc
av_mdct_end
av_mdct_init
av_mediacodec_alloc_context
av_mediacodec_default_free
av_mediacodec_default_init
av_mediacodec_release_buffer
av_mediacodec_render_buffer_at_time
av_new_packet
av_packet_add_side_data
av_packet_alloc
av_packet_clone
av_packet_copy_props
av_packet_free
av_packet_free_side_data
av_packet_from_data
av_packet_get_side_data
av_packet_make_refcounted
av_packet_make_writable
av_packet_move_ref
av_packet_new_side_data
av_packet_pack_dictionary
av_packet_ref
av_packet_rescale_ts
av_packet_shrink_side_data
av_packet_side_data_add
av_packet_side_data_free
av_packet_side_data_get
av_packet_side_data_name
av_packet_side_data_new
av_packet_side_data_remove
av_packet_unpack_dictionary
av_packet_unref
av_parser_close
av_parser_init
av_parser_iterate
av_parser_parse2
av_qsv_alloc_context
av_rdft_calc
av_rdft_end
av_rdft_init
av_shrink_packet
av_vorbis_parse_frame
av_vorbis_parse_frame_flags
av_vorbis_parse_free
av_vorbis_parse_init
av_vorbis_parse_reset
av_xiphlacing
avcodec_align_dimensions
avcodec_align_dimensions2
avcodec_alloc_context3
avcodec_close
avcodec_configuration
avcodec_dct_alloc
avcodec_dct_get_class
avcodec_dct_init
avcodec_decode_subtitle2
avcodec_default_execute
avcodec_default_execute2
avcodec_default_get_buffer2
avcodec_default_get_encode_buffer
avcodec_default_get_format
avcodec_descriptor_get
avcodec_descriptor_get_by_name
avcodec_descriptor_next
avcodec_encode_subtitle
avcodec_fill_audio_frame
avcodec_find_best_pix_fmt_of_list
avcodec_find_decoder
avcodec_find_decoder_by_name
avcodec_find_encoder
avcodec_find_encoder_by_name
avcodec_flush_buffers
avcodec_free_context
avcodec_get_class
avcodec_get_hw_config
avcodec_get_hw_frames_parameters
avcodec_get_name
avcodec_get_subtitle_rect_class
avcodec_get_type
avcodec_is_open
avcodec_license
avcodec_open2
avcodec_parameters_alloc
avcodec_parameters_copy
avcodec_parameters_free
avcodec_parameters_from_context
avcodec_parameters_to_context
avcodec_pix_fmt_to_codec_tag
avcodec_profile_name
avcodec_receive_frame
avcodec_receive_packet
avcodec_send_frame
avcodec_send_packet
avcodec_string
avcodec_version
avpriv_ac3_parse_header
avpriv_adts_header_parse
avpriv_codec_get_cap_skip_frame_fill_param
avpriv_dca_convert_bitstream
avpriv_dca_parse_core_frame_header
avpriv_elbg_do
avpriv_elbg_free
avpriv_exif_decode_ifd
avpriv_find_start_code
avpriv_fits_header_init
avpriv_fits_header_parse_line
avpriv_get_raw_pix_fmt_tags
avpriv_h264_has_num_reorder_frames
avpriv_mpeg4audio_get_config2
avpriv_mpegaudio_decode_header
avpriv_packet_list_free
avpriv_packet_list_get
avpriv_packet_list_put
avpriv_pix_fmt_find
avpriv_split_xiph_headers
avpriv_tak_parse_streaminfo
avsubtitle_free

Sections

.text
Size: 14.4MB - Virtual size: 14.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 6.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 339KB - Virtual size: 338KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 373B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
avformat-61.dll
.dll windows:6 windows x64 arch:x64

8657daea09f5b5b81bec6b2e93cabdca

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d8:c7:04:34:83:3e:02:90:65:0b:14:89:3f:1f:92:39
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

31/12/2021, 00:00

Not After

30/12/2024, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e8:0c:01:3d:30:e1:b7:38:72:83:58:35:a3:e4:09:5c:cc:03:ea:da:11:b8:5e:4a:8b:57:d3:19:0a:c0:a6:2a
Signer

Actual PE Digest

e8:0c:01:3d:30:e1:b7:38:72:83:58:35:a3:e4:09:5c:cc:03:ea:da:11:b8:5e:4a:8b:57:d3:19:0a:c0:a6:2a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\workspace\ffmpeg-7.0-64\libavformat\avformat-61.pdb

Imports

avcodec-61

avsubtitle_free
avcodec_open2
avcodec_parameters_from_context
av_packet_make_refcounted
av_init_packet
av_packet_side_data_add
av_cpb_properties_alloc
av_codec_is_decoder
avcodec_find_decoder_by_name
av_codec_iterate
av_parser_parse2
av_parser_init
avcodec_parameters_to_context
avcodec_alloc_context3
av_packet_pack_dictionary
avcodec_descriptor_get_by_name
avpriv_pix_fmt_find
avpriv_find_start_code
av_dirac_parse_sequence_header
avpriv_exif_decode_ifd
avcodec_parameters_free
av_parser_close
avcodec_free_context
avcodec_find_decoder
avcodec_send_packet
av_bsf_flush
av_bsf_receive_packet
av_bsf_send_packet
av_bsf_init
av_bsf_alloc
av_bsf_get_by_name
avcodec_parameters_copy
avcodec_descriptor_get
av_packet_move_ref
av_packet_from_data
av_packet_new_side_data
av_packet_ref
av_packet_free
av_packet_alloc
avcodec_get_name
avpriv_packet_list_free
avpriv_packet_list_put
av_get_bits_per_sample
avpriv_mpeg4audio_get_config2
av_packet_get_side_data
av_get_audio_frame_duration2
av_ac3_parse_header
av_packet_add_side_data
av_packet_unref
av_shrink_packet
avcodec_decode_subtitle2
avcodec_receive_frame
avcodec_pix_fmt_to_codec_tag
avcodec_string
av_get_audio_frame_duration
avcodec_is_open
avcodec_parameters_alloc
avpriv_h264_has_num_reorder_frames
avpriv_codec_get_cap_skip_frame_fill_param
avpriv_packet_list_get
avpriv_dca_convert_bitstream
avpriv_dca_parse_core_frame_header
av_dv_frame_profile
av_dv_codec_profile2
av_packet_rescale_ts
avpriv_fits_header_init
avpriv_fits_header_parse_line
av_packet_clone
av_packet_side_data_new
av_packet_side_data_get
avpriv_adts_header_parse
avpriv_ac3_parse_header
avcodec_get_type
avpriv_split_xiph_headers
av_get_exact_bits_per_sample
av_grow_packet
av_packet_make_writable
avpriv_mpegaudio_decode_header
av_vorbis_parse_init
av_packet_copy_props
av_vorbis_parse_free
av_vorbis_parse_frame_flags
av_vorbis_parse_reset
av_xiphlacing
av_adts_header_parse
avpriv_tak_parse_streaminfo
av_bsf_list_parse_str
av_bsf_free
av_bsf_get_null_filter
av_new_packet

avutil-59

av_append_path_component
av_small_strptime
av_hash_alloc
av_hash_get_name
av_hash_init
av_hash_update
av_hash_final_hex
av_hash_freep
av_base64_encode
av_dynarray_add
av_image_get_buffer_size
av_stristart
av_dirname
av_random_bytes
av_bprint_init_for_buffer
av_get_random_seed
av_md5_alloc
av_md5_init
av_md5_update
av_md5_final
av_iamf_param_definition_alloc
av_iamf_audio_element_alloc
av_iamf_audio_element_add_layer
av_iamf_mix_presentation_alloc
av_iamf_mix_presentation_add_submix
av_iamf_submix_add_element
av_iamf_submix_add_layout
av_channel_layout_compare
av_get_pix_fmt
av_dynarray2_add
av_q2intfloat
av_buffer_realloc
av_display_rotation_set
av_display_matrix_flip
av_dynamic_hdr_plus_alloc
av_dynamic_hdr_plus_from_t35
av_lzo1x_decode
av_chroma_location_pos_to_enum
av_spherical_alloc
av_stereo3d_alloc
av_get_bytes_per_sample
av_dynamic_hdr_plus_to_t35
av_lfg_init
av_chroma_location_enum_to_pos
av_sscanf
av_aes_ctr_alloc
av_aes_ctr_init
av_aes_ctr_free
av_aes_ctr_crypt
av_aes_ctr_set_full_iv
av_color_primaries_name
av_color_transfer_name
av_color_space_name
av_sha_alloc
av_sha_init
av_sha_update
av_sha_final
av_timecode_make_string
av_encryption_info_alloc
av_encryption_info_clone
av_encryption_info_free
av_encryption_info_add_side_data
av_encryption_init_info_alloc
av_encryption_init_info_free
av_encryption_init_info_get_side_data
av_encryption_init_info_add_side_data
av_mastering_display_metadata_alloc
av_ambient_viewing_environment_alloc
av_channel_layout_custom_init
av_channel_layout_channel_from_index
av_channel_layout_retype
av_csp_approximate_trc_gamma
av_aes_ctr_get_iv
av_aes_ctr_set_random_iv
av_aes_ctr_increment_iv
av_fifo_grow2
av_fifo_read_to_cb
av_buffer_pool_init
av_buffer_pool_uninit
av_buffer_pool_get
av_log_once
av_set_options_string
av_opt_set_dict2
av_strtod
av_uuid_unparse
av_pix_fmt_count_planes
av_image_check_sar
av_log_get_level
av_des_mac
av_iamf_audio_element_get_class
av_iamf_mix_presentation_get_class
av_md5_sum
av_hmac_alloc
av_hmac_free
av_hmac_init
av_hmac_update
av_hmac_final
av_opt_set_bin
av_opt_get_int
av_opt_flag_is_set
av_parse_video_rate
av_find_info_tag
av_escape
av_dict_get_string
av_opt_get_key_value
av_fifo_read
av_get_sample_fmt_name
av_sample_fmt_is_planar
av_image_fill_linesizes
av_pix_fmt_get_chroma_sub_sample
av_strtok
av_content_light_metadata_alloc
avpriv_dict_set_timestamp
av_channel_layout_check
av_pix_fmt_desc_get
av_get_bits_per_pixel
av_channel_layout_from_mask
av_buffer_default_free
av_buffer_create
av_thread_message_flush
av_thread_message_queue_set_free_func
av_thread_message_queue_set_err_recv
av_thread_message_queue_set_err_send
av_thread_message_queue_recv
av_thread_message_queue_send
av_thread_message_queue_free
av_thread_message_queue_alloc
av_timecode_init_from_string
av_timecode_init
av_timecode_get_smpte_from_framenum
av_fifo_write
av_timecode_make_smpte_tc_string2
av_stereo3d_type_name
av_spherical_projection_name
av_spherical_tile_bounds
av_get_picture_type_char
av_display_rotation_get
av_channel_layout_describe
av_stristr
av_dovi_alloc
av_timegm
av_frame_free
av_frame_alloc
av_buffer_ref
av_opt_ptr
av_opt_get_dict_val
av_opt_set_dict_val
av_opt_set_int
av_channel_layout_copy
av_add_stable
av_compare_mod
av_rescale_q_rnd
av_gcd
av_base64_decode
av_strncasecmp
av_gettime
av_strireplace
av_strlcatf
av_strlcat
av_strnstr
av_memdup
av_fast_malloc
av_aes_crypt
av_aes_init
av_aes_alloc
av_adler32_update
av_ts_make_time_string2
av_parse_time
av_dict_parse_string
av_compare_ts
av_get_token
av_tree_enumerate
av_tree_destroy
av_tree_insert
av_tree_find
av_tree_node_alloc
av_opt_get
av_bprint_append_data
av_vbprintf
av_usleep
av_gettime_relative
av_opt_set
av_opt_copy
av_opt_set_dict
av_opt_set_defaults
av_match_list
av_get_pix_fmt_name
avpriv_report_missing_feature
av_realloc_f
av_get_media_type_string
av_i2int
av_int2i
av_div_i
av_shr_i
av_cmp_i
av_mul_i
av_add_i
av_reallocp
av_opt_free
av_iamf_mix_presentation_free
av_iamf_audio_element_free
av_div_q
av_mul_q
av_dynarray_add_nofree
av_strndup
av_strdup
av_realloc_array
av_match_name
av_fast_realloc
av_fifo_freep2
av_fifo_reset2
av_fifo_drain2
av_fifo_peek
av_fifo_write_from_cb
av_fifo_can_write
av_fifo_can_read
av_fifo_alloc2
av_strerror
av_strstart
av_asprintf
av_bprint_finalize
av_bprint_clear
av_bprint_chars
av_bprintf
av_bprint_init
av_dict_count
av_buffer_unref
av_buffer_alloc
av_rc4_crypt
av_rc4_init
av_rc4_alloc
av_des_crypt
av_des_init
av_des_alloc
av_dict_set_int
av_strcasecmp
av_basename
av_reduce
av_image_check_size
av_realloc
av_dict_iterate
av_malloc_array
av_rescale_q
av_fourcc_make_string
av_channel_layout_default
av_rescale
av_crc
av_crc_get_table
av_calloc
av_tea_crypt
av_tea_init
av_tea_alloc
av_strlcpy
av_dict_set
av_rescale_rnd
av_default_item_name
av_dict_free
av_dict_copy
av_dict_get
av_d2q
av_freep
av_free
av_reallocp_array
av_mallocz
av_malloc
av_log
avpriv_request_sample
av_channel_layout_uninit

secur32

InitializeSecurityContextA
DeleteSecurityContext
ApplyControlToken
QueryContextAttributesA
FreeContextBuffer
EncryptMessage
DecryptMessage
FreeCredentialsHandle
AcquireCredentialsHandleA

ws2_32

freeaddrinfo
accept
bind
closesocket
connect
getsockopt
listen
ntohl
setsockopt
socket
WSAStartup
WSACleanup
WSAGetLastError
getnameinfo
__WSAFDIsSet
ioctlsocket
select
gethostname
htons
ntohs
recvfrom
sendto
getpeername
getsockname
recv
send
shutdown
getaddrinfo

kernel32

RtlUnwind
CloseHandle
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeConditionVariable
WakeConditionVariable
SleepConditionVariableSRW
WaitForSingleObjectEx
GetFullPathNameW
MultiByteToWideChar
MoveFileExA
MoveFileExW
WideCharToMultiByte
GetLastError
CancelIoEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetStdHandle
GetFileType
GetModuleFileNameW
GetModuleHandleExW
WriteConsoleW
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
DeleteFileW
SetFilePointerEx
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
CreateDirectoryW
RemoveDirectoryW
ExitProcess
ReadFile
GetConsoleMode
ReadConsoleW
WriteFile
GetConsoleOutputCP
DuplicateHandle
HeapAlloc
HeapFree
GetCurrentThread
SetConsoleCtrlHandler
OutputDebugStringW
GetTempPathW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
HeapReAlloc
HeapSize
FlushFileBuffers
GetStringTypeW
GetFileAttributesExW
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileSizeEx
GetTimeZoneInformation
SetEndOfFile
GetCurrentDirectoryW
SetCurrentDirectoryW
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW

Exports

Exports

av_add_index_entry
av_append_packet
av_codec_get_id
av_codec_get_tag
av_codec_get_tag2
av_demuxer_iterate
av_disposition_from_string
av_disposition_to_string
av_dump_format
av_filename_number_test
av_find_best_stream
av_find_default_stream_index
av_find_input_format
av_find_program_from_stream
av_fmt_ctx_get_duration_estimation_method
av_format_ffversion
av_format_inject_global_side_data
av_get_frame_filename
av_get_frame_filename2
av_get_output_timestamp
av_get_packet
av_guess_codec
av_guess_format
av_guess_frame_rate
av_guess_sample_aspect_ratio
av_hex_dump
av_hex_dump_log
av_index_search_timestamp
av_interleaved_write_frame
av_interleaved_write_uncoded_frame
av_match_ext
av_muxer_iterate
av_new_program
av_pkt_dump2
av_pkt_dump_log2
av_probe_input_buffer
av_probe_input_buffer2
av_probe_input_format
av_probe_input_format2
av_probe_input_format3
av_program_add_stream_index
av_read_frame
av_read_pause
av_read_play
av_sdp_create
av_seek_frame
av_stream_add_side_data
av_stream_get_class
av_stream_get_codec_timebase
av_stream_get_parser
av_stream_get_side_data
av_stream_group_get_class
av_stream_new_side_data
av_url_split
av_write_frame
av_write_trailer
av_write_uncoded_frame
av_write_uncoded_frame_query
avformat_alloc_context
avformat_alloc_output_context2
avformat_close_input
avformat_configuration
avformat_find_stream_info
avformat_flush
avformat_free_context
avformat_get_class
avformat_get_mov_audio_tags
avformat_get_mov_video_tags
avformat_get_riff_audio_tags
avformat_get_riff_video_tags
avformat_index_get_entries_count
avformat_index_get_entry
avformat_index_get_entry_from_timestamp
avformat_init_output
avformat_license
avformat_match_stream_specifier
avformat_network_deinit
avformat_network_init
avformat_new_stream
avformat_open_input
avformat_query_codec
avformat_queue_attached_pictures
avformat_seek_file
avformat_stream_group_add_stream
avformat_stream_group_create
avformat_stream_group_name
avformat_transfer_internal_stream_timing_info
avformat_version
avformat_write_header
avio_accept
avio_alloc_context
avio_check
avio_close
avio_close_dir
avio_close_dyn_buf
avio_closep
avio_context_free
avio_enum_protocols
avio_feof
avio_find_protocol_name
avio_flush
avio_free_directory_entry
avio_get_dyn_buf
avio_get_str
avio_get_str16be
avio_get_str16le
avio_handshake
avio_open
avio_open2
avio_open_dir
avio_open_dyn_buf
avio_pause
avio_print_string_array
avio_printf
avio_protocol_get_class
avio_put_str
avio_put_str16be
avio_put_str16le
avio_r8
avio_rb16
avio_rb24
avio_rb32
avio_rb64
avio_read
avio_read_dir
avio_read_partial
avio_read_to_bprint
avio_rl16
avio_rl24
avio_rl32
avio_rl64
avio_seek
avio_seek_time
avio_size
avio_skip
avio_vprintf
avio_w8
avio_wb16
avio_wb24
avio_wb32
avio_wb64
avio_wl16
avio_wl24
avio_wl32
avio_wl64
avio_write
avio_write_marker
avpriv_dv_get_packet
avpriv_dv_init_demux
avpriv_dv_produce_packet
avpriv_mpegts_parse_close
avpriv_mpegts_parse_open
avpriv_mpegts_parse_packet
avpriv_new_chapter
avpriv_register_devices
avpriv_set_pts_info
avpriv_stream_set_need_parsing
avpriv_update_cur_dts

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 905KB - Virtual size: 905KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 373B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
avutil-59.dll
.dll windows:6 windows x64 arch:x64

d97768e8a5795cb8ae0d62d5676a9276

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d8:c7:04:34:83:3e:02:90:65:0b:14:89:3f:1f:92:39
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

31/12/2021, 00:00

Not After

30/12/2024, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5f:19:90:cb:d1:b1:6d:6d:fb:87:8c:24:9c:27:c7:96:78:2f:a5:33:a7:05:03:ed:88:7f:ab:3c:9c:3c:96:2a
Signer

Actual PE Digest

5f:19:90:cb:d1:b1:6d:6d:fb:87:8c:24:9c:27:c7:96:78:2f:a5:33:a7:05:03:ed:88:7f:ab:3c:9c:3c:96:2a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\workspace\ffmpeg-7.0-64\libavutil\avutil-59.pdb

Imports

user32

GetDesktopWindow

bcrypt

BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider
BCryptGenRandom

kernel32

TlsFree
FlushFileBuffers
OutputDebugStringW
GetStringTypeW
GetFileSizeEx
GetFileAttributesExW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetCurrentProcess
GetProcessAffinityMask
InitOnceBeginInitialize
InitOnceComplete
CloseHandle
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
WaitForSingleObjectEx
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
GetFullPathNameW
MultiByteToWideChar
ReleaseMutex
CreateMutexA
GetSystemDirectoryW
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadLibraryExA
LoadLibraryExW
LoadLibraryA
CreateEventA
FreeLibrary
GetStdHandle
GetConsoleMode
WriteConsoleW
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
Sleep
GetSystemTimeAsFileTime
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetProcessHeap
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
RtlUnwind
EncodePointer
RaiseException
RtlPcToFileHeader
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
GetModuleHandleExW
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetStdHandle
QueryPerformanceFrequency
ExitProcess
GetCurrentThread
HeapFree
HeapAlloc
SetConsoleCtrlHandler
WideCharToMultiByte
GetTempPathW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetCurrentDirectoryW
GetCurrentDirectoryW
WriteFile
GetConsoleOutputCP
SetEndOfFile
ReadFile
ReadConsoleW
SetFilePointerEx
HeapReAlloc
HeapSize
HeapQueryInformation
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW

Exports

Exports

av_add_i
av_add_q
av_add_stable
av_adler32_update
av_aes_alloc
av_aes_crypt
av_aes_ctr_alloc
av_aes_ctr_crypt
av_aes_ctr_free
av_aes_ctr_get_iv
av_aes_ctr_increment_iv
av_aes_ctr_init
av_aes_ctr_set_full_iv
av_aes_ctr_set_iv
av_aes_ctr_set_random_iv
av_aes_init
av_aes_size
av_ambient_viewing_environment_alloc
av_ambient_viewing_environment_create_side_data
av_append_path_component
av_asprintf
av_assert0_fpu
av_audio_fifo_alloc
av_audio_fifo_drain
av_audio_fifo_free
av_audio_fifo_peek
av_audio_fifo_peek_at
av_audio_fifo_read
av_audio_fifo_realloc
av_audio_fifo_reset
av_audio_fifo_size
av_audio_fifo_space
av_audio_fifo_write
av_base64_decode
av_base64_encode
av_basename
av_bessel_i0
av_blowfish_alloc
av_blowfish_crypt
av_blowfish_crypt_ecb
av_blowfish_init
av_bmg_get
av_bprint_append_data
av_bprint_chars
av_bprint_clear
av_bprint_escape
av_bprint_finalize
av_bprint_get_buffer
av_bprint_init
av_bprint_init_for_buffer
av_bprint_strftime
av_bprintf
av_buffer_alloc
av_buffer_allocz
av_buffer_create
av_buffer_default_free
av_buffer_get_opaque
av_buffer_get_ref_count
av_buffer_is_writable
av_buffer_make_writable
av_buffer_pool_buffer_get_opaque
av_buffer_pool_get
av_buffer_pool_init
av_buffer_pool_init2
av_buffer_pool_uninit
av_buffer_realloc
av_buffer_ref
av_buffer_replace
av_buffer_unref
av_calloc
av_camellia_alloc
av_camellia_crypt
av_camellia_init
av_camellia_size
av_cast5_alloc
av_cast5_crypt
av_cast5_crypt2
av_cast5_init
av_cast5_size
av_channel_description
av_channel_description_bprint
av_channel_from_string
av_channel_layout_channel_from_index
av_channel_layout_channel_from_string
av_channel_layout_check
av_channel_layout_compare
av_channel_layout_copy
av_channel_layout_custom_init
av_channel_layout_default
av_channel_layout_describe
av_channel_layout_describe_bprint
av_channel_layout_from_mask
av_channel_layout_from_string
av_channel_layout_index_from_channel
av_channel_layout_index_from_string
av_channel_layout_retype
av_channel_layout_standard
av_channel_layout_subset
av_channel_layout_uninit
av_channel_name
av_channel_name_bprint
av_chroma_location_enum_to_pos
av_chroma_location_from_name
av_chroma_location_name
av_chroma_location_pos_to_enum
av_cmp_i
av_color_primaries_from_name
av_color_primaries_name
av_color_range_from_name
av_color_range_name
av_color_space_from_name
av_color_space_name
av_color_transfer_from_name
av_color_transfer_name
av_compare_mod
av_compare_ts
av_content_light_metadata_alloc
av_content_light_metadata_create_side_data
av_cpu_count
av_cpu_force_count
av_cpu_max_align
av_crc
av_crc_get_table
av_crc_init
av_csp_approximate_trc_gamma
av_csp_luma_coeffs_from_avcsp
av_csp_primaries_desc_from_id
av_csp_primaries_id_from_desc
av_csp_trc_func_from_id
av_d2q
av_default_get_category
av_default_item_name
av_des_alloc
av_des_crypt
av_des_init
av_des_mac
av_detection_bbox_alloc
av_detection_bbox_create_side_data
av_dict_copy
av_dict_count
av_dict_free
av_dict_get
av_dict_get_string
av_dict_iterate
av_dict_parse_string
av_dict_set
av_dict_set_int
av_dirname
av_display_matrix_flip
av_display_rotation_get
av_display_rotation_set
av_div_i
av_div_q
av_dovi_alloc
av_dovi_metadata_alloc
av_downmix_info_update_side_data
av_dynamic_hdr_plus_alloc
av_dynamic_hdr_plus_create_side_data
av_dynamic_hdr_plus_from_t35
av_dynamic_hdr_plus_to_t35
av_dynamic_hdr_vivid_alloc
av_dynamic_hdr_vivid_create_side_data
av_dynarray2_add
av_dynarray_add
av_dynarray_add_nofree
av_encryption_info_add_side_data
av_encryption_info_alloc
av_encryption_info_clone
av_encryption_info_free
av_encryption_info_get_side_data
av_encryption_init_info_add_side_data
av_encryption_init_info_alloc
av_encryption_init_info_free
av_encryption_init_info_get_side_data
av_escape
av_executor_alloc
av_executor_execute
av_executor_free
av_expr_count_func
av_expr_count_vars
av_expr_eval
av_expr_free
av_expr_parse
av_expr_parse_and_eval
av_fast_malloc
av_fast_mallocz
av_fast_realloc
av_fifo_alloc2
av_fifo_auto_grow_limit
av_fifo_can_read
av_fifo_can_write
av_fifo_drain2
av_fifo_elem_size
av_fifo_freep2
av_fifo_grow2
av_fifo_peek
av_fifo_peek_to_cb
av_fifo_read
av_fifo_read_to_cb
av_fifo_reset2
av_fifo_write
av_fifo_write_from_cb
av_file_map
av_file_unmap
av_film_grain_params_alloc
av_film_grain_params_create_side_data
av_film_grain_params_select
av_find_best_pix_fmt_of_2
av_find_info_tag
av_find_nearest_q_idx
av_force_cpu_flags
av_fourcc_make_string
av_frame_alloc
av_frame_apply_cropping
av_frame_clone
av_frame_copy
av_frame_copy_props
av_frame_free
av_frame_get_buffer
av_frame_get_plane_buffer
av_frame_get_side_data
av_frame_is_writable
av_frame_make_writable
av_frame_move_ref
av_frame_new_side_data
av_frame_new_side_data_from_buf
av_frame_ref
av_frame_remove_side_data
av_frame_replace
av_frame_side_data_clone
av_frame_side_data_free
av_frame_side_data_get_c
av_frame_side_data_name
av_frame_side_data_new
av_frame_unref
av_free
av_freep
av_gcd
av_gcd_q
av_get_alt_sample_fmt
av_get_bits_per_pixel
av_get_bytes_per_sample
av_get_cpu_flags
av_get_known_color_name
av_get_media_type_string
av_get_packed_sample_fmt
av_get_padded_bits_per_pixel
av_get_picture_type_char
av_get_pix_fmt
av_get_pix_fmt_loss
av_get_pix_fmt_name
av_get_pix_fmt_string
av_get_planar_sample_fmt
av_get_random_seed
av_get_sample_fmt
av_get_sample_fmt_name
av_get_sample_fmt_string
av_get_time_base_q
av_get_token
av_gettime
av_gettime_relative
av_gettime_relative_is_monotonic
av_hash_alloc
av_hash_final
av_hash_final_b64
av_hash_final_bin
av_hash_final_hex
av_hash_freep
av_hash_get_name
av_hash_get_size
av_hash_init
av_hash_names
av_hash_update
av_hmac_alloc
av_hmac_calc
av_hmac_final
av_hmac_free
av_hmac_init
av_hmac_update
av_hwdevice_ctx_alloc
av_hwdevice_ctx_create
av_hwdevice_ctx_create_derived
av_hwdevice_ctx_create_derived_opts
av_hwdevice_ctx_init
av_hwdevice_find_type_by_name
av_hwdevice_get_hwframe_constraints
av_hwdevice_get_type_name
av_hwdevice_hwconfig_alloc
av_hwdevice_iterate_types
av_hwframe_constraints_free
av_hwframe_ctx_alloc
av_hwframe_ctx_create_derived
av_hwframe_ctx_init
av_hwframe_get_buffer
av_hwframe_map
av_hwframe_transfer_data
av_hwframe_transfer_get_formats
av_i2int
av_iamf_audio_element_add_layer
av_iamf_audio_element_alloc
av_iamf_audio_element_free
av_iamf_audio_element_get_class
av_iamf_mix_presentation_add_submix
av_iamf_mix_presentation_alloc
av_iamf_mix_presentation_free
av_iamf_mix_presentation_get_class
av_iamf_param_definition_alloc
av_iamf_param_definition_get_class
av_iamf_submix_add_element
av_iamf_submix_add_layout
av_image_alloc
av_image_check_sar
av_image_check_size
av_image_check_size2
av_image_copy
av_image_copy_plane
av_image_copy_plane_uc_from
av_image_copy_to_buffer
av_image_copy_uc_from
av_image_fill_arrays
av_image_fill_black
av_image_fill_color
av_image_fill_linesizes
av_image_fill_max_pixsteps
av_image_fill_plane_sizes
av_image_fill_pointers
av_image_get_buffer_size
av_image_get_linesize
av_int2i
av_int_list_length_for_size
av_lfg_init
av_lfg_init_from_data
av_log
av_log2
av_log2_16bit
av_log2_i
av_log_default_callback
av_log_format_line
av_log_format_line2
av_log_get_flags
av_log_get_level
av_log_once
av_log_set_callback
av_log_set_flags
av_log_set_level
av_lzo1x_decode
av_malloc
av_malloc_array
av_mallocz
av_mastering_display_metadata_alloc
av_mastering_display_metadata_create_side_data
av_match_list
av_match_name
av_max_alloc
av_md5_alloc
av_md5_final
av_md5_init
av_md5_size
av_md5_sum
av_md5_update
av_memcpy_backptr
av_memdup
av_mod_i
av_mul_i
av_mul_q
av_murmur3_alloc
av_murmur3_final
av_murmur3_init
av_murmur3_init_seeded
av_murmur3_update
av_nearer_q
av_opt_child_class_iterate
av_opt_child_next
av_opt_copy
av_opt_eval_double
av_opt_eval_flags
av_opt_eval_float
av_opt_eval_int
av_opt_eval_int64
av_opt_eval_q
av_opt_find
av_opt_find2
av_opt_flag_is_set
av_opt_free
av_opt_freep_ranges
av_opt_get
av_opt_get_chlayout
av_opt_get_dict_val
av_opt_get_double
av_opt_get_image_size
av_opt_get_int
av_opt_get_key_value
av_opt_get_pixel_fmt
av_opt_get_q
av_opt_get_sample_fmt
av_opt_get_video_rate
av_opt_is_set_to_default
av_opt_is_set_to_default_by_name
av_opt_next
av_opt_ptr
av_opt_query_ranges
av_opt_query_ranges_default
av_opt_serialize
av_opt_set
av_opt_set_bin
av_opt_set_chlayout
av_opt_set_defaults
av_opt_set_defaults2
av_opt_set_dict
av_opt_set_dict2
av_opt_set_dict_val
av_opt_set_double
av_opt_set_from_string
av_opt_set_image_size
av_opt_set_int
av_opt_set_pixel_fmt
av_opt_set_q
av_opt_set_sample_fmt
av_opt_set_video_rate
av_opt_show2
av_parse_color
av_parse_cpu_caps
av_parse_ratio
av_parse_time
av_parse_video_rate
av_parse_video_size
av_pix_fmt_count_planes
av_pix_fmt_desc_get
av_pix_fmt_desc_get_id
av_pix_fmt_desc_next
av_pix_fmt_get_chroma_sub_sample
av_pix_fmt_swap_endianness
av_pixelutils_get_sad_fn
av_q2intfloat
av_random_bytes
av_rc4_alloc
av_rc4_crypt
av_rc4_init
av_read_image_line
av_read_image_line2
av_realloc
av_realloc_array
av_realloc_f
av_reallocp
av_reallocp_array
av_reduce
av_rescale
av_rescale_delta
av_rescale_q
av_rescale_q_rnd
av_rescale_rnd
av_ripemd_alloc
av_ripemd_final
av_ripemd_init
av_ripemd_size
av_ripemd_update
av_sample_fmt_is_planar
av_samples_alloc
av_samples_alloc_array_and_samples
av_samples_copy
av_samples_fill_arrays
av_samples_get_buffer_size
av_samples_set_silence
av_set_options_string
av_sha512_alloc
av_sha512_final
av_sha512_init
av_sha512_size
av_sha512_update
av_sha_alloc
av_sha_final
av_sha_init
av_sha_size
av_sha_update
av_shr_i
av_size_mult
av_small_strptime
av_spherical_alloc
av_spherical_from_name
av_spherical_projection_name
av_spherical_tile_bounds
av_sscanf
av_stereo3d_alloc
av_stereo3d_create_side_data
av_stereo3d_from_name
av_stereo3d_type_name
av_strcasecmp
av_strdup
av_strerror
av_strireplace
av_stristart
av_stristr
av_strlcat
av_strlcatf
av_strlcpy
av_strncasecmp
av_strndup
av_strnstr
av_strstart
av_strtod

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 372KB - Virtual size: 371KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 373B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
concrt140.dll
.dll windows:6 windows x64 arch:x64

72b3045c4d2fb9d978e1806040daad56

Code Sign

33:00:00:00:ff:ed:62:7b:87:d0:66:0d:fa:00:00:00:00:00:ff
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:59

Not After

20/08/2025, 19:59

Subject

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:14:9d:fb:c3:1f:1f:63:c3:10:00:00:00:00:00:14
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/05/2013, 20:44

Not After

01/05/2028, 20:54

Subject

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:fd:36:44:39:73:0d:dc:02:28:00:00:00:00:03:fd
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:26

Not After

20/08/2025, 19:26

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4d:b1:e6:a1:4f:34:0f:ad:11:dd:ab:30:07:21:da:a8:6b:c6:3b:fa:18:e3:e4:2f:51:0d:1c:49:c0:c6:15:12
Signer

Actual PE Digest

4d:b1:e6:a1:4f:34:0f:ad:11:dd:ab:30:07:21:da:a8:6b:c6:3b:fa:18:e3:e4:2f:51:0d:1c:49:c0:c6:15:12

Digest Algorithm

sha256

PE Digest Matches

true

4d:b1:e6:a1:4f:34:0f:ad:11:dd:ab:30:07:21:da:a8:6b:c6:3b:fa:18:e3:e4:2f:51:0d:1c:49:c0:c6:15:12
Signer

Actual PE Digest

4d:b1:e6:a1:4f:34:0f:ad:11:dd:ab:30:07:21:da:a8:6b:c6:3b:fa:18:e3:e4:2f:51:0d:1c:49:c0:c6:15:12

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\concrt140.amd64.pdb

Imports

msvcp140

?_Xbad_function_call@std@@YAXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
_Mtx_lock
_Mtx_unlock
_Cnd_wait
_Cnd_broadcast
?_Throw_Cpp_error@std@@YAXH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_purecall
__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memset
__uncaught_exception
memcpy
__C_specific_handler
__RTDynamicCast
__current_exception
__current_exception_context
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_initterm
_cexit
_initterm_e
terminate
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free

api-ms-win-crt-math-l1-1-0

sqrt
exp

api-ms-win-crt-string-l1-1-0

wcsncpy_s

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfwprintf
__stdio_common_vswprintf_s
__acrt_iob_func
fflush

kernel32

GetCurrentThreadId
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleA
GetModuleFileNameW
FreeLibraryAndExitThread
FreeLibrary
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CreateThreadpoolTimer
FreeLibraryWhenCallbackReturns
GetThreadTimes
EncodePointer
OutputDebugStringW
LoadLibraryW
LoadLibraryExW
GetProcAddress
SetLastError
SetThreadpoolTimer
CreateSemaphoreExW
ReleaseSemaphore
InitializeSListHead
VerifyVersionInfoW
SetProcessAffinityMask
GetProcessAffinityMask
VirtualFree
FlushProcessWriteBuffers
VerSetConditionMask
DeleteCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetThreadGroupAffinity
GetThreadGroupAffinity
GetNumaHighestNodeNumber
GetLogicalProcessorInformationEx
GetTickCount64
GetCurrentProcessorNumberEx
TlsFree
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
GetCurrentThread
CloseHandle
DuplicateHandle
GetLastError
SetEvent
WaitForSingleObjectEx
GetCurrentProcess
TlsGetValue
InitializeCriticalSectionEx
CreateEventExW
Sleep
SignalObjectAndWait
SwitchToThread
CreateThread
SetThreadPriority
GetThreadPriority
TlsAlloc
TlsSetValue

Exports

Exports

??0?$_SpinWait@$00@details@Concurrency@@QEAA@P6AXXZ@Z
??0?$_SpinWait@$0A@@details@Concurrency@@QEAA@P6AXXZ@Z
??0SchedulerPolicy@Concurrency@@QEAA@AEBV01@@Z
??0SchedulerPolicy@Concurrency@@QEAA@XZ
??0SchedulerPolicy@Concurrency@@QEAA@_KZZ
??0_Cancellation_beacon@details@Concurrency@@QEAA@XZ
??0_Concurrent_queue_base_v4@details@Concurrency@@IEAA@_K@Z
??0_Concurrent_queue_iterator_base_v4@details@Concurrency@@IEAA@AEBV_Concurrent_queue_base_v4@12@@Z
??0_Condition_variable@details@Concurrency@@QEAA@XZ
??0_Context@details@Concurrency@@QEAA@PEAVContext@2@@Z
??0_NonReentrantBlockingLock@details@Concurrency@@QEAA@XZ
??0_NonReentrantPPLLock@details@Concurrency@@QEAA@XZ
??0_ReaderWriterLock@details@Concurrency@@QEAA@XZ
??0_ReentrantBlockingLock@details@Concurrency@@QEAA@XZ
??0_ReentrantLock@details@Concurrency@@QEAA@XZ
??0_ReentrantPPLLock@details@Concurrency@@QEAA@XZ
??0_Runtime_object@details@Concurrency@@QEAA@H@Z
??0_Runtime_object@details@Concurrency@@QEAA@XZ
??0_Scheduler@details@Concurrency@@QEAA@PEAVScheduler@2@@Z
??0_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QEAA@AEAV123@@Z
??0_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QEAA@AEAV123@@Z
??0_SpinLock@details@Concurrency@@QEAA@AECJ@Z
??0_StructuredTaskCollection@details@Concurrency@@QEAA@PEAV_CancellationTokenState@12@@Z
??0_TaskCollection@details@Concurrency@@QEAA@PEAV_CancellationTokenState@12@@Z
??0_TaskCollection@details@Concurrency@@QEAA@XZ
??0_Timer@details@Concurrency@@IEAA@I_N@Z
??0agent@Concurrency@@QEAA@AEAVScheduleGroup@1@@Z
??0agent@Concurrency@@QEAA@AEAVScheduler@1@@Z
??0agent@Concurrency@@QEAA@XZ
??0bad_target@Concurrency@@QEAA@PEBD@Z
??0bad_target@Concurrency@@QEAA@XZ
??0context_self_unblock@Concurrency@@QEAA@PEBD@Z
??0context_self_unblock@Concurrency@@QEAA@XZ
??0context_unblock_unbalanced@Concurrency@@QEAA@PEBD@Z
??0context_unblock_unbalanced@Concurrency@@QEAA@XZ
??0critical_section@Concurrency@@QEAA@XZ
??0default_scheduler_exists@Concurrency@@QEAA@PEBD@Z
??0default_scheduler_exists@Concurrency@@QEAA@XZ
??0event@Concurrency@@QEAA@XZ
??0improper_lock@Concurrency@@QEAA@PEBD@Z
??0improper_lock@Concurrency@@QEAA@XZ
??0improper_scheduler_attach@Concurrency@@QEAA@PEBD@Z
??0improper_scheduler_attach@Concurrency@@QEAA@XZ
??0improper_scheduler_detach@Concurrency@@QEAA@PEBD@Z
??0improper_scheduler_detach@Concurrency@@QEAA@XZ
??0improper_scheduler_reference@Concurrency@@QEAA@PEBD@Z
??0improper_scheduler_reference@Concurrency@@QEAA@XZ
??0invalid_link_target@Concurrency@@QEAA@PEBD@Z
??0invalid_link_target@Concurrency@@QEAA@XZ
??0invalid_multiple_scheduling@Concurrency@@QEAA@PEBD@Z
??0invalid_multiple_scheduling@Concurrency@@QEAA@XZ
??0invalid_oversubscribe_operation@Concurrency@@QEAA@PEBD@Z
??0invalid_oversubscribe_operation@Concurrency@@QEAA@XZ
??0invalid_scheduler_policy_key@Concurrency@@QEAA@PEBD@Z
??0invalid_scheduler_policy_key@Concurrency@@QEAA@XZ
??0invalid_scheduler_policy_thread_specification@Concurrency@@QEAA@PEBD@Z
??0invalid_scheduler_policy_thread_specification@Concurrency@@QEAA@XZ
??0invalid_scheduler_policy_value@Concurrency@@QEAA@PEBD@Z
??0invalid_scheduler_policy_value@Concurrency@@QEAA@XZ
??0message_not_found@Concurrency@@QEAA@PEBD@Z
??0message_not_found@Concurrency@@QEAA@XZ
??0missing_wait@Concurrency@@QEAA@PEBD@Z
??0missing_wait@Concurrency@@QEAA@XZ
??0nested_scheduler_missing_detach@Concurrency@@QEAA@PEBD@Z
??0nested_scheduler_missing_detach@Concurrency@@QEAA@XZ
??0operation_timed_out@Concurrency@@QEAA@PEBD@Z
??0operation_timed_out@Concurrency@@QEAA@XZ
??0reader_writer_lock@Concurrency@@QEAA@XZ
??0scheduler_not_attached@Concurrency@@QEAA@PEBD@Z
??0scheduler_not_attached@Concurrency@@QEAA@XZ
??0scheduler_resource_allocation_error@Concurrency@@QEAA@J@Z
??0scheduler_resource_allocation_error@Concurrency@@QEAA@PEBDJ@Z
??0scheduler_worker_creation_error@Concurrency@@QEAA@J@Z
??0scheduler_worker_creation_error@Concurrency@@QEAA@PEBDJ@Z
??0scoped_lock@critical_section@Concurrency@@QEAA@AEAV12@@Z
??0scoped_lock@reader_writer_lock@Concurrency@@QEAA@AEAV12@@Z
??0scoped_lock_read@reader_writer_lock@Concurrency@@QEAA@AEAV12@@Z
??0unsupported_os@Concurrency@@QEAA@PEBD@Z
??0unsupported_os@Concurrency@@QEAA@XZ
??1SchedulerPolicy@Concurrency@@QEAA@XZ
??1_Cancellation_beacon@details@Concurrency@@QEAA@XZ
??1_Concurrent_queue_base_v4@details@Concurrency@@MEAA@XZ
??1_Concurrent_queue_iterator_base_v4@details@Concurrency@@IEAA@XZ
??1_Concurrent_vector_base_v4@details@Concurrency@@IEAA@XZ
??1_Condition_variable@details@Concurrency@@QEAA@XZ
??1_NonReentrantBlockingLock@details@Concurrency@@QEAA@XZ
??1_ReentrantBlockingLock@details@Concurrency@@QEAA@XZ
??1_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QEAA@XZ
??1_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QEAA@XZ
??1_SpinLock@details@Concurrency@@QEAA@XZ
??1_StructuredTaskCollection@details@Concurrency@@QEAA@XZ
??1_TaskCollection@details@Concurrency@@QEAA@XZ
??1_Timer@details@Concurrency@@MEAA@XZ
??1agent@Concurrency@@UEAA@XZ
??1critical_section@Concurrency@@QEAA@XZ
??1event@Concurrency@@QEAA@XZ
??1reader_writer_lock@Concurrency@@QEAA@XZ
??1scoped_lock@critical_section@Concurrency@@QEAA@XZ
??1scoped_lock@reader_writer_lock@Concurrency@@QEAA@XZ
??1scoped_lock_read@reader_writer_lock@Concurrency@@QEAA@XZ
??4?$_SpinWait@$00@details@Concurrency@@QEAAAEAV012@$$QEAV012@@Z
??4?$_SpinWait@$00@details@Concurrency@@QEAAAEAV012@AEBV012@@Z
??4?$_SpinWait@$0A@@details@Concurrency@@QEAAAEAV012@$$QEAV012@@Z
??4?$_SpinWait@$0A@@details@Concurrency@@QEAAAEAV012@AEBV012@@Z
??4SchedulerPolicy@Concurrency@@QEAAAEAV01@AEBV01@@Z
??_F?$_SpinWait@$00@details@Concurrency@@QEAAXXZ
??_F?$_SpinWait@$0A@@details@Concurrency@@QEAAXXZ
??_F_Context@details@Concurrency@@QEAAXXZ
??_F_Scheduler@details@Concurrency@@QEAAXXZ
?AgentEventGuid@Concurrency@@3U_GUID@@B
?Alloc@Concurrency@@YAPEAX_K@Z
?Block@Context@Concurrency@@SAXXZ
?ChoreEventGuid@Concurrency@@3U_GUID@@B
?ConcRTEventGuid@Concurrency@@3U_GUID@@B
?ConcRT_ProviderGuid@Concurrency@@3U_GUID@@B
?ContextEventGuid@Concurrency@@3U_GUID@@B
?Create@CurrentScheduler@Concurrency@@SAXAEBVSchedulerPolicy@2@@Z
?Create@Scheduler@Concurrency@@SAPEAV12@AEBVSchedulerPolicy@2@@Z
?CreateResourceManager@Concurrency@@YAPEAUIResourceManager@1@XZ
?CreateScheduleGroup@CurrentScheduler@Concurrency@@SAPEAVScheduleGroup@2@AEAVlocation@2@@Z
?CreateScheduleGroup@CurrentScheduler@Concurrency@@SAPEAVScheduleGroup@2@XZ
?CurrentContext@Context@Concurrency@@SAPEAV12@XZ
?Detach@CurrentScheduler@Concurrency@@SAXXZ
?DisableTracing@Concurrency@@YAJXZ
?EnableTracing@Concurrency@@YAJXZ
?Free@Concurrency@@YAXPEAX@Z
?Get@CurrentScheduler@Concurrency@@SAPEAVScheduler@2@XZ
?GetExecutionContextId@Concurrency@@YAIXZ
?GetNumberOfVirtualProcessors@CurrentScheduler@Concurrency@@SAIXZ
?GetOSVersion@Concurrency@@YA?AW4OSVersion@IResourceManager@1@XZ
?GetPolicy@CurrentScheduler@Concurrency@@SA?AVSchedulerPolicy@2@XZ
?GetPolicyValue@SchedulerPolicy@Concurrency@@QEBAIW4PolicyElementKey@2@@Z
?GetProcessorCount@Concurrency@@YAIXZ
?GetProcessorNodeCount@Concurrency@@YAIXZ
?GetSchedulerId@Concurrency@@YAIXZ
?GetSharedTimerQueue@details@Concurrency@@YAPEAXXZ
?Id@Context@Concurrency@@SAIXZ
?Id@CurrentScheduler@Concurrency@@SAIXZ
?IsAvailableLocation@CurrentScheduler@Concurrency@@SA_NAEBVlocation@2@@Z
?IsCurrentTaskCollectionCanceling@Context@Concurrency@@SA_NXZ
?LockEventGuid@Concurrency@@3U_GUID@@B
?Log2@details@Concurrency@@YAK_K@Z
?NFS_Allocate@details@Concurrency@@YAPEAX_K0PEAX@Z
?NFS_Free@details@Concurrency@@YAXPEAX@Z
?NFS_GetLineSize@details@Concurrency@@YA_KXZ
?Oversubscribe@Context@Concurrency@@SAX_N@Z
?PPLParallelForEventGuid@Concurrency@@3U_GUID@@B
?PPLParallelForeachEventGuid@Concurrency@@3U_GUID@@B
?PPLParallelInvokeEventGuid@Concurrency@@3U_GUID@@B
?RegisterShutdownEvent@CurrentScheduler@Concurrency@@SAXPEAX@Z
?ResetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXXZ
?ResourceManagerEventGuid@Concurrency@@3U_GUID@@B
?ScheduleGroupEventGuid@Concurrency@@3U_GUID@@B
?ScheduleGroupId@Context@Concurrency@@SAIXZ
?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPEAX@Z0@Z
?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPEAX@Z0AEAVlocation@2@@Z
?SchedulerEventGuid@Concurrency@@3U_GUID@@B
?SetConcurrencyLimits@SchedulerPolicy@Concurrency@@QEAAXII@Z
?SetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXAEBVSchedulerPolicy@2@@Z
?SetPolicyValue@SchedulerPolicy@Concurrency@@QEAAIW4PolicyElementKey@2@I@Z
?VirtualProcessorEventGuid@Concurrency@@3U_GUID@@B
?VirtualProcessorId@Context@Concurrency@@SAIXZ
?Yield@Context@Concurrency@@SAXXZ
?_Abort@_StructuredTaskCollection@details@Concurrency@@AEAAXXZ
?_Acquire@_NonReentrantBlockingLock@details@Concurrency@@QEAAXXZ
?_Acquire@_NonReentrantPPLLock@details@Concurrency@@QEAAXPEAX@Z
?_Acquire@_ReentrantBlockingLock@details@Concurrency@@QEAAXXZ
?_Acquire@_ReentrantLock@details@Concurrency@@QEAAXXZ
?_Acquire@_ReentrantPPLLock@details@Concurrency@@QEAAXPEAX@Z
?_AcquireRead@_ReaderWriterLock@details@Concurrency@@QEAAXXZ
?_AcquireWrite@_ReaderWriterLock@details@Concurrency@@QEAAXXZ
?_Advance@_Concurrent_queue_iterator_base_v4@details@Concurrency@@IEAAXXZ
?_Assign@_Concurrent_queue_iterator_base_v4@details@Concurrency@@IEAAXAEBV123@@Z
?_Byte_reverse_table@details@Concurrency@@3QBEB
?_Cancel@_StructuredTaskCollection@details@Concurrency@@QEAAXXZ
?_Cancel@_TaskCollection@details@Concurrency@@QEAAXXZ
?_CheckTaskCollection@_UnrealizedChore@details@Concurrency@@IEAAXXZ
?_CleanupToken@_StructuredTaskCollection@details@Concurrency@@AEAAXXZ
?_ConcRT_CoreAssert@details@Concurrency@@YAXPEBD0H@Z
?_ConcRT_Trace@details@Concurrency@@YAXHPEB_WZZ
?_Confirm_cancel@_Cancellation_beacon@details@Concurrency@@QEAA_NXZ
?_CurrentContext@_Context@details@Concurrency@@SA?AV123@XZ
?_Current_node@location@Concurrency@@SA?AV12@XZ
?_Destroy@_AsyncTaskCollection@details@Concurrency@@EEAAXXZ
?_DoYield@?$_SpinWait@$00@details@Concurrency@@IEAAXXZ
?_DoYield@?$_SpinWait@$0A@@details@Concurrency@@IEAAXXZ
?_Get@_CurrentScheduler@details@Concurrency@@SA?AV_Scheduler@23@XZ
?_GetCombinableSize@details@Concurrency@@YA_KXZ
?_GetConcRTTraceInfo@Concurrency@@YAPEBU_CONCRT_TRACE_INFO@details@1@XZ
?_GetConcurrency@details@Concurrency@@YAIXZ
?_GetCurrentInlineDepth@_StackGuard@details@Concurrency@@CAAEA_KXZ
?_GetNumberOfVirtualProcessors@_CurrentScheduler@details@Concurrency@@SAIXZ
?_GetScheduler@_Scheduler@details@Concurrency@@QEAAPEAVScheduler@3@XZ
?_Id@_CurrentScheduler@details@Concurrency@@SAIXZ
?_Internal_assign@_Concurrent_vector_base_v4@details@Concurrency@@IEAAXAEBV123@_KP6AXPEAX1@ZP6AX2PEBX1@Z5@Z
?_Internal_capacity@_Concurrent_vector_base_v4@details@Concurrency@@IEBA_KXZ
?_Internal_clear@_Concurrent_vector_base_v4@details@Concurrency@@IEAA_KP6AXPEAX_K@Z@Z
?_Internal_compact@_Concurrent_vector_base_v4@details@Concurrency@@IEAAPEAX_KPEAXP6AX10@ZP6AX1PEBX0@Z@Z
?_Internal_copy@_Concurrent_vector_base_v4@details@Concurrency@@IEAAXAEBV123@_KP6AXPEAXPEBX1@Z@Z
?_Internal_empty@_Concurrent_queue_base_v4@details@Concurrency@@IEBA_NXZ
?_Internal_finish_clear@_Concurrent_queue_base_v4@details@Concurrency@@IEAAXXZ
?_Internal_grow_by@_Concurrent_vector_base_v4@details@Concurrency@@IEAA_K_K0P6AXPEAXPEBX0@Z2@Z
?_Internal_grow_to_at_least_with_result@_Concurrent_vector_base_v4@details@Concurrency@@IEAA_K_K0P6AXPEAXPEBX0@Z2@Z
?_Internal_move_push@_Concurrent_queue_base_v4@details@Concurrency@@IEAAXPEAX@Z
?_Internal_pop_if_present@_Concurrent_queue_base_v4@details@Concurrency@@IEAA_NPEAX@Z
?_Internal_push@_Concurrent_queue_base_v4@details@Concurrency@@IEAAXPEBX@Z
?_Internal_push_back@_Concurrent_vector_base_v4@details@Concurrency@@IEAAPEAX_KAEA_K@Z
?_Internal_reserve@_Concurrent_vector_base_v4@details@Concurrency@@IEAAX_K00@Z
?_Internal_resize@_Concurrent_vector_base_v4@details@Concurrency@@IEAAX_K00P6AXPEAX0@ZP6AX1PEBX0@Z3@Z
?_Internal_size@_Concurrent_queue_base_v4@details@Concurrency@@IEBA_KXZ
?_Internal_swap@_Concurrent_queue_base_v4@details@Concurrency@@IEAAXAEAV123@@Z
?_Internal_swap@_Concurrent_vector_base_v4@details@Concurrency@@IEAAXAEAV123@@Z
?_Internal_throw_exception@_Concurrent_queue_base_v4@details@Concurrency@@IEBAXXZ
?_Internal_throw_exception@_Concurrent_vector_base_v4@details@Concurrency@@IEBAX_K@Z
?_IsCanceling@_StructuredTaskCollection@details@Concurrency@@QEAA_NXZ
?_IsCanceling@_TaskCollection@details@Concurrency@@QEAA_NXZ
?_IsSynchronouslyBlocked@_Context@details@Concurrency@@QEBA_NXZ
?_NewCollection@_AsyncTaskCollection@details@Concurrency@@SAPEAV123@PEAV_CancellationTokenState@23@@Z
?_NumberOfSpins@?$_SpinWait@$00@details@Concurrency@@IEAAKXZ
?_NumberOfSpins@?$_SpinWait@$0A@@details@Concurrency@@IEAAKXZ
?_Oversubscribe@_Context@details@Concurrency@@SAX_N@Z
?_Reference@_Scheduler@details@Concurrency@@QEAAIXZ
?_Release@_NonReentrantBlockingLock@details@Concurrency@@QEAAXXZ
?_Release@_NonReentrantPPLLock@details@Concurrency@@QEAAXXZ
?_Release@_ReentrantBlockingLock@details@Concurrency@@QEAAXXZ
?_Release@_ReentrantLock@details@Concurrency@@QEAAXXZ
?_Release@_ReentrantPPLLock@details@Concurrency@@QEAAXXZ
?_Release@_Scheduler@details@Concurrency@@QEAAIXZ
?_ReleaseRead@_ReaderWriterLock@details@Concurrency@@QEAAXXZ
?_ReleaseWrite@_ReaderWriterLock@details@Concurrency@@QEAAXXZ
?_Reset@?$_SpinWait@$00@details@Concurrency@@IEAAXXZ
?_Reset@?$_SpinWait@$0A@@details@Concurrency@@IEAAXXZ
?_RunAndWait@_StructuredTaskCollection@details@Concurrency@@QEAA?AW4_TaskCollectionStatus@23@PEAV_UnrealizedChore@23@@Z
?_RunAndWait@_TaskCollection@details@Concurrency@@QEAA?AW4_TaskCollectionStatus@23@PEAV_UnrealizedChore@23@@Z
?_Schedule@_StructuredTaskCollection@details@Concurrency@@QEAAXPEAV_UnrealizedChore@23@@Z
?_Schedule@_StructuredTaskCollection@details@Concurrency@@QEAAXPEAV_UnrealizedChore@23@PEAVlocation@3@@Z
?_Schedule@_TaskCollection@details@Concurrency@@QEAAXPEAV_UnrealizedChore@23@@Z
?_Schedule@_TaskCollection@details@Concurrency@@QEAAXPEAV_UnrealizedChore@23@PEAVlocation@3@@Z
?_ScheduleTask@_CurrentScheduler@details@Concurrency@@SAXP6AXPEAX@Z0@Z
?_Segment_index_of@_Concurrent_vector_base_v4@details@Concurrency@@KA_K_K@Z
?_SetSpinCount@?$_SpinWait@$00@details@Concurrency@@QEAAXI@Z
?_SetSpinCount@?$_SpinWait@$0A@@details@Concurrency@@QEAAXI@Z
?_ShouldSpinAgain@?$_SpinWait@$00@details@Concurrency@@IEAA_NXZ
?_ShouldSpinAgain@?$_SpinWait@$0A@@details@Concurrency@@IEAA_NXZ
?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QEAA_NXZ
?_SpinOnce@?$_SpinWait@$0A@@details@Concurrency@@QEAA_NXZ
?_SpinYield@Context@Concurrency@@SAXXZ
?_Start@_Timer@details@Concurrency@@IEAAXXZ
?_Stop@_Timer@details@Concurrency@@IEAAXXZ
?_Trace_agents@Concurrency@@YAXW4Agents_EventType@1@_JZZ
?_Trace_ppl_function@Concurrency@@YAXAEBU_GUID@@EW4ConcRT_EventType@1@@Z
?_TryAcquire@_NonReentrantBlockingLock@details@Concurrency@@QEAA_NXZ
?_TryAcquire@_ReentrantBlockingLock@details@Concurrency@@QEAA_NXZ
?_TryAcquire@_ReentrantLock@details@Concurrency@@QEAA_NXZ
?_TryAcquireWrite@_ReaderWriterLock@details@Concurrency@@QEAA_NXZ
?_UnderlyingYield@details@Concurrency@@YAXXZ
?_Value@_SpinCount@details@Concurrency@@SAIXZ
?_Yield@_Context@details@Concurrency@@SAXXZ
?cancel@agent@Concurrency@@QEAA_NXZ
?current@location@Concurrency@@SA?AV12@XZ
?done@agent@Concurrency@@IEAA_NXZ
?from_numa_node@location@Concurrency@@SA?AV12@G@Z
?get_error_code@scheduler_resource_allocation_error@Concurrency@@QEBAJXZ
?is_current_task_group_canceling@Concurrency@@YA_NXZ
?lock@critical_section@Concurrency@@QEAAXXZ
?lock@reader_writer_lock@Concurrency@@QEAAXXZ
?lock_read@reader_writer_lock@Concurrency@@QEAAXXZ
?native_handle@critical_section@Concurrency@@QEAAAEAV12@XZ
?notify_all@_Condition_variable@details@Concurrency@@QEAAXXZ
?notify_one@_Condition_variable@details@Concurrency@@QEAAXXZ
?reset@event@Concurrency@@QEAAXXZ
?set@event@Concurrency@@QEAAXXZ
?set_task_execution_resources@Concurrency@@YAXGPEAU_GROUP_AFFINITY@@@Z
?set_task_execution_resources@Concurrency@@YAX_K@Z
?start@agent@Concurrency@@QEAA_NXZ
?status@agent@Concurrency@@QEAA?AW4agent_status@2@XZ
?status_port@agent@Concurrency@@QEAAPEAV?$ISource@W4agent_status@Concurrency@@@2@XZ
?try_lock@critical_section@Concurrency@@QEAA_NXZ
?try_lock@reader_writer_lock@Concurrency@@QEAA_NXZ
?try_lock_for@critical_section@Concurrency@@QEAA_NI@Z
?try_lock_read@reader_writer_lock@Concurrency@@QEAA_NXZ
?unlock@critical_section@Concurrency@@QEAAXXZ
?unlock@reader_writer_lock@Concurrency@@QEAAXXZ
?wait@Concurrency@@YAXI@Z
?wait@_Condition_variable@details@Concurrency@@QEAAXAEAVcritical_section@3@@Z
?wait@agent@Concurrency@@SA?AW4agent_status@2@PEAV12@I@Z
?wait@event@Concurrency@@QEAA_KI@Z
?wait_for@_Condition_variable@details@Concurrency@@QEAA_NAEAVcritical_section@3@I@Z
?wait_for_all@agent@Concurrency@@SAX_KPEAPEAV12@PEAW4agent_status@2@I@Z
?wait_for_multiple@event@Concurrency@@SA_KPEAPEAV12@_K_NI@Z
?wait_for_one@agent@Concurrency@@SAX_KPEAPEAV12@AEAW4agent_status@2@AEA_KI@Z

Sections

.text
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dec_aac.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:7d:99:6c:06:5e:c5:77:3c:a6:b2:f7:05:c2:5c:2f:21:80:48:c1:0e:6e:d1:a7:6a:9f:56:ee:5b:25:cc:7c
Signer

Actual PE Digest

08:7d:99:6c:06:5e:c5:77:3c:a6:b2:f7:05:c2:5c:2f:21:80:48:c1:0e:6e:d1:a7:6a:9f:56:ee:5b:25:cc:7c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Decode
Initialize

Sections

.text
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 958B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 97B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dec_aiff.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:62:d7:82:35:b2:f6:2a:16:0f:0b:71:b2:bd:94:57:66:bf:88:25:f9:38:3e:13:59:44:a0:63:df:d4:f2:aa
Signer

Actual PE Digest

08:62:d7:82:35:b2:f6:2a:16:0f:0b:71:b2:bd:94:57:66:bf:88:25:f9:38:3e:13:59:44:a0:63:df:d4:f2:aa

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Decode
Initialize

Sections

.text
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 862B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dec_ape.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

65:6a:4d:5f:86:92:ae:9c:62:36:17:7f:2f:97:ad:44:ea:70:32:07:4c:19:a8:95:99:2f:d3:0d:fe:f8:aa:8c
Signer

Actual PE Digest

65:6a:4d:5f:86:92:ae:9c:62:36:17:7f:2f:97:ad:44:ea:70:32:07:4c:19:a8:95:99:2f:d3:0d:fe:f8:aa:8c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Decode
Initialize

Sections

.text
Size: 512B - Virtual size: 267B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 846B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 41B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dec_dff.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

35:9e:97:92:bd:08:53:23:2a:37:bb:31:eb:91:a4:91:ea:d7:cb:f5:3c:4f:68:cd:cd:8b:2b:f6:2c:91:9a:72
Signer

Actual PE Digest

35:9e:97:92:bd:08:53:23:2a:37:bb:31:eb:91:a4:91:ea:d7:cb:f5:3c:4f:68:cd:cd:8b:2b:f6:2c:91:9a:72

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Decode
Initialize

Sections

.text
Size: 512B - Virtual size: 267B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 862B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 41B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dec_dsf.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bf:27:e1:38:28:96:91:04:00:1e:e0:77:84:11:0d:30:7c:56:8f:79:a4:da:1e:c9:83:08:de:0b:a7:11:7f:dd
Signer

Actual PE Digest

bf:27:e1:38:28:96:91:04:00:1e:e0:77:84:11:0d:30:7c:56:8f:79:a4:da:1e:c9:83:08:de:0b:a7:11:7f:dd

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Decode
Initialize

Sections

.text
Size: 512B - Virtual size: 267B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 862B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 41B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dec_ffmpeg.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

16:1e:15:89:a8:5c:4a:c5:2d:5c:71:40:60:e3:64:88:45:0e:59:be:9b:ec:d1:3e:87:f1:58:b5:66:5d:7c:2c
Signer

Actual PE Digest

16:1e:15:89:a8:5c:4a:c5:2d:5c:71:40:60:e3:64:88:45:0e:59:be:9b:ec:d1:3e:87:f1:58:b5:66:5d:7c:2c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Decode
Initialize

Sections

.text
Size: 512B - Virtual size: 267B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 329B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dec_flac.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bd:47:e6:ae:15:f1:45:68:ec:db:b1:bf:f8:30:82:e3:08:fd:b5:71:4a:1d:cb:43:7e:9f:af:6a:aa:a7:16:8f
Signer

Actual PE Digest

bd:47:e6:ae:15:f1:45:68:ec:db:b1:bf:f8:30:82:e3:08:fd:b5:71:4a:1d:cb:43:7e:9f:af:6a:aa:a7:16:8f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Decode
Initialize

Sections

.text
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 878B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 41B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dec_mp3.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b1:d9:06:c9:71:e1:bd:51:56:70:ed:c3:c9:e1:fa:9d:5c:0c:d5:d8:80:45:ab:55:3a:1f:d4:dc:ad:23:a2:a9
Signer

Actual PE Digest

b1:d9:06:c9:71:e1:bd:51:56:70:ed:c3:c9:e1:fa:9d:5c:0c:d5:d8:80:45:ab:55:3a:1f:d4:dc:ad:23:a2:a9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Decode
Initialize

Sections

.text
Size: 512B - Virtual size: 267B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 878B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dec_mpc.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7c:92:9a:02:d1:78:05:25:2e:2d:c5:60:b3:a4:ea:d5:2a:20:38:d3:d0:94:4c:30:1f:fc:7a:e6:17:aa:18:f2
Signer

Actual PE Digest

7c:92:9a:02:d1:78:05:25:2e:2d:c5:60:b3:a4:ea:d5:2a:20:38:d3:d0:94:4c:30:1f:fc:7a:e6:17:aa:18:f2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Decode
Initialize

Sections

.text
Size: 512B - Virtual size: 267B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 862B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dec_opus.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bf:49:83:94:da:75:c8:98:52:fb:9e:0c:3e:b8:3e:82:d7:66:12:21:ac:2b:22:72:99:07:58:25:74:e6:63:82
Signer

Actual PE Digest

bf:49:83:94:da:75:c8:98:52:fb:9e:0c:3e:b8:3e:82:d7:66:12:21:ac:2b:22:72:99:07:58:25:74:e6:63:82

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Decode
Initialize

Sections

.text
Size: 512B - Virtual size: 267B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 830B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 41B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dec_sacd.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e4:f4:06:50:09:50:58:47:24:a6:c0:04:f7:ef:42:37:1c:69:44:38:44:f0:7d:5c:48:91:41:ae:96:04:6f:25
Signer

Actual PE Digest

e4:f4:06:50:09:50:58:47:24:a6:c0:04:f7:ef:42:37:1c:69:44:38:44:f0:7d:5c:48:91:41:ae:96:04:6f:25

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Decode
Initialize

Sections

.text
Size: 512B - Virtual size: 267B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 830B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 41B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dec_tta.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

64:c9:80:d7:e3:32:fb:d7:05:96:69:60:b4:0e:5e:ad:4a:02:2c:9a:1e:51:ec:21:11:32:16:03:61:fa:f7:9a
Signer

Actual PE Digest

64:c9:80:d7:e3:32:fb:d7:05:96:69:60:b4:0e:5e:ad:4a:02:2c:9a:1e:51:ec:21:11:32:16:03:61:fa:f7:9a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Decode
Initialize

Sections

.text
Size: 512B - Virtual size: 267B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 814B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 41B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dec_vorbis.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

68:7c:f3:22:8a:79:b3:46:50:52:6f:18:76:eb:5e:40:61:98:93:c5:61:c7:8b:17:a9:68:84:99:92:39:f5:52
Signer

Actual PE Digest

68:7c:f3:22:8a:79:b3:46:50:52:6f:18:76:eb:5e:40:61:98:93:c5:61:c7:8b:17:a9:68:84:99:92:39:f5:52

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Decode
Initialize

Sections

.text
Size: 512B - Virtual size: 267B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 846B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 49B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dec_w64.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

85:83:a6:50:3d:f4:a9:09:c9:86:1e:52:8f:28:f7:d8:33:9b:ea:95:75:c3:86:2c:da:6f:17:51:28:89:7d:a7
Signer

Actual PE Digest

85:83:a6:50:3d:f4:a9:09:c9:86:1e:52:8f:28:f7:d8:33:9b:ea:95:75:c3:86:2c:da:6f:17:51:28:89:7d:a7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Decode
Initialize

Sections

.text
Size: 512B - Virtual size: 267B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 830B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 41B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dec_wav.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

66:b2:63:f4:dc:47:ec:ac:30:54:9e:68:b5:bd:89:65:59:b5:58:a8:25:7e:6c:50:49:04:bd:bf:2b:8f:7d:fb
Signer

Actual PE Digest

66:b2:63:f4:dc:47:ec:ac:30:54:9e:68:b5:bd:89:65:59:b5:58:a8:25:7e:6c:50:49:04:bd:bf:2b:8f:7d:fb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Decode
Initialize

Sections

.text
Size: 512B - Virtual size: 267B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 830B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 41B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dec_wavpack.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2c:6c:c5:ec:02:31:69:18:1d:ea:bb:24:a8:5d:01:c4:e5:79:24:7e:99:3e:33:42:24:52:3c:af:8c:92:39:08
Signer

Actual PE Digest

2c:6c:c5:ec:02:31:69:18:1d:ea:bb:24:a8:5d:01:c4:e5:79:24:7e:99:3e:33:42:24:52:3c:af:8c:92:39:08

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Decode
Initialize

Sections

.text
Size: 512B - Virtual size: 267B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 830B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 41B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dec_wma.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b4:69:63:7b:bb:31:92:eb:f5:27:ea:e6:35:36:1c:d5:13:b6:23:56:66:94:24:69:12:69:8e:95:d3:d7:d5:a5
Signer

Actual PE Digest

b4:69:63:7b:bb:31:92:eb:f5:27:ea:e6:35:36:1c:d5:13:b6:23:56:66:94:24:69:12:69:8e:95:d3:d7:d5:a5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Decode
Initialize

Sections

.text
Size: 512B - Virtual size: 267B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 862B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 49B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
decm_aac.dll
.dll windows:6 windows x64 arch:x64

4de2e225dadee34d123566eda811f37c

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7d:24:28:2a:5e:f7:80:15:38:12:1e:eb:36:d1:2f:aa:d2:15:3b:c6:92:04:76:6a:98:d5:63:94:20:5b:ee:36
Signer

Actual PE Digest

7d:24:28:2a:5e:f7:80:15:38:12:1e:eb:36:d1:2f:aa:d2:15:3b:c6:92:04:76:6a:98:d5:63:94:20:5b:ee:36

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

PostThreadMessageW

acdbase

ChangeChannelOrder
UNC_UnicodeToUtf8
UNC_freeStr
XHEAAC_DRC_Enabled
XHEAAC_DRC_Get_Effect
XHEAAC_DRC_Get_Loudness

mp4v2

MP4Close
MP4ConvertFromTrackTimestamp
MP4ConvertToTrackTimestamp
MP4FindTrackId
MP4Free
MP4GetAudioProfileLevel
MP4GetNumberOfTracks
MP4GetSampleIdFromTime
MP4GetSampleSync
MP4GetSampleTime
MP4GetTimeScale
MP4GetTrackAudioChannels
MP4GetTrackBytesProperty
MP4GetTrackDuration
MP4GetTrackESConfiguration
MP4GetTrackEditDuration
MP4GetTrackEditMediaStart
MP4GetTrackNumberOfSamples
MP4GetTrackTimeScale
MP4GetTrackType
MP4ItmfGetItemsByMeaning
MP4ItmfItemListFree
MP4Read
MP4ReadSample

fdkaac

aacDecoder_Close
aacDecoder_ConfigRaw
aacDecoder_DecodeFrame
aacDecoder_Fill
aacDecoder_GetStreamInfo
aacDecoder_Open
aacDecoder_SetParam

libmmd

cos
exp2
ldexp
log
lrintf
pow
sin
sqrtf

kernel32

AcquireSRWLockExclusive
CloseHandle
CreateEventW
CreateThread
DecodePointer
DeleteCriticalSection
DisableThreadLibraryCalls
EncodePointer
EnterCriticalSection
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetProcAddress
GetShortPathNameW
GetSystemTimeAsFileTime
GetTempPathA
GetThreadLocale
InitializeCriticalSectionEx
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LCMapStringEx
LeaveCriticalSection
LoadLibraryExA
LoadLibraryW
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
ReleaseSRWLockExclusive
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
SleepConditionVariableSRW
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
WakeAllConditionVariable
WideCharToMultiByte
lstrcpyW

rpcrt4

RpcStringFreeA
UuidCreate
UuidToStringA

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__RTDynamicCast
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_destroy_list
__uncaught_exception
_purecall
memcpy
memmove
memset
strchr
strstr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func
___lc_locale_name_func
__pctype_func
_lock_locales
_unlock_locales
setlocale

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
__stdio_common_vswscanf
_fileno
_fseeki64
_ftelli64
_get_stream_buffer_pointers
_lseek
_read
_wfopen
fclose
ferror
fflush
fgetc
fgetpos
fopen
fopen_s
fputc
fread
fseek
fsetpos
ftell
fwrite
setvbuf
ungetc

api-ms-win-crt-string-l1-1-0

__strncnt
_strlwr
_wcsdup
islower
isupper
strcmp
strlen
strncat
strncmp
strncpy
wcscmp
wcslen

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_crt_atexit
_errno
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_seh_filter_dll
abort
exit

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file
remove

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

Decode

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 245KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
decm_aiff.dll
.dll windows:6 windows x64 arch:x64

3c15802fc5664f6cbd59f7b96c2e681f

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b3:ef:23:0a:7c:13:d8:dc:16:74:db:1e:e9:29:34:75:9f:77:ed:dc:bd:48:d6:02:f3:27:14:5a:44:4b:09:ed
Signer

Actual PE Digest

b3:ef:23:0a:7c:13:d8:dc:16:74:db:1e:e9:29:34:75:9f:77:ed:dc:bd:48:d6:02:f3:27:14:5a:44:4b:09:ed

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

PostThreadMessageW

acdbase

N100nSToSamples

kernel32

CreateFileW
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
WaitForSingleObject
ResumeThread
CreateEventW
CloseHandle
LoadLibraryW
CreateThread
GetProcAddress
lstrcpyW
ReadFile
SetFilePointerEx
GetFileSize
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter

vcruntime140

memset
memcpy
__C_specific_handler
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__std_type_info_destroy_list

api-ms-win-crt-math-l1-1-0

ldexp

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm_e
_execute_onexit_table
_cexit
_seh_filter_dll
_initterm

Exports

Exports

Decode

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
decm_ape.dll
.dll windows:6 windows x64 arch:x64

eac474fc03ba6f210b7ed3352c57f4f1

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f9:e2:ad:71:a2:20:ca:f9:ef:0b:d3:7f:39:f3:e7:85:d4:c3:e4:2b:93:9f:51:7c:44:54:24:7a:13:6e:84:e8
Signer

Actual PE Digest

f9:e2:ad:71:a2:20:ca:f9:ef:0b:d3:7f:39:f3:e7:85:d4:c3:e4:2b:93:9f:51:7c:44:54:24:7a:13:6e:84:e8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

PostThreadMessageW

acdbase

N100nSToSamples

libmmd

ldexp

kernel32

CloseHandle
CreateEventW
CreateFileW
CreateThread
DeleteFileW
DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileSize
GetLastError
GetStdHandle
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEndOfFile
SetFileAttributesW
SetFilePointer
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcpyW

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_destroy_list
_purecall
memcpy
memmove
memset
strstr
wcsrchr

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf

api-ms-win-crt-heap-l1-1-0

_aligned_free
_aligned_malloc
_callnewh
calloc
free
malloc

api-ms-win-crt-convert-l1-1-0

_itoa_s
_wtoi
atoi

api-ms-win-crt-string-l1-1-0

_strnicmp
_wcsicmp
strcpy_s
strlen
strncpy
towlower
wcscat_s
wcscmp
wcscpy_s
wcslen

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
exit

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

CompressFile
CompressFileW
CompressFileW2
CompressFileW2.A
CompressFileW2.L
CompressFileW2.M
CompressFileW2.N
CompressFileW2.P
CompressFileW2.R
CompressFileW2.S
CompressFileW2.V
ConvertFile
ConvertFileW
ConvertFileW2
CreateIAPECompress
CreateIAPEDecompress
CreateIAPEDecompress.A
CreateIAPEDecompress.L
CreateIAPEDecompress.M
CreateIAPEDecompress.N
CreateIAPEDecompress.P
CreateIAPEDecompress.R
CreateIAPEDecompress.S
CreateIAPEDecompress.V
CreateIAPEDecompressEx
CreateIAPEDecompressEx2
Decode
DecompressFile
DecompressFileW
DecompressFileW2
FillRF64Header
FillRF64Header.A
FillRF64Header.L
FillRF64Header.M
FillRF64Header.N
FillRF64Header.P
FillRF64Header.R
FillRF64Header.S
FillRF64Header.V
FillWaveFormatEx
FillWaveHeader
FillWaveHeader.A
FillWaveHeader.L
FillWaveHeader.M
FillWaveHeader.N
FillWaveHeader.P
FillWaveHeader.R
FillWaveHeader.S
FillWaveHeader.V
GetAPECompressionLevelName
GetAPEFileType
VerifyFile
VerifyFileW
VerifyFileW2
VerifyFileW2.A
VerifyFileW2.L
VerifyFileW2.M
VerifyFileW2.N
VerifyFileW2.P
VerifyFileW2.R
VerifyFileW2.S
VerifyFileW2.V

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
decm_dff.dll
.dll windows:6 windows x64 arch:x64

3aee0e0b4c26d279e57fc9abc2708351

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:f6:e3:62:03:49:9b:9c:28:a5:36:1e:62:11:14:d8:03:26:e6:51:2d:9c:e4:17:de:35:09:40:ba:62:36:cd
Signer

Actual PE Digest

1d:f6:e3:62:03:49:9b:9c:28:a5:36:1e:62:11:14:d8:03:26:e6:51:2d:9c:e4:17:de:35:09:40:ba:62:36:cd

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

acdbase

GetDSDPCMGain
GetDSDPCMQuality
N100nSToSamples

user32

PostThreadMessageW

libmmd

ldexp

kernel32

CloseHandle
CreateEventW
CreateFileW
CreateThread
DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
QueryPerformanceCounter
ReadFile
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetFilePointerEx
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
lstrcpyW

vcruntime140

_CxxThrowException
__C_specific_handler
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
memcpy
memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

api-ms-win-crt-string-l1-1-0

strlen
strncat
strncpy
wcslen

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
exit

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

Decode

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 123KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
decm_dsf.dll
.dll windows:6 windows x64 arch:x64

2273784bb7465cfa4947a5ed9611cab9

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b3:32:c0:06:5d:d9:ee:c5:b5:03:f8:6d:57:99:f7:84:56:2f:c6:32:62:00:4c:6b:96:8b:b0:18:79:39:f4:74
Signer

Actual PE Digest

b3:32:c0:06:5d:d9:ee:c5:b5:03:f8:6d:57:99:f7:84:56:2f:c6:32:62:00:4c:6b:96:8b:b0:18:79:39:f4:74

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

acdbase

GetDSDPCMGain
GetDSDPCMQuality
N100nSToSamples

user32

PostThreadMessageW

libmmd

ldexp

kernel32

CloseHandle
CreateEventW
CreateFileW
CreateThread
DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileSizeEx
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
QueryPerformanceCounter
ReadFile
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEndOfFile
SetFilePointer
SetFilePointerEx
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
WriteFile
lstrcpyW

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
memcpy
memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

api-ms-win-crt-string-l1-1-0

strlen
strncat
strncpy
wcslen

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
exit

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

Decode

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 123KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
decm_ffmpeg.dll
.dll windows:6 windows x64 arch:x64

4e593ba756d3cecc1409fd7699f11075

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

78:a5:7a:ac:e4:b8:64:bb:b4:5d:aa:ca:06:14:62:63:cd:6d:6d:99:3e:08:cf:58:bd:29:03:f2:c4:6e:f0:c0
Signer

Actual PE Digest

78:a5:7a:ac:e4:b8:64:bb:b4:5d:aa:ca:06:14:62:63:cd:6d:6d:99:3e:08:cf:58:bd:29:03:f2:c4:6e:f0:c0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

avcodec-61

avcodec_send_packet
avcodec_open2
avcodec_flush_buffers
avcodec_receive_frame
avcodec_alloc_context3
avcodec_parameters_to_context
avcodec_free_context
av_packet_unref

avformat-61

avio_size
avformat_open_input
av_seek_frame
av_read_frame
avformat_close_input
avformat_find_stream_info
av_find_best_stream

user32

PostThreadMessageW

avutil-59

av_sample_fmt_is_planar
av_samples_get_buffer_size
av_frame_unref
av_rescale_q

acdbase

ffmpeg_global_lock
UNC_freeStr
ffmpeg_global_unlock
UNC_UnicodeToUtf8

kernel32

RtlLookupFunctionEntry
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
lstrcpyW
CreateThread
CloseHandle
CreateEventW
ResumeThread
WaitForSingleObject
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcpy
__current_exception_context
__current_exception
__std_type_info_destroy_list
memset
__std_terminate
__C_specific_handler
__std_exception_copy
__std_exception_destroy
_CxxThrowException

api-ms-win-crt-string-l1-1-0

strncmp

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

api-ms-win-crt-runtime-l1-1-0

_initterm
_seh_filter_dll
_initterm_e
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_configure_narrow_argv

api-ms-win-crt-math-l1-1-0

pow

Exports

Exports

Decode

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
decm_flac.dll
.dll windows:6 windows x64 arch:x64

08e5c13e5ed10543fb23f77bc05333d9

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

96:52:1a:a5:80:08:68:39:c5:d7:8d:14:2a:26:47:f1:08:d4:42:6e:d6:55:4b:93:1f:15:73:60:bc:e1:ca:a6
Signer

Actual PE Digest

96:52:1a:a5:80:08:68:39:c5:d7:8d:14:2a:26:47:f1:08:d4:42:6e:d6:55:4b:93:1f:15:73:60:bc:e1:ca:a6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

PostThreadMessageW

acdbase

N100nSToSamples
UNC_UnicodeToUtf8
UNC_freeStr

libmmd

frexp
log
lround

kernel32

CloseHandle
CreateEventA
CreateEventW
CreateFileW
CreateSemaphoreA
CreateThread
DuplicateHandle
FormatMessageA
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetFileSize
GetLastError
GetProcAddress
GetProcessAffinityMask
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetThreadContext
GetThreadLocale
GetThreadPriority
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryA
LoadLibraryExA
LoadLibraryW
LocalFree
MultiByteToWideChar
OpenProcess
QueryPerformanceCounter
RaiseException
ReleaseSemaphore
ResetEvent
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
lstrcpyW

vcruntime140

_CxxThrowException
__C_specific_handler
__intrinsic_setjmp
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
longjmp
memchr
memcmp
memcpy
memmove
memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
_fileno
_fseeki64
_ftelli64
_setmode
_wfopen
fclose
feof
ferror
fread
fseek
ftell

api-ms-win-crt-runtime-l1-1-0

_beginthreadex
_cexit
_configure_narrow_argv
_endthreadex
_execute_onexit_table
_get_errno
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
_set_errno
exit

api-ms-win-crt-filesystem-l1-1-0

_fstat64

api-ms-win-crt-string-l1-1-0

_strdup
strlen
strncat
strncat_s
strncpy
wcslen

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc
realloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

Decode
Play
__ptw32_get_exception_services_code
__ptw32_pop_cleanup
__ptw32_push_cleanup
_sched_affinitycpuand
_sched_affinitycpuclr
_sched_affinitycpucount
_sched_affinitycpucount.A
_sched_affinitycpucount.L
_sched_affinitycpucount.M
_sched_affinitycpucount.N
_sched_affinitycpucount.P
_sched_affinitycpucount.R
_sched_affinitycpucount.S
_sched_affinitycpucount.V
_sched_affinitycpuequal
_sched_affinitycpuisset
_sched_affinitycpuor
_sched_affinitycpuset
_sched_affinitycpuxor
_sched_affinitycpuzero
pthreadCancelableTimedWait
pthreadCancelableWait
pthread_attr_destroy
pthread_attr_getaffinity_np
pthread_attr_getdetachstate
pthread_attr_getinheritsched
pthread_attr_getname_np
pthread_attr_getschedparam
pthread_attr_getschedpolicy
pthread_attr_getscope
pthread_attr_getstackaddr
pthread_attr_getstacksize
pthread_attr_init
pthread_attr_init.A
pthread_attr_init.L
pthread_attr_init.M
pthread_attr_init.N
pthread_attr_init.P
pthread_attr_init.R
pthread_attr_init.S
pthread_attr_init.V
pthread_attr_setaffinity_np
pthread_attr_setdetachstate
pthread_attr_setinheritsched
pthread_attr_setname_np
pthread_attr_setschedparam
pthread_attr_setschedpolicy
pthread_attr_setscope
pthread_attr_setstackaddr
pthread_attr_setstacksize
pthread_barrier_destroy
pthread_barrier_destroy.A
pthread_barrier_destroy.L
pthread_barrier_destroy.M
pthread_barrier_destroy.N
pthread_barrier_destroy.P
pthread_barrier_destroy.R
pthread_barrier_destroy.S
pthread_barrier_destroy.V
pthread_barrier_init
pthread_barrier_wait
pthread_barrier_wait.A
pthread_barrier_wait.L
pthread_barrier_wait.M
pthread_barrier_wait.N
pthread_barrier_wait.P
pthread_barrier_wait.R
pthread_barrier_wait.S
pthread_barrier_wait.V
pthread_barrierattr_destroy
pthread_barrierattr_getpshared
pthread_barrierattr_init
pthread_barrierattr_setpshared
pthread_cancel
pthread_cancel.A
pthread_cancel.L
pthread_cancel.M
pthread_cancel.N
pthread_cancel.P
pthread_cancel.R
pthread_cancel.S
pthread_cancel.V
pthread_cond_broadcast
pthread_cond_destroy
pthread_cond_destroy.A
pthread_cond_destroy.L
pthread_cond_destroy.M
pthread_cond_destroy.N
pthread_cond_destroy.P
pthread_cond_destroy.R
pthread_cond_destroy.S
pthread_cond_destroy.V
pthread_cond_init
pthread_cond_init.A
pthread_cond_init.L
pthread_cond_init.M
pthread_cond_init.N
pthread_cond_init.P
pthread_cond_init.R
pthread_cond_init.S
pthread_cond_init.V
pthread_cond_signal
pthread_cond_timedwait
pthread_cond_wait
pthread_condattr_destroy
pthread_condattr_getpshared
pthread_condattr_init
pthread_condattr_setpshared
pthread_create
pthread_delay_np
pthread_delay_np.A
pthread_delay_np.L
pthread_delay_np.M
pthread_delay_np.N
pthread_delay_np.P
pthread_delay_np.R
pthread_delay_np.S
pthread_delay_np.V
pthread_detach
pthread_detach.A
pthread_detach.L
pthread_detach.M
pthread_detach.N
pthread_detach.P
pthread_detach.R
pthread_detach.S
pthread_detach.V
pthread_equal
pthread_exit
pthread_getaffinity_np
pthread_getaffinity_np.A
pthread_getaffinity_np.L
pthread_getaffinity_np.M
pthread_getaffinity_np.N
pthread_getaffinity_np.P
pthread_getaffinity_np.R
pthread_getaffinity_np.S
pthread_getaffinity_np.V
pthread_getconcurrency
pthread_getname_np
pthread_getname_np.A
pthread_getname_np.L
pthread_getname_np.M
pthread_getname_np.N
pthread_getname_np.P
pthread_getname_np.R
pthread_getname_np.S
pthread_getname_np.V
pthread_getschedparam
pthread_getspecific
pthread_getunique_np
pthread_getw32threadhandle_np
pthread_getw32threadid_np
pthread_join
pthread_join.A
pthread_join.L
pthread_join.M
pthread_join.N
pthread_join.P
pthread_join.R
pthread_join.S
pthread_join.V
pthread_key_create
pthread_key_delete
pthread_key_delete.A
pthread_key_delete.L
pthread_key_delete.M
pthread_key_delete.N
pthread_key_delete.P
pthread_key_delete.R
pthread_key_delete.S
pthread_key_delete.V
pthread_kill
pthread_kill.A
pthread_kill.L
pthread_kill.M
pthread_kill.N
pthread_kill.P
pthread_kill.R
pthread_kill.S
pthread_kill.V
pthread_mutex_consistent
pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_timedlock
pthread_mutex_timedlock.A
pthread_mutex_timedlock.L
pthread_mutex_timedlock.M
pthread_mutex_timedlock.N
pthread_mutex_timedlock.P
pthread_mutex_timedlock.R
pthread_mutex_timedlock.S
pthread_mutex_timedlock.V
pthread_mutex_trylock
pthread_mutex_trylock.A
pthread_mutex_trylock.L
pthread_mutex_trylock.M
pthread_mutex_trylock.N
pthread_mutex_trylock.P
pthread_mutex_trylock.R
pthread_mutex_trylock.S
pthread_mutex_trylock.V
pthread_mutex_unlock
pthread_mutexattr_destroy
pthread_mutexattr_getkind_np
pthread_mutexattr_getpshared
pthread_mutexattr_getrobust
pthread_mutexattr_gettype
pthread_mutexattr_init
pthread_mutexattr_setkind_np
pthread_mutexattr_setpshared
pthread_mutexattr_setrobust
pthread_mutexattr_settype
pthread_num_processors_np
pthread_num_processors_np.A
pthread_num_processors_np.L
pthread_num_processors_np.M
pthread_num_processors_np.N
pthread_num_processors_np.P
pthread_num_processors_np.R
pthread_num_processors_np.S
pthread_num_processors_np.V
pthread_once
pthread_once.A
pthread_once.L
pthread_once.M
pthread_once.N
pthread_once.P
pthread_once.R
pthread_once.S
pthread_once.V
pthread_rwlock_destroy
pthread_rwlock_destroy.A
pthread_rwlock_destroy.L
pthread_rwlock_destroy.M
pthread_rwlock_destroy.N
pthread_rwlock_destroy.P
pthread_rwlock_destroy.R
pthread_rwlock_destroy.S
pthread_rwlock_destroy.V
pthread_rwlock_init
pthread_rwlock_rdlock
pthread_rwlock_timedrdlock
pthread_rwlock_timedwrlock
pthread_rwlock_timedwrlock.A
pthread_rwlock_timedwrlock.L
pthread_rwlock_timedwrlock.M
pthread_rwlock_timedwrlock.N
pthread_rwlock_timedwrlock.P
pthread_rwlock_timedwrlock.R
pthread_rwlock_timedwrlock.S
pthread_rwlock_timedwrlock.V
pthread_rwlock_tryrdlock
pthread_rwlock_trywrlock
pthread_rwlock_unlock
pthread_rwlock_wrlock
pthread_rwlock_wrlock.A
pthread_rwlock_wrlock.L
pthread_rwlock_wrlock.M
pthread_rwlock_wrlock.N
pthread_rwlock_wrlock.P
pthread_rwlock_wrlock.R
pthread_rwlock_wrlock.S
pthread_rwlock_wrlock.V
pthread_rwlockattr_destroy
pthread_rwlockattr_getpshared
pthread_rwlockattr_init
pthread_rwlockattr_setpshared
pthread_self
pthread_setaffinity_np
pthread_setaffinity_np.A
pthread_setaffinity_np.L
pthread_setaffinity_np.M
pthread_setaffinity_np.N
pthread_setaffinity_np.P
pthread_setaffinity_np.R
pthread_setaffinity_np.S
pthread_setaffinity_np.V
pthread_setcancelstate
pthread_setcancelstate.A
pthread_setcancelstate.L
pthread_setcancelstate.M
pthread_setcancelstate.N
pthread_setcancelstate.P
pthread_setcancelstate.R
pthread_setcancelstate.S
pthread_setcancelstate.V
pthread_setcanceltype
pthread_setcanceltype.A
pthread_setcanceltype.L
pthread_setcanceltype.M
pthread_setcanceltype.N
pthread_setcanceltype.P
pthread_setcanceltype.R
pthread_setcanceltype.S
pthread_setcanceltype.V
pthread_setconcurrency
pthread_setname_np
pthread_setname_np.A
pthread_setname_np.L
pthread_setname_np.M
pthread_setname_np.N
pthread_setname_np.P
pthread_setname_np.R
pthread_setname_np.S
pthread_setname_np.V
pthread_setschedparam
pthread_setspecific
pthread_setspecific.A
pthread_setspecific.L
pthread_setspecific.M
pthread_setspecific.N
pthread_setspecific.P
pthread_setspecific.R
pthread_setspecific.S
pthread_setspecific.V
pthread_spin_destroy
pthread_spin_destroy.A
pthread_spin_destroy.L
pthread_spin_destroy.M
pthread_spin_destroy.N
pthread_spin_destroy.P
pthread_spin_destroy.R
pthread_spin_destroy.S
pthread_spin_destroy.V
pthread_spin_init
pthread_spin_init.A
pthread_spin_init.L
pthread_spin_init.M
pthread_spin_init.N
pthread_spin_init.P
pthread_spin_init.R
pthread_spin_init.S
pthread_spin_init.V
pthread_spin_lock
pthread_spin_lock.A
pthread_spin_lock.L
pthread_spin_lock.M
pthread_spin_lock.N
pthread_spin_lock.P
pthread_spin_lock.R
pthread_spin_lock.S
pthread_spin_lock.V
pthread_spin_trylock
pthread_spin_unlock
pthread_testcancel
pthread_testcancel.A
pthread_testcancel.L
pthread_testcancel.M
pthread_testcancel.N
pthread_testcancel.P
pthread_testcancel.R
pthread_testcancel.S
pthread_testcancel.V
pthread_timechange_handler_np
pthread_timechange_handler_np.A
pthread_timechange_handler_np.L
pthread_timechange_handler_np.M
pthread_timechange_handler_np.N
pthread_timechange_handler_np.P
pthread_timechange_handler_np.R
pthread_timechange_handler_np.S
pthread_timechange_handler_np.V
pthread_timedjoin_np
pthread_timedjoin_np.A
pthread_timedjoin_np.L
pthread_timedjoin_np.M
pthread_timedjoin_np.N
pthread_timedjoin_np.P
pthread_timedjoin_np.R
pthread_timedjoin_np.S
pthread_timedjoin_np.V
pthread_tryjoin_np
pthread_tryjoin_np.A
pthread_tryjoin_np.L
pthread_tryjoin_np.M
pthread_tryjoin_np.N
pthread_tryjoin_np.P
pthread_tryjoin_np.R
pthread_tryjoin_np.S
pthread_tryjoin_np.V
pthread_win32_getabstime_np
pthread_win32_process_attach_np
pthread_win32_process_detach_np
pthread_win32_test_features_np
pthread_win32_thread_attach_np
pthread_win32_thread_detach_np
pthread_win32_thread_detach_np.A
pthread_win32_thread_detach_np.L
pthread_win32_thread_detach_np.M
pthread_win32_thread_detach_np.N
pthread_win32_thread_detach_np.P
pthread_win32_thread_detach_np.R
pthread_win32_thread_detach_np.S
pthread_win32_thread_detach_np.V
sched_get_priority_max
sched_get_priority_min
sched_getaffinity
sched_setaffinity
sched_setscheduler
sched_yield
sem_close
sem_destroy
sem_destroy.A
sem_destroy.L
sem_destroy.M
sem_destroy.N
sem_destroy.P
sem_destroy.R
sem_destroy.S
sem_destroy.V
sem_getvalue
sem_getvalue.A
sem_getvalue.L
sem_getvalue.M
sem_getvalue.N
sem_getvalue.P
sem_getvalue.R
sem_getvalue.S
sem_getvalue.V
sem_init
sem_open
sem_post
sem_post.A
sem_post.L
sem_post.M
sem_post.N
sem_post.P
sem_post.R
sem_post.S
sem_post.V
sem_post_multiple
sem_post_multiple.A
sem_post_multiple.L
sem_post_multiple.M
sem_post_multiple.N
sem_post_multiple.P
sem_post_multiple.R
sem_post_multiple.S
sem_post_multiple.V
sem_timedwait
sem_timedwait.A
sem_timedwait.L
sem_timedwait.M
sem_timedwait.N
sem_timedwait.P
sem_timedwait.R
sem_timedwait.S
sem_timedwait.V
sem_trywait
sem_trywait.A
sem_trywait.L
sem_trywait.M
sem_trywait.N
sem_trywait.P
sem_trywait.R
sem_trywait.S
sem_trywait.V
sem_unlink
sem_wait
sem_wait.A
sem_wait.L
sem_wait.M
sem_wait.N
sem_wait.P
sem_wait.R
sem_wait.S
sem_wait.V

Sections

.text
Size: 880KB - Virtual size: 880KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
decm_mp3.dll
.dll windows:6 windows x64 arch:x64

8f7ddd8216b5b11ae2ac93ef305430a1

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e3:ba:b6:13:9b:f0:53:4b:ab:9e:03:a9:5c:d2:a1:0c:64:eb:07:a0:ce:cc:97:c3:4e:a0:ce:14:5a:83:44:f9
Signer

Actual PE Digest

e3:ba:b6:13:9b:f0:53:4b:ab:9e:03:a9:5c:d2:a1:0c:64:eb:07:a0:ce:cc:97:c3:4e:a0:ce:14:5a:83:44:f9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

PostThreadMessageW

acdbase

N100nSToSamples

kernel32

CloseHandle
CreateEventW
CreateThread
DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
QueryPerformanceCounter
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
lstrcpyW

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
memcpy
memmove
memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
__stdio_common_vswscanf
_close
_filelengthi64
_lseek
_lseeki64
_read
_wsopen_dispatch

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc

api-ms-win-crt-string-l1-1-0

strcmp
strlen
strncpy
wcscmp
wcslen

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
exit

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

Decode

Sections

.text
Size: 348KB - Virtual size: 348KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
decm_mpc.dll
.dll windows:6 windows x64 arch:x64

b6c26c0bcec2d5887ffdbda2f26c292a

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b6:09:06:32:ff:41:c5:90:04:f4:a6:b3:f8:56:6d:ae:4e:73:85:0d:ba:95:a2:7b:b7:53:f4:d8:9f:68:3e:2e
Signer

Actual PE Digest

b6:09:06:32:ff:41:c5:90:04:f4:a6:b3:f8:56:6d:ae:4e:73:85:0d:ba:95:a2:7b:b7:53:f4:d8:9f:68:3e:2e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

PostThreadMessageW

acdbase

N100nSToSamples

libmmd

ldexp
log10
pow

kernel32

CloseHandle
CreateEventW
CreateThread
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
QueryPerformanceCounter
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
lstrcpyW

vcruntime140

_CxxThrowException
__C_specific_handler
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
memcpy
memmove
memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
_wfopen
fclose
fread
fseek
ftell

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc

api-ms-win-crt-string-l1-1-0

strlen
strncat
strncpy
wcslen

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
exit

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

Decode

Sections

.text
Size: 417KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
decm_opus.dll
.dll windows:6 windows x64 arch:x64

7cb25556ce06e448aa7ebff371371f9a

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e0:e9:52:16:6d:5c:60:f0:bb:90:ca:e5:d3:0e:6a:f3:bf:97:a4:fa:3f:bb:e6:83:52:20:de:02:a2:84:9d:5b
Signer

Actual PE Digest

e0:e9:52:16:6d:5c:60:f0:bb:90:ca:e5:d3:0e:6a:f3:bf:97:a4:fa:3f:bb:e6:83:52:20:de:02:a2:84:9d:5b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

acdbase

ChangeChannelOrder
DetectEbml
N100nSToSamples
UNC_UnicodeToUtf8
UNC_freeStr

user32

PostThreadMessageW

libmmd

cos
exp
floor
floorf
log
log10
pow
sin
sqrt
sqrtf

kernel32

CloseHandle
CreateEventW
CreateThread
DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileType
GetProcAddress
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LoadLibraryW
LocalFree
QueryPerformanceCounter
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
lstrcpyW

svml_dispmd

__svml_idiv4
__svml_idiv4_e9
__svml_idiv8_l9
__svml_udiv4
__svml_udiv4_e9

vcruntime140

_CxxThrowException
__C_specific_handler
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
memchr
memcmp
memcpy
memmove
memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
_filelengthi64
_fileno
_get_osfhandle
_wfopen
fclose
feof
fgetpos
fread
fsetpos

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_errno
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
_wassert
exit

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc
realloc

api-ms-win-crt-string-l1-1-0

strcmp
strlen
strncat
strncpy
wcslen

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

Decode

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
decm_sacd.dll
.dll windows:6 windows x64 arch:x64

eab8247417dad68b1b80fb3d8eaf4437

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:04:27:18:56:c6:f9:ea:e8:98:fa:e5:d2:18:1e:12:f1:fc:a4:b9:51:76:c8:a2:a8:2e:1b:b4:a6:a9:4e:a8
Signer

Actual PE Digest

0f:04:27:18:56:c6:f9:ea:e8:98:fa:e5:d2:18:1e:12:f1:fc:a4:b9:51:76:c8:a2:a8:2e:1b:b4:a6:a9:4e:a8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

acdbase

GetDSDPCMGain
GetDSDPCMQuality
N100nSToSamples

user32

PostThreadMessageW

libmmd

ldexp

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

kernel32

CloseHandle
CreateEventW
CreateFileW
CreateThread
DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetFilePointerEx
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
WideCharToMultiByte
lstrcpyW

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
memcpy
memmove
memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
exit

api-ms-win-crt-string-l1-1-0

_memicmp
strlen
strncat
strncpy
wcslen

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

Decode

Sections

.text
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 123KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
decm_tta.dll
.dll windows:6 windows x64 arch:x64

d02191a9d97f8dfc4a874db34c2099a8

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9d:48:f4:4e:2a:83:84:8e:40:cf:a0:e3:71:09:df:0a:57:94:e3:d3:92:85:e7:0a:cf:4b:12:f7:63:f9:49:66
Signer

Actual PE Digest

9d:48:f4:4e:2a:83:84:8e:40:cf:a0:e3:71:09:df:0a:57:94:e3:d3:92:85:e7:0a:cf:4b:12:f7:63:f9:49:66

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

PostThreadMessageW

acdbase

N100nSToSamples
SamplesToN100nS

kernel32

CloseHandle
CreateEventW
CreateFileW
CreateThread
DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
QueryPerformanceCounter
ReadFile
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetFilePointerEx
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
WriteFile
lstrcpyW

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
memcpy
memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf

api-ms-win-crt-heap-l1-1-0

_aligned_free
_aligned_malloc
_callnewh
free
malloc

api-ms-win-crt-string-l1-1-0

strlen
strncat
strncpy
wcslen

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
exit

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

??0tta_decoder@tta@@QEAA@AEBV01@@Z
??0tta_decoder@tta@@QEAA@AEBV01@@Z.A
??0tta_decoder@tta@@QEAA@AEBV01@@Z.L
??0tta_decoder@tta@@QEAA@AEBV01@@Z.M
??0tta_decoder@tta@@QEAA@AEBV01@@Z.N
??0tta_decoder@tta@@QEAA@AEBV01@@Z.P
??0tta_decoder@tta@@QEAA@AEBV01@@Z.R
??0tta_decoder@tta@@QEAA@AEBV01@@Z.S
??0tta_decoder@tta@@QEAA@AEBV01@@Z.V
??0tta_decoder@tta@@QEAA@PEAU_tag_TTA_io_callback@@@Z
??0tta_encoder@tta@@QEAA@AEBV01@@Z
??0tta_encoder@tta@@QEAA@AEBV01@@Z.A
??0tta_encoder@tta@@QEAA@AEBV01@@Z.L
??0tta_encoder@tta@@QEAA@AEBV01@@Z.M
??0tta_encoder@tta@@QEAA@AEBV01@@Z.N
??0tta_encoder@tta@@QEAA@AEBV01@@Z.P
??0tta_encoder@tta@@QEAA@AEBV01@@Z.R
??0tta_encoder@tta@@QEAA@AEBV01@@Z.S
??0tta_encoder@tta@@QEAA@AEBV01@@Z.V
??0tta_encoder@tta@@QEAA@PEAU_tag_TTA_io_callback@@@Z
??1tta_decoder@tta@@UEAA@XZ
??1tta_encoder@tta@@UEAA@XZ
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z.A
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z.L
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z.M
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z.N
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z.P
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z.R
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z.S
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z.V
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z.A
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z.L
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z.M
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z.N
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z.P
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z.R
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z.S
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z.V
??_7tta_decoder@tta@@6B@
??_7tta_encoder@tta@@6B@
?calculate_crc@tta_encoder@tta@@QEAAIPEAXI@Z
?calculate_crc@tta_encoder@tta@@[email protected]
?calculate_crc@tta_encoder@tta@@[email protected]
?calculate_crc@tta_encoder@tta@@[email protected]
?calculate_crc@tta_encoder@tta@@[email protected]
?calculate_crc@tta_encoder@tta@@[email protected]
?calculate_crc@tta_encoder@tta@@[email protected]
?calculate_crc@tta_encoder@tta@@[email protected]
?calculate_crc@tta_encoder@tta@@[email protected]
?finalize@tta_encoder@tta@@QEAAXXZ
?finalize@tta_encoder@tta@@QEAAXXZ.A
?finalize@tta_encoder@tta@@QEAAXXZ.L
?finalize@tta_encoder@tta@@QEAAXXZ.M
?finalize@tta_encoder@tta@@QEAAXXZ.N
?finalize@tta_encoder@tta@@QEAAXXZ.P
?finalize@tta_encoder@tta@@QEAAXXZ.R
?finalize@tta_encoder@tta@@QEAAXXZ.S
?finalize@tta_encoder@tta@@QEAAXXZ.V
?frame_init@tta_decoder@tta@@IEAAXI_N@Z
?frame_init@tta_decoder@tta@@[email protected]
?frame_init@tta_decoder@tta@@[email protected]
?frame_init@tta_decoder@tta@@[email protected]
?frame_init@tta_decoder@tta@@[email protected]
?frame_init@tta_decoder@tta@@[email protected]
?frame_init@tta_decoder@tta@@[email protected]
?frame_init@tta_decoder@tta@@[email protected]
?frame_init@tta_decoder@tta@@[email protected]
?frame_init@tta_encoder@tta@@IEAAXI@Z
?frame_init@tta_encoder@tta@@[email protected]
?frame_init@tta_encoder@tta@@[email protected]
?frame_init@tta_encoder@tta@@[email protected]
?frame_init@tta_encoder@tta@@[email protected]
?frame_init@tta_encoder@tta@@[email protected]
?frame_init@tta_encoder@tta@@[email protected]
?frame_init@tta_encoder@tta@@[email protected]
?frame_init@tta_encoder@tta@@[email protected]
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.A
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.L
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.M
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.N
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.P
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.R
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.S
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.V
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.A
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.L
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.M
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.N
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.P
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.R
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.S
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.V
?get_framecount@tta_encoder@tta@@QEAAIXZ
?get_framecount_in_seektable@tta_encoder@tta@@QEAAIXZ
?get_rate@tta_decoder@tta@@QEAAIXZ
?get_rate@tta_encoder@tta@@QEAAIXZ
?get_status@tta_decoder@tta@@QEAAXAEAI00@Z
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@_K@Z
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z.A
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z.L
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z.M
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z.N
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z.P
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z.R
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z.S
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z.V
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@_K@Z
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?process_frame@tta_decoder@tta@@QEAAHIPEAEI@Z
?process_frame@tta_decoder@tta@@[email protected]
?process_frame@tta_decoder@tta@@[email protected]
?process_frame@tta_decoder@tta@@[email protected]
?process_frame@tta_decoder@tta@@[email protected]
?process_frame@tta_decoder@tta@@[email protected]
?process_frame@tta_decoder@tta@@[email protected]
?process_frame@tta_decoder@tta@@[email protected]
?process_frame@tta_decoder@tta@@[email protected]
?process_frame@tta_encoder@tta@@QEAAXPEAEI@Z
?process_frame@tta_encoder@tta@@[email protected]
?process_frame@tta_encoder@tta@@[email protected]
?process_frame@tta_encoder@tta@@[email protected]
?process_frame@tta_encoder@tta@@[email protected]
?process_frame@tta_encoder@tta@@[email protected]
?process_frame@tta_encoder@tta@@[email protected]
?process_frame@tta_encoder@tta@@[email protected]
?process_frame@tta_encoder@tta@@[email protected]
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@Z@Z
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@[email protected]
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@[email protected]
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@[email protected]
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@[email protected]
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@[email protected]
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@[email protected]
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@[email protected]
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@[email protected]
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@Z@Z
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@[email protected]
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@[email protected]
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@[email protected]
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@[email protected]
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@[email protected]
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@[email protected]
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@[email protected]
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@[email protected]
?read_seek_table@tta_decoder@tta@@IEAA_NXZ
?read_seek_table@tta_decoder@tta@@IEAA_NXZ.A
?read_seek_table@tta_decoder@tta@@IEAA_NXZ.L
?read_seek_table@tta_decoder@tta@@IEAA_NXZ.M
?read_seek_table@tta_decoder@tta@@IEAA_NXZ.N
?read_seek_table@tta_decoder@tta@@IEAA_NXZ.P
?read_seek_table@tta_decoder@tta@@IEAA_NXZ.R
?read_seek_table@tta_decoder@tta@@IEAA_NXZ.S
?read_seek_table@tta_decoder@tta@@IEAA_NXZ.V
?seek_frame@tta_decoder@tta@@QEAA_NI@Z
?set_password@tta_decoder@tta@@QEAAXPEBXI@Z
?set_password@tta_decoder@tta@@[email protected]
?set_password@tta_decoder@tta@@[email protected]
?set_password@tta_decoder@tta@@[email protected]
?set_password@tta_decoder@tta@@[email protected]
?set_password@tta_decoder@tta@@[email protected]
?set_password@tta_decoder@tta@@[email protected]
?set_password@tta_decoder@tta@@[email protected]
?set_password@tta_decoder@tta@@[email protected]
?set_password@tta_encoder@tta@@QEAAXPEBXI@Z
?set_password@tta_encoder@tta@@[email protected]
?set_password@tta_encoder@tta@@[email protected]
?set_password@tta_encoder@tta@@[email protected]
?set_password@tta_encoder@tta@@[email protected]
?set_password@tta_encoder@tta@@[email protected]
?set_password@tta_encoder@tta@@[email protected]
?set_password@tta_encoder@tta@@[email protected]
?set_password@tta_encoder@tta@@[email protected]
?set_position@tta_decoder@tta@@QEAAXIPEAI@Z
?set_position@tta_decoder@tta@@[email protected]
?set_position@tta_decoder@tta@@[email protected]
?set_position@tta_decoder@tta@@[email protected]
?set_position@tta_decoder@tta@@[email protected]
?set_position@tta_decoder@tta@@[email protected]
?set_position@tta_decoder@tta@@[email protected]
?set_position@tta_decoder@tta@@[email protected]
?set_position@tta_decoder@tta@@[email protected]
?tta_binary_version@@YA?AW4CPU_ARCH_TYPE@@XZ
?write_seek_table@tta_encoder@tta@@IEAAXXZ
?write_seek_table@tta_encoder@tta@@IEAAXXZ.A
?write_seek_table@tta_encoder@tta@@IEAAXXZ.L
?write_seek_table@tta_encoder@tta@@IEAAXXZ.M
?write_seek_table@tta_encoder@tta@@IEAAXXZ.N
?write_seek_table@tta_encoder@tta@@IEAAXXZ.P
?write_seek_table@tta_encoder@tta@@IEAAXXZ.R
?write_seek_table@tta_encoder@tta@@IEAAXXZ.S
?write_seek_table@tta_encoder@tta@@IEAAXXZ.V
Decode

Sections

.text
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
decm_vorbis.dll
.dll windows:6 windows x64 arch:x64

d27dc70cd8e6e6bc4d722ac7c69bda08

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d9:00:22:22:d8:16:72:3f:58:10:bd:22:23:c8:69:42:30:46:6e:d4:03:97:63:aa:f3:6d:57:b0:50:ef:4b:d5
Signer

Actual PE Digest

d9:00:22:22:d8:16:72:3f:58:10:bd:22:23:c8:69:42:30:46:6e:d4:03:97:63:aa:f3:6d:57:b0:50:ef:4b:d5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

PostThreadMessageA

acdbase

ChangeChannelOrder
DetectEbml
N100nSToSamples

libmmd

acos
atan
ceil
cos
exp
floor
floorf
ldexp
log
pow
sin
sqrt

kernel32

CloseHandle
CreateEventA
CreateThread
DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetProcAddress
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LoadLibraryW
LocalFree
QueryPerformanceCounter
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
lstrcpyW

vcruntime140

_CxxThrowException
__C_specific_handler
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
memchr
memcmp
memcpy
memmove
memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
_wfopen
_wfopen_s
fclose
fopen
fread
fseek
ftell

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_errno
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
exit

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc
realloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-string-l1-1-0

strcpy
strlen
strncat
strncpy
wcslen

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

Decode

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
decm_w64.dll
.dll windows:6 windows x64 arch:x64

50737bf80676aa40ee542437f901d238

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f4:86:b1:f9:34:11:55:4c:c6:3e:05:6e:98:a6:a1:85:4a:b3:e6:8c:36:dc:21:26:de:3b:2d:00:09:68:9e:52
Signer

Actual PE Digest

f4:86:b1:f9:34:11:55:4c:c6:3e:05:6e:98:a6:a1:85:4a:b3:e6:8c:36:dc:21:26:de:3b:2d:00:09:68:9e:52

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

PostThreadMessageW

acdbase

N100nSToSamples
ChangeChannelOrder

kernel32

UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
WaitForSingleObject
ResumeThread
CreateEventW
CloseHandle
LoadLibraryW
CreateThread
GetProcAddress
lstrcpyW
CreateFileW
GetFileSizeEx
ReadFile
SetEndOfFile
SetFilePointer
SetFilePointerEx
WriteFile
GetLastError
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__C_specific_handler
__std_type_info_destroy_list
memcmp
memcpy
memset
__std_exception_destroy
__std_exception_copy
_CxxThrowException

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-runtime-l1-1-0

_initterm
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit
_initterm_e

api-ms-win-crt-string-l1-1-0

_memicmp

Exports

Exports

Decode

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
decm_wav.dll
.dll windows:6 windows x64 arch:x64

b4c85453241efc870d638a3781e708ca

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f1:ca:0c:a4:8c:6d:ab:29:99:42:2a:66:a6:fb:c5:0c:d6:94:2a:20:5c:03:c9:a9:9b:2c:ae:37:27:00:2c:bf
Signer

Actual PE Digest

f1:ca:0c:a4:8c:6d:ab:29:99:42:2a:66:a6:fb:c5:0c:d6:94:2a:20:5c:03:c9:a9:9b:2c:ae:37:27:00:2c:bf

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

PostThreadMessageW

acdbase

N100nSToSamples
ChangeChannelOrder

kernel32

IsProcessorFeaturePresent
UnhandledExceptionFilter
IsDebuggerPresent
WaitForSingleObject
ResumeThread
CreateEventW
CloseHandle
LoadLibraryW
CreateThread
GetProcAddress
lstrcpyW
CreateFileW
GetFileSizeEx
ReadFile
SetEndOfFile
SetFilePointer
SetFilePointerEx
WriteFile
GetLastError
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memset
__std_exception_copy
memcpy
__C_specific_handler
_CxxThrowException
__std_exception_destroy
__std_type_info_destroy_list

api-ms-win-crt-string-l1-1-0

_memicmp

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit

Exports

Exports

Decode

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
decm_wavpack.dll
.dll windows:6 windows x64 arch:x64

a60bb7e20c6f866563c866c9141c1d66

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:88:52:2e:4c:0b:f0:54:fa:24:c8:49:f1:c3:3b:6a:db:86:ed:33:78:8f:0a:de:0a:25:44:75:cf:48:26:17
Signer

Actual PE Digest

01:88:52:2e:4c:0b:f0:54:fa:24:c8:49:f1:c3:3b:6a:db:86:ed:33:78:8f:0a:de:0a:25:44:75:cf:48:26:17

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

PostThreadMessageA

acdbase

ChangeChannelOrder
GetDSDPCMGain
GetDSDPCMQuality
N100nSToSamples
UNC_UnicodeToUtf8

libmmd

floor
ldexp

kernel32

CloseHandle
CreateEventA
CreateThread
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetThreadLocale
InitializeConditionVariable
InitializeCriticalSection
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryExA
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
SleepConditionVariableCS
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
WakeConditionVariable
lstrcpyA
lstrlenA

vcruntime140

_CxxThrowException
__C_specific_handler
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
memcpy
memmove
memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
_chsize_s
_fileno
_fseeki64
_ftelli64
_setmode
_wfopen
fclose
fopen
fread
fwrite
ungetc

api-ms-win-crt-runtime-l1-1-0

_beginthreadex
_cexit
_configure_narrow_argv
_endthreadex
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
exit

api-ms-win-crt-filesystem-l1-1-0

_fstat64

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc
realloc

api-ms-win-crt-string-l1-1-0

isalnum
strcpy
strlen
strncat
strncmp
strncpy

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

Decode

Sections

.text
Size: 369KB - Virtual size: 369KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 123KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
decm_wma.dll
.dll windows:6 windows x64 arch:x64

2b70c1c31f47bd1f5f15f3fae5c8c750

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c4:a2:15:dd:7d:d1:66:d6:e2:66:62:69:47:f2:cc:e8:25:b2:24:90:e8:82:9e:a5:65:43:3b:a7:84:69:c3:4f
Signer

Actual PE Digest

c4:a2:15:dd:7d:d1:66:d6:e2:66:62:69:47:f2:cc:e8:25:b2:24:90:e8:82:9e:a5:65:43:3b:a7:84:69:c3:4f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

wmvcore

WMCreateSyncReader

user32

PostThreadMessageW

ole32

CoInitializeEx
CoUninitialize

acdbase

UNC_freeWStr
UNC_RemoveUnicodeAPIPath

kernel32

IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
GetShortPathNameW
WaitForSingleObject
ResumeThread
CreateEventW
CloseHandle
CreateThread
lstrcpyW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls

vcruntime140

__std_type_info_destroy_list
_CxxThrowException
__std_exception_destroy
memset
memcpy
__std_exception_copy
__C_specific_handler

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit

Exports

Exports

Decode

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
deviceio.dll
.dll windows:6 windows x64 arch:x64

3760b9e83e004dc04c35a61c24355797

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f2:5f:90:23:15:86:f0:40:63:49:da:4b:02:1c:b5:2a:bc:54:4a:91:ee:4f:b7:e3:7a:7c:39:85:2d:c7:96:8d
Signer

Actual PE Digest

f2:5f:90:23:15:86:f0:40:63:49:da:4b:02:1c:b5:2a:bc:54:4a:91:ee:4f:b7:e3:7a:7c:39:85:2d:c7:96:8d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\DeviceIO\Release\deviceio.pdb

Imports

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA

kernel32

GetModuleHandleW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
CloseHandle
SetEvent
WaitForSingleObject
CreateEventA
CreateFileA
CreateFileW
FindFirstVolumeW
FindNextVolumeW
FindVolumeClose
GetVolumePathNamesForVolumeNameW
GetLastError
DeviceIoControl
VirtualAlloc
LocalAlloc
LocalFree
DisableThreadLibraryCalls
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
QueryPerformanceCounter

vcruntime140

_CxxThrowException
__std_type_info_destroy_list
memcpy
memset
__C_specific_handler
__std_exception_copy
__current_exception
__current_exception_context
__std_exception_destroy

api-ms-win-crt-string-l1-1-0

strncpy

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_initterm_e
_configure_narrow_argv
_initialize_narrow_environment
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initterm

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

Exports

Exports

DEVIO_GetPathName
DEVIO_GetSupportInfo
DEVIO_LockVolume
DEVIO_SendCommand
DEVIO_SetTimeOut
DEVIO_UnlockVolume

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_aaac.dll
.dll windows:6 windows x64 arch:x64

e8f2af12cb31f7d7e66cdaef756a0e60

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

72:ec:cf:e6:5d:a0:07:09:27:bb:25:d1:24:a1:cd:fa:3c:8a:e1:20:75:e6:1a:74:04:1e:9b:2a:35:fa:5b:2f
Signer

Actual PE Digest

72:ec:cf:e6:5d:a0:07:09:27:bb:25:d1:24:a1:cd:fa:3c:8a:e1:20:75:e6:1a:74:04:1e:9b:2a:35:fa:5b:2f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

ShowWindow
RedrawWindow
SendMessageW
MoveWindow
wsprintfW
GetParent

kernel32

MulDiv
lstrcpyW
LocalFree
GetProcAddress
lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW

coreaudiohelper

?GetCoreAudioVersion@@YAXAEAK0@Z
?HasCoreAudio@@YA_NXZ

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_aac.dll
.dll windows:6 windows x64 arch:x64

0e3f5dbec2b1e0b89981d7d1b79f2827

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e3:8c:d9:22:72:4e:80:f7:fc:f2:a2:87:83:f7:97:f2:ab:50:e9:ed:88:57:bb:fc:84:ec:db:53:58:88:72:84
Signer

Actual PE Digest

e3:8c:d9:22:72:4e:80:f7:fc:f2:a2:87:83:f7:97:f2:ab:50:e9:ed:88:57:bb:fc:84:ec:db:53:58:88:72:84

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

SendMessageW
ShowWindow
RedrawWindow
MoveWindow
wsprintfW
GetParent

kernel32

WaitForSingleObject
MulDiv
lstrcpyW
LocalFree
GetProcAddress
LoadLibraryW
lstrcatW
lstrlenW
CreateMutexW
LocalAlloc
ReleaseMutex

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_aacf.dll
.dll windows:6 windows x64 arch:x64

0e3f5dbec2b1e0b89981d7d1b79f2827

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:70:a1:8b:9c:93:2a:fd:2a:71:a5:3c:15:57:43:f3:d7:f4:57:00:40:45:ed:8e:21:9f:ca:b9:5a:5a:c0:95
Signer

Actual PE Digest

07:70:a1:8b:9c:93:2a:fd:2a:71:a5:3c:15:57:43:f3:d7:f4:57:00:40:45:ed:8e:21:9f:ca:b9:5a:5a:c0:95

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

SendMessageW
ShowWindow
RedrawWindow
MoveWindow
wsprintfW
GetParent

kernel32

WaitForSingleObject
MulDiv
lstrcpyW
LocalFree
GetProcAddress
LoadLibraryW
lstrcatW
lstrlenW
CreateMutexW
LocalAlloc
ReleaseMutex

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_ac3.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d3:f2:ca:0f:2a:cd:8e:e8:ce:1a:65:ef:42:c3:28:bd:13:02:22:80:b0:56:5d:df:33:25:de:80:5a:f5:6e:a5
Signer

Actual PE Digest

d3:f2:ca:0f:2a:cd:8e:e8:ce:1a:65:ef:42:c3:28:bd:13:02:22:80:b0:56:5d:df:33:25:de:80:5a:f5:6e:a5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_ac3m4a.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c4:2e:82:3a:1c:72:d6:fe:61:54:f6:c2:2b:70:93:40:ac:48:e1:92:35:c8:a6:65:1e:d9:d6:5f:4a:f7:19:44
Signer

Actual PE Digest

c4:2e:82:3a:1c:72:d6:fe:61:54:f6:c2:2b:70:93:40:ac:48:e1:92:35:c8:a6:65:1e:d9:d6:5f:4a:f7:19:44

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_ac3mka.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7d:01:c0:37:af:69:e1:12:e3:b5:9e:cd:e2:78:d1:53:69:c6:a3:c1:65:f8:cd:96:3c:cd:6d:9d:11:a8:8d:11
Signer

Actual PE Digest

7d:01:c0:37:af:69:e1:12:e3:b5:9e:cd:e2:78:d1:53:69:c6:a3:c1:65:f8:cd:96:3c:cd:6d:9d:11:a8:8d:11

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_aiff.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

11:7e:b7:ff:ca:7f:cf:1c:0a:0f:f0:d3:7e:4f:3d:82:22:0d:73:d7:29:7f:b0:11:45:54:af:66:ca:13:ce:b3
Signer

Actual PE Digest

11:7e:b7:ff:ca:7f:cf:1c:0a:0f:f0:d3:7e:4f:3d:82:22:0d:73:d7:29:7f:b0:11:45:54:af:66:ca:13:ce:b3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_alac.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

60:84:18:29:75:24:29:73:c7:20:50:c1:80:9e:40:86:ce:4e:aa:7c:14:82:56:60:9f:5b:bd:8f:90:c7:a7:b2
Signer

Actual PE Digest

60:84:18:29:75:24:29:73:c7:20:50:c1:80:9e:40:86:ce:4e:aa:7c:14:82:56:60:9f:5b:bd:8f:90:c7:a7:b2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_am4a.dll
.dll windows:6 windows x64 arch:x64

e8f2af12cb31f7d7e66cdaef756a0e60

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2d:d5:b8:8e:7a:b0:47:29:ef:d4:be:1d:33:37:7e:d5:d7:24:3d:3a:c6:2c:a0:84:2d:e3:b0:9f:cc:69:8a:dc
Signer

Actual PE Digest

2d:d5:b8:8e:7a:b0:47:29:ef:d4:be:1d:33:37:7e:d5:d7:24:3d:3a:c6:2c:a0:84:2d:e3:b0:9f:cc:69:8a:dc

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

ShowWindow
RedrawWindow
SendMessageW
MoveWindow
wsprintfW
GetParent

kernel32

MulDiv
lstrcpyW
LocalFree
GetProcAddress
lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW

coreaudiohelper

?GetCoreAudioVersion@@YAXAEAK0@Z
?HasCoreAudio@@YA_NXZ

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_am4b.dll
.dll windows:6 windows x64 arch:x64

e8f2af12cb31f7d7e66cdaef756a0e60

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

13:f2:c0:df:1d:ea:f7:60:ae:16:90:6e:0a:15:fd:6d:1b:45:91:83:27:eb:9a:b3:06:c5:2e:28:13:61:aa:62
Signer

Actual PE Digest

13:f2:c0:df:1d:ea:f7:60:ae:16:90:6e:0a:15:fd:6d:1b:45:91:83:27:eb:9a:b3:06:c5:2e:28:13:61:aa:62

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

ShowWindow
RedrawWindow
SendMessageW
MoveWindow
wsprintfW
GetParent

kernel32

MulDiv
lstrcpyW
LocalFree
GetProcAddress
lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW

coreaudiohelper

?GetCoreAudioVersion@@YAXAEAK0@Z
?HasCoreAudio@@YA_NXZ

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_ape.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

be:49:86:87:66:50:64:f3:ec:74:db:be:00:e1:07:5e:00:98:8f:4e:8c:08:85:18:a5:c7:ba:55:a6:be:58:bd
Signer

Actual PE Digest

be:49:86:87:66:50:64:f3:ec:74:db:be:00:e1:07:5e:00:98:8f:4e:8c:08:85:18:a5:c7:ba:55:a6:be:58:bd

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_au.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

84:99:e2:89:89:0a:80:f1:8d:96:c0:a7:24:15:d5:df:f0:d9:48:c9:56:13:a4:4b:9c:e7:87:c1:6f:5b:0d:82
Signer

Actual PE Digest

84:99:e2:89:89:0a:80:f1:8d:96:c0:a7:24:15:d5:df:f0:d9:48:c9:56:13:a4:4b:9c:e7:87:c1:6f:5b:0d:82

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_dff.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:18:1a:85:1e:99:df:f6:14:14:42:25:ea:2a:53:f5:06:1a:24:65:26:e5:1f:d2:50:da:ec:32:6a:a6:e5:1d
Signer

Actual PE Digest

05:18:1a:85:1e:99:df:f6:14:14:42:25:ea:2a:53:f5:06:1a:24:65:26:e5:1f:d2:50:da:ec:32:6a:a6:e5:1d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_ChangeInputFormat
ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 65B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_dsf.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ae:42:95:61:62:4f:d4:7f:1c:83:c7:25:8c:e3:37:8d:0f:97:63:76:4e:41:b1:aa:ef:56:fd:74:96:d4:30:cb
Signer

Actual PE Digest

ae:42:95:61:62:4f:d4:7f:1c:83:c7:25:8c:e3:37:8d:0f:97:63:76:4e:41:b1:aa:ef:56:fd:74:96:d4:30:cb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_ChangeInputFormat
ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 65B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_dts.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:53:2f:07:66:72:6c:bc:7a:f3:53:18:9e:e7:2a:ee:23:ac:dd:6e:9b:1c:b6:fb:9d:cf:ce:85:c1:46:b0:5a
Signer

Actual PE Digest

09:53:2f:07:66:72:6c:bc:7a:f3:53:18:9e:e7:2a:ee:23:ac:dd:6e:9b:1c:b6:fb:9d:cf:ce:85:c1:46:b0:5a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_dtsm4a.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

60:c1:e5:1b:44:c1:80:4f:30:b3:b8:e7:75:28:65:37:73:d3:f7:0d:7b:ae:b5:f8:7d:89:90:69:b1:fe:67:e6
Signer

Actual PE Digest

60:c1:e5:1b:44:c1:80:4f:30:b3:b8:e7:75:28:65:37:73:d3:f7:0d:7b:ae:b5:f8:7d:89:90:69:b1:fe:67:e6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_dtsmka.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:36:2c:c7:05:33:c1:0e:7a:d4:49:a7:aa:24:bd:bd:4e:0e:73:38:3f:ee:35:0d:e0:76:c9:73:e7:36:93:c4
Signer

Actual PE Digest

52:36:2c:c7:05:33:c1:0e:7a:d4:49:a7:aa:24:bd:bd:4e:0e:73:38:3f:ee:35:0d:e0:76:c9:73:e7:36:93:c4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_eac3.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:4c:bf:ba:3e:36:a3:9b:61:bf:28:10:2c:8a:d1:6c:97:cf:28:38:35:da:ff:30:f0:fe:c9:4f:ad:25:87:0d
Signer

Actual PE Digest

01:4c:bf:ba:3e:36:a3:9b:61:bf:28:10:2c:8a:d1:6c:97:cf:28:38:35:da:ff:30:f0:fe:c9:4f:ad:25:87:0d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_eac3m4a.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f9:a6:b8:d1:2e:d8:50:1a:e3:e0:4c:2e:e2:2f:fc:20:72:3c:20:f3:26:4f:12:00:46:2c:47:0f:58:72:06:ca
Signer

Actual PE Digest

f9:a6:b8:d1:2e:d8:50:1a:e3:e0:4c:2e:e2:2f:fc:20:72:3c:20:f3:26:4f:12:00:46:2c:47:0f:58:72:06:ca

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_eac3mka.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

23:be:32:8f:f8:af:02:5f:99:26:75:39:a6:5e:45:85:62:fb:00:03:30:bd:2a:65:26:a4:3c:cb:11:1b:12:ed
Signer

Actual PE Digest

23:be:32:8f:f8:af:02:5f:99:26:75:39:a6:5e:45:85:62:fb:00:03:30:bd:2a:65:26:a4:3c:cb:11:1b:12:ed

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_flac.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ee:a0:ee:b3:c7:49:ed:33:8a:43:71:da:53:52:99:37:40:ac:b9:ce:2c:fb:57:0a:0b:cd:ed:42:08:30:4d:1a
Signer

Actual PE Digest

ee:a0:ee:b3:c7:49:ed:33:8a:43:71:da:53:52:99:37:40:ac:b9:ce:2c:fb:57:0a:0b:cd:ed:42:08:30:4d:1a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_m4a.dll
.dll windows:6 windows x64 arch:x64

0e3f5dbec2b1e0b89981d7d1b79f2827

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7f:71:fe:0c:99:95:8f:5a:aa:04:b4:c2:a6:3f:2d:54:4b:d7:d4:9c:cc:15:ef:20:26:05:64:f1:77:4f:6d:0c
Signer

Actual PE Digest

7f:71:fe:0c:99:95:8f:5a:aa:04:b4:c2:a6:3f:2d:54:4b:d7:d4:9c:cc:15:ef:20:26:05:64:f1:77:4f:6d:0c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

SendMessageW
ShowWindow
RedrawWindow
MoveWindow
wsprintfW
GetParent

kernel32

WaitForSingleObject
MulDiv
lstrcpyW
LocalFree
GetProcAddress
LoadLibraryW
lstrcatW
lstrlenW
CreateMutexW
LocalAlloc
ReleaseMutex

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_m4af.dll
.dll windows:6 windows x64 arch:x64

0e3f5dbec2b1e0b89981d7d1b79f2827

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

00:53:53:98:d9:01:8f:3b:77:75:8b:c9:d2:25:55:83:cb:b9:5f:cb:9b:e0:48:91:f2:33:47:40:95:79:fd:8a
Signer

Actual PE Digest

00:53:53:98:d9:01:8f:3b:77:75:8b:c9:d2:25:55:83:cb:b9:5f:cb:9b:e0:48:91:f2:33:47:40:95:79:fd:8a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

SendMessageW
ShowWindow
RedrawWindow
MoveWindow
wsprintfW
GetParent

kernel32

WaitForSingleObject
MulDiv
lstrcpyW
LocalFree
GetProcAddress
LoadLibraryW
lstrcatW
lstrlenW
CreateMutexW
LocalAlloc
ReleaseMutex

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_m4b.dll
.dll windows:6 windows x64 arch:x64

0e3f5dbec2b1e0b89981d7d1b79f2827

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

48:31:75:fa:40:73:7d:92:e3:43:6a:0e:9b:5d:0b:a9:b8:9c:39:00:e4:f1:78:10:15:64:72:e1:dc:40:d8:27
Signer

Actual PE Digest

48:31:75:fa:40:73:7d:92:e3:43:6a:0e:9b:5d:0b:a9:b8:9c:39:00:e4:f1:78:10:15:64:72:e1:dc:40:d8:27

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

SendMessageW
ShowWindow
RedrawWindow
MoveWindow
wsprintfW
GetParent

kernel32

WaitForSingleObject
MulDiv
lstrcpyW
LocalFree
GetProcAddress
LoadLibraryW
lstrcatW
lstrlenW
CreateMutexW
LocalAlloc
ReleaseMutex

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_m4bf.dll
.dll windows:6 windows x64 arch:x64

0e3f5dbec2b1e0b89981d7d1b79f2827

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

82:c3:74:bc:a5:b2:ad:c8:d5:09:88:c1:17:ca:5c:40:59:8b:c5:37:4f:ce:47:30:d4:1a:8b:01:49:80:da:06
Signer

Actual PE Digest

82:c3:74:bc:a5:b2:ad:c8:d5:09:88:c1:17:ca:5c:40:59:8b:c5:37:4f:ce:47:30:d4:1a:8b:01:49:80:da:06

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

SendMessageW
ShowWindow
RedrawWindow
MoveWindow
wsprintfW
GetParent

kernel32

WaitForSingleObject
MulDiv
lstrcpyW
LocalFree
GetProcAddress
LoadLibraryW
lstrcatW
lstrlenW
CreateMutexW
LocalAlloc
ReleaseMutex

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_mp3.dll
.dll windows:6 windows x64 arch:x64

e3e4dcf0ffd488e128aa78e8234586e1

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ff:e6:71:e3:db:7d:77:f3:0d:75:ab:6b:81:bb:3b:7d:48:9e:8c:6c:8d:f6:a8:69:e6:52:78:87:91:75:d3:68
Signer

Actual PE Digest

ff:e6:71:e3:db:7d:77:f3:0d:75:ab:6b:81:bb:3b:7d:48:9e:8c:6c:8d:f6:a8:69:e6:52:78:87:91:75:d3:68

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

wsprintfW
MoveWindow
RedrawWindow
ShowWindow
SendMessageW
GetParent

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_mpc.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b0:5d:32:1d:ac:3b:b1:82:cf:e9:38:e9:20:35:60:9a:59:f7:92:03:e8:d5:c7:4c:1f:c4:0a:b9:b9:fa:18:14
Signer

Actual PE Digest

b0:5d:32:1d:ac:3b:b1:82:cf:e9:38:e9:20:35:60:9a:59:f7:92:03:e8:d5:c7:4c:1f:c4:0a:b9:b9:fa:18:14

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_opus.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

38:1c:78:de:c6:be:ad:ef:da:2b:d0:92:a2:0b:9a:de:49:65:30:33:2c:ea:3f:f2:05:b7:cb:40:08:06:b2:6f
Signer

Actual PE Digest

38:1c:78:de:c6:be:ad:ef:da:2b:d0:92:a2:0b:9a:de:49:65:30:33:2c:ea:3f:f2:05:b7:cb:40:08:06:b2:6f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_raw.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b1:de:7f:6b:04:be:d2:61:2d:7b:9e:88:2d:96:21:93:da:77:8b:69:ed:98:78:86:1f:4b:a2:ab:2c:15:c7:cb
Signer

Actual PE Digest

b1:de:7f:6b:04:be:d2:61:2d:7b:9e:88:2d:96:21:93:da:77:8b:69:ed:98:78:86:1f:4b:a2:ab:2c:15:c7:cb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_thd.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

10:6b:cd:f5:b6:c8:39:fb:75:ac:40:bd:05:5f:ef:8d:21:e1:82:54:b6:a1:1d:09:a0:6c:ee:ca:ff:b4:00:d6
Signer

Actual PE Digest

10:6b:cd:f5:b6:c8:39:fb:75:ac:40:bd:05:5f:ef:8d:21:e1:82:54:b6:a1:1d:09:a0:6c:ee:ca:ff:b4:00:d6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_thdm4a.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5a:45:54:f7:43:ef:85:97:b3:22:de:dc:03:47:93:23:e7:d0:f5:39:83:5b:83:6e:c3:38:9d:b2:60:69:25:c4
Signer

Actual PE Digest

5a:45:54:f7:43:ef:85:97:b3:22:de:dc:03:47:93:23:e7:d0:f5:39:83:5b:83:6e:c3:38:9d:b2:60:69:25:c4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_thdmka.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

73:a5:aa:88:af:4f:c9:79:3f:3c:0d:72:fd:17:31:44:ba:15:18:ce:27:c7:0e:19:48:c8:62:0b:17:5f:39:c5
Signer

Actual PE Digest

73:a5:aa:88:af:4f:c9:79:3f:3c:0d:72:fd:17:31:44:ba:15:18:ce:27:c7:0e:19:48:c8:62:0b:17:5f:39:c5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_tta.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5a:b5:5e:fa:66:42:ff:fe:f9:fd:a2:98:6b:b8:3b:c5:c8:61:be:30:45:6c:4b:90:d8:09:58:52:a4:79:74:60
Signer

Actual PE Digest

5a:b5:5e:fa:66:42:ff:fe:f9:fd:a2:98:6b:b8:3b:c5:c8:61:be:30:45:6c:4b:90:d8:09:58:52:a4:79:74:60

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_vorbis.dll
.dll windows:6 windows x64 arch:x64

e3e4dcf0ffd488e128aa78e8234586e1

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

49:d6:fb:6a:b5:29:b8:f1:4d:eb:a1:bf:ea:fc:7c:6a:1d:9e:14:34:a5:61:98:6d:f5:fc:ec:b7:d3:e7:ed:90
Signer

Actual PE Digest

49:d6:fb:6a:b5:29:b8:f1:4d:eb:a1:bf:ea:fc:7c:6a:1d:9e:14:34:a5:61:98:6d:f5:fc:ec:b7:d3:e7:ed:90

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

wsprintfW
MoveWindow
RedrawWindow
ShowWindow
SendMessageW
GetParent

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_w64.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:33:73:1d:53:b0:6a:5b:90:4f:d0:36:1c:12:c4:0b:18:20:32:6e:14:af:be:52:73:fe:b2:1e:88:96:96:10
Signer

Actual PE Digest

07:33:73:1d:53:b0:6a:5b:90:4f:d0:36:1c:12:c4:0b:18:20:32:6e:14:af:be:52:73:fe:b2:1e:88:96:96:10

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_wav.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d0:fd:18:63:19:e9:24:c6:f4:36:5d:57:9d:8e:3b:38:8b:96:b9:be:de:19:63:5f:86:28:01:2c:8a:a4:96:ab
Signer

Actual PE Digest

d0:fd:18:63:19:e9:24:c6:f4:36:5d:57:9d:8e:3b:38:8b:96:b9:be:de:19:63:5f:86:28:01:2c:8a:a4:96:ab

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_wavacm.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ed:a2:23:7b:d5:f3:a0:13:24:f8:58:c7:36:9c:78:31:ae:72:f0:84:1e:23:a6:09:fa:55:a3:b4:90:52:54:be
Signer

Actual PE Digest

ed:a2:23:7b:d5:f3:a0:13:24:f8:58:c7:36:9c:78:31:ae:72:f0:84:1e:23:a6:09:fa:55:a3:b4:90:52:54:be

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 105B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_wavmp3.dll
.dll windows:6 windows x64 arch:x64

e3e4dcf0ffd488e128aa78e8234586e1

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e4:0a:9f:12:e5:92:f3:da:c0:83:f4:3c:05:92:bf:cf:11:13:38:9c:a3:f3:12:2c:dd:11:c2:fa:8f:8a:a8:7d
Signer

Actual PE Digest

e4:0a:9f:12:e5:92:f3:da:c0:83:f4:3c:05:92:bf:cf:11:13:38:9c:a3:f3:12:2c:dd:11:c2:fa:8f:8a:a8:7d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

wsprintfW
MoveWindow
RedrawWindow
ShowWindow
SendMessageW
GetParent

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_wavpack.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b2:f2:8c:56:1a:fe:29:a2:07:0c:00:b3:49:56:c6:dc:a2:91:2b:a3:3d:e6:dd:60:76:6e:da:40:ac:b7:a8:fb
Signer

Actual PE Digest

b2:f2:8c:56:1a:fe:29:a2:07:0c:00:b3:49:56:c6:dc:a2:91:2b:a3:3d:e6:dd:60:76:6e:da:40:ac:b7:a8:fb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_wavpackdsd.dll
.dll windows:6 windows x64 arch:x64

1d5a9faf5ae673d33fe4a78e4e2d8d0d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:a7:45:2d:25:b4:0d:7f:76:14:c3:4f:ee:c7:c2:50:3c:7f:6c:48:34:e3:71:23:3e:42:77:bd:e8:6f:7b:ec
Signer

Actual PE Digest

4c:a7:45:2d:25:b4:0d:7f:76:14:c3:4f:ee:c7:c2:50:3c:7f:6c:48:34:e3:71:23:3e:42:77:bd:e8:6f:7b:ec

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
lstrcpyW
MulDiv

user32

MoveWindow
ShowWindow
SendMessageW
wsprintfW

Exports

Exports

ACDX_ChangeInputFormat
ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 65B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_wma.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:d5:55:31:52:5f:76:ef:8c:15:e4:4f:2f:73:1e:70:90:5d:60:46:bc:90:36:7f:32:22:64:5a:64:a0:aa:15
Signer

Actual PE Digest

36:d5:55:31:52:5f:76:ef:8c:15:e4:4f:2f:73:1e:70:90:5d:60:46:bc:90:36:7f:32:22:64:5a:64:a0:aa:15

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 105B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_xheaac.dll
.dll windows:6 windows x64 arch:x64

c7769c8779aa04079d4b3b86e9b0088d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

15:a6:8b:82:68:e7:b4:2d:e2:22:2e:60:87:6c:41:83:2a:70:7c:8f:6f:73:a6:42:ae:c9:d8:59:d4:98:5c:b4
Signer

Actual PE Digest

15:a6:8b:82:68:e7:b4:2d:e2:22:2e:60:87:6c:41:83:2a:70:7c:8f:6f:73:a6:42:ae:c9:d8:59:d4:98:5c:b4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

SendMessageW
ShowWindow
MoveWindow
wsprintfW

kernel32

LocalAlloc
MulDiv
lstrcpyW
LocalFree
GetProcAddress
lstrlenW
CreateMutexW
WaitForSingleObject
lstrcatW
ReleaseMutex
LoadLibraryW

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 345B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
enc_xheaacf.dll
.dll windows:6 windows x64 arch:x64

0e3f5dbec2b1e0b89981d7d1b79f2827

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a6:84:fc:9d:30:7d:7a:99:6d:67:f6:77:3d:76:32:41:b4:fb:7e:04:03:83:8b:cb:ff:58:ec:91:09:0c:a7:97
Signer

Actual PE Digest

a6:84:fc:9d:30:7d:7a:99:6d:67:f6:77:3d:76:32:41:b4:fb:7e:04:03:83:8b:cb:ff:58:ec:91:09:0c:a7:97

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

SendMessageW
ShowWindow
RedrawWindow
MoveWindow
wsprintfW
GetParent

kernel32

WaitForSingleObject
MulDiv
lstrcpyW
LocalFree
GetProcAddress
LoadLibraryW
lstrcatW
lstrlenW
CreateMutexW
LocalAlloc
ReleaseMutex

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetEncInfo
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_Initialize
ACDX_OpenConfig3
ACDX_ReplayGain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_aaac.dll
.dll windows:6 windows x64 arch:x64

3d6d9f49fc16bf77a48a143135f2702e

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cc:03:61:9e:a4:0b:38:f8:a2:c2:ea:e6:e2:51:ba:f5:22:05:10:0a:7d:6a:ee:9c:10:d5:4a:43:bf:38:80:47
Signer

Actual PE Digest

cc:03:61:9e:a4:0b:38:f8:a2:c2:ea:e6:e2:51:ba:f5:22:05:10:0a:7d:6a:ee:9c:10:d5:4a:43:bf:38:80:47

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Ezcddax_Files\Release\x64\encm_a.pdb

Imports

acdbase

ID3Helper_Free
ID3Helper_GetDword
ID3Helper_Copy
ChangeChannelOrder

mp4v2

MP4ItmfItemFree
MP4ItmfItemAlloc
MP4Malloc
MP4ItmfAddItem

id3lib

?RenderID3_FreeBuffer@@YAXPEAD@Z
?RenderID3wGaplessPlaceholder@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z
?WriteID3V1@@YAXPEB_WPEAUID3Helper@@@Z
?RenderID3@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z

coreaudiotoolbox

AudioConverterFillComplexBuffer
AudioConverterSetProperty
AudioConverterGetPropertyInfo
AudioConverterGetProperty
AudioConverterDispose
AudioConverterNew
AudioFormatGetProperty

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

kernel32

RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
RtlVirtualUnwind
GetSystemTimeAsFileTime
GetCurrentThreadId
CloseHandle
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
DisableThreadLibraryCalls
GetCurrentProcessId
WriteFile
QueryPerformanceCounter
CreateFileW
DeleteFileW

vcruntime140

_CxxThrowException
__std_exception_copy
memcpy
memmove
memset
__C_specific_handler
__std_type_info_destroy_list
__current_exception
__current_exception_context
__std_exception_destroy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-stdio-l1-1-0

_read
_wsopen_dispatch
_close
_lseek
__stdio_common_vsprintf
__stdio_common_vswscanf
__stdio_common_vswprintf
_write
__stdio_common_vsscanf

api-ms-win-crt-string-l1-1-0

_strdup
strcmp

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_execute_onexit_table
_register_onexit_function
_crt_at_quick_exit
_initialize_narrow_environment
_cexit
_initterm_e
_initterm
terminate
_seh_filter_dll
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_aac.dll
.dll windows:6 windows x64 arch:x64

070b6d67ade58c59fe0c5e8d45cdf289

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7a:af:12:b7:af:e5:b1:6d:94:f4:bd:8d:04:02:93:6f:bf:bb:90:91:74:47:b5:b1:16:cc:d6:d4:7d:7e:1c:d2
Signer

Actual PE Digest

7a:af:12:b7:af:e5:b1:6d:94:f4:bd:8d:04:02:93:6f:bf:bb:90:91:74:47:b5:b1:16:cc:d6:d4:7d:7e:1c:d2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\AAC (FDK)\encm_\Release\encm_fdk.pdb

Imports

mp4v2

MP4ItmfAddItem
MP4ItmfItemAlloc
MP4ItmfItemFree
MP4Malloc

acdbase

ChangeChannelOrder
ID3Helper_Copy
ID3Helper_Free
ID3Helper_GetDword

fdkaac

aacEncClose
aacEncEncode
aacEncInfo
aacEncOpen
aacEncoder_SetParam

id3lib

?RenderID3@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z
?RenderID3_FreeBuffer@@YAXPEAD@Z
?RenderID3wGaplessPlaceholder@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z
?WriteID3V1@@YAXPEB_WPEAUID3Helper@@@Z

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

kernel32

CloseHandle
CreateFileW
DeleteFileW
DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleW
GetStartupInfoW
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WriteFile

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__current_exception
__current_exception_context
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
memcpy
memmove
memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
__stdio_common_vswprintf
__stdio_common_vswscanf
_close
_lseek
_read
_write
_wsopen_dispatch

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_seh_filter_dll
exit
terminate

api-ms-win-crt-string-l1-1-0

_strdup
strcmp
strlen
strncpy
wcscmp
wcslen

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

ACDX_Compress
ACDX_Compress.A
ACDX_Compress.L
ACDX_Compress.M
ACDX_Compress.N
ACDX_Compress.P
ACDX_Compress.R
ACDX_Compress.S
ACDX_Compress.V
ACDX_DeinitCompress
ACDX_DeinitCompress.A
ACDX_DeinitCompress.L
ACDX_DeinitCompress.M
ACDX_DeinitCompress.N
ACDX_DeinitCompress.P
ACDX_DeinitCompress.R
ACDX_DeinitCompress.S
ACDX_DeinitCompress.V
ACDX_GetInputFormat
ACDX_GetInputFormat.A
ACDX_GetInputFormat.L
ACDX_GetInputFormat.M
ACDX_GetInputFormat.N
ACDX_GetInputFormat.P
ACDX_GetInputFormat.R
ACDX_GetInputFormat.S
ACDX_GetInputFormat.V
ACDX_InitCompress3
ACDX_InitCompress3.A
ACDX_InitCompress3.L
ACDX_InitCompress3.M
ACDX_InitCompress3.N
ACDX_InitCompress3.P
ACDX_InitCompress3.R
ACDX_InitCompress3.S
ACDX_InitCompress3.V

Sections

.text
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_aacf.dll
.dll windows:6 windows x64 arch:x64

53c48ee5d7e7701b49f93bc51b129ddf

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

69:b2:9e:7f:a1:72:c3:42:0d:14:cd:d5:53:d5:97:bf:ed:6b:58:f2:03:ce:75:f9:e1:e4:c2:62:ba:e1:4a:c0
Signer

Actual PE Digest

69:b2:9e:7f:a1:72:c3:42:0d:14:cd:d5:53:d5:97:bf:ed:6b:58:f2:03:ce:75:f9:e1:e4:c2:62:ba:e1:4a:c0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\AAC (Fraunhofer)\encm_\Release\encm_aacf.pdb

Imports

acdbase

ID3Helper_GetDword
ID3Helper_Free
ID3Helper_Copy

mp4v2

MP4ItmfItemFree
MP4ItmfItemAlloc
MP4Malloc
MP4TagsFree
MP4ItmfAddItem

id3lib

?RenderID3_FreeBuffer@@YAXPEAD@Z
?WriteID3V1@@YAXPEB_WPEAUID3Helper@@@Z
?RenderID3@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z
?RenderID3wGaplessPlaceholder@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

kernel32

GetStartupInfoW
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateFileW
DeleteFileW
WriteFile
CloseHandle

vcruntime140

__std_exception_copy
memcpy
memmove
_CxxThrowException
strrchr
__C_specific_handler
__std_type_info_destroy_list
__current_exception
__current_exception_context
memset
__std_exception_destroy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswscanf
__stdio_common_vsscanf
_lseek
__stdio_common_vfprintf
fwrite
_read
_write
fclose
_wsopen_dispatch
_close
__acrt_iob_func
fflush
__stdio_common_vsprintf
fputs
__stdio_common_vswprintf

api-ms-win-crt-string-l1-1-0

_strdup
strcmp
strncpy

api-ms-win-crt-runtime-l1-1-0

exit
_controlfp
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_initterm
_initterm_e
_seh_filter_dll

api-ms-win-crt-heap-l1-1-0

calloc
malloc
free
_callnewh

api-ms-win-crt-math-l1-1-0

fmod
ldexp
atan2
acos
asin
atan
tanh
exp
log10
cos
tan
sqrtf
sinf
powf
logf
floorf
expf
cosf
ceilf
sqrt
sinh
cosh
sin
floor
log
_fdclass
ceil
pow

api-ms-win-crt-utility-l1-1-0

rand
qsort

api-ms-win-crt-time-l1-1-0

_time64

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 634KB - Virtual size: 634KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_ac3.dll
.dll windows:6 windows x64 arch:x64

5b5786470f3a68e8165be91d9fcd38e5

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:78:a4:8e:1f:6d:89:57:78:b0:a6:2c:2a:e6:96:d9:5e:8c:a7:48:df:ec:09:f9:94:7e:9f:ee:a6:b5:32:39
Signer

Actual PE Digest

2e:78:a4:8e:1f:6d:89:57:78:b0:a6:2c:2a:e6:96:d9:5e:8c:a7:48:df:ec:09:f9:94:7e:9f:ee:a6:b5:32:39

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\AC3 (ffmpeg)\encm_\Release\encm_ac3.pdb

Imports

user32

wsprintfW

acdbase

ID3Helper_GetChapter_Position
ID3Helper_GetDword
ID3Helper_GetChapterTotal
ID3Helper_GetChapter_Name
UNC_Utf8ToUnicode
ID3Helper_GetChapterCount_Position
ID3Helper_IsNaN
ID3Helper_GetNextImage
ID3Helper_GetFirstImage
ID3Helper_GetNext
ID3Helper_GetFirst
UNC_freeStr
CHAPTERNAME_Get_Number
ffmpeg_global_unlock
ffmpeg_global_lock
ID3Helper_Free
CHAPTER_Get_Number
N100nSToSamples
SamplesToN100nS
UNC_freeWStr

avcodec-61

avcodec_alloc_context3
av_packet_unref
avcodec_open2
avcodec_send_frame
avcodec_receive_packet
av_packet_free
av_packet_alloc
avcodec_find_encoder
avcodec_free_context

avformat-61

avformat_free_context

avutil-59

av_frame_free
av_frame_get_buffer
av_frame_make_writable
av_frame_alloc

mp4v2

MP4TagsSetSortAlbum
MP4TagsSetReleaseDate
MP4TagsSetGenreType
MP4TagsSetGenre
MP4TagsSetComments
MP4TagsSetComposer
MP4TagsSetGrouping
MP4TagsSetAlbum
MP4TagsSetAlbumArtist
MP4TagsSetArtist
MP4TagsSetName
MP4TagsFree
MP4TagsStore
MP4TagsFetch
MP4TagsSetSortAlbumArtist
MP4ItmfRemoveItem
MP4XtraTagsSetInt
MP4ItmfGetItemsByCode
MP4ItmfItemListFree
MP4ItmfItemFree
MP4ItmfItemAlloc
MP4AddNeroChapter
MP4AddChapterTextTrack
MP4AddChapter
MP4GetTrackTimeScale
MP4SetTrackDuration
MP4GetTrackDuration
MP4FindTrackId
MP4Modify
MP4Close
MP4Malloc
MP4XtraTagsRemove
MP4XtraTagsSetString
MP4TagsSetSortArtist
MP4TagsSetSortName
MP4TagsSetEncodedBy
MP4TagsSetCopyright
MP4TagsAddArtwork
MP4TagsRemoveArtwork
MP4ItmfAddItem
MP4TagsSetSortComposer
MP4TagsSetLyrics
MP4TagsSetProducer
MP4TagsSetArranger
MP4TagsSetConductor
MP4TagsSetISRC
MP4TagsSetOriginalArtist
MP4TagsSetPublisher
MP4TagsSetTrack
MP4TagsSetCompilation
MP4TagsSetTempo
MP4TagsAlloc
MP4TagsSetDisk
MP4TagsSetLabel

kernel32

CreateFileW
DeleteFileW
WriteFile
CloseHandle
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW

vcruntime140

__std_exception_destroy
memcpy
__C_specific_handler
__std_exception_copy
_CxxThrowException
__std_type_info_destroy_list
__current_exception
__current_exception_context
memset
strstr

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-string-l1-1-0

_strdup
strcmp
_stricmp

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm_e
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_seh_filter_dll
_register_onexit_function
_initterm

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_ac3m4a.dll
.dll windows:6 windows x64 arch:x64

6cee6e73f43ef8b09c25c2172a34adc1

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ac:dd:94:c7:8d:55:2b:36:dd:55:f9:fb:4a:a9:80:05:03:cf:1c:2c:27:f8:08:2c:11:a3:8b:fa:56:cb:b1:73
Signer

Actual PE Digest

ac:dd:94:c7:8d:55:2b:36:dd:55:f9:fb:4a:a9:80:05:03:cf:1c:2c:27:f8:08:2c:11:a3:8b:fa:56:cb:b1:73

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\AC3 (ffmpeg)\encm_\Release\encm_ac3.pdb

Imports

user32

wsprintfW

acdbase

UNC_freeStr
ID3Helper_GetFirst
ID3Helper_GetNext
ID3Helper_GetFirstImage
ffmpeg_global_unlock
ID3Helper_GetNextImage
ID3Helper_IsNaN
ID3Helper_GetChapterCount_Position
ID3Helper_GetChapter_Position
ID3Helper_GetChapterTotal
UNC_UnicodeToUtf8
ffmpeg_global_lock
ID3Helper_Copy
UNC_freeWStr
ID3Helper_GetDword
ID3Helper_Free
CHAPTERNAME_Get_Number
CHAPTER_Get_Number
N100nSToSamples
SamplesToN100nS
UNC_Utf8ToUnicode
ID3Helper_GetChapter_Name

avcodec-61

av_packet_rescale_ts
avcodec_alloc_context3
av_packet_unref
avcodec_parameters_from_context
avcodec_open2
avcodec_send_frame
avcodec_receive_packet
av_packet_free
av_packet_alloc
avcodec_find_encoder
avcodec_free_context

avformat-61

avio_closep
avformat_free_context
avformat_new_stream
avformat_alloc_output_context2
avformat_write_header
av_interleaved_write_frame
av_write_trailer
avio_open

avutil-59

av_frame_free
av_frame_get_buffer
av_frame_make_writable
av_frame_alloc

mp4v2

MP4XtraTagsSetString
MP4XtraTagsSetInt
MP4XtraTagsRemove
MP4TagsSetPublisher
MP4TagsFetch
MP4TagsAlloc
MP4ItmfRemoveItem
MP4ItmfAddItem
MP4ItmfGetItemsByCode
MP4ItmfItemListFree
MP4TagsSetLabel
MP4TagsSetCopyright
MP4TagsSetSortAlbumArtist
MP4AddChapterTextTrack
MP4AddChapter
MP4GetTrackTimeScale
MP4SetTrackDuration
MP4GetTrackDuration
MP4FindTrackId
MP4Modify
MP4Close
MP4Malloc
MP4Optimize
MP4TagsSetEncodedBy
MP4TagsRemoveArtwork
MP4TagsAddArtwork
MP4TagsSetSortComposer
MP4ItmfItemAlloc
MP4TagsSetSortAlbum
MP4TagsSetSortArtist
MP4TagsSetSortName
MP4TagsSetLyrics
MP4TagsSetProducer
MP4TagsSetArranger
MP4TagsSetCompilation
MP4TagsSetTempo
MP4TagsSetConductor
MP4TagsSetISRC
MP4AddNeroChapter
MP4TagsSetOriginalArtist
MP4TagsSetDisk
MP4TagsSetTrack
MP4TagsSetReleaseDate
MP4TagsSetGenreType
MP4TagsStore
MP4TagsSetComments
MP4TagsSetComposer
MP4TagsSetGrouping
MP4TagsSetAlbum
MP4TagsSetAlbumArtist
MP4TagsSetArtist
MP4TagsSetName
MP4ItmfItemFree
MP4TagsFree
MP4TagsSetGenre

kernel32

DeleteFileW
CloseHandle
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW

vcruntime140

__C_specific_handler
__std_exception_copy
__std_exception_destroy
memcpy
__current_exception
_CxxThrowException
__std_type_info_destroy_list
__current_exception_context
memset
strstr

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-string-l1-1-0

_strdup
strcmp
_stricmp

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_initterm_e
_register_onexit_function
_seh_filter_dll

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_ac3mka.dll
.dll windows:6 windows x64 arch:x64

05ca69f9f11b5278bdbebbb13f93cd24

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:96:20:e4:e0:a9:ca:69:80:0d:0e:bf:ae:da:f1:1b:9e:c4:bf:08:08:fd:3d:e7:be:cf:ce:99:6d:66:bb:69
Signer

Actual PE Digest

08:96:20:e4:e0:a9:ca:69:80:0d:0e:bf:ae:da:f1:1b:9e:c4:bf:08:08:fd:3d:e7:be:cf:ce:99:6d:66:bb:69

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\AC3 (ffmpeg)\encm_\Release\encm_ac3.pdb

Imports

user32

wsprintfW

acdbase

ID3Helper_GetNext
ID3Helper_GetFirstImage
ID3Helper_GetNextImage
UNC_freeStr
ID3Helper_IsNaN
ID3Helper_GetChapterCount_Position
ID3Helper_GetChapter_Position
ID3Helper_GetChapterTotal
ID3Helper_GetFirst
UNC_UnicodeToUtf8
ffmpeg_global_unlock
ffmpeg_global_lock
ID3Helper_Copy
N100nSToSamples
ID3Helper_GetDword
ID3Helper_Free
CHAPTERNAME_Get_Number
CHAPTER_Get_Number
SamplesToN100nS
UNC_freeWStr
UNC_Utf8ToUnicode
ID3Helper_GetChapter_Name

avcodec-61

av_packet_rescale_ts
avcodec_alloc_context3
av_packet_unref
avcodec_parameters_from_context
avcodec_open2
avcodec_send_frame
avcodec_receive_packet
av_packet_free
av_packet_alloc
avcodec_find_encoder
avcodec_free_context

avformat-61

avio_closep
avformat_free_context
avformat_new_stream
avformat_alloc_output_context2
avformat_write_header
av_interleaved_write_frame
av_write_trailer
avio_open

avutil-59

av_frame_free
av_frame_get_buffer
av_frame_make_writable
av_frame_alloc

mp4v2

MP4TagsSetConductor
MP4TagsSetName
MP4TagsFree
MP4TagsStore
MP4TagsFetch
MP4TagsAlloc
MP4ItmfRemoveItem
MP4ItmfAddItem
MP4ItmfGetItemsByCode
MP4ItmfItemListFree
MP4XtraTagsSetInt
MP4TagsAddArtwork
MP4AddNeroChapter
MP4AddChapterTextTrack
MP4AddChapter
MP4GetTrackTimeScale
MP4SetTrackDuration
MP4GetTrackDuration
MP4FindTrackId
MP4Modify
MP4Close
MP4Malloc
MP4XtraTagsRemove
MP4XtraTagsSetString
MP4TagsSetEncodedBy
MP4TagsSetCopyright
MP4TagsSetISRC
MP4TagsRemoveArtwork
MP4TagsSetSortComposer
MP4TagsSetSortAlbum
MP4TagsSetSortAlbumArtist
MP4TagsSetSortArtist
MP4TagsSetSortName
MP4TagsSetOriginalArtist
MP4TagsSetPublisher
MP4TagsSetLyrics
MP4TagsSetProducer
MP4ItmfItemAlloc
MP4TagsSetArranger
MP4TagsSetLabel
MP4TagsSetCompilation
MP4TagsSetTempo
MP4TagsSetDisk
MP4TagsSetTrack
MP4TagsSetArtist
MP4TagsSetGenreType
MP4TagsSetGenre
MP4TagsSetComments
MP4TagsSetComposer
MP4TagsSetGrouping
MP4TagsSetAlbum
MP4ItmfItemFree
MP4TagsSetAlbumArtist
MP4TagsSetReleaseDate

matroskametadata

?WriteMatroskaMetadata@@YAHPEA_WPEAUID3Helper@@@Z

kernel32

RtlCaptureContext
GetModuleHandleW
DeleteFileW
CloseHandle
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
GetStartupInfoW
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent

vcruntime140

__C_specific_handler
memcpy
_CxxThrowException
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
__current_exception
__current_exception_context
memset
strstr

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-string-l1-1-0

_strdup
strcmp
_stricmp

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_seh_filter_dll
_register_onexit_function
_initterm_e

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_aiff.dll
.dll windows:6 windows x64 arch:x64

c51431fcb661abdaac966687ea6860c4

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

44:ab:21:89:28:90:e2:d8:7b:b2:d0:bf:97:82:c7:5c:27:d2:eb:5d:27:11:fd:32:08:15:c0:30:83:24:53:96
Signer

Actual PE Digest

44:ab:21:89:28:90:e2:d8:7b:b2:d0:bf:97:82:c7:5c:27:d2:eb:5d:27:11:fd:32:08:15:c0:30:83:24:53:96

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\AIFF\encm_\Release\encm_aiff.pdb

Imports

id3lib

?RenderID3_FreeBuffer@@YAXPEAD@Z
?RenderID3@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z

acdbase

ID3Helper_GetDword
ID3Helper_Free
ID3Helper_Copy

user32

wsprintfW

kernel32

GetCurrentProcessId
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
CreateFileW
DeleteFileW
SetFilePointer
WriteFile
CloseHandle
QueryPerformanceCounter
InitializeSListHead
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
RtlCaptureContext

vcruntime140

__std_exception_destroy
_CxxThrowException
__std_type_info_destroy_list
__current_exception
__current_exception_context
memset
__C_specific_handler
memcpy
__std_exception_copy

api-ms-win-crt-math-l1-1-0

frexp
floor
ldexp

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_alac.dll
.dll windows:6 windows x64 arch:x64

fd279bed458d634cbd74de175e809e2b

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fb:91:44:55:ce:e6:02:89:2d:34:8e:0e:9a:3c:00:13:b7:22:17:9d:6a:54:31:97:61:29:f3:bf:0c:f3:4f:75
Signer

Actual PE Digest

fb:91:44:55:ce:e6:02:89:2d:34:8e:0e:9a:3c:00:13:b7:22:17:9d:6a:54:31:97:61:29:f3:bf:0c:f3:4f:75

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\ALAC (Apple)\encm_\Release\encm_alac.pdb

Imports

acdbase

CHAPTERNAME_Get_Number
CHAPTER_Get_Number
ChangeChannelOrder
ID3Helper_Copy
ID3Helper_Free
ID3Helper_GetChapterCount_Position
ID3Helper_GetChapterTotal
ID3Helper_GetChapter_Name
ID3Helper_GetChapter_Position
ID3Helper_GetDword
ID3Helper_GetFirst
ID3Helper_GetFirstImage
ID3Helper_GetNext
ID3Helper_GetNextImage
ID3Helper_IsNaN
N100nSToSamples
SamplesToN100nS
UNC_UnicodeToUtf8
UNC_Utf8ToUnicode
UNC_freeStr
UNC_freeWStr

mp4v2

MP4AddALACAudioTrack
MP4AddChapter
MP4AddChapterTextTrack
MP4AddNeroChapter
MP4Close
MP4CreateEx
MP4FindTrackId
MP4GetTrackDuration
MP4GetTrackTimeScale
MP4ItmfAddItem
MP4ItmfItemAlloc
MP4ItmfItemFree
MP4Malloc
MP4Optimize
MP4SetAudioProfileLevel
MP4SetTimeScale
MP4SetTrackBytesProperty
MP4SetTrackDuration
MP4TagsAddArtwork
MP4TagsAlloc
MP4TagsFree
MP4TagsSetAlbum
MP4TagsSetAlbumArtist
MP4TagsSetArranger
MP4TagsSetArtist
MP4TagsSetComments
MP4TagsSetCompilation
MP4TagsSetComposer
MP4TagsSetConductor
MP4TagsSetCopyright
MP4TagsSetDisk
MP4TagsSetEncodedBy
MP4TagsSetGenre
MP4TagsSetGrouping
MP4TagsSetISRC
MP4TagsSetLabel
MP4TagsSetLyrics
MP4TagsSetName
MP4TagsSetOriginalArtist
MP4TagsSetProducer
MP4TagsSetPublisher
MP4TagsSetReleaseDate
MP4TagsSetSortAlbum
MP4TagsSetSortAlbumArtist
MP4TagsSetSortArtist
MP4TagsSetSortComposer
MP4TagsSetSortName
MP4TagsSetTempo
MP4TagsSetTrack
MP4TagsStore
MP4WriteSample
MP4XtraTagsSetInt
MP4XtraTagsSetString

libmmd

ldexp

kernel32

DeleteFileW
DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleW
GetStartupInfoW
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__current_exception
__current_exception_context
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
memcpy
memset
strstr

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vswprintf

api-ms-win-crt-string-l1-1-0

_strdup
strcmp
strlen
strncpy
wcslen

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_register_onexit_function
_seh_filter_dll
exit
terminate

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

ACDX_Compress
ACDX_Compress.A
ACDX_Compress.L
ACDX_Compress.M
ACDX_Compress.N
ACDX_Compress.P
ACDX_Compress.R
ACDX_Compress.S
ACDX_Compress.V
ACDX_DeinitCompress
ACDX_DeinitCompress.A
ACDX_DeinitCompress.L
ACDX_DeinitCompress.M
ACDX_DeinitCompress.N
ACDX_DeinitCompress.P
ACDX_DeinitCompress.R
ACDX_DeinitCompress.S
ACDX_DeinitCompress.V
ACDX_GetInputFormat
ACDX_GetInputFormat.A
ACDX_GetInputFormat.L
ACDX_GetInputFormat.M
ACDX_GetInputFormat.N
ACDX_GetInputFormat.P
ACDX_GetInputFormat.R
ACDX_GetInputFormat.S
ACDX_GetInputFormat.V
ACDX_InitCompress3
ACDX_InitCompress3.A
ACDX_InitCompress3.L
ACDX_InitCompress3.M
ACDX_InitCompress3.N
ACDX_InitCompress3.P
ACDX_InitCompress3.R
ACDX_InitCompress3.S
ACDX_InitCompress3.V

Sections

.text
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_am4a.dll
.dll windows:6 windows x64 arch:x64

820c682083ed15f45640c94baa49cc4d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:f7:cd:28:40:d4:56:67:92:02:9f:f8:b0:6f:2d:6e:14:f6:80:67:93:00:eb:76:aa:0d:31:7f:39:c5:a9:68
Signer

Actual PE Digest

01:f7:cd:28:40:d4:56:67:92:02:9f:f8:b0:6f:2d:6e:14:f6:80:67:93:00:eb:76:aa:0d:31:7f:39:c5:a9:68

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Ezcddax_Files\Release\x64\encm_a.pdb

Imports

acdbase

ID3Helper_GetFirst
ID3Helper_GetNext
ID3Helper_GetFirstImage
ID3Helper_GetNextImage
CHAPTERNAME_Get_Number
CHAPTER_Get_Number
N100nSToSamples
SamplesToN100nS
ChangeChannelOrder
UNC_freeWStr
UNC_freeStr
UNC_Utf8ToUnicode
UNC_UnicodeToUtf8
ID3Helper_GetChapter_Name
ID3Helper_GetChapterTotal
ID3Helper_GetChapter_Position
ID3Helper_GetChapterCount_Position
ID3Helper_Copy
ID3Helper_IsNaN
ID3Helper_GetDword
ID3Helper_Free

mp4v2

MP4TagsSetComposer
MP4TagsSetGrouping
MP4TagsSetAlbum
MP4TagsSetAlbumArtist
MP4TagsSetArtist
MP4TagsSetName
MP4TagsFree
MP4TagsStore
MP4TagsAlloc
MP4ItmfAddItem
MP4ItmfItemFree
MP4ItmfItemAlloc
MP4AddNeroChapter
MP4AddChapterTextTrack
MP4AddChapter
MP4WriteSample
MP4TagsSetComments
MP4GetTrackNumberOfSamples
MP4SetTrackESConfiguration
MP4GetTrackTimeScale
MP4SetTrackDuration
MP4GetTrackDuration
MP4FindTrackId
MP4AddAudioTrack
MP4SetAudioProfileLevel
MP4SetTimeScale
MP4SetDuration
MP4Optimize
MP4CreateEx
MP4Close
MP4Malloc
MP4SetTrackEditDuration
MP4TagsSetGenre
MP4TagsSetReleaseDate
MP4TagsSetTrack
MP4TagsSetDisk
MP4TagsSetTempo
MP4TagsSetCompilation
MP4TagsSetLabel
MP4TagsSetPublisher
MP4XtraTagsSetInt
MP4SetTrackEditMediaStart
MP4AddTrackEdit
MP4XtraTagsSetString
MP4TagsSetEncodedBy
MP4CreateAudioSampleGroupDescription
MP4TagsSetCopyright
MP4TagsAddArtwork
MP4TagsSetOriginalArtist
MP4TagsSetSortAlbum
MP4TagsSetSortAlbumArtist
MP4TagsSetSortArtist
MP4TagsSetSortName
MP4TagsSetLyrics
MP4TagsSetProducer
MP4TagsSetArranger
MP4TagsSetConductor
MP4SetTrackIntegerProperty
MP4TagsSetISRC
MP4TagsSetSortComposer

coreaudiotoolbox

AudioConverterDispose
AudioConverterGetProperty
AudioConverterGetPropertyInfo
AudioConverterSetProperty
AudioConverterFillComplexBuffer
AudioFormatGetProperty
AudioConverterNew

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

kernel32

GetModuleHandleW
IsProcessorFeaturePresent
DeleteFileW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW

vcruntime140

__current_exception_context
__current_exception
__std_type_info_destroy_list
__C_specific_handler
memset
memmove
memcpy
strstr
_CxxThrowException
__std_exception_destroy
__std_exception_copy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswscanf
__stdio_common_vswprintf
__stdio_common_vsprintf
_write
_read
_lseek
__stdio_common_vsscanf

api-ms-win-crt-string-l1-1-0

_strdup
strcmp

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_invalid_parameter_noinfo_noreturn
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_am4b.dll
.dll windows:6 windows x64 arch:x64

820c682083ed15f45640c94baa49cc4d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:4f:48:8e:7f:79:99:85:2f:58:9b:b4:78:d6:9d:d6:07:8a:25:9d:18:41:ef:25:7a:8e:51:e3:47:f1:53:7f
Signer

Actual PE Digest

30:4f:48:8e:7f:79:99:85:2f:58:9b:b4:78:d6:9d:d6:07:8a:25:9d:18:41:ef:25:7a:8e:51:e3:47:f1:53:7f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Ezcddax_Files\Release\x64\encm_a.pdb

Imports

acdbase

ID3Helper_GetFirst
ID3Helper_GetNext
ID3Helper_GetFirstImage
ID3Helper_GetNextImage
CHAPTERNAME_Get_Number
CHAPTER_Get_Number
N100nSToSamples
SamplesToN100nS
ChangeChannelOrder
UNC_freeWStr
UNC_freeStr
UNC_Utf8ToUnicode
UNC_UnicodeToUtf8
ID3Helper_GetChapter_Name
ID3Helper_GetChapterTotal
ID3Helper_GetChapter_Position
ID3Helper_GetChapterCount_Position
ID3Helper_Copy
ID3Helper_IsNaN
ID3Helper_GetDword
ID3Helper_Free

mp4v2

MP4TagsSetComposer
MP4TagsSetGrouping
MP4TagsSetAlbum
MP4TagsSetAlbumArtist
MP4TagsSetArtist
MP4TagsSetName
MP4TagsFree
MP4TagsStore
MP4TagsAlloc
MP4ItmfAddItem
MP4ItmfItemFree
MP4ItmfItemAlloc
MP4AddNeroChapter
MP4AddChapterTextTrack
MP4AddChapter
MP4WriteSample
MP4TagsSetComments
MP4GetTrackNumberOfSamples
MP4SetTrackESConfiguration
MP4GetTrackTimeScale
MP4SetTrackDuration
MP4GetTrackDuration
MP4FindTrackId
MP4AddAudioTrack
MP4SetAudioProfileLevel
MP4SetTimeScale
MP4SetDuration
MP4Optimize
MP4CreateEx
MP4Close
MP4Malloc
MP4SetTrackEditDuration
MP4TagsSetGenre
MP4TagsSetReleaseDate
MP4TagsSetTrack
MP4TagsSetDisk
MP4TagsSetTempo
MP4TagsSetCompilation
MP4TagsSetLabel
MP4TagsSetPublisher
MP4XtraTagsSetInt
MP4SetTrackEditMediaStart
MP4AddTrackEdit
MP4XtraTagsSetString
MP4TagsSetEncodedBy
MP4CreateAudioSampleGroupDescription
MP4TagsSetCopyright
MP4TagsAddArtwork
MP4TagsSetOriginalArtist
MP4TagsSetSortAlbum
MP4TagsSetSortAlbumArtist
MP4TagsSetSortArtist
MP4TagsSetSortName
MP4TagsSetLyrics
MP4TagsSetProducer
MP4TagsSetArranger
MP4TagsSetConductor
MP4SetTrackIntegerProperty
MP4TagsSetISRC
MP4TagsSetSortComposer

coreaudiotoolbox

AudioConverterDispose
AudioConverterGetProperty
AudioConverterGetPropertyInfo
AudioConverterSetProperty
AudioConverterFillComplexBuffer
AudioFormatGetProperty
AudioConverterNew

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

kernel32

GetModuleHandleW
IsProcessorFeaturePresent
DeleteFileW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW

vcruntime140

__current_exception_context
__current_exception
__std_type_info_destroy_list
__C_specific_handler
memset
memmove
memcpy
strstr
_CxxThrowException
__std_exception_destroy
__std_exception_copy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswscanf
__stdio_common_vswprintf
__stdio_common_vsprintf
_write
_read
_lseek
__stdio_common_vsscanf

api-ms-win-crt-string-l1-1-0

_strdup
strcmp

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_invalid_parameter_noinfo_noreturn
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_ape.dll
.dll windows:6 windows x64 arch:x64

814b5fae36e1a9659fd9341cd68fef8f

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:66:d3:0e:d2:d0:51:6f:d4:47:1e:6e:5e:f6:6f:17:a1:7b:8d:49:ea:be:2c:87:9b:d8:02:48:b7:d8:4b:18
Signer

Actual PE Digest

0d:66:d3:0e:d2:d0:51:6f:d4:47:1e:6e:5e:f6:6f:17:a1:7b:8d:49:ea:be:2c:87:9b:d8:02:48:b7:d8:4b:18

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

acdbase

ID3Helper_Copy
ID3Helper_Free
ID3Helper_GetDword
ID3Helper_GetFirst
ID3Helper_GetFirstImage
ID3Helper_GetNext
ID3Helper_GetNextImage
ID3Helper_IsNaN
UNC_Utf8ToUnicode
UNC_freeWStr

libmmd

ldexp

kernel32

CloseHandle
CreateFileW
DeleteFileW
DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileSize
GetLastError
GetStdHandle
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEndOfFile
SetFileAttributesW
SetFilePointer
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
WideCharToMultiByte
WriteFile

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_destroy_list
_purecall
memcpy
memmove
memset
strstr
wcsrchr

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf

api-ms-win-crt-heap-l1-1-0

_aligned_free
_aligned_malloc
_callnewh
calloc
free
malloc

api-ms-win-crt-convert-l1-1-0

_itoa_s
_wtoi
atoi

api-ms-win-crt-string-l1-1-0

_strnicmp
_wcsicmp
strcmp
strcpy_s
strlen
strncpy
towlower
wcscat
wcscat_s
wcscmp
wcscpy
wcscpy_s
wcslen

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
exit

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3
CompressFile
CompressFileW
CompressFileW2
CompressFileW2.A
CompressFileW2.L
CompressFileW2.M
CompressFileW2.N
CompressFileW2.P
CompressFileW2.R
CompressFileW2.S
CompressFileW2.V
ConvertFile
ConvertFileW
ConvertFileW2
CreateIAPECompress
CreateIAPEDecompress
CreateIAPEDecompress.A
CreateIAPEDecompress.L
CreateIAPEDecompress.M
CreateIAPEDecompress.N
CreateIAPEDecompress.P
CreateIAPEDecompress.R
CreateIAPEDecompress.S
CreateIAPEDecompress.V
CreateIAPEDecompressEx
CreateIAPEDecompressEx2
DecompressFile
DecompressFileW
DecompressFileW2
FillRF64Header
FillRF64Header.A
FillRF64Header.L
FillRF64Header.M
FillRF64Header.N
FillRF64Header.P
FillRF64Header.R
FillRF64Header.S
FillRF64Header.V
FillWaveFormatEx
FillWaveHeader
FillWaveHeader.A
FillWaveHeader.L
FillWaveHeader.M
FillWaveHeader.N
FillWaveHeader.P
FillWaveHeader.R
FillWaveHeader.S
FillWaveHeader.V
GetAPECompressionLevelName
GetAPEFileType
VerifyFile
VerifyFileW
VerifyFileW2
VerifyFileW2.A
VerifyFileW2.L
VerifyFileW2.M
VerifyFileW2.N
VerifyFileW2.P
VerifyFileW2.R
VerifyFileW2.S
VerifyFileW2.V

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_au.dll
.dll windows:6 windows x64 arch:x64

624ff837b802deb97b9c2dd7c0cc28a9

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

99:a9:2c:aa:c2:68:37:56:e6:21:b5:ea:22:7b:b0:d2:cb:66:1d:9f:e4:8f:bc:3d:da:06:63:08:43:a0:6e:c6
Signer

Actual PE Digest

99:a9:2c:aa:c2:68:37:56:e6:21:b5:ea:22:7b:b0:d2:cb:66:1d:9f:e4:8f:bc:3d:da:06:63:08:43:a0:6e:c6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\AU\encm_\Release\encm_au.pdb

Imports

user32

wsprintfW

kernel32

DisableThreadLibraryCalls
GetModuleHandleW
CreateFileW
DeleteFileW
SetFilePointer
WriteFile
CloseHandle
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetStartupInfoW
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent

vcruntime140

__C_specific_handler
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__std_type_info_destroy_list
__current_exception
__current_exception_context
memset
memcpy

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initterm
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_initterm_e
_initialize_onexit_table

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_dff.dll
.dll windows:6 windows x64 arch:x64

c0145c388fb9c980b416595994d1c3ff

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

23:e6:7b:79:4f:1e:55:f2:f1:44:ee:8f:45:cd:e5:40:bc:ba:22:be:41:8a:52:2a:b6:ae:19:48:a0:a8:40:06
Signer

Actual PE Digest

23:e6:7b:79:4f:1e:55:f2:f1:44:ee:8f:45:cd:e5:40:bc:ba:22:be:41:8a:52:2a:b6:ae:19:48:a0:a8:40:06

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\DFF\encm_\Release\encm_dff.pdb

Imports

acdbase

ID3Helper_Copy
ID3Helper_Free
ID3Helper_GetDword

user32

wsprintfW

id3lib

?RenderID3@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z
?RenderID3_FreeBuffer@@YAXPEAD@Z

kernel32

CloseHandle
CreateFileW
DeleteFileW
DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleW
GetStartupInfoW
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetFilePointerEx
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WriteFile

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__current_exception
__current_exception_context
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
memcpy
memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc

api-ms-win-crt-string-l1-1-0

strcmp
strlen
strncat
strncpy
wcslen

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_register_onexit_function
_seh_filter_dll
exit
terminate

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

ACDX_ChangeInputFormat
ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_dsf.dll
.dll windows:6 windows x64 arch:x64

90248270e273673c008ecda43315bf9b

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f5:ea:68:3b:a3:ae:b1:dd:59:54:83:a8:82:08:db:27:3e:1a:52:f5:07:21:88:34:01:df:75:d1:4b:97:f8:d1
Signer

Actual PE Digest

f5:ea:68:3b:a3:ae:b1:dd:59:54:83:a8:82:08:db:27:3e:1a:52:f5:07:21:88:34:01:df:75:d1:4b:97:f8:d1

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\DSF\encm_\Release\encm_dsf.pdb

Imports

acdbase

ID3Helper_Copy
ID3Helper_Free
ID3Helper_GetDword

user32

wsprintfW

id3lib

?RenderID3@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z
?RenderID3_FreeBuffer@@YAXPEAD@Z

kernel32

CloseHandle
CreateFileW
DeleteFileW
DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleW
GetStartupInfoW
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetFilePointer
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WriteFile

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__current_exception
__current_exception_context
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
memcpy
memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc

api-ms-win-crt-string-l1-1-0

strcmp
strlen
strncat
strncpy
wcslen

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_register_onexit_function
_seh_filter_dll
exit
terminate

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

ACDX_ChangeInputFormat
ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_dts.dll
.dll windows:6 windows x64 arch:x64

c2716a84a574ca6d0c1356b21474cba4

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c6:6b:1f:d1:4d:87:8f:ca:48:d1:da:a3:93:42:63:49:a6:ab:e1:3e:29:71:dd:07:18:d5:11:88:5d:3a:61:ea
Signer

Actual PE Digest

c6:6b:1f:d1:4d:87:8f:ca:48:d1:da:a3:93:42:63:49:a6:ab:e1:3e:29:71:dd:07:18:d5:11:88:5d:3a:61:ea

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\DTS (ffmpeg)\encm_\Release\encm_dts.pdb

Imports

user32

wsprintfW

acdbase

ID3Helper_GetChapter_Position
ID3Helper_GetDword
ID3Helper_GetChapterTotal
ID3Helper_GetChapter_Name
UNC_Utf8ToUnicode
ID3Helper_GetChapterCount_Position
ID3Helper_IsNaN
ID3Helper_GetNextImage
ID3Helper_GetFirstImage
ID3Helper_GetNext
ID3Helper_GetFirst
UNC_freeStr
CHAPTERNAME_Get_Number
ffmpeg_global_unlock
ffmpeg_global_lock
ID3Helper_Free
CHAPTER_Get_Number
N100nSToSamples
SamplesToN100nS
UNC_freeWStr

avcodec-61

avcodec_alloc_context3
av_packet_unref
avcodec_open2
avcodec_send_frame
avcodec_receive_packet
av_packet_free
av_packet_alloc
avcodec_find_encoder
avcodec_free_context

avformat-61

avformat_free_context

avutil-59

av_frame_free
av_frame_get_buffer
av_frame_make_writable
av_frame_alloc

mp4v2

MP4TagsSetSortAlbum
MP4TagsSetReleaseDate
MP4TagsSetGenreType
MP4TagsSetGenre
MP4TagsSetComments
MP4TagsSetComposer
MP4TagsSetGrouping
MP4TagsSetAlbum
MP4TagsSetAlbumArtist
MP4TagsSetArtist
MP4TagsSetName
MP4TagsFree
MP4TagsStore
MP4TagsFetch
MP4TagsSetSortAlbumArtist
MP4ItmfRemoveItem
MP4XtraTagsSetInt
MP4ItmfGetItemsByCode
MP4ItmfItemListFree
MP4ItmfItemFree
MP4ItmfItemAlloc
MP4AddNeroChapter
MP4AddChapterTextTrack
MP4AddChapter
MP4GetTrackTimeScale
MP4SetTrackDuration
MP4GetTrackDuration
MP4FindTrackId
MP4Modify
MP4Close
MP4Malloc
MP4XtraTagsRemove
MP4XtraTagsSetString
MP4TagsSetSortArtist
MP4TagsSetSortName
MP4TagsSetEncodedBy
MP4TagsSetCopyright
MP4TagsAddArtwork
MP4TagsRemoveArtwork
MP4ItmfAddItem
MP4TagsSetSortComposer
MP4TagsSetLyrics
MP4TagsSetProducer
MP4TagsSetArranger
MP4TagsSetConductor
MP4TagsSetISRC
MP4TagsSetOriginalArtist
MP4TagsSetPublisher
MP4TagsSetTrack
MP4TagsSetCompilation
MP4TagsSetTempo
MP4TagsAlloc
MP4TagsSetDisk
MP4TagsSetLabel

kernel32

CreateFileW
DeleteFileW
WriteFile
CloseHandle
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW

vcruntime140

__std_exception_copy
memset
strstr
__C_specific_handler
__std_exception_destroy
_CxxThrowException
__std_type_info_destroy_list
__current_exception
__current_exception_context
memcpy

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-string-l1-1-0

_strdup
strcmp
_stricmp

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm_e
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_seh_filter_dll
_register_onexit_function
_initterm

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_dtsm4a.dll
.dll windows:6 windows x64 arch:x64

692aab7faf40e0d60db087f0e7183de1

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:ca:18:14:a6:10:52:e2:f9:16:af:9b:8c:21:be:b8:46:aa:00:21:bf:4f:7c:85:8f:b8:1f:27:0a:64:62:0f
Signer

Actual PE Digest

2e:ca:18:14:a6:10:52:e2:f9:16:af:9b:8c:21:be:b8:46:aa:00:21:bf:4f:7c:85:8f:b8:1f:27:0a:64:62:0f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\DTS (ffmpeg)\encm_\Release\encm_dts.pdb

Imports

user32

wsprintfW

acdbase

UNC_freeStr
ID3Helper_GetFirst
ID3Helper_GetNext
ID3Helper_GetFirstImage
ffmpeg_global_unlock
ID3Helper_GetNextImage
ID3Helper_IsNaN
ID3Helper_GetChapterCount_Position
ID3Helper_GetChapter_Position
ID3Helper_GetChapterTotal
UNC_UnicodeToUtf8
ffmpeg_global_lock
ID3Helper_Copy
UNC_freeWStr
ID3Helper_GetDword
ID3Helper_Free
CHAPTERNAME_Get_Number
CHAPTER_Get_Number
N100nSToSamples
SamplesToN100nS
UNC_Utf8ToUnicode
ID3Helper_GetChapter_Name

avcodec-61

av_packet_rescale_ts
avcodec_alloc_context3
av_packet_unref
avcodec_parameters_from_context
avcodec_open2
avcodec_send_frame
avcodec_receive_packet
av_packet_free
av_packet_alloc
avcodec_find_encoder
avcodec_free_context

avformat-61

avio_closep
avformat_free_context
avformat_new_stream
avformat_alloc_output_context2
avformat_write_header
av_interleaved_write_frame
av_write_trailer
avio_open

avutil-59

av_frame_free
av_frame_get_buffer
av_frame_make_writable
av_frame_alloc

mp4v2

MP4XtraTagsSetString
MP4XtraTagsSetInt
MP4XtraTagsRemove
MP4TagsSetPublisher
MP4TagsFetch
MP4TagsAlloc
MP4ItmfRemoveItem
MP4ItmfAddItem
MP4ItmfGetItemsByCode
MP4ItmfItemListFree
MP4TagsSetLabel
MP4TagsSetCopyright
MP4TagsSetSortAlbumArtist
MP4AddChapterTextTrack
MP4AddChapter
MP4GetTrackTimeScale
MP4SetTrackDuration
MP4GetTrackDuration
MP4FindTrackId
MP4Modify
MP4Close
MP4Malloc
MP4Optimize
MP4TagsSetEncodedBy
MP4TagsRemoveArtwork
MP4TagsAddArtwork
MP4TagsSetSortComposer
MP4ItmfItemAlloc
MP4TagsSetSortAlbum
MP4TagsSetSortArtist
MP4TagsSetSortName
MP4TagsSetLyrics
MP4TagsSetProducer
MP4TagsSetArranger
MP4TagsSetCompilation
MP4TagsSetTempo
MP4TagsSetConductor
MP4TagsSetISRC
MP4AddNeroChapter
MP4TagsSetOriginalArtist
MP4TagsSetDisk
MP4TagsSetTrack
MP4TagsSetReleaseDate
MP4TagsSetGenreType
MP4TagsStore
MP4TagsSetComments
MP4TagsSetComposer
MP4TagsSetGrouping
MP4TagsSetAlbum
MP4TagsSetAlbumArtist
MP4TagsSetArtist
MP4TagsSetName
MP4ItmfItemFree
MP4TagsFree
MP4TagsSetGenre

kernel32

DeleteFileW
CloseHandle
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW

vcruntime140

strstr
__C_specific_handler
__std_exception_copy
memset
__std_type_info_destroy_list
__std_exception_destroy
_CxxThrowException
__current_exception
__current_exception_context
memcpy

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-string-l1-1-0

_strdup
strcmp
_stricmp

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_initterm_e
_register_onexit_function
_seh_filter_dll

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_dtsmka.dll
.dll windows:6 windows x64 arch:x64

20e4054efd8a1976b46c603880aa265d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:e4:d0:b7:c6:f7:e9:ac:ad:65:31:f9:33:20:ea:50:98:f1:3d:40:66:1d:fd:51:45:69:53:f0:d3:66:5a:3b
Signer

Actual PE Digest

36:e4:d0:b7:c6:f7:e9:ac:ad:65:31:f9:33:20:ea:50:98:f1:3d:40:66:1d:fd:51:45:69:53:f0:d3:66:5a:3b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\DTS (ffmpeg)\encm_\Release\encm_dts.pdb

Imports

user32

wsprintfW

acdbase

ID3Helper_GetNext
ID3Helper_GetFirstImage
ID3Helper_GetNextImage
UNC_freeStr
ID3Helper_IsNaN
ID3Helper_GetChapterCount_Position
ID3Helper_GetChapter_Position
ID3Helper_GetChapterTotal
ID3Helper_GetFirst
UNC_UnicodeToUtf8
ffmpeg_global_unlock
ffmpeg_global_lock
ID3Helper_Copy
N100nSToSamples
ID3Helper_GetDword
ID3Helper_Free
CHAPTERNAME_Get_Number
CHAPTER_Get_Number
SamplesToN100nS
UNC_freeWStr
UNC_Utf8ToUnicode
ID3Helper_GetChapter_Name

avcodec-61

av_packet_rescale_ts
avcodec_alloc_context3
av_packet_unref
avcodec_parameters_from_context
avcodec_open2
avcodec_send_frame
avcodec_receive_packet
av_packet_free
av_packet_alloc
avcodec_find_encoder
avcodec_free_context

avformat-61

avio_closep
avformat_free_context
avformat_new_stream
avformat_alloc_output_context2
avformat_write_header
av_interleaved_write_frame
av_write_trailer
avio_open

avutil-59

av_frame_free
av_frame_get_buffer
av_frame_make_writable
av_frame_alloc

mp4v2

MP4TagsSetConductor
MP4TagsSetName
MP4TagsFree
MP4TagsStore
MP4TagsFetch
MP4TagsAlloc
MP4ItmfRemoveItem
MP4ItmfAddItem
MP4ItmfGetItemsByCode
MP4ItmfItemListFree
MP4XtraTagsSetInt
MP4TagsAddArtwork
MP4AddNeroChapter
MP4AddChapterTextTrack
MP4AddChapter
MP4GetTrackTimeScale
MP4SetTrackDuration
MP4GetTrackDuration
MP4FindTrackId
MP4Modify
MP4Close
MP4Malloc
MP4XtraTagsRemove
MP4XtraTagsSetString
MP4TagsSetEncodedBy
MP4TagsSetCopyright
MP4TagsSetISRC
MP4TagsRemoveArtwork
MP4TagsSetSortComposer
MP4TagsSetSortAlbum
MP4TagsSetSortAlbumArtist
MP4TagsSetSortArtist
MP4TagsSetSortName
MP4TagsSetOriginalArtist
MP4TagsSetPublisher
MP4TagsSetLyrics
MP4TagsSetProducer
MP4ItmfItemAlloc
MP4TagsSetArranger
MP4TagsSetLabel
MP4TagsSetCompilation
MP4TagsSetTempo
MP4TagsSetDisk
MP4TagsSetTrack
MP4TagsSetArtist
MP4TagsSetGenreType
MP4TagsSetGenre
MP4TagsSetComments
MP4TagsSetComposer
MP4TagsSetGrouping
MP4TagsSetAlbum
MP4ItmfItemFree
MP4TagsSetAlbumArtist
MP4TagsSetReleaseDate

matroskametadata

?WriteMatroskaMetadata@@YAHPEA_WPEAUID3Helper@@@Z

kernel32

RtlCaptureContext
GetModuleHandleW
DeleteFileW
CloseHandle
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
GetStartupInfoW
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent

vcruntime140

strstr
memset
__std_exception_destroy
__C_specific_handler
__std_exception_copy
_CxxThrowException
__std_type_info_destroy_list
__current_exception
__current_exception_context
memcpy

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-string-l1-1-0

_strdup
strcmp
_stricmp

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_seh_filter_dll
_register_onexit_function
_initterm_e

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_eac3.dll
.dll windows:6 windows x64 arch:x64

5b5786470f3a68e8165be91d9fcd38e5

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1f:a1:38:3d:85:d0:ac:d1:01:30:59:46:85:31:0b:79:f2:64:b7:04:7b:3d:5d:2c:f4:c9:de:a0:5d:4e:d5:a8
Signer

Actual PE Digest

1f:a1:38:3d:85:d0:ac:d1:01:30:59:46:85:31:0b:79:f2:64:b7:04:7b:3d:5d:2c:f4:c9:de:a0:5d:4e:d5:a8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\EAC3 (ffmpeg)\encm_\Release\encm_eac3.pdb

Imports

user32

wsprintfW

acdbase

ID3Helper_GetChapter_Position
ID3Helper_GetDword
ID3Helper_GetChapterTotal
ID3Helper_GetChapter_Name
UNC_Utf8ToUnicode
ID3Helper_GetChapterCount_Position
ID3Helper_IsNaN
ID3Helper_GetNextImage
ID3Helper_GetFirstImage
ID3Helper_GetNext
ID3Helper_GetFirst
UNC_freeStr
CHAPTERNAME_Get_Number
ffmpeg_global_unlock
ffmpeg_global_lock
ID3Helper_Free
CHAPTER_Get_Number
N100nSToSamples
SamplesToN100nS
UNC_freeWStr

avcodec-61

avcodec_alloc_context3
av_packet_unref
avcodec_open2
avcodec_send_frame
avcodec_receive_packet
av_packet_free
av_packet_alloc
avcodec_find_encoder
avcodec_free_context

avformat-61

avformat_free_context

avutil-59

av_frame_free
av_frame_get_buffer
av_frame_make_writable
av_frame_alloc

mp4v2

MP4TagsSetSortAlbum
MP4TagsSetReleaseDate
MP4TagsSetGenreType
MP4TagsSetGenre
MP4TagsSetComments
MP4TagsSetComposer
MP4TagsSetGrouping
MP4TagsSetAlbum
MP4TagsSetAlbumArtist
MP4TagsSetArtist
MP4TagsSetName
MP4TagsFree
MP4TagsStore
MP4TagsFetch
MP4TagsSetSortAlbumArtist
MP4ItmfRemoveItem
MP4XtraTagsSetInt
MP4ItmfGetItemsByCode
MP4ItmfItemListFree
MP4ItmfItemFree
MP4ItmfItemAlloc
MP4AddNeroChapter
MP4AddChapterTextTrack
MP4AddChapter
MP4GetTrackTimeScale
MP4SetTrackDuration
MP4GetTrackDuration
MP4FindTrackId
MP4Modify
MP4Close
MP4Malloc
MP4XtraTagsRemove
MP4XtraTagsSetString
MP4TagsSetSortArtist
MP4TagsSetSortName
MP4TagsSetEncodedBy
MP4TagsSetCopyright
MP4TagsAddArtwork
MP4TagsRemoveArtwork
MP4ItmfAddItem
MP4TagsSetSortComposer
MP4TagsSetLyrics
MP4TagsSetProducer
MP4TagsSetArranger
MP4TagsSetConductor
MP4TagsSetISRC
MP4TagsSetOriginalArtist
MP4TagsSetPublisher
MP4TagsSetTrack
MP4TagsSetCompilation
MP4TagsSetTempo
MP4TagsAlloc
MP4TagsSetDisk
MP4TagsSetLabel

kernel32

CreateFileW
DeleteFileW
WriteFile
CloseHandle
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW

vcruntime140

__std_exception_destroy
memcpy
__C_specific_handler
__std_exception_copy
_CxxThrowException
__std_type_info_destroy_list
__current_exception
__current_exception_context
memset
strstr

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-string-l1-1-0

_strdup
strcmp
_stricmp

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm_e
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_seh_filter_dll
_register_onexit_function
_initterm

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_eac3m4a.dll
.dll windows:6 windows x64 arch:x64

6cee6e73f43ef8b09c25c2172a34adc1

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

44:19:ae:13:19:6d:19:52:5f:c1:fa:3f:28:99:58:58:3a:96:99:b2:a5:de:95:6a:03:56:cd:6d:12:44:d0:46
Signer

Actual PE Digest

44:19:ae:13:19:6d:19:52:5f:c1:fa:3f:28:99:58:58:3a:96:99:b2:a5:de:95:6a:03:56:cd:6d:12:44:d0:46

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\EAC3 (ffmpeg)\encm_\Release\encm_eac3.pdb

Imports

user32

wsprintfW

acdbase

UNC_freeStr
ID3Helper_GetFirst
ID3Helper_GetNext
ID3Helper_GetFirstImage
ffmpeg_global_unlock
ID3Helper_GetNextImage
ID3Helper_IsNaN
ID3Helper_GetChapterCount_Position
ID3Helper_GetChapter_Position
ID3Helper_GetChapterTotal
UNC_UnicodeToUtf8
ffmpeg_global_lock
ID3Helper_Copy
UNC_freeWStr
ID3Helper_GetDword
ID3Helper_Free
CHAPTERNAME_Get_Number
CHAPTER_Get_Number
N100nSToSamples
SamplesToN100nS
UNC_Utf8ToUnicode
ID3Helper_GetChapter_Name

avcodec-61

av_packet_rescale_ts
avcodec_alloc_context3
av_packet_unref
avcodec_parameters_from_context
avcodec_open2
avcodec_send_frame
avcodec_receive_packet
av_packet_free
av_packet_alloc
avcodec_find_encoder
avcodec_free_context

avformat-61

avio_closep
avformat_free_context
avformat_new_stream
avformat_alloc_output_context2
avformat_write_header
av_interleaved_write_frame
av_write_trailer
avio_open

avutil-59

av_frame_free
av_frame_get_buffer
av_frame_make_writable
av_frame_alloc

mp4v2

MP4XtraTagsSetString
MP4XtraTagsSetInt
MP4XtraTagsRemove
MP4TagsSetPublisher
MP4TagsFetch
MP4TagsAlloc
MP4ItmfRemoveItem
MP4ItmfAddItem
MP4ItmfGetItemsByCode
MP4ItmfItemListFree
MP4TagsSetLabel
MP4TagsSetCopyright
MP4TagsSetSortAlbumArtist
MP4AddChapterTextTrack
MP4AddChapter
MP4GetTrackTimeScale
MP4SetTrackDuration
MP4GetTrackDuration
MP4FindTrackId
MP4Modify
MP4Close
MP4Malloc
MP4Optimize
MP4TagsSetEncodedBy
MP4TagsRemoveArtwork
MP4TagsAddArtwork
MP4TagsSetSortComposer
MP4ItmfItemAlloc
MP4TagsSetSortAlbum
MP4TagsSetSortArtist
MP4TagsSetSortName
MP4TagsSetLyrics
MP4TagsSetProducer
MP4TagsSetArranger
MP4TagsSetCompilation
MP4TagsSetTempo
MP4TagsSetConductor
MP4TagsSetISRC
MP4AddNeroChapter
MP4TagsSetOriginalArtist
MP4TagsSetDisk
MP4TagsSetTrack
MP4TagsSetReleaseDate
MP4TagsSetGenreType
MP4TagsStore
MP4TagsSetComments
MP4TagsSetComposer
MP4TagsSetGrouping
MP4TagsSetAlbum
MP4TagsSetAlbumArtist
MP4TagsSetArtist
MP4TagsSetName
MP4ItmfItemFree
MP4TagsFree
MP4TagsSetGenre

kernel32

DeleteFileW
CloseHandle
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW

vcruntime140

__C_specific_handler
__std_exception_copy
__std_exception_destroy
memcpy
__current_exception
_CxxThrowException
__std_type_info_destroy_list
__current_exception_context
memset
strstr

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-string-l1-1-0

_strdup
strcmp
_stricmp

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_initterm_e
_register_onexit_function
_seh_filter_dll

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_eac3mka.dll
.dll windows:6 windows x64 arch:x64

05ca69f9f11b5278bdbebbb13f93cd24

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

34:4b:d6:40:3a:41:dd:ee:11:af:c8:9b:3d:d3:7d:5c:b9:74:8d:2d:d7:f6:98:db:48:9e:b7:0b:26:ad:84:b3
Signer

Actual PE Digest

34:4b:d6:40:3a:41:dd:ee:11:af:c8:9b:3d:d3:7d:5c:b9:74:8d:2d:d7:f6:98:db:48:9e:b7:0b:26:ad:84:b3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\EAC3 (ffmpeg)\encm_\Release\encm_eac3.pdb

Imports

user32

wsprintfW

acdbase

ID3Helper_GetNext
ID3Helper_GetFirstImage
ID3Helper_GetNextImage
UNC_freeStr
ID3Helper_IsNaN
ID3Helper_GetChapterCount_Position
ID3Helper_GetChapter_Position
ID3Helper_GetChapterTotal
ID3Helper_GetFirst
UNC_UnicodeToUtf8
ffmpeg_global_unlock
ffmpeg_global_lock
ID3Helper_Copy
N100nSToSamples
ID3Helper_GetDword
ID3Helper_Free
CHAPTERNAME_Get_Number
CHAPTER_Get_Number
SamplesToN100nS
UNC_freeWStr
UNC_Utf8ToUnicode
ID3Helper_GetChapter_Name

avcodec-61

av_packet_rescale_ts
avcodec_alloc_context3
av_packet_unref
avcodec_parameters_from_context
avcodec_open2
avcodec_send_frame
avcodec_receive_packet
av_packet_free
av_packet_alloc
avcodec_find_encoder
avcodec_free_context

avformat-61

avio_closep
avformat_free_context
avformat_new_stream
avformat_alloc_output_context2
avformat_write_header
av_interleaved_write_frame
av_write_trailer
avio_open

avutil-59

av_frame_free
av_frame_get_buffer
av_frame_make_writable
av_frame_alloc

mp4v2

MP4TagsSetConductor
MP4TagsSetName
MP4TagsFree
MP4TagsStore
MP4TagsFetch
MP4TagsAlloc
MP4ItmfRemoveItem
MP4ItmfAddItem
MP4ItmfGetItemsByCode
MP4ItmfItemListFree
MP4XtraTagsSetInt
MP4TagsAddArtwork
MP4AddNeroChapter
MP4AddChapterTextTrack
MP4AddChapter
MP4GetTrackTimeScale
MP4SetTrackDuration
MP4GetTrackDuration
MP4FindTrackId
MP4Modify
MP4Close
MP4Malloc
MP4XtraTagsRemove
MP4XtraTagsSetString
MP4TagsSetEncodedBy
MP4TagsSetCopyright
MP4TagsSetISRC
MP4TagsRemoveArtwork
MP4TagsSetSortComposer
MP4TagsSetSortAlbum
MP4TagsSetSortAlbumArtist
MP4TagsSetSortArtist
MP4TagsSetSortName
MP4TagsSetOriginalArtist
MP4TagsSetPublisher
MP4TagsSetLyrics
MP4TagsSetProducer
MP4ItmfItemAlloc
MP4TagsSetArranger
MP4TagsSetLabel
MP4TagsSetCompilation
MP4TagsSetTempo
MP4TagsSetDisk
MP4TagsSetTrack
MP4TagsSetArtist
MP4TagsSetGenreType
MP4TagsSetGenre
MP4TagsSetComments
MP4TagsSetComposer
MP4TagsSetGrouping
MP4TagsSetAlbum
MP4ItmfItemFree
MP4TagsSetAlbumArtist
MP4TagsSetReleaseDate

matroskametadata

?WriteMatroskaMetadata@@YAHPEA_WPEAUID3Helper@@@Z

kernel32

RtlCaptureContext
GetModuleHandleW
DeleteFileW
CloseHandle
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
GetStartupInfoW
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent

vcruntime140

__C_specific_handler
memcpy
_CxxThrowException
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
__current_exception
__current_exception_context
memset
strstr

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-string-l1-1-0

_strdup
strcmp
_stricmp

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_seh_filter_dll
_register_onexit_function
_initterm_e

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_flac.dll
.dll windows:6 windows x64 arch:x64

55c3e946fe80a509f308e544b35719cd

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

92:b4:36:95:93:34:3a:e9:7a:53:45:81:79:3f:df:24:91:6d:ac:a9:42:43:90:40:a4:89:5f:08:9d:4b:5b:26
Signer

Actual PE Digest

92:b4:36:95:93:34:3a:e9:7a:53:45:81:79:3f:df:24:91:6d:ac:a9:42:43:90:40:a4:89:5f:08:9d:4b:5b:26

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\FLAC\encm_\Release\encm_flac.pdb

Imports

acdbase

ID3Helper_GetDword
ID3Helper_GetFirst
ID3Helper_GetFirstImage
ID3Helper_GetNext
ID3Helper_GetNextImage
ID3Helper_IsNaN
UNC_UnicodeToUtf8
UNC_freeStr

libmmd

cosf
exp
frexp
ldexp
log
lround

kernel32

CloseHandle
CreateEventA
CreateFileW
CreateSemaphoreA
DeleteFileW
DuplicateHandle
FormatMessageA
FreeLibrary
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetFileType
GetLastError
GetModuleHandleW
GetProcAddress
GetProcessAffinityMask
GetStartupInfoW
GetStdHandle
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetThreadContext
GetThreadLocale
GetThreadPriority
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryA
LoadLibraryExA
LoadLibraryW
LocalFree
MultiByteToWideChar
OpenProcess
QueryPerformanceCounter
RaiseException
ReleaseSemaphore
ResetEvent
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW

vcruntime140

_CxxThrowException
__C_specific_handler
__current_exception
__current_exception_context
__intrinsic_setjmp
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
longjmp
memchr
memcmp
memcpy
memmove
memset
strchr

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsnprintf_s
__stdio_common_vsprintf
__stdio_common_vswprintf
_fileno
_fseeki64
_ftelli64
_get_osfhandle
_setmode
_wfopen
fclose
feof
ferror
fputws
fread
fwrite
setvbuf

api-ms-win-crt-runtime-l1-1-0

_beginthreadex
_cexit
_configure_narrow_argv
_crt_at_quick_exit
_crt_atexit
_endthreadex
_execute_onexit_table
_get_errno
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_register_onexit_function
_seh_filter_dll
_set_errno
exit
terminate

api-ms-win-crt-filesystem-l1-1-0

_fstat64
_wchmod
_wrename
_wstat64
_wunlink

api-ms-win-crt-string-l1-1-0

_strdup
_strnicmp
strcmp
strlen
strncat
strncat_s
strncmp
strncpy
wcslen

api-ms-win-crt-time-l1-1-0

_wutime64

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc
realloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-convert-l1-1-0

strtod

api-ms-win-crt-environment-l1-1-0

getenv

svml_dispmd

__svml_cosf1
__svml_cosf1_e9
__svml_cosf1_l9
__svml_cosf4
__svml_cosf8_e9
__svml_cosf8_l9
__svml_cosf8_mask_e9
__svml_exp1
__svml_exp1_e9
__svml_exp2
__svml_exp4_e9
__svml_exp4_l9
__svml_exp4_mask_e9
__svml_log1
__svml_log1_e9
__svml_log1_l9
__svml_log2_mask
__svml_log4_mask_e9

Exports

Exports

ACDX_Compress
ACDX_Compress.A
ACDX_Compress.L
ACDX_Compress.M
ACDX_Compress.N
ACDX_Compress.P
ACDX_Compress.R
ACDX_Compress.S
ACDX_Compress.V
ACDX_DeinitCompress
ACDX_DeinitCompress.A
ACDX_DeinitCompress.L
ACDX_DeinitCompress.M
ACDX_DeinitCompress.N
ACDX_DeinitCompress.P
ACDX_DeinitCompress.R
ACDX_DeinitCompress.S
ACDX_DeinitCompress.V
ACDX_GetInputFormat
ACDX_GetInputFormat.A
ACDX_GetInputFormat.L
ACDX_GetInputFormat.M
ACDX_GetInputFormat.N
ACDX_GetInputFormat.P
ACDX_GetInputFormat.R
ACDX_GetInputFormat.S
ACDX_GetInputFormat.V
ACDX_InitCompress3
ACDX_InitCompress3.A
ACDX_InitCompress3.L
ACDX_InitCompress3.M
ACDX_InitCompress3.N
ACDX_InitCompress3.P
ACDX_InitCompress3.R
ACDX_InitCompress3.S
ACDX_InitCompress3.V
__ptw32_get_exception_services_code
__ptw32_pop_cleanup
__ptw32_push_cleanup
_sched_affinitycpuand
_sched_affinitycpuclr
_sched_affinitycpucount
_sched_affinitycpuequal
_sched_affinitycpuisset
_sched_affinitycpuor
_sched_affinitycpuset
_sched_affinitycpuxor
_sched_affinitycpuzero
pthreadCancelableTimedWait
pthreadCancelableWait
pthread_attr_destroy
pthread_attr_getaffinity_np
pthread_attr_getdetachstate
pthread_attr_getinheritsched
pthread_attr_getname_np
pthread_attr_getschedparam
pthread_attr_getschedpolicy
pthread_attr_getscope
pthread_attr_getstackaddr
pthread_attr_getstacksize
pthread_attr_init
pthread_attr_setaffinity_np
pthread_attr_setdetachstate
pthread_attr_setinheritsched
pthread_attr_setname_np
pthread_attr_setschedparam
pthread_attr_setschedpolicy
pthread_attr_setscope
pthread_attr_setstackaddr
pthread_attr_setstacksize
pthread_barrier_destroy
pthread_barrier_init
pthread_barrier_wait
pthread_barrierattr_destroy
pthread_barrierattr_getpshared
pthread_barrierattr_init
pthread_barrierattr_setpshared
pthread_cancel
pthread_cond_broadcast
pthread_cond_destroy
pthread_cond_init
pthread_cond_signal
pthread_cond_timedwait
pthread_cond_wait
pthread_condattr_destroy
pthread_condattr_getpshared
pthread_condattr_init
pthread_condattr_setpshared
pthread_create
pthread_delay_np
pthread_detach
pthread_equal
pthread_exit
pthread_getaffinity_np
pthread_getconcurrency
pthread_getname_np
pthread_getschedparam
pthread_getspecific
pthread_getunique_np
pthread_getw32threadhandle_np
pthread_getw32threadid_np
pthread_join
pthread_key_create
pthread_key_delete
pthread_kill
pthread_mutex_consistent
pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_timedlock
pthread_mutex_trylock
pthread_mutex_unlock
pthread_mutexattr_destroy
pthread_mutexattr_getkind_np
pthread_mutexattr_getpshared
pthread_mutexattr_getrobust
pthread_mutexattr_gettype
pthread_mutexattr_init
pthread_mutexattr_setkind_np
pthread_mutexattr_setpshared
pthread_mutexattr_setrobust
pthread_mutexattr_settype
pthread_num_processors_np
pthread_once
pthread_rwlock_destroy
pthread_rwlock_init
pthread_rwlock_rdlock
pthread_rwlock_timedrdlock
pthread_rwlock_timedwrlock
pthread_rwlock_tryrdlock
pthread_rwlock_trywrlock
pthread_rwlock_unlock
pthread_rwlock_wrlock
pthread_rwlockattr_destroy
pthread_rwlockattr_getpshared
pthread_rwlockattr_init
pthread_rwlockattr_setpshared
pthread_self
pthread_setaffinity_np
pthread_setcancelstate
pthread_setcanceltype
pthread_setconcurrency
pthread_setname_np
pthread_setschedparam
pthread_setspecific
pthread_spin_destroy
pthread_spin_init
pthread_spin_lock
pthread_spin_trylock
pthread_spin_unlock
pthread_testcancel
pthread_timechange_handler_np
pthread_timedjoin_np
pthread_tryjoin_np
pthread_win32_getabstime_np
pthread_win32_process_attach_np
pthread_win32_process_detach_np
pthread_win32_test_features_np
pthread_win32_thread_attach_np
pthread_win32_thread_detach_np
sched_get_priority_max
sched_get_priority_min
sched_getaffinity
sched_setaffinity
sched_setscheduler
sched_yield
sem_close
sem_destroy
sem_getvalue
sem_init
sem_open
sem_post
sem_post_multiple
sem_timedwait
sem_trywait
sem_unlink
sem_wait

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_m4a.dll
.dll windows:6 windows x64 arch:x64

df95b2dd1f34e7e00054508ea8631d79

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1c:d7:d7:5d:0f:9e:ef:73:27:4b:84:2d:cd:32:54:50:2f:4e:29:65:7f:09:36:88:6f:cb:5a:35:1f:51:77:be
Signer

Actual PE Digest

1c:d7:d7:5d:0f:9e:ef:73:27:4b:84:2d:cd:32:54:50:2f:4e:29:65:7f:09:36:88:6f:cb:5a:35:1f:51:77:be

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\AAC (FDK)\encm_\Release\encm_fdk.pdb

Imports

mp4v2

MP4AddAudioTrack
MP4AddChapter
MP4AddChapterTextTrack
MP4AddNeroChapter
MP4AddTrackEdit
MP4Close
MP4CreateAudioSampleGroupDescription
MP4CreateEx
MP4FindTrackId
MP4GetTrackDuration
MP4GetTrackNumberOfSamples
MP4GetTrackTimeScale
MP4ItmfAddItem
MP4ItmfItemAlloc
MP4ItmfItemFree
MP4Malloc
MP4Optimize
MP4SetAudioProfileLevel
MP4SetDuration
MP4SetTimeScale
MP4SetTrackDuration
MP4SetTrackESConfiguration
MP4SetTrackEditDuration
MP4SetTrackEditMediaStart
MP4SetTrackIntegerProperty
MP4TagsAddArtwork
MP4TagsAlloc
MP4TagsFree
MP4TagsSetAlbum
MP4TagsSetAlbumArtist
MP4TagsSetArranger
MP4TagsSetArtist
MP4TagsSetComments
MP4TagsSetCompilation
MP4TagsSetComposer
MP4TagsSetConductor
MP4TagsSetCopyright
MP4TagsSetDisk
MP4TagsSetEncodedBy
MP4TagsSetGenre
MP4TagsSetGrouping
MP4TagsSetISRC
MP4TagsSetLabel
MP4TagsSetLyrics
MP4TagsSetName
MP4TagsSetOriginalArtist
MP4TagsSetProducer
MP4TagsSetPublisher
MP4TagsSetReleaseDate
MP4TagsSetSortAlbum
MP4TagsSetSortAlbumArtist
MP4TagsSetSortArtist
MP4TagsSetSortComposer
MP4TagsSetSortName
MP4TagsSetTempo
MP4TagsSetTrack
MP4TagsStore
MP4WriteSample
MP4XtraTagsSetInt
MP4XtraTagsSetString

acdbase

CHAPTERNAME_Get_Number
CHAPTER_Get_Number
ChangeChannelOrder
ID3Helper_Copy
ID3Helper_Free
ID3Helper_GetChapterCount_Position
ID3Helper_GetChapterTotal
ID3Helper_GetChapter_Name
ID3Helper_GetChapter_Position
ID3Helper_GetDword
ID3Helper_GetFirst
ID3Helper_GetFirstImage
ID3Helper_GetNext
ID3Helper_GetNextImage
ID3Helper_IsNaN
N100nSToSamples
SamplesToN100nS
UNC_UnicodeToUtf8
UNC_Utf8ToUnicode
UNC_freeStr
UNC_freeWStr

fdkaac

aacEncClose
aacEncEncode
aacEncInfo
aacEncOpen
aacEncoder_SetParam

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

kernel32

DeleteFileW
DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleW
GetStartupInfoW
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__current_exception
__current_exception_context
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
memcpy
memmove
memset
strstr

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
__stdio_common_vswprintf
__stdio_common_vswscanf
_lseek
_read
_write

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_seh_filter_dll
exit
terminate

api-ms-win-crt-string-l1-1-0

_strdup
strcmp
strlen
strncpy
wcscmp
wcslen

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

ACDX_Compress
ACDX_Compress.A
ACDX_Compress.L
ACDX_Compress.M
ACDX_Compress.N
ACDX_Compress.P
ACDX_Compress.R
ACDX_Compress.S
ACDX_Compress.V
ACDX_DeinitCompress
ACDX_DeinitCompress.A
ACDX_DeinitCompress.L
ACDX_DeinitCompress.M
ACDX_DeinitCompress.N
ACDX_DeinitCompress.P
ACDX_DeinitCompress.R
ACDX_DeinitCompress.S
ACDX_DeinitCompress.V
ACDX_GetInputFormat
ACDX_GetInputFormat.A
ACDX_GetInputFormat.L
ACDX_GetInputFormat.M
ACDX_GetInputFormat.N
ACDX_GetInputFormat.P
ACDX_GetInputFormat.R
ACDX_GetInputFormat.S
ACDX_GetInputFormat.V
ACDX_InitCompress3
ACDX_InitCompress3.A
ACDX_InitCompress3.L
ACDX_InitCompress3.M
ACDX_InitCompress3.N
ACDX_InitCompress3.P
ACDX_InitCompress3.R
ACDX_InitCompress3.S
ACDX_InitCompress3.V

Sections

.text
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_m4af.dll
.dll windows:6 windows x64 arch:x64

a999be468607f24e8a91e9d5919c1bd6

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3a:92:97:ce:07:b3:9e:0b:5f:9c:c8:c9:7d:73:4a:f0:d1:de:3d:2e:23:a8:f8:a6:f4:d6:4f:0a:f8:a8:36:82
Signer

Actual PE Digest

3a:92:97:ce:07:b3:9e:0b:5f:9c:c8:c9:7d:73:4a:f0:d1:de:3d:2e:23:a8:f8:a6:f4:d6:4f:0a:f8:a8:36:82

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\AAC (Fraunhofer)\encm_\Release\encm_aacf.pdb

Imports

acdbase

N100nSToSamples
SamplesToN100nS
CHAPTER_Get_Number
UNC_freeStr
UNC_Utf8ToUnicode
UNC_UnicodeToUtf8
ID3Helper_Free
ID3Helper_GetChapter_Name
ID3Helper_GetChapterTotal
ID3Helper_GetChapter_Position
ID3Helper_GetChapterCount_Position
ID3Helper_Copy
ID3Helper_IsNaN
ID3Helper_GetDword
ID3Helper_GetNextImage
ID3Helper_GetFirstImage
ID3Helper_GetNext
ID3Helper_GetFirst
CHAPTERNAME_Get_Number
UNC_freeWStr

mp4v2

MP4SetTrackEditDuration
MP4Malloc
MP4Close
MP4CreateEx
MP4Optimize
MP4SetDuration
MP4SetTimeScale
MP4SetAudioProfileLevel
MP4AddAudioTrack
MP4FindTrackId
MP4GetTrackDuration
MP4SetTrackDuration
MP4SetTrackEditMediaStart
MP4SetTrackESConfiguration
MP4GetTrackNumberOfSamples
MP4SetTrackIntegerProperty
MP4WriteSample
MP4AddChapter
MP4AddChapterTextTrack
MP4AddNeroChapter
MP4ItmfItemAlloc
MP4ItmfItemFree
MP4ItmfAddItem
MP4TagsAlloc
MP4AddTrackEdit
MP4TagsStore
MP4TagsFree
MP4GetTrackTimeScale
MP4TagsSetName
MP4TagsSetArtist
MP4TagsSetAlbumArtist
MP4TagsSetAlbum
MP4TagsSetGrouping
MP4TagsSetComposer
MP4CreateAudioSampleGroupDescription
MP4XtraTagsSetInt
MP4XtraTagsSetString
MP4TagsSetEncodedBy
MP4TagsSetCopyright
MP4TagsAddArtwork
MP4TagsSetSortComposer
MP4TagsSetSortAlbum
MP4TagsSetSortAlbumArtist
MP4TagsSetSortArtist
MP4TagsSetSortName
MP4TagsSetLyrics
MP4TagsSetProducer
MP4TagsSetArranger
MP4TagsSetConductor
MP4TagsSetISRC
MP4TagsSetOriginalArtist
MP4TagsSetPublisher
MP4TagsSetLabel
MP4TagsSetCompilation
MP4TagsSetTempo
MP4TagsSetDisk
MP4TagsSetTrack
MP4TagsSetReleaseDate
MP4TagsSetGenre
MP4TagsSetComments

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

kernel32

GetCurrentThreadId
DeleteFileW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW

vcruntime140

__std_exception_copy
__current_exception_context
__current_exception
__std_type_info_destroy_list
__C_specific_handler
strrchr
memset
memmove
memcpy
__std_exception_destroy
_CxxThrowException
strstr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
_write
_lseek
fclose
__stdio_common_vsscanf
__stdio_common_vsprintf
__stdio_common_vswscanf
fputs
fflush
__acrt_iob_func
fwrite
__stdio_common_vswprintf
_read

api-ms-win-crt-string-l1-1-0

strncpy
_strdup
strcmp

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_initterm_e
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
exit
_controlfp
_execute_onexit_table
_initterm

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc
calloc

api-ms-win-crt-math-l1-1-0

ceilf
cosf
expf
floorf
sqrt
powf
sinf
sqrtf
pow
ceil
_fdclass
log10
exp
logf
tanh
asin
ldexp
fmod
atan2
acos
atan
floor
tan
sinh
cosh
log
cos
sin

api-ms-win-crt-utility-l1-1-0

qsort
rand

api-ms-win-crt-time-l1-1-0

_time64

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 638KB - Virtual size: 637KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_m4b.dll
.dll windows:6 windows x64 arch:x64

df95b2dd1f34e7e00054508ea8631d79

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ee:ad:93:50:e0:8c:e9:f7:4b:41:85:00:6f:bf:5a:48:98:7a:a7:9d:63:6f:f4:5d:f0:cb:9b:32:09:25:59:ee
Signer

Actual PE Digest

ee:ad:93:50:e0:8c:e9:f7:4b:41:85:00:6f:bf:5a:48:98:7a:a7:9d:63:6f:f4:5d:f0:cb:9b:32:09:25:59:ee

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\AAC (FDK)\encm_\Release\encm_fdk.pdb

Imports

mp4v2

MP4AddAudioTrack
MP4AddChapter
MP4AddChapterTextTrack
MP4AddNeroChapter
MP4AddTrackEdit
MP4Close
MP4CreateAudioSampleGroupDescription
MP4CreateEx
MP4FindTrackId
MP4GetTrackDuration
MP4GetTrackNumberOfSamples
MP4GetTrackTimeScale
MP4ItmfAddItem
MP4ItmfItemAlloc
MP4ItmfItemFree
MP4Malloc
MP4Optimize
MP4SetAudioProfileLevel
MP4SetDuration
MP4SetTimeScale
MP4SetTrackDuration
MP4SetTrackESConfiguration
MP4SetTrackEditDuration
MP4SetTrackEditMediaStart
MP4SetTrackIntegerProperty
MP4TagsAddArtwork
MP4TagsAlloc
MP4TagsFree
MP4TagsSetAlbum
MP4TagsSetAlbumArtist
MP4TagsSetArranger
MP4TagsSetArtist
MP4TagsSetComments
MP4TagsSetCompilation
MP4TagsSetComposer
MP4TagsSetConductor
MP4TagsSetCopyright
MP4TagsSetDisk
MP4TagsSetEncodedBy
MP4TagsSetGenre
MP4TagsSetGrouping
MP4TagsSetISRC
MP4TagsSetLabel
MP4TagsSetLyrics
MP4TagsSetName
MP4TagsSetOriginalArtist
MP4TagsSetProducer
MP4TagsSetPublisher
MP4TagsSetReleaseDate
MP4TagsSetSortAlbum
MP4TagsSetSortAlbumArtist
MP4TagsSetSortArtist
MP4TagsSetSortComposer
MP4TagsSetSortName
MP4TagsSetTempo
MP4TagsSetTrack
MP4TagsStore
MP4WriteSample
MP4XtraTagsSetInt
MP4XtraTagsSetString

acdbase

CHAPTERNAME_Get_Number
CHAPTER_Get_Number
ChangeChannelOrder
ID3Helper_Copy
ID3Helper_Free
ID3Helper_GetChapterCount_Position
ID3Helper_GetChapterTotal
ID3Helper_GetChapter_Name
ID3Helper_GetChapter_Position
ID3Helper_GetDword
ID3Helper_GetFirst
ID3Helper_GetFirstImage
ID3Helper_GetNext
ID3Helper_GetNextImage
ID3Helper_IsNaN
N100nSToSamples
SamplesToN100nS
UNC_UnicodeToUtf8
UNC_Utf8ToUnicode
UNC_freeStr
UNC_freeWStr

fdkaac

aacEncClose
aacEncEncode
aacEncInfo
aacEncOpen
aacEncoder_SetParam

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

kernel32

DeleteFileW
DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleW
GetStartupInfoW
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__current_exception
__current_exception_context
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
memcpy
memmove
memset
strstr

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
__stdio_common_vswprintf
__stdio_common_vswscanf
_lseek
_read
_write

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_seh_filter_dll
exit
terminate

api-ms-win-crt-string-l1-1-0

_strdup
strcmp
strlen
strncpy
wcscmp
wcslen

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

ACDX_Compress
ACDX_Compress.A
ACDX_Compress.L
ACDX_Compress.M
ACDX_Compress.N
ACDX_Compress.P
ACDX_Compress.R
ACDX_Compress.S
ACDX_Compress.V
ACDX_DeinitCompress
ACDX_DeinitCompress.A
ACDX_DeinitCompress.L
ACDX_DeinitCompress.M
ACDX_DeinitCompress.N
ACDX_DeinitCompress.P
ACDX_DeinitCompress.R
ACDX_DeinitCompress.S
ACDX_DeinitCompress.V
ACDX_GetInputFormat
ACDX_GetInputFormat.A
ACDX_GetInputFormat.L
ACDX_GetInputFormat.M
ACDX_GetInputFormat.N
ACDX_GetInputFormat.P
ACDX_GetInputFormat.R
ACDX_GetInputFormat.S
ACDX_GetInputFormat.V
ACDX_InitCompress3
ACDX_InitCompress3.A
ACDX_InitCompress3.L
ACDX_InitCompress3.M
ACDX_InitCompress3.N
ACDX_InitCompress3.P
ACDX_InitCompress3.R
ACDX_InitCompress3.S
ACDX_InitCompress3.V

Sections

.text
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_m4bf.dll
.dll windows:6 windows x64 arch:x64

a999be468607f24e8a91e9d5919c1bd6

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ac:78:8f:82:90:75:5a:15:b5:47:2a:88:0a:01:2d:14:36:9b:8a:3e:5b:fb:31:88:1b:1d:87:ec:2d:5b:8e:c0
Signer

Actual PE Digest

ac:78:8f:82:90:75:5a:15:b5:47:2a:88:0a:01:2d:14:36:9b:8a:3e:5b:fb:31:88:1b:1d:87:ec:2d:5b:8e:c0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\AAC (Fraunhofer)\encm_\Release\encm_aacf.pdb

Imports

acdbase

N100nSToSamples
SamplesToN100nS
CHAPTER_Get_Number
UNC_freeStr
UNC_Utf8ToUnicode
UNC_UnicodeToUtf8
ID3Helper_Free
ID3Helper_GetChapter_Name
ID3Helper_GetChapterTotal
ID3Helper_GetChapter_Position
ID3Helper_GetChapterCount_Position
ID3Helper_Copy
ID3Helper_IsNaN
ID3Helper_GetDword
ID3Helper_GetNextImage
ID3Helper_GetFirstImage
ID3Helper_GetNext
ID3Helper_GetFirst
CHAPTERNAME_Get_Number
UNC_freeWStr

mp4v2

MP4SetTrackEditDuration
MP4Malloc
MP4Close
MP4CreateEx
MP4Optimize
MP4SetDuration
MP4SetTimeScale
MP4SetAudioProfileLevel
MP4AddAudioTrack
MP4FindTrackId
MP4GetTrackDuration
MP4SetTrackDuration
MP4SetTrackEditMediaStart
MP4SetTrackESConfiguration
MP4GetTrackNumberOfSamples
MP4SetTrackIntegerProperty
MP4WriteSample
MP4AddChapter
MP4AddChapterTextTrack
MP4AddNeroChapter
MP4ItmfItemAlloc
MP4ItmfItemFree
MP4ItmfAddItem
MP4TagsAlloc
MP4AddTrackEdit
MP4TagsStore
MP4TagsFree
MP4GetTrackTimeScale
MP4TagsSetName
MP4TagsSetArtist
MP4TagsSetAlbumArtist
MP4TagsSetAlbum
MP4TagsSetGrouping
MP4TagsSetComposer
MP4CreateAudioSampleGroupDescription
MP4XtraTagsSetInt
MP4XtraTagsSetString
MP4TagsSetEncodedBy
MP4TagsSetCopyright
MP4TagsAddArtwork
MP4TagsSetSortComposer
MP4TagsSetSortAlbum
MP4TagsSetSortAlbumArtist
MP4TagsSetSortArtist
MP4TagsSetSortName
MP4TagsSetLyrics
MP4TagsSetProducer
MP4TagsSetArranger
MP4TagsSetConductor
MP4TagsSetISRC
MP4TagsSetOriginalArtist
MP4TagsSetPublisher
MP4TagsSetLabel
MP4TagsSetCompilation
MP4TagsSetTempo
MP4TagsSetDisk
MP4TagsSetTrack
MP4TagsSetReleaseDate
MP4TagsSetGenre
MP4TagsSetComments

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

kernel32

GetCurrentThreadId
DeleteFileW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW

vcruntime140

__std_exception_copy
__current_exception_context
__current_exception
__std_type_info_destroy_list
__C_specific_handler
strrchr
memset
memmove
memcpy
__std_exception_destroy
_CxxThrowException
strstr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
_write
_lseek
fclose
__stdio_common_vsscanf
__stdio_common_vsprintf
__stdio_common_vswscanf
fputs
fflush
__acrt_iob_func
fwrite
__stdio_common_vswprintf
_read

api-ms-win-crt-string-l1-1-0

strncpy
_strdup
strcmp

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_initterm_e
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
exit
_controlfp
_execute_onexit_table
_initterm

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc
calloc

api-ms-win-crt-math-l1-1-0

ceilf
cosf
expf
floorf
sqrt
powf
sinf
sqrtf
pow
ceil
_fdclass
log10
exp
logf
tanh
asin
ldexp
fmod
atan2
acos
atan
floor
tan
sinh
cosh
log
cos
sin

api-ms-win-crt-utility-l1-1-0

qsort
rand

api-ms-win-crt-time-l1-1-0

_time64

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 638KB - Virtual size: 637KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_mp3.dll
.dll windows:6 windows x64 arch:x64

d99dcb61ee9cfd8e25dab0c218118160

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

53:47:08:7b:26:2b:80:24:44:a2:5f:45:ea:c7:7c:59:6c:a6:21:73:34:25:22:e0:34:66:d4:65:23:08:f2:13
Signer

Actual PE Digest

53:47:08:7b:26:2b:80:24:44:a2:5f:45:ea:c7:7c:59:6c:a6:21:73:34:25:22:e0:34:66:d4:65:23:08:f2:13

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\MP3\encm_\Release\encm_mp3.pdb

Imports

acdbase

ID3Helper_Copy
ID3Helper_Free
ID3Helper_GetDword

id3lib

?RenderID3@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z
?RenderID3_FreeBuffer@@YAXPEAD@Z
?RenderID3wGaplessPlaceholder@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z
?WriteID3V1@@YAXPEB_WPEAUID3Helper@@@Z

libmmd

atan
ceil
cos
exp
exp2
floor
floorf
ldexp
log
log10
log10f
pow
powf
sin
sqrt

svml_dispmd

__svml_idiv4
__svml_idiv4_e9
__svml_idiv8_e9
__svml_idiv8_l9

kernel32

CloseHandle
CreateFileW
DeleteFileW
DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleW
GetStartupInfoW
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WriteFile

vcruntime140

_CxxThrowException
__C_specific_handler
__current_exception
__current_exception_context
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
memcpy
memset
strchr

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
__stdio_common_vswprintf
__stdio_common_vswscanf
_close
_lseek
_read
_wfopen
_write
_wsopen_dispatch
fclose
fflush
fread
fseek
ftell
fwrite

api-ms-win-crt-convert-l1-1-0

atoi
strtol

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_register_onexit_function
_seh_filter_dll
exit
terminate

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-string-l1-1-0

strcmp
strlen
strncmp
strncpy
tolower
toupper
wcscmp
wcslen

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_mpc.dll
.dll windows:6 windows x64 arch:x64

f75674a2ae92be734733b9a0b3751c51

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:a3:19:a3:29:83:ef:ef:c6:af:47:30:75:5f:57:41:72:78:f8:22:08:77:20:35:d0:36:76:2a:27:2e:1b:cc
Signer

Actual PE Digest

04:a3:19:a3:29:83:ef:ef:c6:af:47:30:75:5f:57:41:72:78:f8:22:08:77:20:35:d0:36:76:2a:27:2e:1b:cc

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

acdbase

ID3Helper_Copy
ID3Helper_Free
ID3Helper_GetDword
ID3Helper_GetFirst
ID3Helper_GetFirstImage
ID3Helper_GetFloat
ID3Helper_GetNaN
ID3Helper_GetNext
ID3Helper_GetNextImage
ID3Helper_IsNaN
UNC_Utf8ToUnicode
UNC_freeWStr

libmmd

asinh
atan2
cos
exp
floorf
log
log10
pow
sin
sqrt
sqrtf

kernel32

CloseHandle
CreateFileW
DeleteFileW
FormatMessageA
GetACP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileSizeEx
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEndOfFile
SetFilePointer
SetFilePointerEx
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
WideCharToMultiByte
WriteFile

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
_purecall
memcpy
memmove
memset

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vswprintf
_ftelli64
_wfopen
fclose
fseek
ftell
fwrite

api-ms-win-crt-string-l1-1-0

_wcsicmp
strcmp
strcpy
strlen
strncat
strncmp
strncpy
wcscpy
wcslen

api-ms-win-crt-convert-l1-1-0

_wtoi

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
exit

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc
realloc

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_opus.dll
.dll windows:6 windows x64 arch:x64

0e23e95c4017c9130f7abb18f120e3e7

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e7:70:0e:e4:80:b2:7e:ac:a5:09:30:0e:29:91:3a:44:db:bf:14:d6:e9:a5:56:52:d6:53:c8:de:76:c8:2a:3d
Signer

Actual PE Digest

e7:70:0e:e4:80:b2:7e:ac:a5:09:30:0e:29:91:3a:44:db:bf:14:d6:e9:a5:56:52:d6:53:c8:de:76:c8:2a:3d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

acdbase

ChangeChannelOrder
ID3Helper_GetDword
ID3Helper_GetFirst
ID3Helper_GetFirstImage
ID3Helper_GetNext
ID3Helper_GetNextImage
ID3Helper_IsNaN

libmmd

cos
exp
exp2
floor
floorf
log
log10
pow
sin
sqrt
sqrtf

kernel32

DeleteFileW
DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter

svml_dispmd

__svml_idiv4
__svml_idiv4_e9
__svml_idiv8_l9
__svml_udiv4
__svml_udiv4_e9

vcruntime140

_CxxThrowException
__C_specific_handler
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
memcpy
memmove
memset
strchr

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vswprintf
_wfopen
fclose
ferror
fread
fwrite

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
_wassert
exit

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc
realloc

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-string-l1-1-0

strcmp
strlen
strncat
strncpy
wcslen

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_raw.dll
.dll windows:6 windows x64 arch:x64

bd2775f7185cd4720348a1b4c6e04681

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8e:ea:e3:0e:34:56:e1:76:60:55:6c:bc:e5:fe:1b:4d:2f:32:58:1f:1c:76:18:b7:ce:b1:48:44:8c:97:07:08
Signer

Actual PE Digest

8e:ea:e3:0e:34:56:e1:76:60:55:6c:bc:e5:fe:1b:4d:2f:32:58:1f:1c:76:18:b7:ce:b1:48:44:8c:97:07:08

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\RAW\encm_\Release\encm_raw.pdb

Imports

user32

wsprintfW

kernel32

InitializeSListHead
GetModuleHandleW
CreateFileW
DeleteFileW
WriteFile
CloseHandle
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetStartupInfoW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent

vcruntime140

__C_specific_handler
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__std_type_info_destroy_list
__current_exception
__current_exception_context
memset
memcpy

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initterm
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_initterm_e
_initialize_onexit_table

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_thd.dll
.dll windows:6 windows x64 arch:x64

5b5786470f3a68e8165be91d9fcd38e5

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

df:7e:0b:99:01:20:7d:ff:83:f8:f5:a5:74:30:b8:3c:4f:cd:09:64:9d:14:56:8d:71:00:fe:68:67:f2:17:15
Signer

Actual PE Digest

df:7e:0b:99:01:20:7d:ff:83:f8:f5:a5:74:30:b8:3c:4f:cd:09:64:9d:14:56:8d:71:00:fe:68:67:f2:17:15

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\THD (ffmpeg)\encm_\Release\encm_thd.pdb

Imports

user32

wsprintfW

acdbase

ID3Helper_GetChapter_Position
ID3Helper_GetDword
ID3Helper_GetChapterTotal
ID3Helper_GetChapter_Name
UNC_Utf8ToUnicode
ID3Helper_GetChapterCount_Position
ID3Helper_IsNaN
ID3Helper_GetNextImage
ID3Helper_GetFirstImage
ID3Helper_GetNext
ID3Helper_GetFirst
UNC_freeStr
CHAPTERNAME_Get_Number
ffmpeg_global_unlock
ffmpeg_global_lock
ID3Helper_Free
CHAPTER_Get_Number
N100nSToSamples
SamplesToN100nS
UNC_freeWStr

avcodec-61

avcodec_alloc_context3
av_packet_unref
avcodec_open2
avcodec_send_frame
avcodec_receive_packet
av_packet_free
av_packet_alloc
avcodec_find_encoder
avcodec_free_context

avformat-61

avformat_free_context

avutil-59

av_frame_free
av_frame_get_buffer
av_frame_make_writable
av_frame_alloc

mp4v2

MP4TagsSetSortAlbum
MP4TagsSetReleaseDate
MP4TagsSetGenreType
MP4TagsSetGenre
MP4TagsSetComments
MP4TagsSetComposer
MP4TagsSetGrouping
MP4TagsSetAlbum
MP4TagsSetAlbumArtist
MP4TagsSetArtist
MP4TagsSetName
MP4TagsFree
MP4TagsStore
MP4TagsFetch
MP4TagsSetSortAlbumArtist
MP4ItmfRemoveItem
MP4XtraTagsSetInt
MP4ItmfGetItemsByCode
MP4ItmfItemListFree
MP4ItmfItemFree
MP4ItmfItemAlloc
MP4AddNeroChapter
MP4AddChapterTextTrack
MP4AddChapter
MP4GetTrackTimeScale
MP4SetTrackDuration
MP4GetTrackDuration
MP4FindTrackId
MP4Modify
MP4Close
MP4Malloc
MP4XtraTagsRemove
MP4XtraTagsSetString
MP4TagsSetSortArtist
MP4TagsSetSortName
MP4TagsSetEncodedBy
MP4TagsSetCopyright
MP4TagsAddArtwork
MP4TagsRemoveArtwork
MP4ItmfAddItem
MP4TagsSetSortComposer
MP4TagsSetLyrics
MP4TagsSetProducer
MP4TagsSetArranger
MP4TagsSetConductor
MP4TagsSetISRC
MP4TagsSetOriginalArtist
MP4TagsSetPublisher
MP4TagsSetTrack
MP4TagsSetCompilation
MP4TagsSetTempo
MP4TagsAlloc
MP4TagsSetDisk
MP4TagsSetLabel

kernel32

CreateFileW
DeleteFileW
WriteFile
CloseHandle
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW

vcruntime140

__std_exception_destroy
memcpy
__C_specific_handler
__std_exception_copy
_CxxThrowException
__std_type_info_destroy_list
__current_exception
__current_exception_context
memset
strstr

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-string-l1-1-0

_strdup
strcmp
_stricmp

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm_e
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_seh_filter_dll
_register_onexit_function
_initterm

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_thdm4a.dll
.dll windows:6 windows x64 arch:x64

c183fb9c1c0da43c59cac84b1090f93f

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

91:96:bb:65:6d:36:a9:ef:2a:71:8b:83:d6:1a:69:52:3f:8a:78:e4:57:f6:54:3a:38:7c:a2:94:aa:cd:74:4b
Signer

Actual PE Digest

91:96:bb:65:6d:36:a9:ef:2a:71:8b:83:d6:1a:69:52:3f:8a:78:e4:57:f6:54:3a:38:7c:a2:94:aa:cd:74:4b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\THD (ffmpeg)\encm_\Release\encm_thd.pdb

Imports

user32

wsprintfW

acdbase

UNC_UnicodeToUtf8
UNC_freeStr
ID3Helper_GetFirst
ID3Helper_GetNext
ID3Helper_GetChapter_Name
ffmpeg_global_lock
ID3Helper_GetNextImage
ID3Helper_IsNaN
ID3Helper_GetChapterCount_Position
ID3Helper_GetChapter_Position
ID3Helper_GetChapterTotal
ffmpeg_global_unlock
ID3Helper_Copy
UNC_Utf8ToUnicode
ID3Helper_GetDword
ID3Helper_Free
CHAPTERNAME_Get_Number
CHAPTER_Get_Number
N100nSToSamples
SamplesToN100nS
UNC_freeWStr
ID3Helper_GetFirstImage

avcodec-61

avcodec_alloc_context3
av_packet_unref
avcodec_open2
avcodec_send_frame
avcodec_receive_packet
av_packet_free
av_packet_alloc
avcodec_find_encoder
avcodec_free_context

avformat-61

avformat_free_context

avutil-59

av_frame_free
av_frame_get_buffer
av_frame_make_writable
av_frame_alloc

mp4v2

MP4TagsSetSortAlbum
MP4TagsSetSortComposer
MP4TagsAddArtwork
MP4TagsRemoveArtwork
MP4TagsSetCopyright
MP4TagsSetEncodedBy
MP4XtraTagsSetString
MP4XtraTagsSetInt
MP4XtraTagsRemove
MP4TagsSetOriginalArtist
MP4TagsSetName
MP4TagsFree
MP4TagsStore
MP4TagsFetch
MP4TagsAlloc
MP4ItmfRemoveItem
MP4ItmfAddItem
MP4TagsSetPublisher
MP4ItmfItemListFree
MP4TagsSetSortArtist
MP4ItmfItemAlloc
MP4AddNeroChapter
MP4AddChapterTextTrack
MP4AddChapter
MP4GetTrackTimeScale
MP4SetTrackDuration
MP4GetTrackDuration
MP4FindTrackId
MP4Modify
MP4Malloc
MP4WriteSample
MP4AddDataAtom
MP4AddTrueHDAudioTrack
MP4SetTimeScale
MP4Optimize
MP4CreateEx
MP4Close
MP4TagsSetSortAlbumArtist
MP4TagsSetSortName
MP4TagsSetLabel
MP4TagsSetCompilation
MP4TagsSetLyrics
MP4TagsSetProducer
MP4TagsSetConductor
MP4TagsSetArranger
MP4ItmfItemFree
MP4TagsSetISRC
MP4TagsSetTempo
MP4TagsSetDisk
MP4TagsSetTrack
MP4TagsSetArtist
MP4TagsSetGenreType
MP4TagsSetGenre
MP4TagsSetComments
MP4TagsSetComposer
MP4TagsSetGrouping
MP4TagsSetAlbum
MP4ItmfGetItemsByCode
MP4TagsSetAlbumArtist
MP4TagsSetReleaseDate

kernel32

DeleteFileW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW

vcruntime140

__C_specific_handler
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memcpy
__current_exception_context
__std_type_info_destroy_list
__current_exception
memset
strstr

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-string-l1-1-0

_strdup
strcmp
_stricmp

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_initterm_e
_register_onexit_function
_configure_narrow_argv

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_thdmka.dll
.dll windows:6 windows x64 arch:x64

f4d0a6c3d00ec715545425f01333906d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f1:df:f2:78:2d:08:7e:dc:e7:f7:33:43:6c:c4:09:33:18:09:bc:2d:11:47:69:5d:90:26:71:28:29:10:c7:2b
Signer

Actual PE Digest

f1:df:f2:78:2d:08:7e:dc:e7:f7:33:43:6c:c4:09:33:18:09:bc:2d:11:47:69:5d:90:26:71:28:29:10:c7:2b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\THD (ffmpeg)\encm_\Release\encm_thd.pdb

Imports

user32

wsprintfW

acdbase

ID3Helper_GetFirst
ID3Helper_GetNext
ID3Helper_GetFirstImage
UNC_freeWStr
UNC_UnicodeToUtf8
ID3Helper_IsNaN
ID3Helper_GetChapterCount_Position
ID3Helper_GetChapter_Position
ID3Helper_GetChapterTotal
UNC_freeStr
ffmpeg_global_unlock
ffmpeg_global_lock
ID3Helper_Copy
SamplesToN100nS
ID3Helper_GetDword
ID3Helper_Free
CHAPTERNAME_Get_Number
CHAPTER_Get_Number
N100nSToSamples
ID3Helper_GetNextImage
UNC_Utf8ToUnicode
ID3Helper_GetChapter_Name

avcodec-61

av_packet_rescale_ts
avcodec_alloc_context3
av_packet_unref
avcodec_parameters_from_context
avcodec_open2
avcodec_send_frame
avcodec_receive_packet
av_packet_free
av_packet_alloc
avcodec_find_encoder
avcodec_free_context

avformat-61

avio_closep
avformat_free_context
avformat_new_stream
avformat_alloc_output_context2
avformat_write_header
av_interleaved_write_frame
av_write_trailer
avio_open

avutil-59

av_frame_free
av_frame_get_buffer
av_frame_make_writable
av_frame_alloc

mp4v2

MP4XtraTagsRemove
MP4TagsSetISRC
MP4TagsFree
MP4TagsStore
MP4TagsFetch
MP4TagsAlloc
MP4ItmfRemoveItem
MP4ItmfAddItem
MP4ItmfGetItemsByCode
MP4ItmfItemListFree
MP4XtraTagsSetString
MP4TagsSetSortComposer
MP4AddNeroChapter
MP4AddChapterTextTrack
MP4AddChapter
MP4GetTrackTimeScale
MP4SetTrackDuration
MP4GetTrackDuration
MP4FindTrackId
MP4Modify
MP4Close
MP4Malloc
MP4XtraTagsSetInt
MP4TagsSetEncodedBy
MP4TagsSetCopyright
MP4TagsRemoveArtwork
MP4TagsSetOriginalArtist
MP4TagsAddArtwork
MP4TagsSetSortAlbum
MP4TagsSetSortAlbumArtist
MP4TagsSetSortArtist
MP4TagsSetSortName
MP4TagsSetLyrics
MP4TagsSetPublisher
MP4TagsSetLabel
MP4TagsSetProducer
MP4TagsSetArranger
MP4ItmfItemAlloc
MP4TagsSetConductor
MP4TagsSetCompilation
MP4TagsSetTempo
MP4TagsSetDisk
MP4TagsSetTrack
MP4TagsSetReleaseDate
MP4TagsSetName
MP4TagsSetGenre
MP4TagsSetComments
MP4TagsSetComposer
MP4TagsSetGrouping
MP4TagsSetAlbum
MP4TagsSetAlbumArtist
MP4ItmfItemFree
MP4TagsSetArtist
MP4TagsSetGenreType

matroskametadata

?WriteMatroskaMetadata@@YAHPEA_WPEAUID3Helper@@@Z

kernel32

RtlCaptureContext
GetModuleHandleW
DeleteFileW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
GetStartupInfoW
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent

vcruntime140

__C_specific_handler
__std_exception_copy
memcpy
__std_type_info_destroy_list
__std_exception_destroy
_CxxThrowException
__current_exception
__current_exception_context
memset
strstr

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-string-l1-1-0

_strdup
strcmp
_stricmp

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_initterm_e
_register_onexit_function
_seh_filter_dll

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_tta.dll
.dll windows:6 windows x64 arch:x64

3b292b54c9ef08dc620521cc92da119a

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fe:41:67:3a:d0:8a:b2:f2:a9:a5:91:ab:d0:0b:16:ee:6a:47:1a:54:45:50:59:3b:9b:5c:f6:2c:60:b6:44:b1
Signer

Actual PE Digest

fe:41:67:3a:d0:8a:b2:f2:a9:a5:91:ab:d0:0b:16:ee:6a:47:1a:54:45:50:59:3b:9b:5c:f6:2c:60:b6:44:b1

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\TTA\encm_\Release\encm_tta.pdb

Imports

acdbase

ID3Helper_Copy
ID3Helper_Free
ID3Helper_GetDword
ID3Helper_GetFirst
ID3Helper_GetFirstImage
ID3Helper_GetNext
ID3Helper_GetNextImage
ID3Helper_IsNaN
UNC_Utf8ToUnicode
UNC_freeWStr

id3lib

?RenderID3@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z
?RenderID3_FreeBuffer@@YAXPEAD@Z

kernel32

CloseHandle
CreateDirectoryW
CreateFileW
DeleteFileW
DisableThreadLibraryCalls
FormatMessageA
GetACP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileSizeEx
GetModuleHandleW
GetStartupInfoW
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEndOfFile
SetFilePointer
SetFilePointerEx
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WideCharToMultiByte
WriteFile

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__current_exception
__current_exception_context
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
_purecall
memcpy
memmove
memset

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vswprintf

api-ms-win-crt-heap-l1-1-0

_aligned_free
_aligned_malloc
_callnewh
free
malloc
realloc

api-ms-win-crt-string-l1-1-0

_wcsicmp
strcmp
strcpy
strlen
strncmp
strncpy
wcscpy
wcslen

api-ms-win-crt-convert-l1-1-0

_wtoi

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_register_onexit_function
_seh_filter_dll
exit
terminate

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

??0tta_decoder@tta@@QEAA@AEBV01@@Z
??0tta_decoder@tta@@QEAA@AEBV01@@Z.A
??0tta_decoder@tta@@QEAA@AEBV01@@Z.L
??0tta_decoder@tta@@QEAA@AEBV01@@Z.M
??0tta_decoder@tta@@QEAA@AEBV01@@Z.N
??0tta_decoder@tta@@QEAA@AEBV01@@Z.P
??0tta_decoder@tta@@QEAA@AEBV01@@Z.R
??0tta_decoder@tta@@QEAA@AEBV01@@Z.S
??0tta_decoder@tta@@QEAA@AEBV01@@Z.V
??0tta_decoder@tta@@QEAA@PEAU_tag_TTA_io_callback@@@Z
??0tta_encoder@tta@@QEAA@AEBV01@@Z
??0tta_encoder@tta@@QEAA@AEBV01@@Z.A
??0tta_encoder@tta@@QEAA@AEBV01@@Z.L
??0tta_encoder@tta@@QEAA@AEBV01@@Z.M
??0tta_encoder@tta@@QEAA@AEBV01@@Z.N
??0tta_encoder@tta@@QEAA@AEBV01@@Z.P
??0tta_encoder@tta@@QEAA@AEBV01@@Z.R
??0tta_encoder@tta@@QEAA@AEBV01@@Z.S
??0tta_encoder@tta@@QEAA@AEBV01@@Z.V
??0tta_encoder@tta@@QEAA@PEAU_tag_TTA_io_callback@@@Z
??1tta_decoder@tta@@UEAA@XZ
??1tta_encoder@tta@@UEAA@XZ
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z.A
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z.L
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z.M
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z.N
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z.P
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z.R
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z.S
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z.V
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z.A
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z.L
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z.M
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z.N
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z.P
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z.R
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z.S
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z.V
??_7tta_decoder@tta@@6B@
??_7tta_encoder@tta@@6B@
?calculate_crc@tta_encoder@tta@@QEAAIPEAXI@Z
?calculate_crc@tta_encoder@tta@@[email protected]
?calculate_crc@tta_encoder@tta@@[email protected]
?calculate_crc@tta_encoder@tta@@[email protected]
?calculate_crc@tta_encoder@tta@@[email protected]
?calculate_crc@tta_encoder@tta@@[email protected]
?calculate_crc@tta_encoder@tta@@[email protected]
?calculate_crc@tta_encoder@tta@@[email protected]
?calculate_crc@tta_encoder@tta@@[email protected]
?finalize@tta_encoder@tta@@QEAAXXZ
?finalize@tta_encoder@tta@@QEAAXXZ.A
?finalize@tta_encoder@tta@@QEAAXXZ.L
?finalize@tta_encoder@tta@@QEAAXXZ.M
?finalize@tta_encoder@tta@@QEAAXXZ.N
?finalize@tta_encoder@tta@@QEAAXXZ.P
?finalize@tta_encoder@tta@@QEAAXXZ.R
?finalize@tta_encoder@tta@@QEAAXXZ.S
?finalize@tta_encoder@tta@@QEAAXXZ.V
?frame_init@tta_decoder@tta@@IEAAXI_N@Z
?frame_init@tta_decoder@tta@@[email protected]
?frame_init@tta_decoder@tta@@[email protected]
?frame_init@tta_decoder@tta@@[email protected]
?frame_init@tta_decoder@tta@@[email protected]
?frame_init@tta_decoder@tta@@[email protected]
?frame_init@tta_decoder@tta@@[email protected]
?frame_init@tta_decoder@tta@@[email protected]
?frame_init@tta_decoder@tta@@[email protected]
?frame_init@tta_encoder@tta@@IEAAXI@Z
?frame_init@tta_encoder@tta@@[email protected]
?frame_init@tta_encoder@tta@@[email protected]
?frame_init@tta_encoder@tta@@[email protected]
?frame_init@tta_encoder@tta@@[email protected]
?frame_init@tta_encoder@tta@@[email protected]
?frame_init@tta_encoder@tta@@[email protected]
?frame_init@tta_encoder@tta@@[email protected]
?frame_init@tta_encoder@tta@@[email protected]
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.A
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.L
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.M
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.N
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.P
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.R
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.S
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.V
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.A
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.L
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.M
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.N
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.P
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.R
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.S
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.V
?get_framecount@tta_encoder@tta@@QEAAIXZ
?get_framecount_in_seektable@tta_encoder@tta@@QEAAIXZ
?get_rate@tta_decoder@tta@@QEAAIXZ
?get_rate@tta_encoder@tta@@QEAAIXZ
?get_status@tta_decoder@tta@@QEAAXAEAI00@Z
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@_K@Z
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z.A
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z.L
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z.M
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z.N
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z.P
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z.R
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z.S
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z.V
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@_K@Z
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?process_frame@tta_decoder@tta@@QEAAHIPEAEI@Z
?process_frame@tta_decoder@tta@@[email protected]
?process_frame@tta_decoder@tta@@[email protected]
?process_frame@tta_decoder@tta@@[email protected]
?process_frame@tta_decoder@tta@@[email protected]
?process_frame@tta_decoder@tta@@[email protected]
?process_frame@tta_decoder@tta@@[email protected]
?process_frame@tta_decoder@tta@@[email protected]
?process_frame@tta_decoder@tta@@[email protected]
?process_frame@tta_encoder@tta@@QEAAXPEAEI@Z
?process_frame@tta_encoder@tta@@[email protected]
?process_frame@tta_encoder@tta@@[email protected]
?process_frame@tta_encoder@tta@@[email protected]
?process_frame@tta_encoder@tta@@[email protected]
?process_frame@tta_encoder@tta@@[email protected]
?process_frame@tta_encoder@tta@@[email protected]
?process_frame@tta_encoder@tta@@[email protected]
?process_frame@tta_encoder@tta@@[email protected]
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@Z@Z
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@[email protected]
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@[email protected]
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@[email protected]
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@[email protected]
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@[email protected]
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@[email protected]
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@[email protected]
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@[email protected]
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@Z@Z
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@[email protected]
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@[email protected]
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@[email protected]
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@[email protected]
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@[email protected]
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@[email protected]
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@[email protected]
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@[email protected]
?read_seek_table@tta_decoder@tta@@IEAA_NXZ
?read_seek_table@tta_decoder@tta@@IEAA_NXZ.A
?read_seek_table@tta_decoder@tta@@IEAA_NXZ.L
?read_seek_table@tta_decoder@tta@@IEAA_NXZ.M
?read_seek_table@tta_decoder@tta@@IEAA_NXZ.N
?read_seek_table@tta_decoder@tta@@IEAA_NXZ.P
?read_seek_table@tta_decoder@tta@@IEAA_NXZ.R
?read_seek_table@tta_decoder@tta@@IEAA_NXZ.S
?read_seek_table@tta_decoder@tta@@IEAA_NXZ.V
?seek_frame@tta_decoder@tta@@QEAA_NI@Z
?set_password@tta_decoder@tta@@QEAAXPEBXI@Z
?set_password@tta_decoder@tta@@[email protected]
?set_password@tta_decoder@tta@@[email protected]
?set_password@tta_decoder@tta@@[email protected]
?set_password@tta_decoder@tta@@[email protected]
?set_password@tta_decoder@tta@@[email protected]
?set_password@tta_decoder@tta@@[email protected]
?set_password@tta_decoder@tta@@[email protected]
?set_password@tta_decoder@tta@@[email protected]
?set_password@tta_encoder@tta@@QEAAXPEBXI@Z
?set_password@tta_encoder@tta@@[email protected]
?set_password@tta_encoder@tta@@[email protected]
?set_password@tta_encoder@tta@@[email protected]
?set_password@tta_encoder@tta@@[email protected]
?set_password@tta_encoder@tta@@[email protected]
?set_password@tta_encoder@tta@@[email protected]
?set_password@tta_encoder@tta@@[email protected]
?set_password@tta_encoder@tta@@[email protected]
?set_position@tta_decoder@tta@@QEAAXIPEAI@Z
?set_position@tta_decoder@tta@@[email protected]
?set_position@tta_decoder@tta@@[email protected]
?set_position@tta_decoder@tta@@[email protected]
?set_position@tta_decoder@tta@@[email protected]
?set_position@tta_decoder@tta@@[email protected]
?set_position@tta_decoder@tta@@[email protected]
?set_position@tta_decoder@tta@@[email protected]
?set_position@tta_decoder@tta@@[email protected]
?tta_binary_version@@YA?AW4CPU_ARCH_TYPE@@XZ
?write_seek_table@tta_encoder@tta@@IEAAXXZ
?write_seek_table@tta_encoder@tta@@IEAAXXZ.A
?write_seek_table@tta_encoder@tta@@IEAAXXZ.L
?write_seek_table@tta_encoder@tta@@IEAAXXZ.M
?write_seek_table@tta_encoder@tta@@IEAAXXZ.N
?write_seek_table@tta_encoder@tta@@IEAAXXZ.P
?write_seek_table@tta_encoder@tta@@IEAAXXZ.R
?write_seek_table@tta_encoder@tta@@IEAAXXZ.S
?write_seek_table@tta_encoder@tta@@IEAAXXZ.V
ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 255KB - Virtual size: 254KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_vorbis.dll
.dll windows:6 windows x64 arch:x64

c85b5de1f06512070bc6b11209a8e14e

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5b:a5:84:36:a0:27:f1:40:77:90:60:ab:49:ec:f9:d9:95:88:c8:69:18:f6:2d:f0:7c:ce:0e:bd:21:a1:c1:20
Signer

Actual PE Digest

5b:a5:84:36:a0:27:f1:40:77:90:60:ab:49:ec:f9:d9:95:88:c8:69:18:f6:2d:f0:7c:ce:0e:bd:21:a1:c1:20

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\Vorbis\encm_\Release\ogg.pdb

Imports

acdbase

BASE64Encode
BASE64FreeMem
ChangeChannelOrder
ID3Helper_GetDword
ID3Helper_GetFirst
ID3Helper_GetFirstImage
ID3Helper_GetNext
ID3Helper_GetNextImage
ID3Helper_IsNaN

libmmd

acos
atan
ceil
cos
exp
floor
floorf
ldexp
log
pow
sin
sqrt

kernel32

AcquireSRWLockExclusive
DeleteFileW
DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleW
GetStartupInfoW
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
QueryPerformanceCounter
ReleaseSRWLockExclusive
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
SleepConditionVariableSRW
TerminateProcess
UnhandledExceptionFilter
WakeAllConditionVariable

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__current_exception
__current_exception_context
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
memchr
memcmp
memcpy
memmove
memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vswprintf
_wfopen
fclose
fwrite

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc
realloc

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_register_onexit_function
_seh_filter_dll
exit
terminate

api-ms-win-crt-utility-l1-1-0

qsort
rand
srand

api-ms-win-crt-string-l1-1-0

strcat
strcmp
strcpy
strlen
strncat
strncpy
wcslen

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 642KB - Virtual size: 641KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_w64.dll
.dll windows:6 windows x64 arch:x64

c4e48ab517d4604b5314dc760e116dd0

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f4:4e:0e:ae:fe:f7:ab:ad:c6:10:03:64:05:48:1f:92:b4:91:9e:50:89:69:b6:9a:97:45:2a:94:f5:37:ba:38
Signer

Actual PE Digest

f4:4e:0e:ae:fe:f7:ab:ad:c6:10:03:64:05:48:1f:92:b4:91:9e:50:89:69:b6:9a:97:45:2a:94:f5:37:ba:38

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\W64\encm_\Release\encm_w64.pdb

Imports

user32

wsprintfW

acdbase

ID3Helper_Free
ID3Helper_GetStr
ID3Helper_GetDword
ID3Helper_Copy
UNC_Utf8ToUnicode
UNC_freeWStr

id3lib

?RenderID3@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z
?RenderID3_FreeBuffer@@YAXPEAD@Z

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

kernel32

GetModuleHandleW
GetSystemTimeAsFileTime
GetCurrentThreadId
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
GetCurrentProcessId
QueryPerformanceCounter
CreateFileW
DeleteFileW
SetFilePointer
WriteFile
CloseHandle
GetFileSizeEx
ReadFile
SetEndOfFile
SetFilePointerEx
GetLastError
DisableThreadLibraryCalls

vcruntime140

__std_exception_destroy
__current_exception_context
__current_exception
__std_type_info_destroy_list
__C_specific_handler
memset
memcmp
__std_exception_copy
memmove
_CxxThrowException
memcpy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_crt_atexit
_invalid_parameter_noinfo_noreturn
terminate
_initterm
_initterm_e
_cexit
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_crt_at_quick_exit

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf

api-ms-win-crt-string-l1-1-0

_memicmp
toupper

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_wav.dll
.dll windows:6 windows x64 arch:x64

f9851b6ac59b039c4c243bd577a4cd95

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ea:3a:26:e3:57:75:d7:f6:aa:7a:ed:90:dc:4a:3a:6d:1f:ad:a8:7f:f1:13:27:6f:9d:3c:7b:d7:5f:9e:dc:ac
Signer

Actual PE Digest

ea:3a:26:e3:57:75:d7:f6:aa:7a:ed:90:dc:4a:3a:6d:1f:ad:a8:7f:f1:13:27:6f:9d:3c:7b:d7:5f:9e:dc:ac

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\WAV\encm_\Release\encm_wav.pdb

Imports

user32

wsprintfW

acdbase

ID3Helper_GetDword
UNC_freeStr
ID3Helper_GetStr
ID3Helper_Free
UNC_Utf8ToAnsi
ID3Helper_Copy

id3lib

?RenderID3woReplayGain@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z
?RenderID3@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z
?RenderID3_FreeBuffer@@YAXPEAD@Z

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

kernel32

SetFilePointer
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
CreateFileW
DeleteFileW
GetModuleHandleW
WriteFile
CloseHandle

vcruntime140

_CxxThrowException
memcpy
__std_exception_copy
__C_specific_handler
__std_type_info_destroy_list
__current_exception
__current_exception_context
memset
__std_exception_destroy
memmove

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_initterm
_initterm_e
_register_onexit_function
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-string-l1-1-0

_memicmp
toupper

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_wavacm.dll
.dll windows:6 windows x64 arch:x64

209a50b40d7ffd46b14bb1f2f92b05b2

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

84:2b:2b:e7:73:4c:73:f9:f6:7e:9f:65:67:b5:95:f2:28:49:61:c0:3e:42:7c:ec:f9:8c:4c:10:9f:9b:f3:fa
Signer

Actual PE Digest

84:2b:2b:e7:73:4c:73:f9:f6:7e:9f:65:67:b5:95:f2:28:49:61:c0:3e:42:7c:ec:f9:8c:4c:10:9f:9b:f3:fa

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\WAV-ACM\encm_dark\Release\encm_wavacm.pdb

Imports

user32

wsprintfW
SendMessageW
ShowWindow
MoveWindow

msacm32

acmStreamPrepareHeader
acmStreamConvert
acmStreamSize
acmStreamClose
acmStreamOpen
acmStreamUnprepareHeader
acmFormatTagEnumW
acmDriverDetailsW
acmDriverClose
acmDriverOpen
acmDriverEnum
acmMetrics
acmFormatEnumW

id3lib

?RenderID3_FreeBuffer@@YAXPEAD@Z
?RenderID3@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z

acdbase

ID3Helper_GetDword
ID3Helper_Copy
ID3Helper_Free

kernel32

InitializeSListHead
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
lstrlenW
lstrcatW
lstrcpyW
MulDiv
LocalFree
LocalAlloc
CloseHandle
WriteFile
SetFilePointer
DeleteFileW
CreateFileW
RtlVirtualUnwind
IsDebuggerPresent
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlLookupFunctionEntry

vcruntime140

__std_exception_destroy
__std_exception_copy
__C_specific_handler
__current_exception_context
memset
_CxxThrowException
__current_exception
memcpy
memmove
__std_type_info_destroy_list

api-ms-win-crt-string-l1-1-0

wcscmp
wcslen

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-runtime-l1-1-0

_crt_at_quick_exit
terminate
_initterm
_initterm_e
_cexit
_execute_onexit_table
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_OpenConfig3

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_wavmp3.dll
.dll windows:6 windows x64 arch:x64

13c18dc52842a1e245f9f46c18f7d72f

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

80:1d:3a:81:37:60:dc:3e:76:fd:2b:40:c6:75:e0:df:15:09:a6:ea:98:df:8b:f9:71:d2:86:66:19:85:f0:01
Signer

Actual PE Digest

80:1d:3a:81:37:60:dc:3e:76:fd:2b:40:c6:75:e0:df:15:09:a6:ea:98:df:8b:f9:71:d2:86:66:19:85:f0:01

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\WAVMP3\encm_\Release\encm_wavmp3.pdb

Imports

acdbase

ID3Helper_Copy
ID3Helper_Free
ID3Helper_GetDword

id3lib

?RenderID3@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z
?RenderID3_FreeBuffer@@YAXPEAD@Z

libmmd

atan
ceil
cos
exp
exp2
floor
floorf
ldexp
log
log10
log10f
pow
powf
sin
sqrt

svml_dispmd

__svml_idiv4
__svml_idiv4_e9
__svml_idiv8_e9
__svml_idiv8_l9

kernel32

CloseHandle
CreateFileW
DeleteFileW
DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleW
GetStartupInfoW
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetFilePointer
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WriteFile

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__current_exception
__current_exception_context
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
memcpy
memset
strchr

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vswprintf
_wfopen
fclose
fflush
fread
fseek
ftell
fwrite

api-ms-win-crt-convert-l1-1-0

atoi
strtol

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_register_onexit_function
_seh_filter_dll
exit
terminate

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-string-l1-1-0

strlen
strncat
strncmp
strncpy
tolower
toupper
wcslen

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_wavpack.dll
.dll windows:6 windows x64 arch:x64

efa5df99a171eea0451675367587f9fa

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ec:ad:13:17:aa:31:3d:83:0f:99:94:0f:f2:ed:f7:85:37:d6:39:24:f7:82:bb:2b:0d:c4:fd:79:5f:fd:08:de
Signer

Actual PE Digest

ec:ad:13:17:aa:31:3d:83:0f:99:94:0f:f2:ed:f7:85:37:d6:39:24:f7:82:bb:2b:0d:c4:fd:79:5f:fd:08:de

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\WV\encm_\Release\encm_wavpack.pdb

Imports

acdbase

ID3Helper_Copy
ID3Helper_Free
ID3Helper_GetDword
ID3Helper_GetFirst
ID3Helper_GetFirstImage
ID3Helper_GetNext
ID3Helper_GetNextImage
ID3Helper_IsNaN
UNC_Utf8ToUnicode
UNC_freeWStr

libmmd

floor
ldexp
log10
pow
sqrt

user32

GetWindowThreadProcessId

kernel32

CloseHandle
CreateFileW
DeleteCriticalSection
DeleteFileW
DisableThreadLibraryCalls
EnterCriticalSection
FillConsoleOutputCharacterA
FindFirstFileW
FlushConsoleInputBuffer
FormatMessageA
FreeLibrary
GetACP
GetConsoleMode
GetConsoleScreenBufferInfo
GetConsoleWindow
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileSize
GetFileSizeEx
GetFileTime
GetFileType
GetLastError
GetModuleHandleW
GetProcAddress
GetStartupInfoW
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadLocale
InitializeConditionVariable
InitializeCriticalSection
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetConsoleTitleA
SetEndOfFile
SetFilePointer
SetFilePointerEx
SetFileTime
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableCS
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__current_exception
__current_exception_context
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
_purecall
memcmp
memcpy
memmove
memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vswprintf
_chsize
_fileno
_fseeki64
_ftelli64
_get_osfhandle
_kbhit
_wfopen
fclose
ferror
fflush
fputs
fread
fwrite
ungetc

api-ms-win-crt-runtime-l1-1-0

_beginthreadex
_cexit
_configure_narrow_argv
_crt_at_quick_exit
_crt_atexit
_endthreadex
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_register_onexit_function
_seh_filter_dll
exit
terminate

api-ms-win-crt-filesystem-l1-1-0

_findclose
_wfindfirst64i32
_wrename
_wstat64i32
_wunlink

api-ms-win-crt-conio-l1-1-0

_getch

api-ms-win-crt-string-l1-1-0

_strdup
_wcsicmp
isspace
strcmp
strcpy
strlen
strncat
strncmp
strncpy
strpbrk
tolower
wcscmp
wcscpy
wcslen

api-ms-win-crt-convert-l1-1-0

_wtoi
strtod

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc
realloc

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 922KB - Virtual size: 921KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_wavpackdsd.dll
.dll windows:6 windows x64 arch:x64

74fcb419ee7108118157df7de948029f

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e8:5c:e3:7e:58:62:6f:63:f2:34:36:be:51:cd:32:47:5f:60:30:d2:c7:b8:d6:4e:71:36:82:ae:14:55:d9:17
Signer

Actual PE Digest

e8:5c:e3:7e:58:62:6f:63:f2:34:36:be:51:cd:32:47:5f:60:30:d2:c7:b8:d6:4e:71:36:82:ae:14:55:d9:17

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\WVDSD\encm_\Release\encm_wavpackdsd.pdb

Imports

acdbase

ID3Helper_Copy
ID3Helper_Free
ID3Helper_GetDword
ID3Helper_GetFirst
ID3Helper_GetFirstImage
ID3Helper_GetNext
ID3Helper_GetNextImage
ID3Helper_IsNaN
UNC_Utf8ToUnicode
UNC_freeWStr

user32

GetWindowThreadProcessId
wsprintfW

libmmd

floor
ldexp
log10
pow
sqrt

kernel32

CloseHandle
CreateFileW
DeleteCriticalSection
DeleteFileW
DisableThreadLibraryCalls
EnterCriticalSection
FillConsoleOutputCharacterA
FindFirstFileW
FlushConsoleInputBuffer
FormatMessageA
FreeLibrary
GetACP
GetConsoleMode
GetConsoleScreenBufferInfo
GetConsoleWindow
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileSize
GetFileSizeEx
GetFileTime
GetFileType
GetLastError
GetModuleHandleW
GetProcAddress
GetStartupInfoW
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadLocale
InitializeConditionVariable
InitializeCriticalSection
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetConsoleTitleA
SetEndOfFile
SetFilePointer
SetFilePointerEx
SetFileTime
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableCS
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__current_exception
__current_exception_context
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
_purecall
memcmp
memcpy
memmove
memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
_chsize
_fileno
_fseeki64
_ftelli64
_get_osfhandle
_kbhit
_wfopen
fclose
ferror
fflush
fputs
fread
fwrite
ungetc

api-ms-win-crt-runtime-l1-1-0

_beginthreadex
_cexit
_configure_narrow_argv
_crt_at_quick_exit
_crt_atexit
_endthreadex
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_register_onexit_function
_seh_filter_dll
exit
terminate

api-ms-win-crt-filesystem-l1-1-0

_findclose
_wfindfirst64i32
_wrename
_wstat64i32
_wunlink

api-ms-win-crt-conio-l1-1-0

_getch

api-ms-win-crt-string-l1-1-0

_strdup
_wcsicmp
isspace
strcmp
strcpy
strlen
strncat
strncmp
strncpy
strpbrk
tolower
wcscmp
wcscpy
wcslen

api-ms-win-crt-convert-l1-1-0

_wtoi
strtod

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc
realloc

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

ACDX_ChangeInputFormat
ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 939KB - Virtual size: 938KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_wma.dll
.dll windows:6 windows x64 arch:x64

f7b0b6053ff115f8b21b5677189bab86

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

13:83:58:fa:e6:83:da:76:b1:8d:96:92:1d:b5:f1:12:c5:6e:16:94:34:33:b6:6c:b2:3b:36:03:45:fa:96:e9
Signer

Actual PE Digest

13:83:58:fa:e6:83:da:76:b1:8d:96:92:1d:b5:f1:12:c5:6e:16:94:34:33:b6:6c:b2:3b:36:03:45:fa:96:e9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

wmvcore

WMCreateWriter
WMCreateProfileManager

user32

wsprintfW
MoveWindow
RedrawWindow
SendMessageW
ShowWindow
GetParent

acdbase

ID3Helper_IsNaN
ID3Helper_GetNext
ID3Helper_GetFirst
ID3Helper_GetDword
UNC_RemoveUnicodeAPIPath
ID3Helper_GetFirstImage
UNC_Utf8ToUnicode
ID3Helper_GetNextImage
UNC_freeWStr

kernel32

IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
MulDiv
lstrcpyW
LocalFree
DeleteFileW
lstrcatW
LocalAlloc
lstrlenW

vcruntime140

memcmp
__std_exception_copy
__std_type_info_destroy_list
_CxxThrowException
__std_exception_destroy
memset
memcpy
__C_specific_handler

api-ms-win-crt-string-l1-1-0

strcmp
_wcsicmp

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc
realloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit

Exports

Exports

ACDX_CloseConfig3
ACDX_Compress
ACDX_Config3Notify
ACDX_DeinitCompress
ACDX_GetFormat
ACDX_GetFormatSize
ACDX_GetFormatText
ACDX_GetInputFormat
ACDX_InitCompress3
ACDX_OpenConfig3

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_xheaac.dll
.dll windows:6 windows x64 arch:x64

bc1932f5a64da9d9e8cd937b180f833c

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

79:f2:bd:34:ee:a4:d9:d9:02:e3:d1:46:55:f2:e7:1c:fa:ca:30:92:89:b4:e3:4f:02:a7:bb:b7:ba:47:fc:06
Signer

Actual PE Digest

79:f2:bd:34:ee:a4:d9:d9:02:e3:d1:46:55:f2:e7:1c:fa:ca:30:92:89:b4:e3:4f:02:a7:bb:b7:ba:47:fc:06

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mp4v2

MP4AddAudioTrack
MP4AddChapter
MP4AddChapterTextTrack
MP4AddDataAtom
MP4AddNeroChapter
MP4AddTrackEdit
MP4Close
MP4CreateEx
MP4FindTrackId
MP4Free
MP4GetSampleSize
MP4GetTrackDuration
MP4GetTrackNumberOfSamples
MP4GetTrackTimeScale
MP4ItmfAddItem
MP4ItmfItemAlloc
MP4ItmfItemFree
MP4Malloc
MP4Optimize
MP4ReWriteSample
MP4ReadSample
MP4SetAudioProfileLevel
MP4SetDuration
MP4SetTimeScale
MP4SetTrackDuration
MP4SetTrackESConfiguration
MP4SetTrackEditDuration
MP4SetTrackEditMediaStart
MP4SetTrackIntegerProperty
MP4TagsAddArtwork
MP4TagsAlloc
MP4TagsFree
MP4TagsSetAlbum
MP4TagsSetAlbumArtist
MP4TagsSetArranger
MP4TagsSetArtist
MP4TagsSetComments
MP4TagsSetCompilation
MP4TagsSetComposer
MP4TagsSetConductor
MP4TagsSetCopyright
MP4TagsSetDisk
MP4TagsSetEncodedBy
MP4TagsSetGenre
MP4TagsSetGrouping
MP4TagsSetISRC
MP4TagsSetLabel
MP4TagsSetLyrics
MP4TagsSetName
MP4TagsSetOriginalArtist
MP4TagsSetProducer
MP4TagsSetPublisher
MP4TagsSetReleaseDate
MP4TagsSetSortAlbum
MP4TagsSetSortAlbumArtist
MP4TagsSetSortArtist
MP4TagsSetSortComposer
MP4TagsSetSortName
MP4TagsSetTempo
MP4TagsSetTrack
MP4TagsStore
MP4WriteSample
MP4XtraTagsSetInt
MP4XtraTagsSetString

acdbase

CHAPTERNAME_Get_Number
CHAPTER_Get_Number
ChangeChannelOrder
ID3Helper_Copy
ID3Helper_Free
ID3Helper_GetChapterCount_Position
ID3Helper_GetChapterTotal
ID3Helper_GetChapter_Name
ID3Helper_GetChapter_Position
ID3Helper_GetDword
ID3Helper_GetFirst
ID3Helper_GetFirstImage
ID3Helper_GetNext
ID3Helper_GetNextImage
ID3Helper_IsNaN
N100nSToSamples
SamplesToN100nS
UNC_UnicodeToUtf8
UNC_Utf8ToUnicode
UNC_freeStr
UNC_freeWStr

msvcp140

?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z

libmmd

cos
exp2
log10
log10f
pow
sin
sqrt

svml_dispmd

__svml_idiv4
__svml_idiv4_e9
__svml_idiv8_l9
__svml_u64div4_l9

kernel32

DeleteFileW
DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_destroy_list
memcmp
memcpy
memmove
memset
strstr

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vswprintf

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
exit

api-ms-win-crt-string-l1-1-0

_strdup
strcmp
strlen
strncpy
wcslen

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

ACDX_Compress
ACDX_Compress.A
ACDX_Compress.L
ACDX_Compress.M
ACDX_Compress.N
ACDX_Compress.P
ACDX_Compress.R
ACDX_Compress.S
ACDX_Compress.V
ACDX_DeinitCompress
ACDX_DeinitCompress.A
ACDX_DeinitCompress.L
ACDX_DeinitCompress.M
ACDX_DeinitCompress.N
ACDX_DeinitCompress.P
ACDX_DeinitCompress.R
ACDX_DeinitCompress.S
ACDX_DeinitCompress.V
ACDX_GetInputFormat
ACDX_GetInputFormat.A
ACDX_GetInputFormat.L
ACDX_GetInputFormat.M
ACDX_GetInputFormat.N
ACDX_GetInputFormat.P
ACDX_GetInputFormat.R
ACDX_GetInputFormat.S
ACDX_GetInputFormat.V
ACDX_InitCompress3
ACDX_InitCompress3.A
ACDX_InitCompress3.L
ACDX_InitCompress3.M
ACDX_InitCompress3.N
ACDX_InitCompress3.P
ACDX_InitCompress3.R
ACDX_InitCompress3.S
ACDX_InitCompress3.V

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
encm_xheaacf.dll
.dll windows:6 windows x64 arch:x64

0869f2ab69bfc720380dfea11d08c567

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e2:6f:b0:c1:eb:8a:38:b5:ad:dd:e3:64:7e:57:69:32:a8:b3:bd:8a:d2:a3:91:fb:19:7a:67:d4:c6:3a:22:10
Signer

Actual PE Digest

e2:6f:b0:c1:eb:8a:38:b5:ad:dd:e3:64:7e:57:69:32:a8:b3:bd:8a:d2:a3:91:fb:19:7a:67:d4:c6:3a:22:10

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\_Encoder\XHEAAC (Fraunhofer)\encm_\Release\encm_xheaacf.pdb

Imports

acdbase

N100nSToSamples
SamplesToN100nS
CHAPTER_Get_Number
UNC_freeStr
UNC_Utf8ToUnicode
UNC_UnicodeToUtf8
ID3Helper_GetChapter_Name
ID3Helper_GetChapterTotal
ID3Helper_GetChapter_Position
ID3Helper_GetChapterCount_Position
ID3Helper_Copy
ID3Helper_Free
ID3Helper_IsNaN
ID3Helper_GetDword
ID3Helper_GetNextImage
ID3Helper_GetFirstImage
ID3Helper_GetNext
ID3Helper_GetFirst
CHAPTERNAME_Get_Number
UNC_freeWStr

mp4v2

MP4Malloc
MP4Free
MP4Close
MP4CreateEx
MP4Optimize
MP4SetDuration
MP4SetTimeScale
MP4SetAudioProfileLevel
MP4AddAudioTrack
MP4FindTrackId
MP4AddDataAtom
MP4GetTrackDuration
MP4SetTrackDuration
MP4GetTrackTimeScale
MP4SetTrackESConfiguration
MP4SetTrackEditDuration
MP4SetTrackEditMediaStart
MP4SetTrackIntegerProperty
MP4ReadSample
MP4ReWriteSample
MP4WriteSample
MP4GetSampleSize
MP4AddChapter
MP4AddChapterTextTrack
MP4AddNeroChapter
MP4ItmfItemAlloc
MP4ItmfItemFree
MP4ItmfAddItem
MP4TagsAlloc
MP4TagsStore
MP4TagsFree
MP4AddTrackEdit
MP4TagsSetName
MP4GetTrackNumberOfSamples
MP4XtraTagsSetInt
MP4XtraTagsSetString
MP4TagsSetEncodedBy
MP4TagsSetCopyright
MP4TagsAddArtwork
MP4TagsSetSortComposer
MP4TagsSetSortAlbum
MP4TagsSetSortAlbumArtist
MP4TagsSetSortArtist
MP4TagsSetSortName
MP4TagsSetLyrics
MP4TagsSetProducer
MP4TagsSetArranger
MP4TagsSetConductor
MP4TagsSetISRC
MP4TagsSetOriginalArtist
MP4TagsSetPublisher
MP4TagsSetLabel
MP4TagsSetCompilation
MP4TagsSetTempo
MP4TagsSetDisk
MP4TagsSetTrack
MP4TagsSetReleaseDate
MP4TagsSetGenre
MP4TagsSetComments
MP4TagsSetComposer
MP4TagsSetGrouping
MP4TagsSetAlbum
MP4TagsSetAlbumArtist
MP4TagsSetArtist

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

kernel32

GetCurrentProcess
DeleteFileW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW

vcruntime140

__current_exception_context
__current_exception
__std_type_info_destroy_list
__C_specific_handler
strrchr
memset
memmove
memcpy
memcmp
_CxxThrowException
__std_exception_destroy
__std_exception_copy
strstr

api-ms-win-crt-runtime-l1-1-0

terminate
_invalid_parameter_noinfo_noreturn
exit
_crt_at_quick_exit
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_controlfp
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit

api-ms-win-crt-stdio-l1-1-0

fwrite
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vfprintf
fflush
fputs
fclose
__stdio_common_vswprintf

api-ms-win-crt-string-l1-1-0

strcmp
strncpy
_strdup

api-ms-win-crt-heap-l1-1-0

calloc
_callnewh
free
malloc

api-ms-win-crt-math-l1-1-0

sqrt
log
floor
sin
pow
cos
log10
exp
ceilf
cosf
expf
floorf
logf
ceil
tanh
asin
ldexp
fmod
atan2
acos
atan
powf
tan
sinh
cosh
sinf
sqrtf
_fdclass

api-ms-win-crt-utility-l1-1-0

qsort
rand

api-ms-win-crt-time-l1-1-0

_time64

Exports

Exports

ACDX_Compress
ACDX_DeinitCompress
ACDX_GetInputFormat
ACDX_InitCompress3

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 635KB - Virtual size: 635KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ezcd.exe
.exe windows:6 windows x64 arch:x64

02a74d7a9b3b884417c13378a220e2d9

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8d:0b:f5:45:fc:30:ba:19:94:92:c8:84:ca:78:c5:89:87:ba:c3:37:4e:b2:06:25:22:23:02:06:bb:3a:2c:bc
Signer

Actual PE Digest

8d:0b:f5:45:fc:30:ba:19:94:92:c8:84:ca:78:c5:89:87:ba:c3:37:4e:b2:06:25:22:23:02:06:bb:3a:2c:bc

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ReleaseMutex
Sleep
WaitForSingleObject
CreateMutexA
OpenMutexA
GetCurrentProcessId
CreateThread
SetErrorMode
InitializeCriticalSection
GetModuleFileNameA
SetFilePointer
CreateFileA
ExitProcess
GetLocalTime
LeaveCriticalSection
GetTickCount
EnterCriticalSection
IsBadReadPtr
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetShortPathNameA
SearchPathA
GetTempPathA
GetTempPathW
GetTempFileNameA
GetTempFileNameW
GetWindowsDirectoryA
GetPrivateProfileStringA
WritePrivateProfileStringA
DeleteFileA
MoveFileA
CreateProcessA
GetStartupInfoA
GetCommandLineA
GetCurrentThreadId
ReadFile
GetFileSize
SetEnvironmentVariableA
GetProcessHeap
FlushFileBuffers
WriteConsoleW
SetStdHandle
GetConsoleMode
GetConsoleCP
HeapReAlloc
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetTimeZoneInformation
LoadLibraryW
FreeLibrary
SetConsoleCtrlHandler
FatalAppExitA
IsValidCodePage
GetOEMCP
GetACP
QueryPerformanceCounter
HeapDestroy
HeapCreate
GetVersion
HeapSetInformation
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
GetLocaleInfoW
GetModuleFileNameW
GetStdHandle
WriteFile
FlsAlloc
GetCurrentThread
SetLastError
LoadLibraryA
GetLastError
GetProcAddress
VirtualAlloc
VirtualProtect
GetEnvironmentVariableA
GetCommandLineW
FreeConsole
CreateEventA
CloseHandle
SetEvent
GetModuleHandleA
FlsFree
FlsSetValue
DeleteCriticalSection
EncodePointer
DecodePointer
SetEndOfFile
SetFilePointerEx
CreateFileW
FindClose
RemoveDirectoryW
DeleteFileW
DeviceIoControl
GetFullPathNameW
FindFirstFileW
FindNextFileW
GetFileAttributesW
CreateDirectoryExW
CopyFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFileInformationByHandle
GetFileAttributesExW
GetFileTime
SetFileTime
MoveFileExW
GetDiskFreeSpaceExW
CreateDirectoryW
AreFileApisANSI
LocalFree
FormatMessageA
RtlLookupFunctionEntry
RtlUnwindEx
RaiseException
RtlPcToFileHeader
GetStartupInfoW
GetModuleHandleW
HeapFree
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
HeapAlloc
GetCPInfo
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
FlsGetValue
CompareStringW

user32

PeekMessageA
TranslateMessage
DispatchMessageA
BeginPaint
EndPaint
KillTimer
LoadCursorA
GetAsyncKeyState
GetSystemMetrics
SetTimer
PostMessageA
IsWindow
DefWindowProcA
DefDlgProcA
DrawTextA
CreateDialogParamA
RegisterClassExA
DialogBoxParamA
SendMessageW
GetWindowTextLengthA
GetWindowTextA
CreateWindowExA
GetDesktopWindow
SetWindowTextA
GetDlgItem
CreateDialogIndirectParamA
ShowWindow
UpdateWindow
LoadStringA
LoadStringW
FindWindowA
SendMessageA
WaitForInputIdle
DestroyWindow
MessageBoxA
RegisterClassA

gdi32

CreateCompatibleDC
SelectObject
DeleteObject
CreatePalette
CreateDCA
SelectPalette
RealizePalette
CreateDIBitmap
DeleteDC
BitBlt

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

SHGetSpecialFolderPathA

Exports

Exports

AboutForm
Amazon
AudioCDOptions
AutoRipper
BurnISO
CDDBSelectCategory
ConvertWnd
ConvertWnd_Single
ConverterOptions
Copy
CoverArtWnd
CoverArtWnd2
CueSheetErrorForm
CustomCoverArtSize
DSPForm
EncoderInfo
EnterKeyForm
EraseDisc
Erasing
FC_GetMetadata
FreedbSubmitForm
GetMetadataForm
LyricsEditor
MBManual
Mainform
Make_ISO_Image_Status_Form
MemoEditor
NamePreview
OldLicenseForm
OverWritePrompt
Profile_Add_New
Profile_Editor
ReadTOCForm
ReminderForm
RipperOptions
Settings2AudioCDCreatorForm
Settings2AudioCDRipperDriveForm
Settings2AudioCDRipperForm
Settings2AudioConverterForm
Settings2AudioQualityForm
Settings2FileFormatForm
Settings2Form
Settings2GeneralFilenameGenerationForm
Settings2GeneralForm
Settings2GeneralInternetDiscDatabaseForm
Settings2GeneralMetadataForm
ShowCuesheet
TAccurateCDDAStatusWindow
TCoverArtPreview
TMetadata
TStatusWindow
UpdateCheckForm
WriterForm
_ZN10Jamdialogs12FinalizationEv
_ZN10Jamdialogs14TJamBaseDialog10GetVersionEv
_ZN10Jamdialogs14initializationEv
_ZN10Jamdialogs19TJamBrowseForFolderC3EPN6System7Classes10TComponentE
_ZN10Jamdialogs20TJamBaseBrowseDialog10JamExecuteEP6HWND__
_ZN10Jamdialogs20TJamBaseBrowseDialog10SetOptionsEN6System3SetINS_14TJamBrowseFlagELS3_0ELS3_7EEE
_ZN10Jamdialogs20TJamBaseBrowseDialog11SetRootedAtEN3Jam5Shell5Types15TJamShellFolderE
_ZN10Jamdialogs20TJamBaseBrowseDialog12GetDialogTopEv
_ZN10Jamdialogs20TJamBaseBrowseDialog12SetDialogTopEi
_ZN10Jamdialogs20TJamBaseBrowseDialog12SetSelectionEP6HWND__N6System15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEE
_ZN10Jamdialogs20TJamBaseBrowseDialog12ShowXPDialogEP6HWND__
_ZN10Jamdialogs20TJamBaseBrowseDialog13GetDialogLeftEv
_ZN10Jamdialogs20TJamBaseBrowseDialog13SetDialogLeftEi
_ZN10Jamdialogs20TJamBaseBrowseDialog13SetItemIdListEN6System15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEE
_ZN10Jamdialogs20TJamBaseBrowseDialog14AdjustPositionEv
_ZN10Jamdialogs20TJamBaseBrowseDialog14SetWindowTitleEN6System13UnicodeStringE
_ZN10Jamdialogs20TJamBaseBrowseDialog15FileDialogCloseEPN6System7TObjectERb
_ZN10Jamdialogs20TJamBaseBrowseDialog15ShowVistaDialogEP6HWND__
_ZN10Jamdialogs20TJamBaseBrowseDialog16GetSpecialFolderEv
_ZN10Jamdialogs20TJamBaseBrowseDialog16SetSelectionPathEP6HWND__N6System15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEE
_ZN10Jamdialogs20TJamBaseBrowseDialog16SetSpecialFolderEN3Jam5Shell5Types15TJamShellFolderE
_ZN10Jamdialogs20TJamBaseBrowseDialog17DoOkButtonClickedEPN6System7TObjectE
_ZN10Jamdialogs20TJamBaseBrowseDialog18SetOKButtonEnabledEb
_ZN10Jamdialogs20TJamBaseBrowseDialog21BrowseCallbackHandlerEP6HWND__jxx
_ZN10Jamdialogs20TJamBaseBrowseDialog22SetDialogButtonCaptionEN6System13UnicodeStringE
_ZN10Jamdialogs20TJamBaseBrowseDialog27SetRootedAtFileSystemFolderEN6System13UnicodeStringE
_ZN10Jamdialogs20TJamBaseBrowseDialog7ExecuteEP6HWND__
_ZN10Jamdialogs20TJamBaseBrowseDialog7ExecuteEv
_ZN10Jamdialogs20TJamBaseBrowseDialog7GetPathEv
_ZN10Jamdialogs20TJamBaseBrowseDialog7SetPathEN6System13UnicodeStringE
_ZN10Jamdialogs20TJamBaseBrowseDialog8DoChangeEPN6System7TObjectE
_ZN10Jamdialogs20TJamBaseBrowseDialog8SetTitleEN6System13UnicodeStringE
_ZN10Jamdialogs20TJamBaseBrowseDialogC3EPN6System7Classes10TComponentE
_ZN10Jamdialogs23TJamNetConnectionDialog10JamExecuteEP6HWND__
_ZN10Jamdialogs23TJamNetConnectionDialog10SetOptionsEN6System3SetINS_18TJamConnectionFlagELS3_0ELS3_2EEE
_ZN10Jamdialogs23TJamNetConnectionDialog13SetRemotePathEN6System13UnicodeStringE
_ZN10Jamdialogs23TJamNetConnectionDialog7ExecuteEP6HWND__
_ZN10Jamdialogs23TJamNetConnectionDialog7ExecuteEv
_ZN10Jamdialogs23TJamNetConnectionDialogC3EPN6System7Classes10TComponentE
_ZN10Jamdialogs23TJamNetDisconnectDialog10JamExecuteEP6HWND__
_ZN10Jamdialogs23TJamNetDisconnectDialog13DialogWndProcERN6Winapi8Messages8TMessageE
_ZN10Jamdialogs23TJamNetDisconnectDialog13MapWindowProcEv
_ZN10Jamdialogs23TJamNetDisconnectDialog21DialogShowTimerChangeEPN6System7TObjectE
_ZN10Jamdialogs23TJamNetDisconnectDialog7ExecuteEP6HWND__
_ZN10Jamdialogs23TJamNetDisconnectDialog7ExecuteEv
_ZN10Jamdialogs23TJamNetDisconnectDialogC3EPN6System7Classes10TComponentE
_ZN10Jamdialogs30TJamShellColumnSelectionDialog11CancelClickEPN6System7TObjectE
_ZN10Jamdialogs30TJamShellColumnSelectionDialog11ItemCheckedEPN6System7TObjectEPN3Vcl8Comctrls9TListItemE
_ZN10Jamdialogs30TJamShellColumnSelectionDialog11ResetFilterEPN6System7TObjectE
_ZN10Jamdialogs30TJamShellColumnSelectionDialog12InvokeSearchEPN6System7TObjectENS1_13UnicodeStringE
_ZN10Jamdialogs30TJamShellColumnSelectionDialog13FilterColumnsEN6System13UnicodeStringE
_ZN10Jamdialogs30TJamShellColumnSelectionDialog14ColumnsCompareEPN6System7TObjectEPN3Vcl8Comctrls9TListItemES7_iRi
_ZN10Jamdialogs30TJamShellColumnSelectionDialog14GetMultiSelectEv
_ZN10Jamdialogs30TJamShellColumnSelectionDialog14SetMultiSelectEb
_ZN10Jamdialogs30TJamShellColumnSelectionDialog15AddCustomColumnERKN3Jam5Shell5Types14TShellColumnIdEN6System13UnicodeStringE
_ZN10Jamdialogs30TJamShellColumnSelectionDialog15ColumnsChangingEPN6System7TObjectEPN3Vcl8Comctrls9TListItemENS5_11TItemChangeERb
_ZN10Jamdialogs30TJamShellColumnSelectionDialog16GetSpecialFolderEv
_ZN10Jamdialogs30TJamShellColumnSelectionDialog16InitializeDialogEPN6System7TObjectE
_ZN10Jamdialogs30TJamShellColumnSelectionDialog16SetSpecialFolderEN3Jam5Shell5Types15TJamShellFolderE
_ZN10Jamdialogs30TJamShellColumnSelectionDialog5ClearEv
_ZN10Jamdialogs30TJamShellColumnSelectionDialog6CancelEv
_ZN10Jamdialogs30TJamShellColumnSelectionDialog7ExecuteEP6HWND__
_ZN10Jamdialogs30TJamShellColumnSelectionDialog7OkClickEPN6System7TObjectE
_ZN10Jamdialogs30TJamShellColumnSelectionDialog7RefreshEv
_ZN10Jamdialogs30TJamShellColumnSelectionDialogC3EPN6System7Classes10TComponentE
_ZN10Jamdialogs30TJamShellColumnSelectionDialogD0Ev
_ZN10Jamdialogs8RegisterEv
_ZN10Threadpool10TCOMThread3RunEN6System15DelphiInterfaceINS1_7Classes16TThreadProcedureEEENS2_INS1_10IInterfaceEEEb
_ZN10Threadpool10TCOMThread7ExecuteEv
_ZN10Threadpool10TCOMThreadC3EN6System15DelphiInterfaceINS1_7Classes16TThreadProcedureEEENS2_INS1_10IInterfaceEEEbb
_ZN10Threadpool10TJamThread11DoTerminateEv
_ZN10Threadpool10TJamThread13GetIsFinishedEv
_ZN10Threadpool10TJamThread13GetTerminatedEv
_ZN10Threadpool10TJamThread16NotifyThreadPoolEv
_ZN10Threadpool10TJamThread17SetBackgroundModeEb
_ZN10Threadpool10TJamThread5DelayEj
_ZN10Threadpool10TJamThread5StartEv
_ZN10Threadpool10TJamThread9GetPausedEv
_ZN10Threadpool10TJamThread9SetPausedEb
_ZN10Threadpool10TJamThreadC3EN6System15DelphiInterfaceIN3Jam9Threading22ICancellationIndicatorEEE
_ZN10Threadpool10TJamThreadC3Ev
_ZN10Threadpool11GetCPUCountEv
_ZN10Threadpool11TThreadPool19TerminateAllThreadsEb
_ZN10Threadpool11TThreadPool3AddEPNS_10TJamThreadE
_ZN10Threadpool11TThreadPool6NotifyEPvN6System7Classes17TListNotificationE
_ZN10Threadpool12FinalizationEv
_ZN10Threadpool13TWorkerThread13TerminatedSetEv
_ZN10Threadpool13TWorkerThread17TerminateWorkItemEv
_ZN10Threadpool13TWorkerThread7ExecuteEv
_ZN10Threadpool13TWorkerThread9SetPausedEb
_ZN10Threadpool13TWorkerThreadC3EPNS_17TWorkerThreadPoolE
_ZN10Threadpool13TWorkerThreadD0Ev
_ZN10Threadpool14initializationEv
_ZN10Threadpool15TWorkItemsQueue16ContainsWorkItemERK5_GUID
_ZN10Threadpool15TWorkItemsQueue16ContainsWorkItemExPN6System10TMetaClassE
_ZN10Threadpool15TWorkItemsQueue3AddEN6System15DelphiInterfaceIN3Jam9Threading9IWorkItemEEEb
_ZN10Threadpool15TWorkItemsQueue5ClearEv
_ZN10Threadpool15TWorkItemsQueue5CountEv
_ZN10Threadpool15TWorkItemsQueue7DequeueERN6System15DelphiInterfaceIN3Jam9Threading9IWorkItemEEE
_ZN10Threadpool15TWorkItemsQueueC3Ev
_ZN10Threadpool17TCustomThreadPool11SetPriorityEN6System7Classes15TThreadPriorityE
_ZN10Threadpool17TCustomThreadPool12ThreadExistsEPNS_10TJamThreadE
_ZN10Threadpool17TCustomThreadPool13ThreadsActiveEv
_ZN10Threadpool17TCustomThreadPool14QueryInterfaceERK5_GUIDPv
_ZN10Threadpool17TCustomThreadPool16CheckSynchronizeEb
_ZN10Threadpool17TCustomThreadPool18DoThreadTerminatedEPNS_10TJamThreadE
_ZN10Threadpool17TCustomThreadPool18RunningThreadCountEv
_ZN10Threadpool17TCustomThreadPool19TerminateAllThreadsEb
_ZN10Threadpool17TCustomThreadPool19ThreadHasTerminatedEPNS_10TJamThreadE
_ZN10Threadpool17TCustomThreadPool20InternalThreadExistsEPNS_10TJamThreadE
_ZN10Threadpool17TCustomThreadPool20SetMaxRunningThreadsEi
_ZN10Threadpool17TCustomThreadPool20ThreadsNotTerminatedEv
_ZN10Threadpool17TCustomThreadPool21TerminateThreadSecureEPNS_10TJamThreadE
_ZN10Threadpool17TCustomThreadPool22DoAllThreadsTerminatedEv
_ZN10Threadpool17TCustomThreadPool23GetFirstSuspendedThreadEv
_ZN10Threadpool17TCustomThreadPool24DefaultMaxRunningThreadsEv
_ZN10Threadpool17TCustomThreadPool25StartFirstSuspendedThreadEv
_ZN10Threadpool17TCustomThreadPool3AddEPNS_10TJamThreadE
_ZN10Threadpool17TCustomThreadPool6NotifyEPvN6System7Classes17TListNotificationE
_ZN10Threadpool17TCustomThreadPool6RemoveEPNS_10TJamThreadE
_ZN10Threadpool17TCustomThreadPool7GetItemEx
_ZN10Threadpool17TCustomThreadPool7_AddRefEv
_ZN10Threadpool17TCustomThreadPool8_ReleaseEv
_ZN10Threadpool17TCustomThreadPool9GetPausedEv
_ZN10Threadpool17TCustomThreadPool9SetPausedEb
_ZN10Threadpool17TCustomThreadPoolC3Ev
_ZN10Threadpool17TCustomThreadPoolD0Ev
_ZN10Threadpool17TCustomThreadPoolv04IntfE
_ZN10Threadpool17TWorkerThreadPool11AddWorkItemEN6System15DelphiInterfaceIN3Jam9Threading9IWorkItemEEE
_ZN10Threadpool17TWorkerThreadPool11AddWorkItemEN6System15DelphiInterfaceIN3Jam9Threading9IWorkItemEEENS4_9TPriorityE
_ZN10Threadpool17TWorkerThreadPool11DoNewThreadEPNS_13TWorkerThreadE
_ZN10Threadpool17TWorkerThreadPool11GetCPUUsageEv
_ZN10Threadpool17TWorkerThreadPool11GetWorkItemEPNS_13TWorkerThreadE
_ZN10Threadpool17TWorkerThreadPool11QueueLengthEv
_ZN10Threadpool17TWorkerThreadPool12AddWorkItemsEN6System12DynamicArrayINS1_15DelphiInterfaceIN3Jam9Threading9IWorkItemEEEEENS5_9TPriorityE
_ZN10Threadpool17TWorkerThreadPool14SetMaxCpuUsageEi
_ZN10Threadpool17TWorkerThreadPool16ContainsWorkItemERK5_GUID
_ZN10Threadpool17TWorkerThreadPool16ContainsWorkItemEx
_ZN10Threadpool17TWorkerThreadPool16TerminateThreadsEb
_ZN10Threadpool17TWorkerThreadPool18GetWorkItemsActiveEv
_ZN10Threadpool17TWorkerThreadPool18TerminateWorkItemsEv
_ZN10Threadpool17TWorkerThreadPool18UninitializeThreadEPNS_13TWorkerThreadE
_ZN10Threadpool17TWorkerThreadPool19SetMinWorkerThreadsEi
_ZN10Threadpool17TWorkerThreadPool19TerminateAllThreadsEb
_ZN10Threadpool17TWorkerThreadPool20GetActiveThreadCountEv
_ZN10Threadpool17TWorkerThreadPool20SetMaxRunningThreadsEi
_ZN10Threadpool17TWorkerThreadPool23CheckAddNewWorkerThreadEv
_ZN10Threadpool17TWorkerThreadPool28TriggerAllWorkItemsDoneEventEv
_ZN10Threadpool17TWorkerThreadPool3AddEPNS_10TJamThreadE
_ZN10Threadpool17TWorkerThreadPool6RemoveEPNS_10TJamThreadE
_ZN10Threadpool17TWorkerThreadPool7DisposeEv
_ZN10Threadpool17TWorkerThreadPool8InstanceEv
_ZN10Threadpool17TWorkerThreadPoolC3Eb
_ZN10Threadpool17TWorkerThreadPoolD0Ev
_ZN10Threadpool17TWorkerThreadPoolv04IntfE
_ZN10Threadpool27TWorkerThreadPoolRefCounted7_AddRefEv
_ZN10Threadpool27TWorkerThreadPoolRefCounted8_ReleaseEv
_ZN10Threadpool27TWorkerThreadPoolRefCountedC3ERKN3Jam9Threading17TWorkerPoolConfigE
_ZN10Threadpool27TWorkerThreadPoolRefCountedC3Ev
_ZN10Threadpool27TWorkerThreadPoolRefCountedv04IntfE
_ZN11Jamcontrols12FinalizationEv
_ZN11Jamcontrols12TJamFileList10DestroyWndEv
_ZN11Jamcontrols12TJamFileList10ThreadDoneEb
_ZN11Jamcontrols12TJamFileList11BeginUpdateEv
_ZN11Jamcontrols12TJamFileList11FileChangedEN6System15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEES7_
_ZN11Jamcontrols12TJamFileList11InitColumnsEv
_ZN11Jamcontrols12TJamFileList11SortByIndexEv
_ZN11Jamcontrols12TJamFileList12FillSubItemsEPN3Jam5Shell8Controls17Baseshelllistview21TJamCheckableListItemEib
_ZN11Jamcontrols12TJamFileList12RestoreStateEv
_ZN11Jamcontrols12TJamFileList13DoOnEndSearchEv
_ZN11Jamcontrols12TJamFileList13SetCheckboxesEb
_ZN11Jamcontrols12TJamFileList14GetItemCaptionEPN3Jam5Shell8Controls17Baseshelllistview21TJamCheckableListItemEPN12Shellbrowser13TShellBrowserE
_ZN11Jamcontrols12TJamFileList16CMVisibleChangedERN6Winapi8Messages8TMessageE
_ZN11Jamcontrols12TJamFileList16GetTotalFileSizeEv
_ZN11Jamcontrols12TJamFileList16SetCaptionFormatENS_16TFileListCaptionE
_ZN11Jamcontrols12TJamFileList16SetSearchOptionsEPN3Jam5Shell5Types17TJamSearchOptionsE
_ZN11Jamcontrols12TJamFileList17GetTotalFileCountEv
_ZN11Jamcontrols12TJamFileList18ChangeNotificationEN22Jamshellchangenotifier18TNotificationEventEN6System13UnicodeStringES4_
_ZN11Jamcontrols12TJamFileList19CompleteItemDetailsEPN3Jam5Shell8Controls17Baseshelllistview21TJamCheckableListItemE
_ZN11Jamcontrols12TJamFileList19GetFileSizeAndCountEbRxRi
_ZN11Jamcontrols12TJamFileList19GetSelectedFileSizeEv
_ZN11Jamcontrols12TJamFileList19InitHeaderMenuStripEv
_ZN11Jamcontrols12TJamFileList19SetColumnVisibilityERKN3Jam5Shell5Types14TShellColumnIdEb
_ZN11Jamcontrols12TJamFileList20GetSelectedFileCountEv
_ZN11Jamcontrols12TJamFileList21SetAllowedDragEffectsEN6System3SetIN12Shellbrowser14TJamDropEffectELS4_0ELS4_4EEE
_ZN11Jamcontrols12TJamFileList25GetLocalIndexForNewColumnEPN3Jam5Shell8Controls17Baseshelllistview19TJamShellListColumnE
_ZN11Jamcontrols12TJamFileList36UpdateSubitemsAfterColumnGetsVisibleEi
_ZN11Jamcontrols12TJamFileList3AddEN6System13UnicodeStringEbi
_ZN11Jamcontrols12TJamFileList3AddEN6System15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEEbi
_ZN11Jamcontrols12TJamFileList4EditERK10tagLVITEMW
_ZN11Jamcontrols12TJamFileList4StopEv
_ZN11Jamcontrols12TJamFileList6ChangeEPN3Vcl8Comctrls9TListItemEi
_ZN11Jamcontrols12TJamFileList6SearchEN6System13UnicodeStringE
_ZN11Jamcontrols12TJamFileList7KeyDownERtN6System3SetINS2_7Classes15TShiftStateItemELS5_0ELS5_10EEE
_ZN11Jamcontrols12TJamFileList8DragOverEiN6System5Types6TPointERi
_ZN11Jamcontrols12TJamFileList9CreateWndEv
_ZN11Jamcontrols12TJamFileList9DragEnterEN6System15DelphiInterfaceI11IDataObjectEEiNS1_5Types6TPointERi
_ZN11Jamcontrols12TJamFileList9EndUpdateEv
_ZN11Jamcontrols12TJamFileList9SaveStateEv
_ZN11Jamcontrols12TJamFileListC3EPN6System7Classes10TComponentE
_ZN11Jamcontrols12TJamFileListD0Ev
_ZN11Jamcontrols12TJamFileListv04IntfE
_ZN11Jamcontrols12TJamPathEdit10FireOnExitEPN6System7TObjectE
_ZN11Jamcontrols12TJamPathEdit10GetVersionEv
_ZN11Jamcontrols12TJamPathEdit10SetEnabledEb
_ZN11Jamcontrols12TJamPathEdit11ButtonClickEPN6System7TObjectE
_ZN11Jamcontrols12TJamPathEdit11ChangeScaleEiib
_ZN11Jamcontrols12TJamPathEdit11CheckFilterEv
_ZN11Jamcontrols12TJamPathEdit11FireOnClickEPN6System7TObjectE
_ZN11Jamcontrols12TJamPathEdit11FireOnEnterEPN6System7TObjectE
_ZN11Jamcontrols12TJamPathEdit11FireOnKeyUpEPN6System7TObjectERtNS1_3SetINS1_7Classes15TShiftStateItemELS7_0ELS7_10EEE
_ZN11Jamcontrols12TJamPathEdit12GetPopupMenuEv
_ZN11Jamcontrols12TJamPathEdit12SetPopupMenuEPN3Vcl5Menus10TPopupMenuE
_ZN11Jamcontrols12TJamPathEdit12SetShowImageEb
_ZN11Jamcontrols12TJamPathEdit13BrowseForFileEv
_ZN11Jamcontrols12TJamPathEdit13FireOnKeyDownEPN6System7TObjectERtNS1_3SetINS1_7Classes15TShiftStateItemELS7_0ELS7_10EEE
_ZN11Jamcontrols12TJamPathEdit13FireOnMouseUpEPN6System7TObjectENS1_7Uitypes12TMouseButtonENS1_3SetINS1_7Classes15TShiftStateItemELS8_0ELS8_10EEEii
_ZN11Jamcontrols12TJamPathEdit13GetParentFontEv
_ZN11Jamcontrols12TJamPathEdit13SetDefaultExtEN6System13UnicodeStringE
_ZN11Jamcontrols12TJamPathEdit13SetFolderModeEb
_ZN11Jamcontrols12TJamPathEdit13SetParentFontEb
_ZN11Jamcontrols12TJamPathEdit14FireOnDblClickEPN6System7TObjectE
_ZN11Jamcontrols12TJamPathEdit14FireOnDragDropEPN6System7TObjectES3_ii
_ZN11Jamcontrols12TJamPathEdit14FireOnDragOverEPN6System7TObjectES3_iiNS1_7Uitypes10TDragStateERb
_ZN11Jamcontrols12TJamPathEdit14FireOnKeyPressEPN6System7TObjectERw
_ZN11Jamcontrols12TJamPathEdit14GetIsValidPathEv
_ZN11Jamcontrols12TJamPathEdit14SetDialogTitleEN6System13UnicodeStringE
_ZN11Jamcontrols12TJamPathEdit15BrowseForFolderEv
_ZN11Jamcontrols12TJamPathEdit15FireOnMouseDownEPN6System7TObjectENS1_7Uitypes12TMouseButtonENS1_3SetINS1_7Classes15TShiftStateItemELS8_0ELS8_10EEEii
_ZN11Jamcontrols12TJamPathEdit15FireOnMouseMoveEPN6System7TObjectENS1_3SetINS1_7Classes15TShiftStateItemELS6_0ELS6_10EEEii
_ZN11Jamcontrols12TJamPathEdit16OpenDialogOnShowEPN6System7TObjectE
_ZN11Jamcontrols12TJamPathEdit16SetUseSystemFontEb
_ZN11Jamcontrols12TJamPathEdit17ApplyAutoCompleteEv
_ZN11Jamcontrols12TJamPathEdit17EditFieldOnChangeEPN6System7TObjectE
_ZN11Jamcontrols12TJamPathEdit17UpdateEditMarginsEv
_ZN11Jamcontrols12TJamPathEdit18GetPopupMenuButtonEv
_ZN11Jamcontrols12TJamPathEdit18SetPopupMenuButtonEPN3Vcl5Menus10TPopupMenuE
_ZN11Jamcontrols12TJamPathEdit22SetDialogButtonCaptionEN6System13UnicodeStringE
_ZN11Jamcontrols12TJamPathEdit26SetOpenDialogButtonEnabledEb
_ZN11Jamcontrols12TJamPathEdit6LoadedEv
_ZN11Jamcontrols12TJamPathEdit6ResizeEv
_ZN11Jamcontrols12TJamPathEdit7GetPathEv
_ZN11Jamcontrols12TJamPathEdit7SetPathEN6System13UnicodeStringE
_ZN11Jamcontrols12TJamPathEdit7WndProcERN6Winapi8Messages8TMessageE
_ZN11Jamcontrols12TJamPathEdit8GetColorEv
_ZN11Jamcontrols12TJamPathEdit8SetColorEN6System7Uitypes6TColorE
_ZN11Jamcontrols12TJamPathEdit8SetFocusEv
_ZN11Jamcontrols12TJamPathEdit9CreateWndEv
_ZN11Jamcontrols12TJamPathEdit9LoadImageEv
_ZN11Jamcontrols12TJamPathEditC3EPN6System7Classes10TComponentE
_ZN11Jamcontrols12TJamPathEditD0Ev
_ZN11Jamcontrols13TJamComboItem7GetPIDLEv
_ZN11Jamcontrols13TJamComboItem7GetPathEv
_ZN11Jamcontrols13TJamComboItem7SetPathEN6System13UnicodeStringE
_ZN11Jamcontrols13TJamComboItem7SetPidlEN6System15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEE
_ZN11Jamcontrols13TJamComboItem9CompareToEPS0_
_ZN11Jamcontrols13TJamComboItem9IsDesktopEv
_ZN11Jamcontrols13TJamComboItemC3EN6System15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEE
_ZN11Jamcontrols13TJamComboItemD0Ev
_ZN11Jamcontrols13TJamDragFiles10DragDetectERKN6System5Types6TPointE
_ZN11Jamcontrols13TJamDragFiles10GetVersionEv
_ZN11Jamcontrols13TJamDragFiles10SubWndProcERN6Winapi8Messages8TMessageE
_ZN11Jamcontrols13TJamDragFiles12BeginOleDragEN6System7Uitypes12TMouseButtonEN12Shellbrowser14TJamDropEffectE
_ZN11Jamcontrols13TJamDragFiles12GiveFeedbackEi
_ZN11Jamcontrols13TJamDragFiles14SetDragControlEPN3Vcl8Controls11TWinControlE
_ZN11Jamcontrols13TJamDragFiles17QueryContinueDragEii
_ZN11Jamcontrols13TJamDragFilesC3EPN6System7Classes10TComponentE
_ZN11Jamcontrols13TJamDragFilesv04IntfE
_ZN11Jamcontrols13TJamDropFiles10GetVersionEv
_ZN11Jamcontrols13TJamDropFiles10SetControlEPN3Vcl8Controls11TWinControlE
_ZN11Jamcontrols13TJamDropFiles10SetEnabledEb
_ZN11Jamcontrols13TJamDropFiles12NotificationEPN6System7Classes10TComponentENS2_10TOperationE
_ZN11Jamcontrols13TJamDropFiles17TimerEventHandlerEPN6System7TObjectE
_ZN11Jamcontrols13TJamDropFiles21GetTempDropTargetPathEv
_ZN11Jamcontrols13TJamDropFiles26RegisterControlForDragDropEv
_ZN11Jamcontrols13TJamDropFiles26UpdateDragDropRegistrationEv
_ZN11Jamcontrols13TJamDropFiles4DropEN6System15DelphiInterfaceI11IDataObjectEEiNS1_5Types6TPointERi
_ZN11Jamcontrols13TJamDropFiles8DragOverEiN6System5Types6TPointERi
_ZN11Jamcontrols13TJamDropFiles9DragEnterEN6System15DelphiInterfaceI11IDataObjectEEiNS1_5Types6TPointERi
_ZN11Jamcontrols13TJamDropFiles9DragLeaveEv
_ZN11Jamcontrols13TJamDropFilesC3EPN6System7Classes10TComponentE
_ZN11Jamcontrols13TJamDropFilesD0Ev
_ZN11Jamcontrols13TJamDropFilesv04IntfE
_ZN11Jamcontrols13TJamPathLabel10GetCheckedEv
_ZN11Jamcontrols13TJamPathLabel10GetVersionEv
_ZN11Jamcontrols13TJamPathLabel10IsUpdatingEv
_ZN11Jamcontrols13TJamPathLabel10SetCheckedEb
_ZN11Jamcontrols13TJamPathLabel11BeginUpdateEv
_ZN11Jamcontrols13TJamPathLabel11FileChangedEN6System15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEES7_
_ZN11Jamcontrols13TJamPathLabel11FullRefreshEv
_ZN11Jamcontrols13TJamPathLabel11GetShowIconEv
_ZN11Jamcontrols13TJamPathLabel11PathChangedEN6System15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEE
_ZN11Jamcontrols13TJamPathLabel11SetAutoSizeEb
_ZN11Jamcontrols13TJamPathLabel11SetShowIconEb
_ZN11Jamcontrols13TJamPathLabel12CreateParamsERN3Vcl8Controls13TCreateParamsE
_ZN11Jamcontrols13TJamPathLabel12SetShellLinkEPN9Shelllink13TJamShellLinkE
_ZN11Jamcontrols13TJamPathLabel12UpdateLayoutEv
_ZN11Jamcontrols13TJamPathLabel12getShellLinkEv
_ZN11Jamcontrols13TJamPathLabel13CMFontChangedERN6Winapi8Messages8TMessageE
_ZN11Jamcontrols13TJamPathLabel13DoOnLoadLabelEv
_ZN11Jamcontrols13TJamPathLabel13GetParentFontEv
_ZN11Jamcontrols13TJamPathLabel13SetItemIdListEN6System15DelphiInterfaceIN12Jamworkitems19IItemIdListWorkItemEEE
_ZN11Jamcontrols13TJamPathLabel13SetItemIdListEN6System15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEE
_ZN11Jamcontrols13TJamPathLabel13SetParentFontEb
_ZN11Jamcontrols13TJamPathLabel13WMContextMenuERN6Winapi8Messages14TWMContextMenuE
_ZN11Jamcontrols13TJamPathLabel14GetTransparentEv
_ZN11Jamcontrols13TJamPathLabel14SetDisplayPathEN6System13UnicodeStringE
_ZN11Jamcontrols13TJamPathLabel14SetTransparentEb
_ZN11Jamcontrols13TJamPathLabel15FormatPathLabelEv
_ZN11Jamcontrols13TJamPathLabel15GetShowCheckboxEv
_ZN11Jamcontrols13TJamPathLabel15OnCheckboxClickEPN6System7TObjectE
_ZN11Jamcontrols13TJamPathLabel15SetShowCheckboxEb
_ZN11Jamcontrols13TJamPathLabel15ShowContextMenuERKN6System5Types6TPointE
_ZN11Jamcontrols13TJamPathLabel16SetUseSystemFontEb
_ZN11Jamcontrols13TJamPathLabel19DoExecuteOnDblClickEPN6System7TObjectE
_ZN11Jamcontrols13TJamPathLabel20DetermineDisplayPathEv
_ZN11Jamcontrols13TJamPathLabel4GoUpEv
_ZN11Jamcontrols13TJamPathLabel5KeyUpERtN6System3SetINS2_7Classes15TShiftStateItemELS5_0ELS5_10EEE
_ZN11Jamcontrols13TJamPathLabel5PaintEv
_ZN11Jamcontrols13TJamPathLabel6DoExitEv
_ZN11Jamcontrols13TJamPathLabel6ResizeEv
_ZN11Jamcontrols13TJamPathLabel7DoEnterEv
_ZN11Jamcontrols13TJamPathLabel7GetPathEv
_ZN11Jamcontrols13TJamPathLabel7RefreshEN9Shelllink13TRefreshLevelEN6System15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEE
_ZN11Jamcontrols13TJamPathLabel7SetIconEiN12Jamworkitems12TJamIconTypeEx
_ZN11Jamcontrols13TJamPathLabel7SetPathEN6System13UnicodeStringE
_ZN11Jamcontrols13TJamPathLabel8DblClickEv
_ZN11Jamcontrols13TJamPathLabel9CreateWndEv
_ZN11Jamcontrols13TJamPathLabel9EndUpdateEv
_ZN11Jamcontrols13TJamPathLabel9SelectAllEv
_ZN11Jamcontrols13TJamPathLabelC3EPN6System7Classes10TComponentE
_ZN11Jamcontrols13TJamPathLabelD0Ev
_ZN11Jamcontrols13TJamPathLabelv04IntfE
_ZN11Jamcontrols14initializationEv
_ZN11Jamcontrols15TJamFilterCombo11FileChangedEN6System15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEES7_
_ZN11Jamcontrols15TJamFilterCombo11FullRefreshEv
_ZN11Jamcontrols15TJamFilterCombo11GetEditableEv
_ZN11Jamcontrols15TJamFilterCombo11PathChangedEN6System15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEE
_ZN11Jamcontrols15TJamFilterCombo11SetEditableEb
_ZN11Jamcontrols15TJamFilterCombo11UpdateItemsEv
_ZN11Jamcontrols15TJamFilterCombo12SetItemIndexEi
_ZN11Jamcontrols15TJamFilterCombo12getShellLinkEv
_ZN11Jamcontrols15TJamFilterCombo12setShellLinkEPN9Shelllink13TJamShellLinkE
_ZN11Jamcontrols15TJamFilterCombo15GetFilterStringEv
_ZN11Jamcontrols15TJamFilterCombo15SetFilterStringEN6System13UnicodeStringE
_ZN11Jamcontrols15TJamFilterCombo16GetCurrentFilterEv
_ZN11Jamcontrols15TJamFilterCombo17TJamFileTypeItems3AddEN6System13UnicodeStringES3_
_ZN11Jamcontrols15TJamFilterCombo17TJamFileTypeItems5ParseEN6System13UnicodeStringE
_ZN11Jamcontrols15TJamFilterCombo17TJamFileTypeItems6NotifyEPN6System7Classes15TCollectionItemENS2_8Generics11Collections23TCollectionNotificationE
_ZN11Jamcontrols15TJamFilterCombo17TJamFileTypeItems9EndUpdateEv
_ZN11Jamcontrols15TJamFilterCombo20FileTypeItemsChangedEPN6System7TObjectE
_ZN11Jamcontrols15TJamFilterCombo20GetCurrentFilterItemEv
_ZN11Jamcontrols15TJamFilterCombo4GoUpEv
_ZN11Jamcontrols15TJamFilterCombo6LoadedEv
_ZN11Jamcontrols15TJamFilterCombo6SelectEv
_ZN11Jamcontrols15TJamFilterCombo7KeyDownERtN6System3SetINS2_7Classes15TShiftStateItemELS5_0ELS5_10EEE
_ZN11Jamcontrols15TJamFilterCombo7RefreshEN9Shelllink13TRefreshLevelEN6System15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEE
_ZN11Jamcontrols15TJamFilterCombo8AddItemsEv
_ZN11Jamcontrols15TJamFilterCombo8DropDownEv
_ZN11Jamcontrols15TJamFilterCombo9CreateWndEv
_ZN11Jamcontrols15TJamFilterCombo9SetFilterEN6System13UnicodeStringE
_ZN11Jamcontrols15TJamFilterComboC3EPN6System7Classes10TComponentE
_ZN11Jamcontrols15TJamFilterComboD0Ev
_ZN11Jamcontrols15TJamFilterCombov04IntfE
_ZN11Jamcontrols15TJamFolderCombo10RemoveItemEN6System15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEE
_ZN11Jamcontrols15TJamFolderCombo11DoPopulatedEv
_ZN11Jamcontrols15TJamFolderCombo11FilterMatchEN6System15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEE
_ZN11Jamcontrols15TJamFolderCombo11FullRefreshEv
_ZN11Jamcontrols15TJamFolderCombo11GetEditTextEv
_ZN11Jamcontrols15TJamFolderCombo11GetEditableEv
_ZN11Jamcontrols15TJamFolderCombo11SetEditableEb
_ZN11Jamcontrols15TJamFolderCombo12RemoveFolderEN6System13UnicodeStringE
_ZN11Jamcontrols15TJamFolderCombo12SelectFolderEN6System13UnicodeStringE
_ZN11Jamcontrols15TJamFolderCombo13ApplyEditableEv
_ZN11Jamcontrols15TJamFolderCombo13JamGetEnabledEv
_ZN11Jamcontrols15TJamFolderCombo13JamSetEnabledEb
_ZN11Jamcontrols15TJamFolderCombo13SetItemIdListEN6System15DelphiInterfaceIN12Jamworkitems19IItemIdListWorkItemEEE
_ZN11Jamcontrols15TJamFolderCombo16GetIncludeDrivesEv
_ZN11Jamcontrols15TJamFolderCombo16SetIncludeDrivesEb
_ZN11Jamcontrols15TJamFolderCombo17AddPersistentItemEN6System15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEE
_ZN11Jamcontrols15TJamFolderCombo17GetSelectedFolderEv
_ZN11Jamcontrols15TJamFolderCombo17IndexOfItemIdListEN6System15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEE
_ZN11Jamcontrols15TJamFolderCombo17SetSelectedFolderEN6System13UnicodeStringE
_ZN11Jamcontrols15TJamFolderCombo18ChangeNotificationEPN6System7TObjectEN22Jamshellchangenotifier18TNotificationEventENS1_15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEESB_
_ZN11Jamcontrols15TJamFolderCombo19SetAutomaticRefreshEb
_ZN11Jamcontrols15TJamFolderCombo20UpdateItemAfterCheckEPN12Jamworkitems19TPathExistsWorkItemE
_ZN11Jamcontrols15TJamFolderCombo21SetIncludeMyDocumentsEb
_ZN11Jamcontrols15TJamFolderCombo23SetIncludeMobileDevicesEb
_ZN11Jamcontrols15TJamFolderCombo25GetIncludeRemovableDrivesEv
_ZN11Jamcontrols15TJamFolderCombo25SetIncludeRemovableDrivesEb
_ZN11Jamcontrols15TJamFolderCombo6LoadedEv
_ZN11Jamcontrols15TJamFolderCombo9AddFolderEN6System13UnicodeStringEib
_ZN11Jamcontrols15TJamFolderCombo9CreateWndEv
_ZN11Jamcontrols15TJamFolderCombo9EditEnterEPN6System7TObjectE
_ZN11Jamcontrols15TJamFolderCombo9WMDestroyERN6Winapi8Messages11TWMNoParamsE
_ZN11Jamcontrols15TJamFolderComboC3EPN6System7Classes10TComponentE
_ZN11Jamcontrols15TJamFolderComboD0Ev
_ZN11Jamcontrols15TJamFolderCombov04IntfE
_ZN11Jamcontrols17TJamImageFromChar5ClearEv
_ZN11Jamcontrols17TJamImageFromChar5PaintEwNS_22TJamImageFromCharStateEii
_ZN11Jamcontrols17TJamImageFromCharC3EPN3Vcl8Controls8TControlE
_ZN11Jamcontrols18TJamThumbnailImage10DoProgressEN3Vcl8Graphics14TProgressStageE
_ZN11Jamcontrols18TJamThumbnailImage10GetPictureEv
_ZN11Jamcontrols18TJamThumbnailImage10GetVersionEv
_ZN11Jamcontrols18TJamThumbnailImage11FileChangedEN6System15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEES7_
_ZN11Jamcontrols18TJamThumbnailImage11PathChangedEN6System15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEE
_ZN11Jamcontrols18TJamThumbnailImage12RequestAlignEv
_ZN11Jamcontrols18TJamThumbnailImage12SmartRefreshEv
_ZN11Jamcontrols18TJamThumbnailImage12getShellLinkEv
_ZN11Jamcontrols18TJamThumbnailImage12setShellLinkEPN9Shelllink13TJamShellLinkE
_ZN11Jamcontrols18TJamThumbnailImage13JamGetEnabledEv
_ZN11Jamcontrols18TJamThumbnailImage13JamSetEnabledEb
_ZN11Jamcontrols18TJamThumbnailImage17GetThumbnailImageEv
_ZN11Jamcontrols18TJamThumbnailImage18SetThumbnailBitmapEPN3Vcl8Graphics7TBitmapEix
_ZN11Jamcontrols18TJamThumbnailImage20GetShowErrorMessagesEv
_ZN11Jamcontrols18TJamThumbnailImage20SetShowErrorMessagesEb
_ZN11Jamcontrols18TJamThumbnailImage21GetAbsoluteItemIdListEv
_ZN11Jamcontrols18TJamThumbnailImage21SetAbsoluteItemIdListEN6System15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEE
_ZN11Jamcontrols18TJamThumbnailImage4GoUpEv
_ZN11Jamcontrols18TJamThumbnailImage5ClearEv
_ZN11Jamcontrols18TJamThumbnailImage6LoadedEv
_ZN11Jamcontrols18TJamThumbnailImage6WMSizeERN6Winapi8Messages7TWMSizeE
_ZN11Jamcontrols18TJamThumbnailImage7GetPathEv
_ZN11Jamcontrols18TJamThumbnailImage7IsEmptyEv
_ZN11Jamcontrols18TJamThumbnailImage7RefreshEN9Shelllink13TRefreshLevelEN6System15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEE
_ZN11Jamcontrols18TJamThumbnailImage7SetPathEN6System13UnicodeStringE
_ZN11Jamcontrols18TJamThumbnailImage9CreateWndEv
_ZN11Jamcontrols18TJamThumbnailImage9SelectAllEv
_ZN11Jamcontrols18TJamThumbnailImageC3EPN6System7Classes10TComponentE
_ZN11Jamcontrols18TJamThumbnailImageD0Ev
_ZN11Jamcontrols18TJamThumbnailImagev04IntfE
_ZN11Jamcontrols20TJamOpenSaveComboBox11FileChangedEN6System15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEES7_
_ZN11Jamcontrols20TJamOpenSaveComboBox11FullRefreshEv
_ZN11Jamcontrols20TJamOpenSaveComboBox11PathChangedEN6System15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEE
_ZN11Jamcontrols20TJamOpenSaveComboBox12FillFileListEN6System13UnicodeStringE
_ZN11Jamcontrols20TJamOpenSaveComboBox12getShellLinkEv
_ZN11Jamcontrols20TJamOpenSaveComboBox12setShellLinkEPN9Shelllink13TJamShellLinkE
_ZN11Jamcontrols20TJamOpenSaveComboBox13FilterChangedEN6System13UnicodeStringE
_ZN11Jamcontrols20TJamOpenSaveComboBox14DoPathSelectedEv
_ZN11Jamcontrols20TJamOpenSaveComboBox15GetSelectedPathEv
_ZN11Jamcontrols20TJamOpenSaveComboBox17GetSelectedFolderEv
_ZN11Jamcontrols20TJamOpenSaveComboBox17SetSelectedFolderEN6System13UnicodeStringE
_ZN11Jamcontrols20TJamOpenSaveComboBox4GoUpEv
_ZN11Jamcontrols20TJamOpenSaveComboBox6LoadedEv
_ZN11Jamcontrols20TJamOpenSaveComboBox7RefreshEN9Shelllink13TRefreshLevelEN6System15DelphiInterfaceIN3Jam5Shell5Types11IItemIdListEEE
_ZN11Jamcontrols20TJamOpenSaveComboBox9CreateWndEv
_ZN11Jamcontrols20TJamOpenSaveComboBox9GetFilterEv

Sections

.kwlp
Size: - Virtual size: 8.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tdizp
Size: - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nmledh
Size: - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ycapj
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nvopz
Size: - Virtual size: 589KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jmonk
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jdylu
Size: 4KB - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.czwph
Size: - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.svowln
Size: - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yomwcb
Size: 576KB - Virtual size: 572KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qhparg
Size: 716KB - Virtual size: 716KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vths
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ptmrx
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.omxd
Size: 52KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zdurnf
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qlnwd
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ezcd64.dll
.dll regsvr32 windows:6 windows x64 arch:x64

c6eb99284405e2ad4b88d69e628ac40d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d8:c7:04:34:83:3e:02:90:65:0b:14:89:3f:1f:92:39
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

31/12/2021, 00:00

Not After

30/12/2024, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

92:ef:71:37:ec:e4:4f:6e:e0:53:29:da:f3:bc:13:1a:bb:e0:cb:4b:31:28:f1:c9:cb:5e:6d:73:25:45:b3:02
Signer

Actual PE Digest

92:ef:71:37:ec:e4:4f:6e:e0:53:29:da:f3:bc:13:1a:bb:e0:cb:4b:31:28:f1:c9:cb:5e:6d:73:25:45:b3:02

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Shell\64-bit\ReleaseMinDependency\ezcdac.pdb

Imports

kernel32

FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
GetProcAddress
LoadLibraryExA
LoadResource
SizeofResource
lstrcmpiA
FindResourceA
MultiByteToWideChar
WideCharToMultiByte
IsDBCSLeadByte
VerSetConditionMask
GetFileAttributesW
GlobalUnlock
GlobalLock
VerifyVersionInfoW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
DisableThreadLibraryCalls
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
WriteConsoleW
CreateFileW
ReadConsoleW
ReadFile
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
SetConsoleCtrlHandler
GetFileType
GetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetVersion
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetLastError
DecodePointer
EncodePointer
lstrlenW
lstrcpyW
GetModuleFileNameW
CreateProcessW
Sleep
OpenEventW
SetLastError
CloseHandle
IsProcessorFeaturePresent
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
OutputDebugStringW
RtlPcToFileHeader
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetCurrentProcess
TerminateProcess
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualQuery
ExitProcess
GetModuleHandleExW
GetCurrentThread
HeapFree
HeapAlloc
HeapSize
HeapReAlloc
GetTempPathW
FlsAlloc
RtlUnwind

user32

GetWindowTextLengthW
GetWindowTextW
SetForegroundWindow
wsprintfW
SetMenuItemBitmaps
EnumWindows
GetClassNameW
DrawIconEx
LoadImageA
DestroyIcon
GetSysColor
UnregisterClassA
InsertMenuW
CreatePopupMenu
GetSystemMetrics
SendMessageA
CharNextW
CharNextA

gdi32

CreateDIBSection
SetBkColor
SelectObject
DeleteDC
CreateCompatibleDC
ExtTextOutA

advapi32

RegQueryValueExW
RegSetValueExA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey

shell32

DragQueryFileW
DragQueryFileA

ole32

CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
ReleaseStgMedium

oleaut32

LoadRegTypeLi
LoadTypeLi
UnRegisterTypeLi
SysStringLen
SysFreeString
SysAllocString
VarUI4FromStr
RegisterTypeLi

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 406KB - Virtual size: 405KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ezcdshell.appx
.appx
AppxBlockMap.xml
.xml
AppxManifest.xml
AppxSignature.p7x
[Content_Types].xml
.xml
ezcdshell.dll
.dll windows:6 windows x64 arch:x64

4b418e9985fd54721b87d9e99270881a

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d8:c7:04:34:83:3e:02:90:65:0b:14:89:3f:1f:92:39
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

31/12/2021, 00:00

Not After

30/12/2024, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

78:d1:a9:3d:22:3a:1b:f8:1c:94:dc:fc:c7:03:e9:cb:ba:28:c8:93:87:78:7f:62:f3:2a:5e:0a:b0:91:39:82
Signer

Actual PE Digest

78:d1:a9:3d:22:3a:1b:f8:1c:94:dc:fc:c7:03:e9:cb:ba:28:c8:93:87:78:7f:62:f3:2a:5e:0a:b0:91:39:82

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\ezcdshell\ezcdshell\x64\Release\ezcdshell.pdb

Imports

shlwapi

SHStrDupW

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError
RoOriginateErrorW

api-ms-win-core-winrt-string-l1-1-0

WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringRawBuffer

kernel32

GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
ReleaseSRWLockShared
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
AcquireSRWLockShared
DecodePointer
EncodePointer
FormatMessageW
GetCurrentThreadId
HeapAlloc
GetProcessHeap
HeapFree
GetModuleHandleExW
GetModuleFileNameA
DebugBreak
GetModuleHandleW
GetProcAddress
IsDebuggerPresent
OutputDebugStringW
lstrlenW
GetModuleFileNameW
InitOnceExecuteOnce
SetLastError
CreateProcessW
CloseHandle
Sleep
OpenEventW
lstrcpyW
HeapSize
SetStdHandle
SetFilePointerEx
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
CreateFileW
WriteConsoleW
GetFileAttributesW
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
LCMapStringEx
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetStdHandle
GetFileType
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetLocaleInfoW
IsValidLocale

user32

IsWindow
wsprintfW
EnumWindows
GetClassNameW
GetWindowTextW
GetWindowTextLengthW
ShowWindow
GetWindowPlacement
SendMessageW
SetForegroundWindow
AllowSetForegroundWindow
SystemParametersInfoW
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

ole32

CoTaskMemAlloc
CoTaskMemFree

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject

Sections

.text
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
fdkaac.dll
.dll windows:6 windows x64 arch:x64

73c7e11577755701544a89b10a49e794

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1c:c4:d8:d3:88:5e:28:40:94:8d:b1:ea:75:44:cc:e2:70:0c:70:0a:24:89:c0:be:ed:52:07:9f:44:17:06:f7
Signer

Actual PE Digest

1c:c4:d8:d3:88:5e:28:40:94:8d:b1:ea:75:44:cc:e2:70:0c:70:0a:24:89:c0:be:ed:52:07:9f:44:17:06:f7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

svml_dispmd

__svml_idiv4
__svml_idiv4_e9
__svml_idiv8_l9

libmmd

frexpf
ldexp
sqrt

kernel32

DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter

vcruntime140

__C_specific_handler
__std_type_info_destroy_list
memcmp
memcpy
memmove
memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
fread

api-ms-win-crt-heap-l1-1-0

calloc
free

api-ms-win-crt-string-l1-1-0

strlen
strncpy

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
exit

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

?CAacDecoder_ApplyCrossFade@@YA?AW4AAC_DECODER_ERROR@@PEAJPEAPEAJHHH@Z
?CAacDecoder_ApplyCrossFade@@YA?AW4AAC_DECODER_ERROR@@[email protected]
?CAacDecoder_ApplyCrossFade@@YA?AW4AAC_DECODER_ERROR@@[email protected]
?CAacDecoder_ApplyCrossFade@@YA?AW4AAC_DECODER_ERROR@@[email protected]
?CAacDecoder_ApplyCrossFade@@YA?AW4AAC_DECODER_ERROR@@[email protected]
?CAacDecoder_ApplyCrossFade@@YA?AW4AAC_DECODER_ERROR@@[email protected]
?CAacDecoder_ApplyCrossFade@@YA?AW4AAC_DECODER_ERROR@@[email protected]
?CAacDecoder_ApplyCrossFade@@YA?AW4AAC_DECODER_ERROR@@[email protected]
?CAacDecoder_ApplyCrossFade@@YA?AW4AAC_DECODER_ERROR@@[email protected]
?CAacDecoder_Close@@YAXPEAUAAC_DECODER_INSTANCE@@@Z
?CAacDecoder_Close@@YAXPEAUAAC_DECODER_INSTANCE@@@Z.A
?CAacDecoder_Close@@YAXPEAUAAC_DECODER_INSTANCE@@@Z.L
?CAacDecoder_Close@@YAXPEAUAAC_DECODER_INSTANCE@@@Z.M
?CAacDecoder_Close@@YAXPEAUAAC_DECODER_INSTANCE@@@Z.N
?CAacDecoder_Close@@YAXPEAUAAC_DECODER_INSTANCE@@@Z.P
?CAacDecoder_Close@@YAXPEAUAAC_DECODER_INSTANCE@@@Z.R
?CAacDecoder_Close@@YAXPEAUAAC_DECODER_INSTANCE@@@Z.S
?CAacDecoder_Close@@YAXPEAUAAC_DECODER_INSTANCE@@@Z.V
?CAacDecoder_CtrlCFGChange@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@ECEC@Z
?CAacDecoder_DecodeFrame@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@IPEAJHH@Z
?CAacDecoder_DecodeFrame@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@[email protected]
?CAacDecoder_DecodeFrame@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@[email protected]
?CAacDecoder_DecodeFrame@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@[email protected]
?CAacDecoder_DecodeFrame@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@[email protected]
?CAacDecoder_DecodeFrame@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@[email protected]
?CAacDecoder_DecodeFrame@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@[email protected]
?CAacDecoder_DecodeFrame@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@[email protected]
?CAacDecoder_DecodeFrame@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@[email protected]
?CAacDecoder_FreeMem@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@H@Z
?CAacDecoder_GetStreamInfo@@YAPEAUCStreamInfo@@PEAUAAC_DECODER_INSTANCE@@@Z
?CAacDecoder_Init@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@PEBUCSAudioSpecificConfig@@EPEAE@Z
?CAacDecoder_Init@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@PEBUCSAudioSpecificConfig@@[email protected]
?CAacDecoder_Init@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@PEBUCSAudioSpecificConfig@@[email protected]
?CAacDecoder_Init@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@PEBUCSAudioSpecificConfig@@[email protected]
?CAacDecoder_Init@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@PEBUCSAudioSpecificConfig@@[email protected]
?CAacDecoder_Init@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@PEBUCSAudioSpecificConfig@@[email protected]
?CAacDecoder_Init@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@PEBUCSAudioSpecificConfig@@[email protected]
?CAacDecoder_Init@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@PEBUCSAudioSpecificConfig@@[email protected]
?CAacDecoder_Init@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@PEBUCSAudioSpecificConfig@@[email protected]
?CAacDecoder_Open@@YAPEAUAAC_DECODER_INSTANCE@@W4TRANSPORT_TYPE@@@Z
?CAacDecoder_Open@@YAPEAUAAC_DECODER_INSTANCE@@W4TRANSPORT_TYPE@@@Z.A
?CAacDecoder_Open@@YAPEAUAAC_DECODER_INSTANCE@@W4TRANSPORT_TYPE@@@Z.L
?CAacDecoder_Open@@YAPEAUAAC_DECODER_INSTANCE@@W4TRANSPORT_TYPE@@@Z.M
?CAacDecoder_Open@@YAPEAUAAC_DECODER_INSTANCE@@W4TRANSPORT_TYPE@@@Z.N
?CAacDecoder_Open@@YAPEAUAAC_DECODER_INSTANCE@@W4TRANSPORT_TYPE@@@Z.P
?CAacDecoder_Open@@YAPEAUAAC_DECODER_INSTANCE@@W4TRANSPORT_TYPE@@@Z.R
?CAacDecoder_Open@@YAPEAUAAC_DECODER_INSTANCE@@W4TRANSPORT_TYPE@@@Z.S
?CAacDecoder_Open@@YAPEAUAAC_DECODER_INSTANCE@@W4TRANSPORT_TYPE@@@Z.V
?CAacDecoder_PreRollExtensionPayloadParse@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@PEAI11@Z
?CAacDecoder_PreRollExtensionPayloadParse@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@[email protected]
?CAacDecoder_PreRollExtensionPayloadParse@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@[email protected]
?CAacDecoder_PreRollExtensionPayloadParse@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@[email protected]
?CAacDecoder_PreRollExtensionPayloadParse@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@[email protected]
?CAacDecoder_PreRollExtensionPayloadParse@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@[email protected]
?CAacDecoder_PreRollExtensionPayloadParse@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@[email protected]
?CAacDecoder_PreRollExtensionPayloadParse@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@[email protected]
?CAacDecoder_PreRollExtensionPayloadParse@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@[email protected]
?CAacDecoder_PrepareCrossFade@@YA?AW4AAC_DECODER_ERROR@@PEBJPEAPEAJHHH@Z
?CAacDecoder_PrepareCrossFade@@YA?AW4AAC_DECODER_ERROR@@[email protected]
?CAacDecoder_PrepareCrossFade@@YA?AW4AAC_DECODER_ERROR@@[email protected]
?CAacDecoder_PrepareCrossFade@@YA?AW4AAC_DECODER_ERROR@@[email protected]
?CAacDecoder_PrepareCrossFade@@YA?AW4AAC_DECODER_ERROR@@[email protected]
?CAacDecoder_PrepareCrossFade@@YA?AW4AAC_DECODER_ERROR@@[email protected]
?CAacDecoder_PrepareCrossFade@@YA?AW4AAC_DECODER_ERROR@@[email protected]
?CAacDecoder_PrepareCrossFade@@YA?AW4AAC_DECODER_ERROR@@[email protected]
?CAacDecoder_PrepareCrossFade@@YA?AW4AAC_DECODER_ERROR@@[email protected]
?aacDecoder_Config@@YA?AW4AAC_DECODER_ERROR@@PEAUAAC_DECODER_INSTANCE@@PEBUCSAudioSpecificConfig@@EPEAE@Z
aacDecoder_AncDataGet
aacDecoder_AncDataInit
aacDecoder_Close
aacDecoder_ConfigRaw
aacDecoder_ConfigRaw.A
aacDecoder_ConfigRaw.L
aacDecoder_ConfigRaw.M
aacDecoder_ConfigRaw.N
aacDecoder_ConfigRaw.P
aacDecoder_ConfigRaw.R
aacDecoder_ConfigRaw.S
aacDecoder_ConfigRaw.V
aacDecoder_DecodeFrame
aacDecoder_DecodeFrame.A
aacDecoder_DecodeFrame.L
aacDecoder_DecodeFrame.M
aacDecoder_DecodeFrame.N
aacDecoder_DecodeFrame.P
aacDecoder_DecodeFrame.R
aacDecoder_DecodeFrame.S
aacDecoder_DecodeFrame.V
aacDecoder_Fill
aacDecoder_Fill.A
aacDecoder_Fill.L
aacDecoder_Fill.M
aacDecoder_Fill.N
aacDecoder_Fill.P
aacDecoder_Fill.R
aacDecoder_Fill.S
aacDecoder_Fill.V
aacDecoder_GetFreeBytes
aacDecoder_GetLibInfo
aacDecoder_GetLibInfo.A
aacDecoder_GetLibInfo.L
aacDecoder_GetLibInfo.M
aacDecoder_GetLibInfo.N
aacDecoder_GetLibInfo.P
aacDecoder_GetLibInfo.R
aacDecoder_GetLibInfo.S
aacDecoder_GetLibInfo.V
aacDecoder_GetStreamInfo
aacDecoder_Open
aacDecoder_RawISOBMFFData
aacDecoder_RawISOBMFFData.A
aacDecoder_RawISOBMFFData.L
aacDecoder_RawISOBMFFData.M
aacDecoder_RawISOBMFFData.N
aacDecoder_RawISOBMFFData.P
aacDecoder_RawISOBMFFData.R
aacDecoder_RawISOBMFFData.S
aacDecoder_RawISOBMFFData.V
aacDecoder_SetParam
aacDecoder_SetParam.A
aacDecoder_SetParam.L
aacDecoder_SetParam.M
aacDecoder_SetParam.N
aacDecoder_SetParam.P
aacDecoder_SetParam.R
aacDecoder_SetParam.S
aacDecoder_SetParam.V
aacEncClose
aacEncEncode
aacEncEncode.A
aacEncEncode.L
aacEncEncode.M
aacEncEncode.N
aacEncEncode.P
aacEncEncode.R
aacEncEncode.S
aacEncEncode.V
aacEncGetLibInfo
aacEncGetLibInfo.A
aacEncGetLibInfo.L
aacEncGetLibInfo.M
aacEncGetLibInfo.N
aacEncGetLibInfo.P
aacEncGetLibInfo.R
aacEncGetLibInfo.S
aacEncGetLibInfo.V
aacEncInfo
aacEncOpen
aacEncOpen.A
aacEncOpen.L
aacEncOpen.M
aacEncOpen.N
aacEncOpen.P
aacEncOpen.R
aacEncOpen.S
aacEncOpen.V
aacEncoder_GetParam
aacEncoder_GetParam.A
aacEncoder_GetParam.L
aacEncoder_GetParam.M
aacEncoder_GetParam.N
aacEncoder_GetParam.P
aacEncoder_GetParam.R
aacEncoder_GetParam.S
aacEncoder_GetParam.V
aacEncoder_SetParam

Sections

.text
Size: 8.6MB - Virtual size: 8.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 416KB - Virtual size: 415KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
id3lib.dll
.dll windows:6 windows x64 arch:x64

4842a86bc8f60e93e9053823d8d50211

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6e:f6:a3:05:85:10:58:f8:94:48:db:5e:5d:95:a5:41:e4:c0:88:21:03:18:a6:91:bd:a9:c8:6e:01:19:22:75
Signer

Actual PE Digest

6e:f6:a3:05:85:10:58:f8:94:48:db:5e:5d:95:a5:41:e4:c0:88:21:03:18:a6:91:bd:a9:c8:6e:01:19:22:75

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\EZCD\Source\Components\ACD\ID3LIB\prj\Release\id3lib.pdb

Imports

acdbase

ID3Helper_GetNextImage
ID3Helper_GetStr
ID3Helper_GetDword
ID3Helper_GetFirstImage
UNC_Utf8ToUnicode
UNC_Utf8ToAnsi
ID3Helper_GetFirst
UNC_freeStr
UNC_freeWStr
ID3Helper_IsNaN
ID3Helper_GetNext

msvcp140

?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??7ios_base@std@@QEBA_NXZ
?eof@ios_base@std@@QEBA_NXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Id_cnt@id@locale@std@@0HA
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?_Xbad_alloc@std@@YAXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ

kernel32

RtlLookupFunctionEntry
GetCurrentProcessId
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
InitializeSListHead
DisableThreadLibraryCalls
QueryPerformanceCounter
lstrlenW
lstrcpyW
CloseHandle
SetFilePointer
SetEndOfFile
CreateFileW
GetSystemTimeAsFileTime
GetCurrentThreadId

vcruntime140

__std_type_info_destroy_list
__C_specific_handler
__current_exception_context
__current_exception
memcmp
memmove
memcpy
__std_terminate
memset
_CxxThrowException
__std_exception_destroy
__std_exception_copy
_purecall

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
terminate
_invalid_parameter_noinfo_noreturn
_crt_at_quick_exit
_cexit
_errno
_crt_atexit

api-ms-win-crt-stdio-l1-1-0

ferror
__stdio_common_vfprintf
fseek
ftell
_get_stream_buffer_pointers
fread
fopen
fwrite
ungetc
fclose
setvbuf
_fseeki64
fsetpos
fputc
fgetpos
fgetc
fflush
__stdio_common_vsprintf
__stdio_common_vsscanf
rewind

api-ms-win-crt-string-l1-1-0

strcat
_stricmp
strcpy
strlen
isdigit
strncpy
strcmp

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file
_wrename
_wremove

api-ms-win-crt-math-l1-1-0

_fdopen

api-ms-win-crt-heap-l1-1-0

calloc
_callnewh
malloc
free

Exports

Exports

??0BStringReader@io@dami@@QEAA@AEBV012@@Z
??0BStringReader@io@dami@@QEAA@AEBV?$basic_string@EU?$char_traits@E@std@@V?$allocator@E@2@@std@@@Z
??0BStringWriter@io@dami@@QEAA@AEAV?$basic_string@EU?$char_traits@E@std@@V?$allocator@E@2@@std@@@Z
??0BStringWriter@io@dami@@QEAA@AEBV012@@Z
??0CharReader@io@dami@@QEAA@AEAVID3_Reader@@@Z
??0CharReader@io@dami@@QEAA@AEBV012@@Z
??0CompressedReader@io@dami@@QEAA@AEAVID3_Reader@@I@Z
??0CompressedReader@io@dami@@QEAA@AEBV012@@Z
??0ExitTrigger@io@dami@@QEAA@AEAVID3_Reader@@@Z
??0ExitTrigger@io@dami@@QEAA@AEAVID3_Reader@@I@Z
??0ExitTrigger@io@dami@@QEAA@AEBV012@@Z
??0ID3_FStreamWriter@@QEAA@$$QEAV0@@Z
??0ID3_FStreamWriter@@QEAA@AEAV?$basic_fstream@DU?$char_traits@D@std@@@std@@@Z
??0ID3_FStreamWriter@@QEAA@AEBV0@@Z
??0ID3_Field@@IEAA@XZ
??0ID3_Field@@QEAA@AEBV0@@Z
??0ID3_Frame@@QEAA@AEBV0@@Z
??0ID3_Frame@@QEAA@W4ID3_FrameID@@@Z
??0ID3_FrameInfo@@QEAA@XZ
??0ID3_IFStreamReader@@QEAA@$$QEAV0@@Z
??0ID3_IFStreamReader@@QEAA@AEAV?$basic_ifstream@DU?$char_traits@D@std@@@std@@@Z
??0ID3_IFStreamReader@@QEAA@AEBV0@@Z
??0ID3_IOStreamWriter@@QEAA@AEAV?$basic_iostream@DU?$char_traits@D@std@@@std@@@Z
??0ID3_IOStreamWriter@@QEAA@AEBV0@@Z
??0ID3_IStreamReader@@QEAA@AEAV?$basic_istream@DU?$char_traits@D@std@@@std@@@Z
??0ID3_IStreamReader@@QEAA@AEBV0@@Z
??0ID3_MemoryReader@@QEAA@AEBV0@@Z
??0ID3_MemoryReader@@QEAA@PEBDI@Z
??0ID3_MemoryReader@@QEAA@PEBEI@Z
??0ID3_MemoryReader@@QEAA@XZ
??0ID3_MemoryWriter@@QEAA@AEBV0@@Z
??0ID3_MemoryWriter@@QEAA@QEAE_K@Z
??0ID3_MemoryWriter@@QEAA@XZ
??0ID3_NullWriter@@QEAA@AEBV0@@Z
??0ID3_NullWriter@@QEAA@QEAE_K@Z
??0ID3_NullWriter@@QEAA@XZ
??0ID3_OFStreamWriter@@QEAA@$$QEAV0@@Z
??0ID3_OFStreamWriter@@QEAA@AEAV?$basic_ofstream@DU?$char_traits@D@std@@@std@@@Z
??0ID3_OFStreamWriter@@QEAA@AEBV0@@Z
??0ID3_OStreamWriter@@QEAA@AEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@@Z
??0ID3_OStreamWriter@@QEAA@AEBV0@@Z
??0ID3_Reader@@QEAA@$$QEAV0@@Z
??0ID3_Reader@@QEAA@AEBV0@@Z
??0ID3_Reader@@QEAA@XZ
??0ID3_Tag@@QEAA@AEBV0@@Z
??0ID3_Tag@@QEAA@PEB_W@Z
??0ID3_Writer@@QEAA@$$QEAV0@@Z
??0ID3_Writer@@QEAA@AEBV0@@Z
??0ID3_Writer@@QEAA@XZ
??0LineFeedReader@io@dami@@QEAA@$$QEAV012@@Z
??0LineFeedReader@io@dami@@QEAA@AEAVID3_Reader@@@Z
??0LineFeedReader@io@dami@@QEAA@AEBV012@@Z
??0StringReader@io@dami@@QEAA@AEBV012@@Z
??0StringReader@io@dami@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0StringWriter@io@dami@@QEAA@AEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0StringWriter@io@dami@@QEAA@AEBV012@@Z
??0UnsyncedReader@io@dami@@QEAA@$$QEAV012@@Z
??0UnsyncedReader@io@dami@@QEAA@AEAVID3_Reader@@@Z
??0UnsyncedReader@io@dami@@QEAA@AEBV012@@Z
??0UnsyncedWriter@io@dami@@QEAA@$$QEAV012@@Z
??0UnsyncedWriter@io@dami@@QEAA@AEAVID3_Writer@@@Z
??0UnsyncedWriter@io@dami@@QEAA@AEBV012@@Z
??0WindowedReader@io@dami@@QEAA@$$QEAV012@@Z
??0WindowedReader@io@dami@@QEAA@AEAVID3_Reader@@@Z
??0WindowedReader@io@dami@@QEAA@AEAVID3_Reader@@I@Z
??0WindowedReader@io@dami@@QEAA@AEAVID3_Reader@@II@Z
??0WindowedReader@io@dami@@QEAA@AEBV012@@Z
??1BStringReader@io@dami@@UEAA@XZ
??1BStringWriter@io@dami@@UEAA@XZ
??1CharReader@io@dami@@UEAA@XZ
??1CompressedReader@io@dami@@UEAA@XZ
??1ExitTrigger@io@dami@@UEAA@XZ
??1ID3_FStreamWriter@@UEAA@XZ
??1ID3_Field@@MEAA@XZ
??1ID3_Frame@@UEAA@XZ
??1ID3_FrameInfo@@QEAA@XZ
??1ID3_IFStreamReader@@UEAA@XZ
??1ID3_IOStreamWriter@@UEAA@XZ
??1ID3_IStreamReader@@UEAA@XZ
??1ID3_MemoryReader@@UEAA@XZ
??1ID3_MemoryWriter@@UEAA@XZ
??1ID3_NullWriter@@UEAA@XZ
??1ID3_OFStreamWriter@@UEAA@XZ
??1ID3_OStreamWriter@@UEAA@XZ
??1ID3_Tag@@UEAA@XZ
??1LineFeedReader@io@dami@@UEAA@XZ
??1StringReader@io@dami@@UEAA@XZ
??1StringWriter@io@dami@@UEAA@XZ
??1UnsyncedReader@io@dami@@UEAA@XZ
??4CompressedReader@io@dami@@QEAAAEAV012@AEBV012@@Z
??4ID3_Frame@@QEAAAEAV0@AEBV0@@Z
??4ID3_FrameInfo@@QEAAAEAV0@AEBV0@@Z
??4ID3_MemoryReader@@QEAAAEAV0@AEBV0@@Z
??4ID3_MemoryWriter@@QEAAAEAV0@AEBV0@@Z
??4ID3_NullWriter@@QEAAAEAV0@AEBV0@@Z
??4ID3_Reader@@QEAAAEAV0@$$QEAV0@@Z
??4ID3_Reader@@QEAAAEAV0@AEBV0@@Z
??4ID3_Tag@@QEAAAEAV0@AEBV0@@Z
??4ID3_Writer@@QEAAAEAV0@$$QEAV0@@Z
??4ID3_Writer@@QEAAAEAV0@AEBV0@@Z
??6ID3_Tag@@QEAAAEAV0@AEBVID3_Frame@@@Z
??6ID3_Tag@@QEAAAEAV0@PEBVID3_Frame@@@Z
??_7BStringReader@io@dami@@6B@
??_7BStringWriter@io@dami@@6B@
??_7CharReader@io@dami@@6B@
??_7CompressedReader@io@dami@@6B@
??_7ExitTrigger@io@dami@@6B@
??_7ID3_FStreamWriter@@6B@
??_7ID3_Field@@6B@
??_7ID3_Frame@@6B@
??_7ID3_IFStreamReader@@6B@
??_7ID3_IOStreamWriter@@6B@
??_7ID3_IStreamReader@@6B@
??_7ID3_MemoryReader@@6B@
??_7ID3_MemoryWriter@@6B@
??_7ID3_NullWriter@@6B@
??_7ID3_OFStreamWriter@@6B@
??_7ID3_OStreamWriter@@6B@
??_7ID3_Reader@@6B@
??_7ID3_Tag@@6B@
??_7ID3_Writer@@6B@
??_7LineFeedReader@io@dami@@6B@
??_7StringReader@io@dami@@6B@
??_7StringWriter@io@dami@@6B@
??_7UnsyncedReader@io@dami@@6B@
??_7UnsyncedWriter@io@dami@@6B@
??_7WindowedReader@io@dami@@6B@
??_FID3_Frame@@QEAAXXZ
??_FID3_Tag@@QEAAXXZ
?AddFrame@ID3_Tag@@QEAAXAEBVID3_Frame@@@Z
?AddFrame@ID3_Tag@@QEAAXPEBVID3_Frame@@@Z
?AddFrames@ID3_Tag@@QEAAXPEBVID3_Frame@@_K@Z
?AddNewFrame@ID3_Tag@@QEAAXPEAVID3_Frame@@@Z
?AttachFrame@ID3_Tag@@QEAA_NPEAVID3_Frame@@@Z
?Clear@ID3_Frame@@QEAAXXZ
?Clear@ID3_Tag@@QEAAXXZ
?Contains@ID3_Frame@@QEBA_NW4ID3_FieldID@@@Z
?CreateIterator@ID3_Frame@@QEAAPEAVIterator@1@XZ
?CreateIterator@ID3_Frame@@QEBAPEAVConstIterator@1@XZ
?CreateIterator@ID3_Tag@@QEAAPEAVIterator@1@XZ
?CreateIterator@ID3_Tag@@QEBAPEAVConstIterator@1@XZ
?Description@ID3_FrameInfo@@QEAAPEBDW4ID3_FrameID@@@Z
?END_OF_READER@ID3_Reader@@2FB
?END_OF_WRITER@ID3_Writer@@2FB
?Field@ID3_Frame@@QEBAAEAVID3_Field@@W4ID3_FieldID@@@Z
?FieldFlags@ID3_FrameInfo@@QEAAGW4ID3_FrameID@@H@Z
?FieldSize@ID3_FrameInfo@@QEAA_KW4ID3_FrameID@@H@Z
?FieldType@ID3_FrameInfo@@QEAA?AW4ID3_FieldType@@W4ID3_FrameID@@H@Z
?Find@ID3_Tag@@QEBAPEAVID3_Frame@@W4ID3_FrameID@@@Z
?Find@ID3_Tag@@QEBAPEAVID3_Frame@@W4ID3_FrameID@@W4ID3_FieldID@@I@Z
?Find@ID3_Tag@@QEBAPEAVID3_Frame@@W4ID3_FrameID@@W4ID3_FieldID@@PEBD@Z
?Find@ID3_Tag@@QEBAPEAVID3_Frame@@W4ID3_FrameID@@W4ID3_FieldID@@PEB_W@Z
?GetAppendedBytes@ID3_Tag@@QEBA_KXZ
?GetCompression@ID3_Frame@@QEBA_NXZ
?GetDataSize@ID3_Frame@@QEBA_KXZ
?GetDescription@ID3_Frame@@QEBAPEBDXZ
?GetDescription@ID3_Frame@@SAPEBDW4ID3_FrameID@@@Z
?GetEncryptionID@ID3_Frame@@QEBAEXZ
?GetExperimental@ID3_Tag@@QEBA_NXZ
?GetExtendedHeader@ID3_Tag@@QEBA_NXZ
?GetField@ID3_Frame@@QEBAPEAVID3_Field@@W4ID3_FieldID@@@Z
?GetFileName@ID3_Tag@@QEBAPEB_WXZ
?GetFileSize@ID3_Tag@@QEBA_KXZ
?GetGroupingID@ID3_Frame@@QEBAEXZ
?GetID3Genre@@YAPEBDK@Z
?GetID@ID3_Frame@@QEBA?AW4ID3_FrameID@@XZ
?GetPadding@ID3_Tag@@QEAA_NXZ
?GetPrependedBytes@ID3_Tag@@QEBA_KXZ
?GetSpec@ID3_Tag@@QEBA?AW4ID3_V2Spec@@XZ
?GetTextID@ID3_Frame@@QEAAPEBDW4ID3_V2Spec@@@Z
?GetUnsync@ID3_Tag@@QEBA_NXZ
?HasLyrics@ID3_Tag@@QEBA_NXZ
?HasTagType@ID3_Tag@@QEBA_NW4ID3_TagType@@@Z
?HasV1Tag@ID3_Tag@@QEBA_NXZ
?HasV2Tag@ID3_Tag@@QEBA_NXZ
?ID3_AddAlbum@@YAPEAVID3_Frame@@PEAVID3_Tag@@PEBD_N@Z
?ID3_AddArtist@@YAPEAVID3_Frame@@PEAVID3_Tag@@PEBD_N@Z
?ID3_AddComment@@YAPEAVID3_Frame@@PEAVID3_Tag@@PEBD11_N@Z
?ID3_AddComment@@YAPEAVID3_Frame@@PEAVID3_Tag@@PEBD1_N@Z
?ID3_AddComment@@YAPEAVID3_Frame@@PEAVID3_Tag@@PEBD_N@Z
?ID3_AddGenre@@YAPEAVID3_Frame@@PEAVID3_Tag@@PEBD_N@Z
?ID3_AddGenre@@YAPEAVID3_Frame@@PEAVID3_Tag@@_K_N@Z
?ID3_AddLyricist@@YAPEAVID3_Frame@@PEAVID3_Tag@@PEBD_N@Z
?ID3_AddLyrics@@YAPEAVID3_Frame@@PEAVID3_Tag@@PEBD11_N@Z
?ID3_AddLyrics@@YAPEAVID3_Frame@@PEAVID3_Tag@@PEBD1_N@Z
?ID3_AddLyrics@@YAPEAVID3_Frame@@PEAVID3_Tag@@PEBD_N@Z
?ID3_AddPicture@@YAPEAVID3_Frame@@PEAVID3_Tag@@PEBD1W4ID3_PictureType@@1_N@Z
?ID3_AddPicture@@YAPEAVID3_Frame@@PEAVID3_Tag@@PEBD1_N@Z
?ID3_AddSyncLyrics@@YAPEAVID3_Frame@@PEAVID3_Tag@@PEBE_KW4ID3_TimeStampFormat@@PEBD4W4ID3_ContentType@@_N@Z
?ID3_AddSyncLyrics@@YAPEAVID3_Frame@@PEAVID3_Tag@@PEBE_KW4ID3_TimeStampFormat@@PEBD4_N@Z
?ID3_AddSyncLyrics@@YAPEAVID3_Frame@@PEAVID3_Tag@@PEBE_KW4ID3_TimeStampFormat@@PEBD_N@Z
?ID3_AddSyncLyrics@@YAPEAVID3_Frame@@PEAVID3_Tag@@PEBE_KW4ID3_TimeStampFormat@@_N@Z
?ID3_AddTitle@@YAPEAVID3_Frame@@PEAVID3_Tag@@PEBD_N@Z
?ID3_AddTrack@@YAPEAVID3_Frame@@PEAVID3_Tag@@EE_N@Z
?ID3_AddYear@@YAPEAVID3_Frame@@PEAVID3_Tag@@PEBD_N@Z
?ID3_FreeString@@YAXPEAD@Z
?ID3_GetAlbum@@YAPEADPEBVID3_Tag@@@Z
?ID3_GetArtist@@YAPEADPEBVID3_Tag@@@Z
?ID3_GetComment@@YAPEADPEBVID3_Tag@@PEBD@Z
?ID3_GetDescriptionOfPicType@@YAPEADPEAVID3_Tag@@W4ID3_PictureType@@@Z
?ID3_GetGenre@@YAPEADPEBVID3_Tag@@@Z
?ID3_GetGenreNum@@YA_KPEBVID3_Tag@@@Z
?ID3_GetLyricist@@YAPEADPEBVID3_Tag@@@Z
?ID3_GetLyrics@@YAPEADPEBVID3_Tag@@@Z
?ID3_GetMimeTypeOfPicType@@YAPEADPEAVID3_Tag@@W4ID3_PictureType@@@Z
?ID3_GetPictureData@@YAHPEBVID3_Tag@@PEBD@Z
?ID3_GetPictureDataOfPicType@@YA_KPEAVID3_Tag@@PEAPEAXW4ID3_PictureType@@@Z
?ID3_GetPictureDataOfPicType@@YA_KPEAVID3_Tag@@PEBDW4ID3_PictureType@@@Z
?ID3_GetPictureMimeType@@YAPEADPEBVID3_Tag@@@Z
?ID3_GetString@@YAPEADPEBVID3_Frame@@W4ID3_FieldID@@@Z
?ID3_GetString@@YAPEADPEBVID3_Frame@@W4ID3_FieldID@@_K@Z
?ID3_GetSyncLyrics@@YAPEAVID3_Frame@@PEBVID3_Tag@@PEBD1AEAPEBEAEA_K@Z
?ID3_GetTitle@@YAPEADPEBVID3_Tag@@@Z
?ID3_GetTrack@@YAPEADPEBVID3_Tag@@@Z
?ID3_GetTrackNum@@YA_KPEBVID3_Tag@@@Z
?ID3_GetYear@@YAPEADPEBVID3_Tag@@@Z
?ID3_HasPicture@@YA_NPEBVID3_Tag@@@Z
?ID3_IsTagHeader@@YAHQEBE@Z
?ID3_RemoveAlbums@@YA_KPEAVID3_Tag@@@Z
?ID3_RemoveArtists@@YA_KPEAVID3_Tag@@@Z
?ID3_RemoveComments@@YA_KPEAVID3_Tag@@PEBD@Z
?ID3_RemoveCompilations@@YA_KPEAVID3_Tag@@@Z
?ID3_RemoveDiscs@@YA_KPEAVID3_Tag@@@Z
?ID3_RemoveGenres@@YA_KPEAVID3_Tag@@@Z
?ID3_RemoveLyricist@@YA_KPEAVID3_Tag@@@Z
?ID3_RemoveLyrics@@YA_KPEAVID3_Tag@@@Z
?ID3_RemovePictureType@@YA_KPEAVID3_Tag@@W4ID3_PictureType@@@Z
?ID3_RemovePictures@@YA_KPEAVID3_Tag@@@Z
?ID3_RemoveRatings@@YA_KPEAVID3_Tag@@@Z
?ID3_RemoveTitles@@YA_KPEAVID3_Tag@@@Z
?ID3_RemoveTracks@@YA_KPEAVID3_Tag@@@Z
?ID3_RemoveYears@@YA_KPEAVID3_Tag@@@Z
?IsV2Tag@ID3_Tag@@SA_KAEAVID3_Reader@@@Z
?IsV2Tag@ID3_Tag@@SA_KPEBE@Z
?Link@ID3_Tag@@QEAA_KAEAVID3_Reader@@G@Z
?Link@ID3_Tag@@QEAA_KPEB_WG@Z
?Link@ID3_Tag@@QEAA_KPEB_W_N1@Z
?LongName@ID3_FrameInfo@@QEAAPEADW4ID3_FrameID@@@Z
?MaxFrameID@ID3_FrameInfo@@QEAAHXZ
?NumFields@ID3_Frame@@QEBA_KXZ
?NumFields@ID3_FrameInfo@@QEAAHW4ID3_FrameID@@@Z
?NumFrames@ID3_Tag@@QEBA_KXZ
?Parse@ID3_Frame@@QEAA_NW4ID3_V2Spec@@AEAVID3_Reader@@@Z
?Parse@ID3_Tag@@QEAA_KPEBE_K@Z
?Parse@ID3_Tag@@QEAA_KQEBEPEBE@Z
?Parse@ID3_Tag@@QEAA_NAEAVID3_Reader@@@Z
?ReleaseIterator@ID3_Tag@@QEAAXPEAVIterator@1@@Z
?RemoveFrame@ID3_Tag@@QEAAPEAVID3_Frame@@PEBV2@@Z
?Render@ID3_Frame@@QEAAXW4ID3_V2Spec@@AEAVID3_Writer@@@Z
?Render@ID3_Tag@@QEBA_KAEAVID3_Writer@@W4ID3_TagType@@@Z
?Render@ID3_Tag@@QEBA_KPEAEW4ID3_TagType@@@Z
?RenderID3@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z
?RenderID3_FreeBuffer@@YAXPEAD@Z
?RenderID3wGaplessPlaceholder@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z
?RenderID3woReplayGain@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z
?SetCompression@ID3_Frame@@QEAAX_N@Z
?SetCompression@ID3_Tag@@QEAAX_N@Z
?SetEncryptionID@ID3_Frame@@QEAAXE@Z
?SetExperimental@ID3_Tag@@QEAAX_N@Z
?SetExtendedHeader@ID3_Tag@@QEAAX_N@Z
?SetGroupingID@ID3_Frame@@QEAAXE@Z
?SetID@ID3_Frame@@QEAA_NW4ID3_FrameID@@@Z
?SetPadding@ID3_Tag@@QEAAX_N@Z
?SetSpec@ID3_Tag@@QEAAXW4ID3_V2Spec@@@Z
?SetUnsync@ID3_Tag@@QEAAX_N@Z
?ShortName@ID3_FrameInfo@@QEAAPEADW4ID3_FrameID@@@Z
?Size@ID3_Frame@@QEAA_KW4ID3_V2Spec@@@Z
?Size@ID3_Tag@@QEBA_KXZ
?Strip@ID3_Tag@@QEAAGG@Z
?Update@ID3_Tag@@QEAAGG@Z
?WriteID3V1@@YAXPEB_WPEAUID3Helper@@@Z
?atEnd@BStringReader@io@dami@@UEAA_NXZ
?atEnd@ID3_Reader@@UEAA_NXZ
?atEnd@ID3_Writer@@UEAA_NXZ
?atEnd@StringReader@io@dami@@UEAA_NXZ
?close@BStringReader@io@dami@@UEAAXXZ
?close@BStringWriter@io@dami@@UEAAXXZ
?close@CharReader@io@dami@@UEAAXXZ
?close@ID3_FStreamWriter@@UEAAXXZ
?close@ID3_IFStreamReader@@UEAAXXZ
?close@ID3_IOStreamWriter@@UEAAXXZ
?close@ID3_IStreamReader@@UEAAXXZ
?close@ID3_MemoryReader@@UEAAXXZ
?close@ID3_MemoryWriter@@UEAAXXZ
?close@ID3_NullWriter@@UEAAXXZ
?close@ID3_OFStreamWriter@@UEAAXXZ
?close@ID3_OStreamWriter@@UEAAXXZ
?close@StringReader@io@dami@@UEAAXXZ
?close@StringWriter@io@dami@@UEAAXXZ
?close@UnsyncedWriter@io@dami@@UEAAXXZ
?close@WindowedReader@io@dami@@UEAAXXZ
?createFile@dami@@YA?AW4ID3_Err@@PEA_WAEAV?$basic_fstream@DU?$char_traits@D@std@@@std@@@Z
?flush@BStringWriter@io@dami@@UEAAXXZ
?flush@ID3_IOStreamWriter@@UEAAXXZ
?flush@ID3_MemoryWriter@@UEAAXXZ
?flush@ID3_NullWriter@@UEAAXXZ
?flush@ID3_OStreamWriter@@UEAAXXZ
?flush@StringWriter@io@dami@@UEAAXXZ
?flush@UnsyncedWriter@io@dami@@UEAAXXZ
?getAlbum@v2@id3@dami@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVID3_TagImpl@@@Z
?getArtist@v2@id3@dami@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVID3_TagImpl@@@Z
?getBeg@BStringReader@io@dami@@UEAAIXZ
?getBeg@CharReader@io@dami@@UEAAIXZ
?getBeg@ID3_IOStreamWriter@@UEAAIXZ
?getBeg@ID3_IStreamReader@@UEAAIXZ
?getBeg@ID3_MemoryReader@@UEAAIXZ
?getBeg@ID3_MemoryWriter@@UEAAIXZ
?getBeg@ID3_NullWriter@@UEAAIXZ
?getBeg@ID3_OStreamWriter@@UEAAIXZ
?getBeg@ID3_Reader@@UEAAIXZ
?getBeg@ID3_Writer@@UEAAIXZ
?getBeg@StringReader@io@dami@@UEAAIXZ
?getBeg@UnsyncedWriter@io@dami@@UEAAIXZ
?getBeg@WindowedReader@io@dami@@UEAAIXZ
?getComment@v2@id3@dami@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVID3_TagImpl@@V45@@Z
?getCur@BStringReader@io@dami@@UEAAIXZ
?getCur@BStringWriter@io@dami@@UEAAIXZ
?getCur@CharReader@io@dami@@UEAAIXZ
?getCur@ID3_IOStreamWriter@@UEAAIXZ
?getCur@ID3_IStreamReader@@UEAAIXZ
?getCur@ID3_MemoryReader@@UEAAIXZ
?getCur@ID3_MemoryWriter@@UEAAIXZ
?getCur@ID3_NullWriter@@UEAAIXZ
?getCur@ID3_OStreamWriter@@UEAAIXZ
?getCur@StringReader@io@dami@@UEAAIXZ
?getCur@StringWriter@io@dami@@UEAAIXZ
?getCur@UnsyncedWriter@io@dami@@UEAAIXZ
?getCur@WindowedReader@io@dami@@UEAAIXZ
?getEnd@BStringReader@io@dami@@UEAAIXZ
?getEnd@CharReader@io@dami@@UEAAIXZ
?getEnd@ID3_IStreamReader@@UEAAIXZ
?getEnd@ID3_MemoryReader@@UEAAIXZ
?getEnd@ID3_MemoryWriter@@UEAAIXZ
?getEnd@ID3_NullWriter@@UEAAIXZ
?getEnd@ID3_Reader@@UEAAIXZ
?getEnd@ID3_Writer@@UEAAIXZ
?getEnd@StringReader@io@dami@@UEAAIXZ
?getEnd@UnsyncedWriter@io@dami@@UEAAIXZ
?getEnd@WindowedReader@io@dami@@UEAAIXZ
?getFileSize@dami@@YA_KAEAV?$basic_fstream@DU?$char_traits@D@std@@@std@@@Z
?getFileSize@dami@@YA_KAEAV?$basic_ifstream@DU?$char_traits@D@std@@@std@@@Z
?getFileSize@dami@@YA_KAEAV?$basic_ofstream@DU?$char_traits@D@std@@@std@@@Z
?getFrameText@v2@id3@dami@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVID3_TagImpl@@W4ID3_FrameID@@@Z
?getGenre@v2@id3@dami@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVID3_TagImpl@@@Z
?getGenreNum@v2@id3@dami@@YA_KAEBVID3_TagImpl@@@Z
?getLyricist@v2@id3@dami@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVID3_TagImpl@@@Z
?getLyrics@v2@id3@dami@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVID3_TagImpl@@@Z
?getMaxSize@ID3_Writer@@UEAAIXZ
?getNumSyncs@UnsyncedWriter@io@dami@@QEBAIXZ
?getReader@ID3_IStreamReader@@IEBAAEAV?$basic_istream@DU?$char_traits@D@std@@@std@@XZ
?getSize@ID3_Writer@@UEAAIXZ
?getString@v2@id3@dami@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBVID3_Frame@@W4ID3_FieldID@@@Z
?getStringAtIndex@v2@id3@dami@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBVID3_Frame@@W4ID3_FieldID@@_K@Z
?getSyncLyrics@v2@id3@dami@@YA?AV?$basic_string@EU?$char_traits@E@std@@V?$allocator@E@2@@std@@AEBVID3_TagImpl@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@1@Z
?getTitle@v2@id3@dami@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVID3_TagImpl@@@Z
?getTrack@v2@id3@dami@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVID3_TagImpl@@@Z
?getTrackNum@v2@id3@dami@@YA_KAEBVID3_TagImpl@@@Z
?getV1Comment@v2@id3@dami@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVID3_TagImpl@@@Z
?getWriter@ID3_IOStreamWriter@@IEBAAEAV?$basic_iostream@DU?$char_traits@D@std@@@std@@XZ
?getWriter@ID3_OStreamWriter@@IEBAAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@XZ
?getYear@v2@id3@dami@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVID3_TagImpl@@@Z
?hasAlbum@v2@id3@dami@@YAPEAVID3_Frame@@AEBVID3_TagImpl@@@Z
?hasArtist@v2@id3@dami@@YAPEAVID3_Frame@@AEBVID3_TagImpl@@@Z
?hasComment@v2@id3@dami@@YAPEAVID3_Frame@@AEBVID3_TagImpl@@@Z
?hasGenre@v2@id3@dami@@YAPEAVID3_Frame@@AEBVID3_TagImpl@@@Z
?hasLyrics@v2@id3@dami@@YAPEAVID3_Frame@@AEBVID3_TagImpl@@@Z
?hasSyncLyrics@v2@id3@dami@@YAPEAVID3_Frame@@AEBVID3_TagImpl@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1@Z
?hasTitle@v2@id3@dami@@YAPEAVID3_Frame@@AEBVID3_TagImpl@@@Z
?hasTrack@v2@id3@dami@@YAPEAVID3_Frame@@AEBVID3_TagImpl@@@Z
?hasV1Comment@v2@id3@dami@@YAPEAVID3_Frame@@AEBVID3_TagImpl@@@Z
?hasYear@v2@id3@dami@@YAPEAVID3_Frame@@AEBVID3_TagImpl@@@Z
?inWindow@WindowedReader@io@dami@@AEAA_NI@Z
?inWindow@WindowedReader@io@dami@@QEAA_NXZ
?openReadableFile@dami@@YA?AW4ID3_Err@@PEA_WAEAV?$basic_fstream@DU?$char_traits@D@std@@@std@@@Z
?openReadableFile@dami@@YA?AW4ID3_Err@@PEA_WAEAV?$basic_ifstream@DU?$char_traits@D@std@@@std@@@Z
?openWritableFile@dami@@YA?AW4ID3_Err@@PEA_WAEAV?$basic_fstream@DU?$char_traits@D@std@@@std@@@Z
?openWritableFile@dami@@YA?AW4ID3_Err@@PEA_WAEAV?$basic_ofstream@DU?$char_traits@D@std@@@std@@@Z
?peekChar@BStringReader@io@dami@@UEAAFXZ
?peekChar@CharReader@io@dami@@UEAAFXZ
?peekChar@ID3_IStreamReader@@UEAAFXZ
?peekChar@ID3_MemoryReader@@UEAAFXZ
?peekChar@StringReader@io@dami@@UEAAFXZ
?peekChar@WindowedReader@io@dami@@UEAAFXZ
?readAllBinary@io@dami@@YA?AV?$basic_string@EU?$char_traits@E@std@@V?$allocator@E@2@@std@@AEAVID3_Reader@@@Z
?readBENumber@io@dami@@YAIAEAVID3_Reader@@_K@Z
?readBinary@io@dami@@YA?AV?$basic_string@EU?$char_traits@E@std@@V?$allocator@E@2@@std@@AEAVID3_Reader@@_K@Z
?readChar@ID3_Reader@@UEAAFXZ
?readChar@LineFeedReader@io@dami@@UEAAFXZ
?readChar@UnsyncedReader@io@dami@@UEAAFXZ
?readChar@WindowedReader@io@dami@@UEAAFXZ
?readChars@BStringReader@io@dami@@UEAAIQEADI@Z
?readChars@BStringReader@io@dami@@UEAAIQEAEI@Z
?readChars@CharReader@io@dami@@UEAAIQEADI@Z
?readChars@CharReader@io@dami@@UEAAIQEAEI@Z
?readChars@ID3_IStreamReader@@UEAAIQEADI@Z
?readChars@ID3_IStreamReader@@UEAAIQEAEI@Z
?readChars@ID3_MemoryReader@@UEAAIQEADI@Z
?readChars@ID3_MemoryReader@@UEAAIQEAEI@Z
?readChars@ID3_Reader@@UEAAIQEADI@Z
?readChars@StringReader@io@dami@@UEAAIQEADI@Z
?readChars@StringReader@io@dami@@UEAAIQEAEI@Z
?readChars@WindowedReader@io@dami@@UEAAIQEADI@Z
?readChars@WindowedReader@io@dami@@UEAAIQEAEI@Z
?readLENumber@io@dami@@YAIAEAVID3_Reader@@_K@Z
?readString@io@dami@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAVID3_Reader@@@Z
?readText@io@dami@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAVID3_Reader@@_K@Z
?readTrailingSpaces@io@dami@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAVID3_Reader@@_K@Z
?readUInt28@io@dami@@YAIAEAVID3_Reader@@@Z
?readUInt28Number@io@dami@@YAIAEAVID3_Reader@@_K@Z
?readUnicodeString@io@dami@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAVID3_Reader@@@Z
?readUnicodeText@io@dami@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAVID3_Reader@@_K@Z
?release@ExitTrigger@io@dami@@QEAAXXZ
?remainingBytes@ID3_Reader@@UEAAIXZ
?removeAlbums@v2@id3@dami@@YA_KAEAVID3_TagImpl@@@Z
?removeAllComments@v2@id3@dami@@YA_KAEAVID3_TagImpl@@@Z
?removeArtists@v2@id3@dami@@YA_KAEAVID3_TagImpl@@@Z
?removeComments@v2@id3@dami@@YA_KAEAVID3_TagImpl@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?removeFrames@v2@id3@dami@@YA_KAEAVID3_TagImpl@@W4ID3_FrameID@@@Z
?removeGenres@v2@id3@dami@@YA_KAEAVID3_TagImpl@@@Z
?removeLyricists@v2@id3@dami@@YA_KAEAVID3_TagImpl@@@Z
?removeLyrics@v2@id3@dami@@YA_KAEAVID3_TagImpl@@@Z
?removeTitles@v2@id3@dami@@YA_KAEAVID3_TagImpl@@@Z
?removeTracks@v2@id3@dami@@YA_KAEAVID3_TagImpl@@@Z
?removeYears@v2@id3@dami@@YA_KAEAVID3_TagImpl@@@Z
?renderNumber@dami@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I_K@Z
?renderNumber@dami@@YA_KPEAEI_K@Z
?setAlbum@v2@id3@dami@@YAPEAVID3_Frame@@AEAVID3_TagImpl@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setArtist@v2@id3@dami@@YAPEAVID3_Frame@@AEAVID3_TagImpl@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setBeg@WindowedReader@io@dami@@QEAAII@Z
?setBuffer@ID3_MemoryReader@@IEAAXPEBEI@Z
?setBuffer@ID3_MemoryWriter@@IEAAXPEAE_K@Z
?setBuffer@ID3_NullWriter@@IEAAXPEAE_K@Z
?setComment@v2@id3@dami@@YAPEAVID3_Frame@@AEAVID3_TagImpl@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@11@Z
?setCur@BStringReader@io@dami@@UEAAII@Z
?setCur@CharReader@io@dami@@UEAAII@Z
?setCur@ID3_IStreamReader@@UEAAII@Z
?setCur@ID3_MemoryReader@@UEAAII@Z
?setCur@StringReader@io@dami@@UEAAII@Z
?setCur@WindowedReader@io@dami@@UEAAII@Z
?setEnd@WindowedReader@io@dami@@QEAAII@Z
?setExitPos@ExitTrigger@io@dami@@QEAAXI@Z
?setFrameText@v2@id3@dami@@YAPEAVID3_Frame@@AEAVID3_TagImpl@@W4ID3_FrameID@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setGenre@v2@id3@dami@@YAPEAVID3_Frame@@AEAVID3_TagImpl@@_K@Z
?setLyricist@v2@id3@dami@@YAPEAVID3_Frame@@AEAVID3_TagImpl@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setLyrics@v2@id3@dami@@YAPEAVID3_Frame@@AEAVID3_TagImpl@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@11@Z
?setSyncLyrics@v2@id3@dami@@YAPEAVID3_Frame@@AEAVID3_TagImpl@@V?$basic_string@EU?$char_traits@E@std@@V?$allocator@E@2@@std@@W4ID3_TimeStampFormat@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@7@3W4ID3_ContentType@@@Z
?setTitle@v2@id3@dami@@YAPEAVID3_Frame@@AEAVID3_TagImpl@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setTrack@v2@id3@dami@@YAPEAVID3_Frame@@AEAVID3_TagImpl@@EE@Z
?setWindow@WindowedReader@io@dami@@QEAAXII@Z
?setYear@v2@id3@dami@@YAPEAVID3_Frame@@AEAVID3_TagImpl@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?skipChars@BStringReader@io@dami@@UEAAII@Z
?skipChars@ID3_Reader@@UEAAII@Z
?skipChars@StringReader@io@dami@@UEAAII@Z
?toString@dami@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z
?toWString@dami@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEB_W_K@Z
?ucslen@dami@@YA_KPEB_W@Z
?update@ExitTrigger@io@dami@@QEAAXXZ
?writeBENumber@io@dami@@YA_KAEAVID3_Writer@@I_K@Z
?writeChar@ID3_IOStreamWriter@@UEAAFE@Z
?writeChar@ID3_OStreamWriter@@UEAAFE@Z
?writeChar@ID3_Writer@@UEAAFE@Z
?writeChar@UnsyncedWriter@io@dami@@UEAAFE@Z
?writeChars@BStringWriter@io@dami@@UEAAIQEBDI@Z
?writeChars@BStringWriter@io@dami@@UEAAIQEBEI@Z
?writeChars@ID3_IOStreamWriter@@UEAAIQEBDI@Z
?writeChars@ID3_IOStreamWriter@@UEAAIQEBEI@Z
?writeChars@ID3_MemoryWriter@@UEAAIQEBDI@Z
?writeChars@ID3_MemoryWriter@@UEAAIQEBEI@Z
?writeChars@ID3_NullWriter@@UEAAIQEBDI@Z
?writeChars@ID3_NullWriter@@UEAAIQEBEI@Z
?writeChars@ID3_OStreamWriter@@UEAAIQEBDI@Z
?writeChars@ID3_OStreamWriter@@UEAAIQEBEI@Z
?writeChars@ID3_Writer@@UEAAIQEBDI@Z
?writeChars@StringWriter@io@dami@@UEAAIQEBDI@Z
?writeChars@StringWriter@io@dami@@UEAAIQEBEI@Z
?writeChars@UnsyncedWriter@io@dami@@UEAAIQEBDI@Z
?writeChars@UnsyncedWriter@io@dami@@UEAAIQEBEI@Z
?writeString@io@dami@@YA_KAEAVID3_Writer@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?writeText@io@dami@@YA_KAEAVID3_Writer@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?writeTrailingSpaces@io@dami@@YA_KAEAVID3_Writer@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_K@Z
?writeUInt28@io@dami@@YA_KAEAVID3_Writer@@I@Z
?writeUnicodeString@io@dami@@YA_KAEAVID3_Writer@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
?writeUnicodeText@io@dami@@YA_KAEAVID3_Writer@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z

Sections

.text
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
jiso.dll
.dll windows:6 windows x64 arch:x64

04d96f2589af8b3302e2378033526fb4

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2d:9f:39:b4:6a:b8:87:e1:d8:a9:ab:2f:5f:3f:ae:9b:cf:c5:0e:80:88:e3:01:62:e1:b6:6d:e6:02:29:ad:fb
Signer

Actual PE Digest

2d:9f:39:b4:6a:b8:87:e1:d8:a9:ab:2f:5f:3f:ae:9b:cf:c5:0e:80:88:e3:01:62:e1:b6:6d:e6:02:29:ad:fb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
GetFileTime
CloseHandle
GetSystemTime
FileTimeToSystemTime
ReadFile
SetEvent
ResetEvent
WaitForSingleObject
CreateEventW
CreateThread
GetTickCount
lstrlenW
WideCharToMultiByte
GetACP
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter

msvcp140

?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z

vcruntime140

memcmp
__C_specific_handler
_CxxThrowException
memcpy
__std_type_info_destroy_list
__std_exception_copy
memset
memmove
__std_exception_destroy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

toupper
wcsncpy
wcslen
strlen
wcscpy

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_configure_narrow_argv
_initterm
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_cexit
_initterm_e
_initialize_narrow_environment

api-ms-win-crt-convert-l1-1-0

_itoa_s
_itow_s

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

Exports

Exports

JISO_AddDirectory
JISO_AddFile
JISO_Build
JISO_Create
JISO_Free
JISO_GetLength
JISO_Read
JISO_SetVolumeID

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libmmd.dll
.dll windows:6 windows x64 arch:x64

9c43e43594e158938562d221466190bd

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5a:ff:39:40:0b:66:9e:30:05:54:bb:74:85:5b:44:3f
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

19/03/2024, 00:00

Not After

19/03/2025, 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

55:12:c6:c9:d6:f1:26:c0:42:4f:60:d2:6b:56:10:94:20:95:8b:fb:1b:ab:7e:cd:83:4d:b0:9c:9e:d0:e4:e6
Signer

Actual PE Digest

55:12:c6:c9:d6:f1:26:c0:42:4f:60:d2:6b:56:10:94:20:95:8b:fb:1b:ab:7e:cd:83:4d:b0:9c:9e:d0:e4:e6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

libmmd.pdb

Imports

kernel32

GetModuleHandleA
GetProcAddress
GetThreadLocale
LoadLibraryA
FormatMessageA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
WriteConsoleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetProcessHeap
SetFilePointerEx
GetStringTypeW
SetStdHandle
HeapSize
HeapReAlloc
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
CloseHandle
CreateFileW

Exports

Exports

_LIB_VERSIONIMF
__acosdq
__acoshq
__acosq
__annuityq
__asindq
__asinhq
__asinq
__atan2dq
__atan2q
__atand2q
__atandq
__atanhq
__atanq
__bwr_acos
__bwr_acosd
__bwr_acosdf
__bwr_acosf
__bwr_acosh
__bwr_acoshf
__bwr_acospi
__bwr_acospif
__bwr_annuity
__bwr_annuityf
__bwr_asin
__bwr_asind
__bwr_asindf
__bwr_asinf
__bwr_asinh
__bwr_asinhf
__bwr_asinpi
__bwr_asinpif
__bwr_atan
__bwr_atan2
__bwr_atan2d
__bwr_atan2df
__bwr_atan2f
__bwr_atan2pi
__bwr_atan2pif
__bwr_atand
__bwr_atand2
__bwr_atand2f
__bwr_atandf
__bwr_atanf
__bwr_atanh
__bwr_atanhf
__bwr_atanpi
__bwr_atanpif
__bwr_cbrt
__bwr_cbrtf
__bwr_cdfnorminv
__bwr_cdfnorminvf
__bwr_ceil
__bwr_ceilf
__bwr_compound
__bwr_compoundf
__bwr_copysign
__bwr_copysignf
__bwr_cos
__bwr_cosd
__bwr_cosdf
__bwr_cosf
__bwr_cosh
__bwr_coshf
__bwr_cospi
__bwr_cospif
__bwr_cot
__bwr_cotd
__bwr_cotdf
__bwr_cotf
__bwr_erf
__bwr_erfc
__bwr_erfcf
__bwr_erfcx
__bwr_erfcxf
__bwr_erff
__bwr_erfinv
__bwr_erfinvf
__bwr_exp
__bwr_exp10
__bwr_exp10f
__bwr_exp2
__bwr_exp2f
__bwr_expf
__bwr_expm1
__bwr_expm1f
__bwr_fabs
__bwr_fabsf
__bwr_fdim
__bwr_fdimf
__bwr_floor
__bwr_floorf
__bwr_fma
__bwr_fmaf
__bwr_fmax
__bwr_fmaxf
__bwr_fmin
__bwr_fminf
__bwr_fmod
__bwr_fmodf
__bwr_frexp
__bwr_frexpf
__bwr_gamma
__bwr_gamma_r
__bwr_gammaf
__bwr_gammaf_r
__bwr_hypot
__bwr_hypotf
__bwr_ilogb
__bwr_ilogbf
__bwr_invsqrt
__bwr_invsqrtf
__bwr_j0
__bwr_j0f
__bwr_j1
__bwr_j1f
__bwr_jn
__bwr_jnf
__bwr_ldexp
__bwr_ldexpf
__bwr_lgamma
__bwr_lgamma_r
__bwr_lgammaf
__bwr_lgammaf_r
__bwr_llrint
__bwr_llrintf
__bwr_llround
__bwr_llroundf
__bwr_log
__bwr_log10
__bwr_log10f
__bwr_log1p
__bwr_log1pf
__bwr_log2
__bwr_log2f
__bwr_logb
__bwr_logbf
__bwr_logf
__bwr_lrint
__bwr_lrintf
__bwr_lround
__bwr_lroundf
__bwr_modf
__bwr_modff
__bwr_nearbyint
__bwr_nearbyintf
__bwr_nextafter
__bwr_nextafterf
__bwr_nexttoward
__bwr_nexttowardf
__bwr_pow
__bwr_pow2o3
__bwr_pow2o3f
__bwr_pow3o2
__bwr_pow3o2f
__bwr_powf
__bwr_powr
__bwr_powrf
__bwr_remainder
__bwr_remainderf
__bwr_remquo
__bwr_remquof
__bwr_rint
__bwr_rintf
__bwr_round
__bwr_roundf
__bwr_scalb
__bwr_scalbf
__bwr_scalbln
__bwr_scalblnf
__bwr_scalbn
__bwr_scalbnf
__bwr_significand
__bwr_significandf
__bwr_sin
__bwr_sincos
__bwr_sincosd
__bwr_sincosdf
__bwr_sincosf
__bwr_sincospi
__bwr_sincospif
__bwr_sind
__bwr_sindf
__bwr_sinf
__bwr_sinh
__bwr_sinhcosh
__bwr_sinhcoshf
__bwr_sinhf
__bwr_sinpi
__bwr_sinpif
__bwr_sqrt
__bwr_sqrtf
__bwr_tan
__bwr_tand
__bwr_tandf
__bwr_tanf
__bwr_tanh
__bwr_tanhf
__bwr_tanpi
__bwr_tanpif
__bwr_tgamma
__bwr_tgammaf
__bwr_trunc
__bwr_truncf
__bwr_y0
__bwr_y0f
__bwr_y1
__bwr_y1f
__bwr_yn
__bwr_ynf
__cabsq
__cacoshq
__cacosq
__cargq
__casinhq
__casinq
__catanhq
__catanq
__cbrtq
__ccoshq
__ccosq
__ceilq
__cexp10q
__cexp2q
__cexpm1q
__cexpq
__cimagq
__cisdq
__cisq
__clog10q
__clog1pq
__clog2q
__clog_f90
__clogf_f90
__clogq
__clogq_f90
__compoundq
__conjq
__copysignq
__cosdq
__coshq
__cosq
__cotdq
__cotq
__cpowq
__cprojq
__crealq
__csinhq
__csinq
__csqrt_f90
__csqrtf_f90
__csqrtq
__csqrtq_f90
__ctanhq
__ctanq
__dremq
__erfcq
__erfcxq
__erfq
__exp10q
__exp2q
__expm1q
__expq
__fabsq
__fdimq
__finite
__finited
__finitef
__finitel
__floorq
__fmaq
__fmaxq
__fminq
__fmodq
__fpclassify
__fpclassifyd
__fpclassifyf
__fpclassifyl
__fpclassifyq
__frexpq
__gammaq
__gammaq_r
__hypotq
__ilogbq
__intel_ldexpf
__invsqrtq
__isfinite
__isfinited
__isfinitef
__isfinitel
__isfiniteq
__isgreater
__isgreaterequal
__isgreaterequalf
__isgreaterequall
__isgreaterequalq
__isgreaterf
__isgreaterl
__isgreaterq
__isinf
__isinfd
__isinff
__isinfl
__isinfq
__isless
__islessequal
__islessequalf
__islessequall
__islessequalq
__islessf
__islessgreater
__islessgreaterf
__islessgreaterl
__islessgreaterq
__islessl
__islessq
__isnan
__isnand
__isnanf
__isnanl
__isnanq
__isnormal
__isnormald
__isnormalf
__isnormall
__isnormalq
__isunordered
__isunorderedf
__isunorderedl
__isunorderedq
__j0q
__j1q
__jnq
__ldexpq
__lgammaq
__lgammaq_r
__libm128_nexttoward128
__libm128_nexttoward128f
__libm128_nexttoward128l
__libm_f_pow2i
__libm_f_powc16i8
__libm_f_powc32i8
__libm_f_powc8i8
__libm_f_powcc
__libm_f_powci
__libm_f_powdd
__libm_f_powdi
__libm_f_powi8i4
__libm_f_powi8i8
__libm_f_powii
__libm_f_powji
__libm_f_powr16i8
__libm_f_powr4i8
__libm_f_powr8i8
__libm_f_powri
__libm_f_powrr
__libm_f_powzi
__libm_f_powzz
__libm_flt_rounds
__libm_logl
__libm_nexttoward64
__libm_nexttoward64f
__libm_nexttoward64l
__libm_pow_bb
__libm_pow_cc_val
__libm_pow_ci
__libm_pow_ci_val
__libm_pow_cr_val
__libm_pow_dd
__libm_pow_di_val
__libm_pow_dz_val
__libm_pow_hh
__libm_pow_ii_val
__libm_pow_rc_val
__libm_pow_ri_val
__libm_pow_zd_val
__libm_pow_zi_val
__libm_pow_zz_val
__libm_setusermatherr
__libm_setusermatherrf
__libm_setusermatherrl
__libm_sse2_sincos
__libm_sse2_sincosf
__llrintq
__llroundq
__log10q
__log1pq
__log2q
__logbq
__logq
__lrintq
__lroundq
__modfq
__nanq
__nearbyintq
__nextafterq
__nexttowardq
__nintq
__pow_eq
__powc16i4
__powc16i8
__powc32i4
__powc32i8
__powc8i4
__powc8i8
__powi4i4
__powi8i8
__powi_eq
__powiq
__powq
__powr10i4
__powr10i8
__powr16i4
__powr16i8
__powr4i4
__powr4i8
__powr8i4
__powr8i8
__remainderq
__remquoq
__rintq
__roundq
__rsqrtq
__scalblnq
__scalbnq
__scalbq
__signbit
__signbitd
__signbitf
__signbitl
__signbitq
__signgamq
__significandq
__sincosdq
__sincosq
__sindq
__sinhcoshq
__sinhq
__sinq
__sqrtq
__tandq
__tanhq
__tanq
__tgammaq
__truncq
__y0q
__y1q
__ynq
acos
acosd
acosdf
acosdf16
acosdl
acosf
acosf16
acosh
acoshf
acoshf16
acoshl
acosl
acospi
acospif
acospif16
annuity
annuityf
annuityf16
annuityl
asin
asind
asindf
asindf16
asindl
asinf
asinf16
asinh
asinhf
asinhf16
asinhl
asinl
asinpi
asinpif
asinpif16
atan
atan2
atan2d
atan2df
atan2df16
atan2dl
atan2f
atan2f16
atan2l
atan2pi
atan2pif
atan2pif16
atand
atand2
atand2f
atand2l
atandf
atandf16

Sections

.text
Size: 1.6MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 271KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.trace
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
met_aiff.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fd:47:d9:b3:d4:00:2e:74:f7:43:81:34:88:92:7f:01:ff:bf:f9:f1:88:19:b6:6e:68:35:62:8e:16:66:ca:04
Signer

Actual PE Digest

fd:47:d9:b3:d4:00:2e:74:f7:43:81:34:88:92:7f:01:ff:bf:f9:f1:88:19:b6:6e:68:35:62:8e:16:66:ca:04

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Add_AlbumGain
Initialize
Read_Metadata
Write_Metadata

Sections

.text
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 998B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
met_ape.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b0:cf:79:04:5f:b0:1b:10:9c:a2:e5:2c:8d:4f:0e:4a:e8:6a:89:fe:73:40:ec:6d:f5:2b:36:a9:d0:79:1b:f0
Signer

Actual PE Digest

b0:cf:79:04:5f:b0:1b:10:9c:a2:e5:2c:8d:4f:0e:4a:e8:6a:89:fe:73:40:ec:6d:f5:2b:36:a9:d0:79:1b:f0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Add_AlbumGain
Initialize
Read_Metadata
Write_Metadata

Sections

.text
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 982B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
met_dff.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b5:61:0c:f0:63:19:d8:d6:f3:50:4d:ab:3e:20:82:fd:4e:ea:5b:0d:f3:a6:11:e9:4c:2b:62:18:9e:12:79:b0
Signer

Actual PE Digest

b5:61:0c:f0:63:19:d8:d6:f3:50:4d:ab:3e:20:82:fd:4e:ea:5b:0d:f3:a6:11:e9:4c:2b:62:18:9e:12:79:b0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Add_AlbumGain
Initialize
Read_Metadata
Write_Metadata

Sections

.text
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 998B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
met_dsf.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

99:6a:cb:8f:f0:3d:0b:67:62:86:c2:a9:a0:96:ef:5c:cf:de:e4:d2:1d:ae:52:6c:c3:a4:31:78:fc:97:62:99
Signer

Actual PE Digest

99:6a:cb:8f:f0:3d:0b:67:62:86:c2:a9:a0:96:ef:5c:cf:de:e4:d2:1d:ae:52:6c:c3:a4:31:78:fc:97:62:99

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Add_AlbumGain
Initialize
Read_Metadata
Write_Metadata

Sections

.text
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 982B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
met_ffmpeg.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:89:6e:6d:86:ba:25:5d:09:4e:83:cc:ef:57:e1:b6:c4:1b:4e:b3:25:fd:c9:42:c3:10:4c:a5:53:d3:29:23
Signer

Actual PE Digest

0c:89:6e:6d:86:ba:25:5d:09:4e:83:cc:ef:57:e1:b6:c4:1b:4e:b3:25:fd:c9:42:c3:10:4c:a5:53:d3:29:23

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Add_AlbumGainXXX
Initialize
Read_Metadata
Write_Metadata

Sections

.text
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 361B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
met_flac.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b7:5b:db:00:b2:2e:9d:92:83:cd:59:89:e2:6b:28:25:8b:97:9a:c5:0a:15:36:a3:cc:ce:cc:a8:f9:a7:fc:34
Signer

Actual PE Digest

b7:5b:db:00:b2:2e:9d:92:83:cd:59:89:e2:6b:28:25:8b:97:9a:c5:0a:15:36:a3:cc:ce:cc:a8:f9:a7:fc:34

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Add_AlbumGain
Initialize
Read_Metadata
Write_Metadata

Sections

.text
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1014B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
met_id3.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8f:80:a7:66:1c:a6:a1:27:88:47:85:0f:47:73:57:41:9f:1c:2a:33:26:02:d6:5c:f5:6a:29:e9:e1:e6:96:31
Signer

Actual PE Digest

8f:80:a7:66:1c:a6:a1:27:88:47:85:0f:47:73:57:41:9f:1c:2a:33:26:02:d6:5c:f5:6a:29:e9:e1:e6:96:31

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Add_AlbumGain
Initialize
Read_Metadata
Write_Metadata

Sections

.text
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1014B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
met_m4a.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b3:92:68:b8:df:87:39:23:08:bd:89:8a:93:6a:96:c7:72:cc:ca:e3:2b:cb:a2:8b:e6:c1:43:5b:c1:6e:f2:7f
Signer

Actual PE Digest

b3:92:68:b8:df:87:39:23:08:bd:89:8a:93:6a:96:c7:72:cc:ca:e3:2b:cb:a2:8b:e6:c1:43:5b:c1:6e:f2:7f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Add_AlbumGain
Initialize
Read_Metadata
Write_Metadata

Sections

.text
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
met_mpc.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

69:94:6a:ed:79:62:60:12:c2:1c:26:b5:8a:c8:3a:bc:a2:5a:ef:08:f1:3b:bb:5e:ba:94:fe:b9:b3:26:3c:b5
Signer

Actual PE Digest

69:94:6a:ed:79:62:60:12:c2:1c:26:b5:8a:c8:3a:bc:a2:5a:ef:08:f1:3b:bb:5e:ba:94:fe:b9:b3:26:3c:b5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Add_AlbumGain
Initialize
Read_Metadata
Write_Metadata

Sections

.text
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1014B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
met_opus.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

10:e7:d8:7c:d5:8e:f9:e3:1d:c0:0e:c4:61:0c:b2:06:29:9d:b6:63:68:eb:18:8a:9f:22:9c:e8:dc:a7:66:8c
Signer

Actual PE Digest

10:e7:d8:7c:d5:8e:f9:e3:1d:c0:0e:c4:61:0c:b2:06:29:9d:b6:63:68:eb:18:8a:9f:22:9c:e8:dc:a7:66:8c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Add_AlbumGain
Initialize
Read_Metadata
Write_Metadata

Sections

.text
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 966B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
met_sacd.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:be:e5:05:3e:cf:74:1b:60:17:70:b9:2e:54:a0:b4:50:c2:6d:74:d2:ff:a9:84:72:1c:af:09:59:cd:8b:fd
Signer

Actual PE Digest

0b:be:e5:05:3e:cf:74:1b:60:17:70:b9:2e:54:a0:b4:50:c2:6d:74:d2:ff:a9:84:72:1c:af:09:59:cd:8b:fd

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Add_AlbumGainXXX
Initialize
Read_Metadata
Write_MetadataXXX

Sections

.text
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 990B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
met_tta.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

92:88:85:f0:64:ee:6c:56:82:a0:ca:21:51:10:ae:d2:36:5e:21:61:b8:ea:c3:0a:3a:15:3b:d0:63:67:cd:38
Signer

Actual PE Digest

92:88:85:f0:64:ee:6c:56:82:a0:ca:21:51:10:ae:d2:36:5e:21:61:b8:ea:c3:0a:3a:15:3b:d0:63:67:cd:38

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Add_AlbumGain
Initialize
Read_Metadata
Write_Metadata

Sections

.text
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 966B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
met_vorbis.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b6:60:32:7c:cd:d2:27:2a:e3:61:a4:cb:da:4f:0f:4e:dd:3b:a0:84:4a:62:01:e0:29:92:8a:2b:0f:e1:df:5f
Signer

Actual PE Digest

b6:60:32:7c:cd:d2:27:2a:e3:61:a4:cb:da:4f:0f:4e:dd:3b:a0:84:4a:62:01:e0:29:92:8a:2b:0f:e1:df:5f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Add_AlbumGain
Initialize
Read_Metadata
Write_Metadata

Sections

.text
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 982B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
met_w64.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2a:c2:41:a1:09:bb:a7:4a:e8:ac:ec:d9:df:5c:26:6b:e6:b1:b1:67:7d:26:ce:15:59:1b:6d:58:cd:2e:4f:89
Signer

Actual PE Digest

2a:c2:41:a1:09:bb:a7:4a:e8:ac:ec:d9:df:5c:26:6b:e6:b1:b1:67:7d:26:ce:15:59:1b:6d:58:cd:2e:4f:89

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Add_AlbumGain
Initialize
Read_Metadata
Write_Metadata

Sections

.text
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 966B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
met_wav.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

98:a7:ad:14:90:ad:ab:e6:68:56:3f:60:fc:79:ae:4a:29:7b:03:9e:b0:53:49:52:9e:e3:ba:2a:72:8e:35:d9
Signer

Actual PE Digest

98:a7:ad:14:90:ad:ab:e6:68:56:3f:60:fc:79:ae:4a:29:7b:03:9e:b0:53:49:52:9e:e3:ba:2a:72:8e:35:d9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Add_AlbumGain
Initialize
Read_Metadata
Write_Metadata

Sections

.text
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 966B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
met_wavpack.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4e:c2:c9:1a:2a:65:65:a1:06:66:28:b4:c9:a9:71:9d:50:5c:67:ff:e2:69:fd:5b:a5:d7:e0:f6:6e:1b:18:ca
Signer

Actual PE Digest

4e:c2:c9:1a:2a:65:65:a1:06:66:28:b4:c9:a9:71:9d:50:5c:67:ff:e2:69:fd:5b:a5:d7:e0:f6:6e:1b:18:ca

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Add_AlbumGain
Initialize
Read_Metadata
Write_Metadata

Sections

.text
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 966B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
met_wma.dll
.dll windows:6 windows x64 arch:x64

6232f7a953d4ba30b6f502318096e078

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c0:2d:88:6d:2f:72:2d:30:8f:ba:f8:9d:94:9d:b8:f3:d6:63:c7:2a:f1:5b:b3:c8:47:b9:4b:d5:f6:21:78:dc
Signer

Actual PE Digest

c0:2d:88:6d:2f:72:2d:30:8f:ba:f8:9d:94:9d:b8:f3:d6:63:c7:2a:f1:5b:b3:c8:47:b9:4b:d5:f6:21:78:dc

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
LoadLibraryW
GetProcAddress
CreateMutexW

Exports

Exports

Add_AlbumGain
Initialize
Read_Metadata
Write_Metadata

Sections

.text
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1014B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
metm_aiff.dll
.dll windows:6 windows x64 arch:x64

cdf2aee44407c15a3fc8ee3fda1f35d0

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ca:d9:7a:b0:83:27:70:7e:7b:0e:a7:88:28:1d:db:bb:20:c0:28:57:8b:85:32:a9:c9:a8:af:24:86:1a:40:0b
Signer

Actual PE Digest

ca:d9:7a:b0:83:27:70:7e:7b:0e:a7:88:28:1d:db:bb:20:c0:28:57:8b:85:32:a9:c9:a8:af:24:86:1a:40:0b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

acdbase

UNC_UnicodeToUtf8
ID3Helper_AddImage
ID3Helper_GetNaN
ID3Helper_Alloc
UNC_ChangeEndian
UNC_Utf8ToUnicode
UNC_freeWStr
ID3Helper_AddFloat
ID3Helper_AddULongLong
UNC_AnsiToUtf8
ID3Helper_GetDword
UNC_Utf8ToAnsi
ID3Helper_IsNaN
ID3Helper_AddStr
ID3Helper_AddDword
UNC_freeStr

id3lib

?RenderID3@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z
?ID3_FreeString@@YAXPEAD@Z
?ID3_GetString@@YAPEADPEBVID3_Frame@@W4ID3_FieldID@@@Z
?SetExtendedHeader@ID3_Tag@@QEAAX_N@Z
?SetPadding@ID3_Tag@@QEAAX_N@Z
?AttachFrame@ID3_Tag@@QEAA_NPEAVID3_Frame@@@Z
?Parse@ID3_Tag@@QEAA_KPEBE_K@Z
?Size@ID3_Tag@@QEBA_KXZ
?Find@ID3_Tag@@QEBAPEAVID3_Frame@@W4ID3_FrameID@@@Z
?CreateIterator@ID3_Tag@@QEAAPEAVIterator@1@XZ
?SetSpec@ID3_Tag@@QEAAXW4ID3_V2Spec@@@Z
?RenderID3_FreeBuffer@@YAXPEAD@Z
?ID3_GetString@@YAPEADPEBVID3_Frame@@W4ID3_FieldID@@_K@Z
?Field@ID3_Frame@@QEBAAEAVID3_Field@@W4ID3_FieldID@@@Z
?GetField@ID3_Frame@@QEBAPEAVID3_Field@@W4ID3_FieldID@@@Z
?GetID@ID3_Frame@@QEBA?AW4ID3_FrameID@@XZ
??0ID3_Tag@@QEAA@PEB_W@Z
?Render@ID3_Tag@@QEBA_KPEAEW4ID3_TagType@@@Z
??1ID3_Frame@@UEAA@XZ
??0ID3_Frame@@QEAA@W4ID3_FrameID@@@Z
??1ID3_Tag@@UEAA@XZ
?SetUnsync@ID3_Tag@@QEAAX_N@Z

kernel32

GetCurrentThreadId
ReadFile
WriteFile
SetFilePointer
SetEndOfFile
CreateFileW
CloseHandle
SetFilePointerEx
GetFileSize
QueryPerformanceCounter
GetCurrentProcessId
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
SetFileAttributesW

vcruntime140

__C_specific_handler
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__std_type_info_destroy_list
memset
memcpy

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf
__stdio_common_vsprintf_s
__stdio_common_vsprintf

api-ms-win-crt-math-l1-1-0

ldexp

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_cexit
_initterm_e
_initterm
_initialize_onexit_table

api-ms-win-crt-string-l1-1-0

_stricmp

Exports

Exports

Add_AlbumGain
Read_Metadata
Write_Metadata

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
metm_ape.dll
.dll windows:6 windows x64 arch:x64

9a23deb21a4b4658ffbb94c60a350207

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c9:c5:85:46:2c:ea:51:5d:02:89:e9:02:65:94:86:50:32:6a:d1:dd:9f:84:c1:d6:26:e0:e8:2f:e7:02:c9:0b
Signer

Actual PE Digest

c9:c5:85:46:2c:ea:51:5d:02:89:e9:02:65:94:86:50:32:6a:d1:dd:9f:84:c1:d6:26:e0:e8:2f:e7:02:c9:0b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

acdbase

ID3Helper_AddDword
ID3Helper_AddFloat
ID3Helper_AddImage
ID3Helper_AddStr
ID3Helper_AddULongLong
ID3Helper_Alloc
ID3Helper_GetDword
ID3Helper_GetFirst
ID3Helper_GetFirstImage
ID3Helper_GetNaN
ID3Helper_GetNext
ID3Helper_GetNextImage
ID3Helper_IsNaN
UNC_UnicodeToUtf8
UNC_Utf8ToUnicode
UNC_freeStr
UNC_freeWStr

libmmd

ldexp

kernel32

CloseHandle
CreateFileW
DeleteFileW
DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileSize
GetLastError
GetStdHandle
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEndOfFile
SetFileAttributesW
SetFilePointer
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
WideCharToMultiByte
WriteFile

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_destroy_list
_purecall
memcpy
memmove
memset
strstr
wcsrchr

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf

api-ms-win-crt-heap-l1-1-0

_aligned_free
_aligned_malloc
_callnewh
calloc
free
malloc

api-ms-win-crt-convert-l1-1-0

_itoa_s
_wtoi
atoi
strtoul

api-ms-win-crt-string-l1-1-0

_strnicmp
_wcsicmp
strcmp
strcpy_s
strlen
strncpy
towlower
wcscat_s
wcscmp
wcscpy_s
wcslen

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
exit

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

Add_AlbumGain
CompressFile
CompressFileW
CompressFileW2
CompressFileW2.A
CompressFileW2.L
CompressFileW2.M
CompressFileW2.N
CompressFileW2.P
CompressFileW2.R
CompressFileW2.S
CompressFileW2.V
ConvertFile
ConvertFileW
ConvertFileW2
CreateIAPECompress
CreateIAPEDecompress
CreateIAPEDecompress.A
CreateIAPEDecompress.L
CreateIAPEDecompress.M
CreateIAPEDecompress.N
CreateIAPEDecompress.P
CreateIAPEDecompress.R
CreateIAPEDecompress.S
CreateIAPEDecompress.V
CreateIAPEDecompressEx
CreateIAPEDecompressEx2
DecompressFile
DecompressFileW
DecompressFileW2
FillRF64Header
FillRF64Header.A
FillRF64Header.L
FillRF64Header.M
FillRF64Header.N
FillRF64Header.P
FillRF64Header.R
FillRF64Header.S
FillRF64Header.V
FillWaveFormatEx
FillWaveHeader
FillWaveHeader.A
FillWaveHeader.L
FillWaveHeader.M
FillWaveHeader.N
FillWaveHeader.P
FillWaveHeader.R
FillWaveHeader.S
FillWaveHeader.V
GetAPECompressionLevelName
GetAPEFileType
Read_Metadata
VerifyFile
VerifyFileW
VerifyFileW2
VerifyFileW2.A
VerifyFileW2.L
VerifyFileW2.M
VerifyFileW2.N
VerifyFileW2.P
VerifyFileW2.R
VerifyFileW2.S
VerifyFileW2.V
Write_Metadata

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
metm_dff.dll
.dll windows:6 windows x64 arch:x64

b65de5364ed72d1db1ea041fcf79c8f1

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

da:22:b3:6d:3d:64:09:d9:cd:19:ca:21:11:4c:25:a6:f5:03:ce:27:47:c3:8e:f7:6b:ad:f1:0b:bd:47:0d:21
Signer

Actual PE Digest

da:22:b3:6d:3d:64:09:d9:cd:19:ca:21:11:4c:25:a6:f5:03:ce:27:47:c3:8e:f7:6b:ad:f1:0b:bd:47:0d:21

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

acdbase

UNC_UnicodeToUtf8
ID3Helper_AddImage
ID3Helper_GetNaN
ID3Helper_Alloc
UNC_ChangeEndian
UNC_Utf8ToUnicode
UNC_freeWStr
ID3Helper_AddFloat
ID3Helper_AddULongLong
UNC_AnsiToUtf8
ID3Helper_GetDword
UNC_Utf8ToAnsi
ID3Helper_IsNaN
ID3Helper_AddStr
ID3Helper_AddDword
UNC_freeStr

id3lib

??1ID3_Frame@@UEAA@XZ
?Size@ID3_Tag@@QEBA_KXZ
?SetUnsync@ID3_Tag@@QEAAX_N@Z
?SetExtendedHeader@ID3_Tag@@QEAAX_N@Z
?SetPadding@ID3_Tag@@QEAAX_N@Z
?AttachFrame@ID3_Tag@@QEAA_NPEAVID3_Frame@@@Z
?Parse@ID3_Tag@@QEAA_KPEBE_K@Z
?RenderID3@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z
?Find@ID3_Tag@@QEBAPEAVID3_Frame@@W4ID3_FrameID@@@Z
?CreateIterator@ID3_Tag@@QEAAPEAVIterator@1@XZ
?SetSpec@ID3_Tag@@QEAAXW4ID3_V2Spec@@@Z
?RenderID3_FreeBuffer@@YAXPEAD@Z
?ID3_GetString@@YAPEADPEBVID3_Frame@@W4ID3_FieldID@@_K@Z
?ID3_GetString@@YAPEADPEBVID3_Frame@@W4ID3_FieldID@@@Z
??0ID3_Frame@@QEAA@W4ID3_FrameID@@@Z
?Field@ID3_Frame@@QEBAAEAVID3_Field@@W4ID3_FieldID@@@Z
?GetField@ID3_Frame@@QEBAPEAVID3_Field@@W4ID3_FieldID@@@Z
?Render@ID3_Tag@@QEBA_KPEAEW4ID3_TagType@@@Z
?ID3_FreeString@@YAXPEAD@Z
?GetID@ID3_Frame@@QEBA?AW4ID3_FrameID@@XZ
??0ID3_Tag@@QEAA@PEB_W@Z
??1ID3_Tag@@UEAA@XZ

kernel32

GetCurrentProcessId
GetFileSizeEx
WriteFile
SetEndOfFile
CreateFileW
SetFileAttributesW
GetLastError
CloseHandle
SetFilePointerEx
QueryPerformanceCounter
GetCurrentThreadId
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
ReadFile

vcruntime140

__C_specific_handler
__std_exception_copy
__std_exception_destroy
memcpy
__std_type_info_destroy_list
memset
_CxxThrowException

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf
__stdio_common_vsprintf
__stdio_common_vsprintf_s

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_cexit
_initterm_e
_initterm

api-ms-win-crt-string-l1-1-0

_stricmp

Exports

Exports

Add_AlbumGain
Read_Metadata
Write_Metadata

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
metm_dsf.dll
.dll windows:6 windows x64 arch:x64

92a033117eeb5d84062eedeaf4e24d7f

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

44:f6:12:6a:54:1f:00:71:fc:ef:da:a0:75:70:b9:36:0e:dc:08:95:a0:ba:bb:33:0d:d5:ec:39:15:5a:07:14
Signer

Actual PE Digest

44:f6:12:6a:54:1f:00:71:fc:ef:da:a0:75:70:b9:36:0e:dc:08:95:a0:ba:bb:33:0d:d5:ec:39:15:5a:07:14

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

acdbase

UNC_UnicodeToUtf8
ID3Helper_AddImage
ID3Helper_GetNaN
ID3Helper_Alloc
UNC_ChangeEndian
UNC_Utf8ToUnicode
UNC_AnsiToUtf8
UNC_freeWStr
ID3Helper_AddULongLong
ID3Helper_AddFloat
ID3Helper_GetDword
UNC_Utf8ToAnsi
ID3Helper_IsNaN
ID3Helper_AddStr
ID3Helper_AddDword
UNC_freeStr

id3lib

??0ID3_Frame@@QEAA@W4ID3_FrameID@@@Z
?RenderID3@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z
?SetUnsync@ID3_Tag@@QEAAX_N@Z
?SetExtendedHeader@ID3_Tag@@QEAAX_N@Z
?SetPadding@ID3_Tag@@QEAAX_N@Z
?AttachFrame@ID3_Tag@@QEAA_NPEAVID3_Frame@@@Z
?Parse@ID3_Tag@@QEAA_KPEBE_K@Z
?Render@ID3_Tag@@QEBA_KPEAEW4ID3_TagType@@@Z
??0ID3_Tag@@QEAA@PEB_W@Z
?CreateIterator@ID3_Tag@@QEAAPEAVIterator@1@XZ
?SetSpec@ID3_Tag@@QEAAXW4ID3_V2Spec@@@Z
?RenderID3_FreeBuffer@@YAXPEAD@Z
?ID3_GetString@@YAPEADPEBVID3_Frame@@W4ID3_FieldID@@_K@Z
?ID3_GetString@@YAPEADPEBVID3_Frame@@W4ID3_FieldID@@@Z
?Field@ID3_Frame@@QEBAAEAVID3_Field@@W4ID3_FieldID@@@Z
?GetField@ID3_Frame@@QEBAPEAVID3_Field@@W4ID3_FieldID@@@Z
?GetID@ID3_Frame@@QEBA?AW4ID3_FrameID@@XZ
?Find@ID3_Tag@@QEBAPEAVID3_Frame@@W4ID3_FrameID@@@Z
?ID3_FreeString@@YAXPEAD@Z
??1ID3_Frame@@UEAA@XZ
??1ID3_Tag@@UEAA@XZ
?Size@ID3_Tag@@QEBA_KXZ

kernel32

GetCurrentProcessId
CreateFileW
GetFileSizeEx
ReadFile
SetEndOfFile
SetFilePointer
SetFilePointerEx
WriteFile
CloseHandle
QueryPerformanceCounter
GetCurrentThreadId
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
SetFileAttributesW

vcruntime140

__C_specific_handler
__std_exception_copy
__std_exception_destroy
memcpy
__std_type_info_destroy_list
memset
_CxxThrowException

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf
__stdio_common_vsprintf
__stdio_common_vsprintf_s

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

api-ms-win-crt-runtime-l1-1-0

_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm

api-ms-win-crt-string-l1-1-0

_stricmp

Exports

Exports

Add_AlbumGain
Read_Metadata
Write_Metadata

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
metm_ffmpeg.dll
.dll windows:6 windows x64 arch:x64

0145e90b9b7fa8c2e43f4726cae2b378

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5e:99:47:41:12:4a:a9:f2:b8:2f:7a:69:3d:7d:a2:50:b6:d1:68:57:62:de:cf:b2:b7:8b:f3:03:8b:b7:07:4b
Signer

Actual PE Digest

5e:99:47:41:12:4a:a9:f2:b8:2f:7a:69:3d:7d:a2:50:b6:d1:68:57:62:de:cf:b2:b7:8b:f3:03:8b:b7:07:4b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

acdbase

ID3Helper_AddStr
ID3Helper_AddDword
UNC_freeStr
ffmpeg_global_unlock
ID3Helper_Alloc
ffmpeg_global_lock
UNC_UnicodeToUtf8
ID3Helper_Free

avcodec-61

avcodec_parameters_to_context
avcodec_close
avcodec_parameters_copy
avcodec_free_context
avcodec_open2
avcodec_alloc_context3
avcodec_receive_frame
avcodec_send_packet
av_packet_unref

avformat-61

avformat_open_input
av_read_frame
av_interleaved_write_frame
avformat_close_input
avio_closep
avformat_free_context
avformat_alloc_output_context2
avformat_write_header
avio_open
av_dump_format
av_write_trailer
avformat_new_stream
avformat_find_stream_info
av_find_best_stream

avutil-59

av_dict_set
av_rescale_q
av_rescale_q_rnd
av_channel_layout_describe
av_freep
av_frame_unref
av_dict_get
av_calloc

matroskametadata

?WriteMatroskaMetadata@@YAHPEA_WPEAUID3Helper@@@Z
?ReadMatroskaMetadata@@YA_NPEA_WPEAUID3Helper@@@Z

kernel32

GetCurrentProcessId
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter

vcruntime140

memset
__std_type_info_destroy_list
__std_exception_destroy
memcpy
_CxxThrowException
__current_exception_context
__current_exception
__C_specific_handler
__std_exception_copy

api-ms-win-crt-string-l1-1-0

strncmp
_wcsicmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_seh_filter_dll
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_initterm_e
_crt_at_quick_exit
_initialize_narrow_environment
_crt_atexit
_cexit
terminate
_initterm

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

Exports

Exports

Read_Metadata
Write_Metadata
remux

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
metm_flac.dll
.dll windows:6 windows x64 arch:x64

818679851d1c379255b7d9641e0d5a1a

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a1:e8:f0:26:90:d2:0b:fb:ab:e7:17:3a:59:b6:ce:11:3d:87:a6:4b:7f:8c:bc:b1:fb:3c:06:4b:fb:cb:bf:09
Signer

Actual PE Digest

a1:e8:f0:26:90:d2:0b:fb:ab:e7:17:3a:59:b6:ce:11:3d:87:a6:4b:7f:8c:bc:b1:fb:3c:06:4b:fb:cb:bf:09

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

acdbase

UNC_UnicodeToUtf8
ID3Helper_Alloc
ID3Helper_AddStr
ID3Helper_AddDword
ID3Helper_GetNaN
ID3Helper_GetNextImage
ID3Helper_GetFirstImage
ID3Helper_IsNaN
ID3Helper_GetNext
ID3Helper_GetFirst
ID3Helper_GetDword
ID3Helper_Free
UNC_freeStr
ID3Helper_AddImage
ID3Helper_AddULongLong
ID3Helper_AddFloat

libmmd

log
frexp
lround

kernel32

TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
WideCharToMultiByte
FreeLibrary
LocalFree
FormatMessageA
LoadLibraryExA
CreateFileW
GetFileSize
CloseHandle
SetFileAttributesW
DeleteFileW
MoveFileW
MultiByteToWideChar
LoadLibraryW
GetProcAddress
GetThreadLocale

vcruntime140

__CxxFrameHandler3
memmove
_CxxThrowException
__std_exception_copy
__std_exception_destroy
strrchr
memcmp
strstr
strchr
memcpy
memset
__C_specific_handler
__std_type_info_destroy_list
memchr

api-ms-win-crt-stdio-l1-1-0

_setmode
__stdio_common_vfprintf
ferror
feof
__stdio_common_vsnprintf_s
_ftelli64
_fileno
__stdio_common_vsprintf
fwrite
__stdio_common_vsscanf
_wfopen
fread
fclose
_wfopen_s
_fseeki64
__acrt_iob_func

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-heap-l1-1-0

free
malloc
realloc
calloc
_callnewh

api-ms-win-crt-string-l1-1-0

strcmp
wcscat
wcscpy
wcslen
strlen
strncpy
_stricmp
_strdup
_strnicmp

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_cexit
_initterm
_initterm_e
_errno
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_seh_filter_dll
exit

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-filesystem-l1-1-0

_wstat64
_wunlink
_wchmod
_fstat64
_wrename

api-ms-win-crt-time-l1-1-0

_wutime64

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

Add_AlbumGain
Read_Metadata
Write_Metadata

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
metm_id3.dll
.dll windows:6 windows x64 arch:x64

68c14044aefd8906c80d28d39743a0fe

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

68:43:d5:49:5a:32:b7:b3:07:35:38:8f:96:24:61:72:ce:8e:e0:50:3f:62:47:c2:d5:6b:43:37:07:a1:4a:2b
Signer

Actual PE Digest

68:43:d5:49:5a:32:b7:b3:07:35:38:8f:96:24:61:72:ce:8e:e0:50:3f:62:47:c2:d5:6b:43:37:07:a1:4a:2b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

id3lib

??0ID3_Frame@@QEAA@W4ID3_FrameID@@@Z
??0ID3_Tag@@QEAA@PEB_W@Z
?AttachFrame@ID3_Tag@@QEAA_NPEAVID3_Frame@@@Z
?CreateIterator@ID3_Tag@@QEAAPEAVIterator@1@XZ
?Field@ID3_Frame@@QEBAAEAVID3_Field@@W4ID3_FieldID@@@Z
?Find@ID3_Tag@@QEBAPEAVID3_Frame@@W4ID3_FrameID@@@Z
?GetField@ID3_Frame@@QEBAPEAVID3_Field@@W4ID3_FieldID@@@Z
?GetID3Genre@@YAPEBDK@Z
?GetID@ID3_Frame@@QEBA?AW4ID3_FrameID@@XZ
?ID3_FreeString@@YAXPEAD@Z
?ID3_GetGenreNum@@YA_KPEBVID3_Tag@@@Z
?ID3_GetString@@YAPEADPEBVID3_Frame@@W4ID3_FieldID@@@Z
?ID3_GetString@@YAPEADPEBVID3_Frame@@W4ID3_FieldID@@_K@Z
?Link@ID3_Tag@@QEAA_KPEB_WG@Z
?ReleaseIterator@ID3_Tag@@QEAAXPEAVIterator@1@@Z
?RemoveFrame@ID3_Tag@@QEAAPEAVID3_Frame@@PEBV2@@Z
?Render@ID3_Tag@@QEBA_KPEAEW4ID3_TagType@@@Z
?RenderID3@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z
?RenderID3_FreeBuffer@@YAXPEAD@Z
?SetExtendedHeader@ID3_Tag@@QEAAX_N@Z
?SetPadding@ID3_Tag@@QEAAX_N@Z
?SetSpec@ID3_Tag@@QEAAXW4ID3_V2Spec@@@Z
?SetUnsync@ID3_Tag@@QEAAX_N@Z
?Size@ID3_Tag@@QEBA_KXZ
?WriteID3V1@@YAXPEB_WPEAUID3Helper@@@Z

acdbase

ID3Helper_AddDword
ID3Helper_AddFloat
ID3Helper_AddImage
ID3Helper_AddStr
ID3Helper_AddULongLong
ID3Helper_Alloc
ID3Helper_GetDword
ID3Helper_GetNaN
ID3Helper_IsNaN
UNC_AnsiToUtf8
UNC_ChangeEndian
UNC_UnicodeToUtf8
UNC_Utf8ToAnsi
UNC_Utf8ToUnicode
UNC_freeStr
UNC_freeWStr

libmmd

cos
exp2
log
lrintf
pow
sin
sqrtf

kernel32

DeleteFileW
DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
MoveFileW
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetFileAttributesW
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
lstrlenW

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
memcpy
memmove
memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsprintf_s
__stdio_common_vsscanf
__stdio_common_vswscanf
_close
_filelengthi64
_lseek
_lseeki64
_read
_write
_wsopen_dispatch

api-ms-win-crt-string-l1-1-0

_stricmp
_wcsicmp
strcat
strcmp
strcpy
strlen
strncpy
wcscat
wcscmp
wcscpy
wcslen

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
exit

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

Add_AlbumGain
Read_Metadata
Write_Metadata

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
metm_m4a.dll
.dll windows:6 windows x64 arch:x64

790989ea19dd43e40607591a07dc4183

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1b:03:c4:9c:87:a2:75:ef:08:32:e0:26:5c:f0:5d:ed:cd:72:2b:63:8b:26:ed:60:21:69:39:d1:10:0b:46:1e
Signer

Actual PE Digest

1b:03:c4:9c:87:a2:75:ef:08:32:e0:26:5c:f0:5d:ed:cd:72:2b:63:8b:26:ed:60:21:69:39:d1:10:0b:46:1e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mp4v2

MP4AddChapter
MP4AddChapterTextTrack
MP4AddNeroChapter
MP4Close
MP4DeleteChapters
MP4FindTrackId
MP4Free
MP4GetChapters
MP4GetDuration
MP4GetNumberOfTracks
MP4GetTimeScale
MP4GetTrackAudioChannels
MP4GetTrackBitRate
MP4GetTrackBytesProperty
MP4GetTrackDuration
MP4GetTrackESConfiguration
MP4GetTrackEditDuration
MP4GetTrackEditMediaStart
MP4GetTrackNumberOfSamples
MP4GetTrackTimeScale
MP4GetTrackType
MP4ItmfAddItem
MP4ItmfGetItemsByCode
MP4ItmfItemAlloc
MP4ItmfItemFree
MP4ItmfItemListFree
MP4ItmfRemoveItem
MP4Malloc
MP4Modify
MP4Optimize
MP4Read
MP4ReadSample
MP4SetTrackDuration
MP4TagsAddArtwork
MP4TagsAlloc
MP4TagsFetch
MP4TagsFree
MP4TagsRemoveArtwork
MP4TagsSetAlbum
MP4TagsSetAlbumArtist
MP4TagsSetArranger
MP4TagsSetArtist
MP4TagsSetComments
MP4TagsSetCompilation
MP4TagsSetComposer
MP4TagsSetConductor
MP4TagsSetCopyright
MP4TagsSetDisk
MP4TagsSetEncodedBy
MP4TagsSetGenre
MP4TagsSetGenreType
MP4TagsSetGrouping
MP4TagsSetISRC
MP4TagsSetLabel
MP4TagsSetLyrics
MP4TagsSetName
MP4TagsSetOriginalArtist
MP4TagsSetProducer
MP4TagsSetPublisher
MP4TagsSetReleaseDate
MP4TagsSetSortAlbum
MP4TagsSetSortAlbumArtist
MP4TagsSetSortArtist
MP4TagsSetSortComposer
MP4TagsSetSortName
MP4TagsSetTempo
MP4TagsSetTrack
MP4TagsStore
MP4XtraTagFree
MP4XtraTagsGet
MP4XtraTagsRemove
MP4XtraTagsSetInt
MP4XtraTagsSetString

acdbase

CHAPTERNAME_Get_Number
CHAPTER_Get_Number
ID3Helper_AddChapter_UTF8
ID3Helper_AddDword
ID3Helper_AddFloat
ID3Helper_AddImage
ID3Helper_AddStr
ID3Helper_AddULongLong
ID3Helper_Alloc
ID3Helper_Free
ID3Helper_GetChapterCount_Position
ID3Helper_GetChapterTotal
ID3Helper_GetChapter_Name
ID3Helper_GetChapter_Position
ID3Helper_GetDword
ID3Helper_GetFirst
ID3Helper_GetFirstImage
ID3Helper_GetNaN
ID3Helper_GetNext
ID3Helper_GetNextImage
ID3Helper_GetStr
ID3Helper_IsNaN
N100nSToSamples
SamplesToN100nS
UNC_ChangeEndian
UNC_UnicodeToUtf8
UNC_Utf8ToUnicode
UNC_freeStr
UNC_freeWStr

libmmd

cos
exp2
log
lrintf
pow
sin
sqrtf

kernel32

DeleteFileW
DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetProcAddress
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LoadLibraryW
LocalFree
MoveFileW
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetFileAttributesW
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter

vcruntime140

_CxxThrowException
__C_specific_handler
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
memcpy
memmove
memset
strstr

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
_wfopen_s
fclose
fread

api-ms-win-crt-string-l1-1-0

_memicmp
_strdup
_stricmp
strcmp
strlen
strncpy
wcscat
wcscpy
wcslen

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
exit

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

Add_AlbumGain
Read_Metadata
Write_Metadata

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
metm_mpc.dll
.dll windows:6 windows x64 arch:x64

c8db6ea6c3f4c44584924c6a984a92b4

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:d1:f1:95:e0:86:42:78:d1:01:d7:09:a0:d3:7d:8c:64:e5:7f:c3:f9:86:73:34:13:b7:42:aa:b0:12:e4:3d
Signer

Actual PE Digest

04:d1:f1:95:e0:86:42:78:d1:01:d7:09:a0:d3:7d:8c:64:e5:7f:c3:f9:86:73:34:13:b7:42:aa:b0:12:e4:3d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

acdbase

ID3Helper_AddDword
ID3Helper_AddFloat
ID3Helper_AddImage
ID3Helper_AddStr
ID3Helper_AddULongLong
ID3Helper_Alloc
ID3Helper_GetDword
ID3Helper_GetFirst
ID3Helper_GetFirstImage
ID3Helper_GetFloat
ID3Helper_GetNaN
ID3Helper_GetNext
ID3Helper_GetNextImage
ID3Helper_IsNaN
UNC_UnicodeToUtf8
UNC_Utf8ToUnicode
UNC_freeStr
UNC_freeWStr

libmmd

ldexp
log10
pow

kernel32

CloseHandle
CreateFileW
DeleteFileW
FormatMessageA
GetACP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileSizeEx
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEndOfFile
SetFileAttributesW
SetFilePointer
SetFilePointerEx
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WideCharToMultiByte
WriteFile

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
_purecall
memcpy
memmove
memset

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
_wfopen
fclose
fread
fseek
ftell
fwrite

api-ms-win-crt-string-l1-1-0

_wcsicmp
strcmp
strcpy
strlen
strncat
strncmp
strncpy
wcscpy
wcslen

api-ms-win-crt-convert-l1-1-0

_wtoi
strtoul

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc
realloc

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
exit

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

Add_AlbumGain
Read_Metadata
Write_Metadata

Sections

.text
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
metm_opus.dll
.dll windows:6 windows x64 arch:x64

4be78a4cf1346cb852c09c1291446ae5

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b2:ee:7e:b2:ee:6b:e0:a1:82:8d:a8:99:45:b7:0c:79:15:2a:5b:8b:82:d7:d5:9c:11:41:3f:6a:2c:22:dc:6f
Signer

Actual PE Digest

b2:ee:7e:b2:ee:6b:e0:a1:82:8d:a8:99:45:b7:0c:79:15:2a:5b:8b:82:d7:d5:9c:11:41:3f:6a:2c:22:dc:6f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

acdbase

DetectEbml
ID3Helper_AddDword
ID3Helper_AddFloat
ID3Helper_AddImage
ID3Helper_AddStr
ID3Helper_AddULongLong
ID3Helper_Alloc
ID3Helper_GetDword
ID3Helper_GetFirst
ID3Helper_GetFirstImage
ID3Helper_GetNaN
ID3Helper_GetNext
ID3Helper_GetNextImage
ID3Helper_IsNaN
UNC_UnicodeToUtf8
UNC_freeStr

libmmd

cos
exp
floor
floorf
log
log10
pow
sin
sqrt
sqrtf

svml_dispmd

__svml_idiv4
__svml_idiv4_e9
__svml_idiv8_l9
__svml_udiv4
__svml_udiv4_e9

kernel32

DeleteFileW
DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileType
GetProcAddress
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LoadLibraryW
LocalFree
MoveFileW
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetFileAttributesW
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter

vcruntime140

_CxxThrowException
__C_specific_handler
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
memchr
memcmp
memcpy
memmove
memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
_filelengthi64
_fileno
_get_osfhandle
_wfopen
_wfopen_s
fclose
feof
fgetpos
fread
fsetpos
fwrite

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_errno
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
_wassert
exit

api-ms-win-crt-string-l1-1-0

_stricmp
isalnum
strcat
strcmp
strcpy
strlen
strncpy
toupper
wcscat
wcscpy
wcslen

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc
realloc

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

Add_AlbumGain
Read_Metadata
Write_Metadata

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
metm_sacd.dll
.dll windows:6 windows x64 arch:x64

808c0906e1475acbeb532886105c5eaf

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

73:0a:d9:15:64:09:1e:77:d3:fb:eb:e7:92:56:5b:ad:31:61:78:d0:45:a0:3d:2b:8e:c7:96:c7:ed:0d:b1:58
Signer

Actual PE Digest

73:0a:d9:15:64:09:1e:77:d3:fb:eb:e7:92:56:5b:ad:31:61:78:d0:45:a0:3d:2b:8e:c7:96:c7:ed:0d:b1:58

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

acdbase

ID3Helper_AddStr
ID3Helper_AddDword
ID3Helper_AddULongLong
ID3Helper_Alloc

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

kernel32

GetCurrentProcessId
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
ReadFile
MultiByteToWideChar
SetFilePointerEx
WideCharToMultiByte
CreateFileW
CloseHandle
QueryPerformanceCounter
RtlLookupFunctionEntry
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlVirtualUnwind

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_type_info_destroy_list
memset
memcpy
__std_terminate
_CxxThrowException
__C_specific_handler
__std_exception_destroy
__std_exception_copy
memmove
__current_exception
__current_exception_context

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm
_seh_filter_dll
terminate
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

api-ms-win-crt-string-l1-1-0

_memicmp

Exports

Exports

Read_Metadata

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
metm_tta.dll
.dll windows:6 windows x64 arch:x64

689e2223903c80c6823e6622ffced0ce

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3a:76:2b:9f:3e:28:ae:74:6a:9d:c3:bc:79:90:a4:a1:71:48:62:67:81:8b:f2:65:61:03:37:b9:84:ca:25:89
Signer

Actual PE Digest

3a:76:2b:9f:3e:28:ae:74:6a:9d:c3:bc:79:90:a4:a1:71:48:62:67:81:8b:f2:65:61:03:37:b9:84:ca:25:89

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

id3lib

??0ID3_Frame@@QEAA@W4ID3_FrameID@@@Z
??0ID3_Tag@@QEAA@PEB_W@Z
?AttachFrame@ID3_Tag@@QEAA_NPEAVID3_Frame@@@Z
?CreateIterator@ID3_Tag@@QEAAPEAVIterator@1@XZ
?Field@ID3_Frame@@QEBAAEAVID3_Field@@W4ID3_FieldID@@@Z
?Find@ID3_Tag@@QEBAPEAVID3_Frame@@W4ID3_FrameID@@@Z
?GetField@ID3_Frame@@QEBAPEAVID3_Field@@W4ID3_FieldID@@@Z
?GetID3Genre@@YAPEBDK@Z
?GetID@ID3_Frame@@QEBA?AW4ID3_FrameID@@XZ
?HasV1Tag@ID3_Tag@@QEBA_NXZ
?HasV2Tag@ID3_Tag@@QEBA_NXZ
?ID3_FreeString@@YAXPEAD@Z
?ID3_GetGenreNum@@YA_KPEBVID3_Tag@@@Z
?ID3_GetString@@YAPEADPEBVID3_Frame@@W4ID3_FieldID@@@Z
?ID3_GetString@@YAPEADPEBVID3_Frame@@W4ID3_FieldID@@_K@Z
?Link@ID3_Tag@@QEAA_KPEB_WG@Z
?ReleaseIterator@ID3_Tag@@QEAAXPEAVIterator@1@@Z
?RemoveFrame@ID3_Tag@@QEAAPEAVID3_Frame@@PEBV2@@Z
?Render@ID3_Tag@@QEBA_KPEAEW4ID3_TagType@@@Z
?RenderID3@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z
?RenderID3_FreeBuffer@@YAXPEAD@Z
?SetExtendedHeader@ID3_Tag@@QEAAX_N@Z
?SetPadding@ID3_Tag@@QEAAX_N@Z
?SetSpec@ID3_Tag@@QEAAXW4ID3_V2Spec@@@Z
?SetUnsync@ID3_Tag@@QEAAX_N@Z
?Size@ID3_Tag@@QEBA_KXZ
?WriteID3V1@@YAXPEB_WPEAUID3Helper@@@Z

acdbase

ID3Helper_AddDword
ID3Helper_AddFloat
ID3Helper_AddImage
ID3Helper_AddStr
ID3Helper_AddULongLong
ID3Helper_Alloc
ID3Helper_GetDword
ID3Helper_GetFirst
ID3Helper_GetFirstImage
ID3Helper_GetNaN
ID3Helper_GetNext
ID3Helper_GetNextImage
ID3Helper_IsNaN
UNC_AnsiToUtf8
UNC_ChangeEndian
UNC_UnicodeToUtf8
UNC_Utf8ToAnsi
UNC_Utf8ToUnicode
UNC_freeStr
UNC_freeWStr

kernel32

CloseHandle
CreateFileW
DeleteFileW
DisableThreadLibraryCalls
FormatMessageA
GetACP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileSizeEx
GetLastError
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LocalFree
MoveFileW
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEndOfFile
SetFileAttributesW
SetFilePointer
SetFilePointerEx
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WideCharToMultiByte
WriteFile

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
_purecall
memcpy
memmove
memset

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsprintf_s
__stdio_common_vsscanf
_close
_filelengthi64
_lseeki64
_read
_write
_wsopen_dispatch

api-ms-win-crt-heap-l1-1-0

_aligned_free
_aligned_malloc
_callnewh
free
malloc
realloc

api-ms-win-crt-string-l1-1-0

_stricmp
_wcsicmp
strcat
strcmp
strcpy
strlen
strncmp
strncpy
wcscat
wcscpy
wcslen

api-ms-win-crt-convert-l1-1-0

_wtoi
strtoul

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
exit

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

??0tta_decoder@tta@@QEAA@AEBV01@@Z
??0tta_decoder@tta@@QEAA@AEBV01@@Z.A
??0tta_decoder@tta@@QEAA@AEBV01@@Z.L
??0tta_decoder@tta@@QEAA@AEBV01@@Z.M
??0tta_decoder@tta@@QEAA@AEBV01@@Z.N
??0tta_decoder@tta@@QEAA@AEBV01@@Z.P
??0tta_decoder@tta@@QEAA@AEBV01@@Z.R
??0tta_decoder@tta@@QEAA@AEBV01@@Z.S
??0tta_decoder@tta@@QEAA@AEBV01@@Z.V
??0tta_decoder@tta@@QEAA@PEAU_tag_TTA_io_callback@@@Z
??0tta_encoder@tta@@QEAA@AEBV01@@Z
??0tta_encoder@tta@@QEAA@AEBV01@@Z.A
??0tta_encoder@tta@@QEAA@AEBV01@@Z.L
??0tta_encoder@tta@@QEAA@AEBV01@@Z.M
??0tta_encoder@tta@@QEAA@AEBV01@@Z.N
??0tta_encoder@tta@@QEAA@AEBV01@@Z.P
??0tta_encoder@tta@@QEAA@AEBV01@@Z.R
??0tta_encoder@tta@@QEAA@AEBV01@@Z.S
??0tta_encoder@tta@@QEAA@AEBV01@@Z.V
??0tta_encoder@tta@@QEAA@PEAU_tag_TTA_io_callback@@@Z
??1tta_decoder@tta@@UEAA@XZ
??1tta_encoder@tta@@UEAA@XZ
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z.A
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z.L
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z.M
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z.N
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z.P
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z.R
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z.S
??4tta_decoder@tta@@QEAAAEAV01@AEBV01@@Z.V
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z.A
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z.L
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z.M
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z.N
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z.P
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z.R
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z.S
??4tta_encoder@tta@@QEAAAEAV01@AEBV01@@Z.V
??_7tta_decoder@tta@@6B@
??_7tta_encoder@tta@@6B@
?calculate_crc@tta_encoder@tta@@QEAAIPEAXI@Z
?calculate_crc@tta_encoder@tta@@[email protected]
?calculate_crc@tta_encoder@tta@@[email protected]
?calculate_crc@tta_encoder@tta@@[email protected]
?calculate_crc@tta_encoder@tta@@[email protected]
?calculate_crc@tta_encoder@tta@@[email protected]
?calculate_crc@tta_encoder@tta@@[email protected]
?calculate_crc@tta_encoder@tta@@[email protected]
?calculate_crc@tta_encoder@tta@@[email protected]
?finalize@tta_encoder@tta@@QEAAXXZ
?finalize@tta_encoder@tta@@QEAAXXZ.A
?finalize@tta_encoder@tta@@QEAAXXZ.L
?finalize@tta_encoder@tta@@QEAAXXZ.M
?finalize@tta_encoder@tta@@QEAAXXZ.N
?finalize@tta_encoder@tta@@QEAAXXZ.P
?finalize@tta_encoder@tta@@QEAAXXZ.R
?finalize@tta_encoder@tta@@QEAAXXZ.S
?finalize@tta_encoder@tta@@QEAAXXZ.V
?frame_init@tta_decoder@tta@@IEAAXI_N@Z
?frame_init@tta_decoder@tta@@[email protected]
?frame_init@tta_decoder@tta@@[email protected]
?frame_init@tta_decoder@tta@@[email protected]
?frame_init@tta_decoder@tta@@[email protected]
?frame_init@tta_decoder@tta@@[email protected]
?frame_init@tta_decoder@tta@@[email protected]
?frame_init@tta_decoder@tta@@[email protected]
?frame_init@tta_decoder@tta@@[email protected]
?frame_init@tta_encoder@tta@@IEAAXI@Z
?frame_init@tta_encoder@tta@@[email protected]
?frame_init@tta_encoder@tta@@[email protected]
?frame_init@tta_encoder@tta@@[email protected]
?frame_init@tta_encoder@tta@@[email protected]
?frame_init@tta_encoder@tta@@[email protected]
?frame_init@tta_encoder@tta@@[email protected]
?frame_init@tta_encoder@tta@@[email protected]
?frame_init@tta_encoder@tta@@[email protected]
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.A
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.L
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.M
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.N
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.P
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.R
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.S
?frame_reset@tta_decoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.V
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.A
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.L
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.M
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.N
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.P
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.R
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.S
?frame_reset@tta_encoder@tta@@QEAAXIPEAU_tag_TTA_io_callback@@@Z.V
?get_framecount@tta_encoder@tta@@QEAAIXZ
?get_framecount_in_seektable@tta_encoder@tta@@QEAAIXZ
?get_rate@tta_decoder@tta@@QEAAIXZ
?get_rate@tta_encoder@tta@@QEAAIXZ
?get_status@tta_decoder@tta@@QEAAXAEAI00@Z
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@_K@Z
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_get_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z.A
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z.L
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z.M
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z.N
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z.P
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z.R
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z.S
?init_set_info@tta_decoder@tta@@QEAAXPEAUTTA_info@@@Z.V
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@_K@Z
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?init_set_info@tta_encoder@tta@@QEAAXPEAUTTA_info@@[email protected]
?process_frame@tta_decoder@tta@@QEAAHIPEAEI@Z
?process_frame@tta_decoder@tta@@[email protected]
?process_frame@tta_decoder@tta@@[email protected]
?process_frame@tta_decoder@tta@@[email protected]
?process_frame@tta_decoder@tta@@[email protected]
?process_frame@tta_decoder@tta@@[email protected]
?process_frame@tta_decoder@tta@@[email protected]
?process_frame@tta_decoder@tta@@[email protected]
?process_frame@tta_decoder@tta@@[email protected]
?process_frame@tta_encoder@tta@@QEAAXPEAEI@Z
?process_frame@tta_encoder@tta@@[email protected]
?process_frame@tta_encoder@tta@@[email protected]
?process_frame@tta_encoder@tta@@[email protected]
?process_frame@tta_encoder@tta@@[email protected]
?process_frame@tta_encoder@tta@@[email protected]
?process_frame@tta_encoder@tta@@[email protected]
?process_frame@tta_encoder@tta@@[email protected]
?process_frame@tta_encoder@tta@@[email protected]
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@Z@Z
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@[email protected]
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@[email protected]
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@[email protected]
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@[email protected]
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@[email protected]
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@[email protected]
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@[email protected]
?process_stream@tta_decoder@tta@@QEAAHPEAEIP6AXIII@[email protected]
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@Z@Z
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@[email protected]
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@[email protected]
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@[email protected]
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@[email protected]
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@[email protected]
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@[email protected]
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@[email protected]
?process_stream@tta_encoder@tta@@QEAAXPEAEIP6AXIII@[email protected]
?read_seek_table@tta_decoder@tta@@IEAA_NXZ
?read_seek_table@tta_decoder@tta@@IEAA_NXZ.A
?read_seek_table@tta_decoder@tta@@IEAA_NXZ.L
?read_seek_table@tta_decoder@tta@@IEAA_NXZ.M
?read_seek_table@tta_decoder@tta@@IEAA_NXZ.N
?read_seek_table@tta_decoder@tta@@IEAA_NXZ.P
?read_seek_table@tta_decoder@tta@@IEAA_NXZ.R
?read_seek_table@tta_decoder@tta@@IEAA_NXZ.S
?read_seek_table@tta_decoder@tta@@IEAA_NXZ.V
?seek_frame@tta_decoder@tta@@QEAA_NI@Z
?set_password@tta_decoder@tta@@QEAAXPEBXI@Z
?set_password@tta_decoder@tta@@[email protected]
?set_password@tta_decoder@tta@@[email protected]
?set_password@tta_decoder@tta@@[email protected]
?set_password@tta_decoder@tta@@[email protected]
?set_password@tta_decoder@tta@@[email protected]
?set_password@tta_decoder@tta@@[email protected]
?set_password@tta_decoder@tta@@[email protected]
?set_password@tta_decoder@tta@@[email protected]
?set_password@tta_encoder@tta@@QEAAXPEBXI@Z
?set_password@tta_encoder@tta@@[email protected]
?set_password@tta_encoder@tta@@[email protected]
?set_password@tta_encoder@tta@@[email protected]
?set_password@tta_encoder@tta@@[email protected]
?set_password@tta_encoder@tta@@[email protected]
?set_password@tta_encoder@tta@@[email protected]
?set_password@tta_encoder@tta@@[email protected]
?set_password@tta_encoder@tta@@[email protected]
?set_position@tta_decoder@tta@@QEAAXIPEAI@Z
?set_position@tta_decoder@tta@@[email protected]
?set_position@tta_decoder@tta@@[email protected]
?set_position@tta_decoder@tta@@[email protected]
?set_position@tta_decoder@tta@@[email protected]
?set_position@tta_decoder@tta@@[email protected]
?set_position@tta_decoder@tta@@[email protected]
?set_position@tta_decoder@tta@@[email protected]
?set_position@tta_decoder@tta@@[email protected]
?tta_binary_version@@YA?AW4CPU_ARCH_TYPE@@XZ
?write_seek_table@tta_encoder@tta@@IEAAXXZ
?write_seek_table@tta_encoder@tta@@IEAAXXZ.A
?write_seek_table@tta_encoder@tta@@IEAAXXZ.L
?write_seek_table@tta_encoder@tta@@IEAAXXZ.M
?write_seek_table@tta_encoder@tta@@IEAAXXZ.N
?write_seek_table@tta_encoder@tta@@IEAAXXZ.P
?write_seek_table@tta_encoder@tta@@IEAAXXZ.R
?write_seek_table@tta_encoder@tta@@IEAAXXZ.S
?write_seek_table@tta_encoder@tta@@IEAAXXZ.V
Add_AlbumGain
Read_Metadata
Write_Metadata

Sections

.text
Size: 207KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
metm_vorbis.dll
.dll windows:6 windows x64 arch:x64

8fdde8974852bb56514082da0a0b2f0c

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fb:75:04:9d:d5:da:c6:06:48:8d:54:f5:02:7c:4d:3c:d4:28:a9:99:b3:18:b9:0a:99:cb:1c:39:dc:be:bc:4a
Signer

Actual PE Digest

fb:75:04:9d:d5:da:c6:06:48:8d:54:f5:02:7c:4d:3c:d4:28:a9:99:b3:18:b9:0a:99:cb:1c:39:dc:be:bc:4a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

acdbase

BASE64Decode
BASE64Encode
BASE64FreeMem
DetectEbml
ID3Helper_AddDword
ID3Helper_AddFloat
ID3Helper_AddImage
ID3Helper_AddStr
ID3Helper_AddULongLong
ID3Helper_Alloc
ID3Helper_GetDword
ID3Helper_GetFirst
ID3Helper_GetFirstImage
ID3Helper_GetNaN
ID3Helper_GetNext
ID3Helper_GetNextImage
ID3Helper_IsNaN

libmmd

acos
atan
ceil
cos
exp
floor
floorf
ldexp
log
pow
sin
sqrt

kernel32

DeleteFileW
DisableThreadLibraryCalls
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetProcAddress
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
LoadLibraryW
LocalFree
MoveFileW
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetFileAttributesW
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter

vcruntime140

_CxxThrowException
__C_specific_handler
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
memchr
memcmp
memcpy
memmove
memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
_wfopen
_wfopen_s
fclose
fopen
fread
fseek
ftell
fwrite

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_errno
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
exit

api-ms-win-crt-string-l1-1-0

_memicmp
_stricmp
isalnum
strcat
strcmp
strcpy
strlen
strncpy
toupper
wcscat
wcscpy
wcslen

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc
realloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

Add_AlbumGain
Read_Metadata
Write_Metadata

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
metm_w64.dll
.dll windows:6 windows x64 arch:x64

b35e978ad8926a86e3a107c3afb585a7

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b2:23:f6:fa:82:9b:b6:21:70:9b:8c:dc:ee:d1:3c:c7:36:07:83:0a:16:5f:9f:9a:40:d0:16:c1:90:ad:65:de
Signer

Actual PE Digest

b2:23:f6:fa:82:9b:b6:21:70:9b:8c:dc:ee:d1:3c:c7:36:07:83:0a:16:5f:9f:9a:40:d0:16:c1:90:ad:65:de

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

acdbase

ID3Helper_AddDword
ID3Helper_GetStr
ID3Helper_AddStr
ID3Helper_IsNaN
UNC_Utf8ToAnsi
ID3Helper_GetDword
ID3Helper_AddULongLong
ID3Helper_AddFloat
UNC_AnsiToUtf8
UNC_Utf8ToUnicode
UNC_ChangeEndian
ID3Helper_Alloc
ID3Helper_GetNaN
UNC_freeWStr
ID3Helper_AddImage
UNC_UnicodeToUtf8
UNC_freeStr

id3lib

?ID3_GetString@@YAPEADPEBVID3_Frame@@W4ID3_FieldID@@@Z
??0ID3_Frame@@QEAA@W4ID3_FrameID@@@Z
?ID3_GetString@@YAPEADPEBVID3_Frame@@W4ID3_FieldID@@_K@Z
?RenderID3_FreeBuffer@@YAXPEAD@Z
?SetSpec@ID3_Tag@@QEAAXW4ID3_V2Spec@@@Z
?CreateIterator@ID3_Tag@@QEAAPEAVIterator@1@XZ
?Find@ID3_Tag@@QEBAPEAVID3_Frame@@W4ID3_FrameID@@@Z
??1ID3_Frame@@UEAA@XZ
?Parse@ID3_Tag@@QEAA_KPEBE_K@Z
?AttachFrame@ID3_Tag@@QEAA_NPEAVID3_Frame@@@Z
?SetPadding@ID3_Tag@@QEAAX_N@Z
?SetExtendedHeader@ID3_Tag@@QEAAX_N@Z
?SetUnsync@ID3_Tag@@QEAAX_N@Z
?Size@ID3_Tag@@QEBA_KXZ
??1ID3_Tag@@UEAA@XZ
??0ID3_Tag@@QEAA@PEB_W@Z
?GetID@ID3_Frame@@QEBA?AW4ID3_FrameID@@XZ
?GetField@ID3_Frame@@QEBAPEAVID3_Field@@W4ID3_FieldID@@@Z
?ID3_FreeString@@YAXPEAD@Z
?Render@ID3_Tag@@QEBA_KPEAEW4ID3_TagType@@@Z
?RenderID3@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z
?Field@ID3_Frame@@QEBAAEAVID3_Field@@W4ID3_FieldID@@@Z

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

kernel32

GetCurrentThreadId
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetLastError
CloseHandle
WriteFile
SetFilePointerEx
SetFilePointer
SetEndOfFile
ReadFile
GetFileSizeEx
CreateFileW
SetFileAttributesW
FindClose
FindFirstFileW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_destroy
memcpy
__std_exception_copy
memset
_CxxThrowException
__C_specific_handler
__std_type_info_destroy_list
memmove
memcmp

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s
__stdio_common_vswprintf
__stdio_common_vsprintf
__stdio_common_vsscanf

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_initterm_e
_initterm
_cexit
_invalid_parameter_noinfo_noreturn
_seh_filter_dll

api-ms-win-crt-string-l1-1-0

_stricmp
toupper
_memicmp

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

Exports

Exports

Add_AlbumGain
Read_Metadata
Write_Metadata

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
metm_wav.dll
.dll windows:6 windows x64 arch:x64

5233f12d307a82ea75607ccb2df29e11

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d4:7a:ab:88:0b:6a:fa:3f:da:25:e2:73:ef:14:c4:04:33:c1:38:e3:3c:30:ba:88:82:ad:ef:52:1b:0d:d6:d3
Signer

Actual PE Digest

d4:7a:ab:88:0b:6a:fa:3f:da:25:e2:73:ef:14:c4:04:33:c1:38:e3:3c:30:ba:88:82:ad:ef:52:1b:0d:d6:d3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

acdbase

UNC_freeStr
ID3Helper_GetStr
ID3Helper_AddStr
ID3Helper_IsNaN
UNC_Utf8ToAnsi
ID3Helper_GetDword
ID3Helper_AddULongLong
ID3Helper_AddFloat
UNC_AnsiToUtf8
UNC_Utf8ToUnicode
UNC_ChangeEndian
ID3Helper_Alloc
ID3Helper_GetNaN
UNC_freeWStr
ID3Helper_AddImage
UNC_UnicodeToUtf8
ID3Helper_AddDword

id3lib

?ID3_GetString@@YAPEADPEBVID3_Frame@@W4ID3_FieldID@@@Z
??0ID3_Frame@@QEAA@W4ID3_FrameID@@@Z
??1ID3_Frame@@UEAA@XZ
?ID3_GetString@@YAPEADPEBVID3_Frame@@W4ID3_FieldID@@_K@Z
?RenderID3_FreeBuffer@@YAXPEAD@Z
?SetSpec@ID3_Tag@@QEAAXW4ID3_V2Spec@@@Z
?CreateIterator@ID3_Tag@@QEAAPEAVIterator@1@XZ
?GetID@ID3_Frame@@QEBA?AW4ID3_FrameID@@XZ
?Render@ID3_Tag@@QEBA_KPEAEW4ID3_TagType@@@Z
?Parse@ID3_Tag@@QEAA_KPEBE_K@Z
?AttachFrame@ID3_Tag@@QEAA_NPEAVID3_Frame@@@Z
?SetPadding@ID3_Tag@@QEAAX_N@Z
?SetExtendedHeader@ID3_Tag@@QEAAX_N@Z
?SetUnsync@ID3_Tag@@QEAAX_N@Z
?Size@ID3_Tag@@QEBA_KXZ
??1ID3_Tag@@UEAA@XZ
??0ID3_Tag@@QEAA@PEB_W@Z
?GetField@ID3_Frame@@QEBAPEAVID3_Field@@W4ID3_FieldID@@@Z
?ID3_FreeString@@YAXPEAD@Z
?Find@ID3_Tag@@QEBAPEAVID3_Frame@@W4ID3_FrameID@@@Z
?RenderID3@@YAHPEAUID3Helper@@PEAVID3_Tag@@HPEAHPEAPEAD@Z
?Field@ID3_Frame@@QEBAAEAVID3_Field@@W4ID3_FieldID@@@Z

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

kernel32

GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
GetLastError
CloseHandle
WriteFile
SetFilePointerEx
SetFilePointer
SetEndOfFile
ReadFile
GetFileSizeEx
CreateFileW
SetFileAttributesW
FindClose
FindFirstFileW
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
DisableThreadLibraryCalls

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcpy
__std_exception_destroy
memmove
__std_exception_copy
__C_specific_handler
__std_type_info_destroy_list
memset
_CxxThrowException

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s
__stdio_common_vsprintf
__stdio_common_vsscanf

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_initterm_e
_initterm
_cexit
_invalid_parameter_noinfo_noreturn
_seh_filter_dll

api-ms-win-crt-string-l1-1-0

_memicmp
toupper
_stricmp

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

Exports

Exports

Add_AlbumGain
Read_Metadata
Write_Metadata

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
metm_wavpack.dll
.dll windows:6 windows x64 arch:x64

3722738ee5a92a6955c1476b74903ada

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

73:5f:7b:b9:22:70:38:d2:8c:5f:a8:e4:5b:98:da:ce:cb:03:b8:19:5a:92:1e:fb:23:08:79:b3:0b:f4:79:35
Signer

Actual PE Digest

73:5f:7b:b9:22:70:38:d2:8c:5f:a8:e4:5b:98:da:ce:cb:03:b8:19:5a:92:1e:fb:23:08:79:b3:0b:f4:79:35

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

acdbase

ID3Helper_AddDword
ID3Helper_AddFloat
ID3Helper_AddImage
ID3Helper_AddStr
ID3Helper_AddULongLong
ID3Helper_Alloc
ID3Helper_GetDword
ID3Helper_GetFirst
ID3Helper_GetFirstImage
ID3Helper_GetNaN
ID3Helper_GetNext
ID3Helper_GetNextImage
ID3Helper_IsNaN
UNC_UnicodeToUtf8
UNC_Utf8ToUnicode
UNC_freeStr
UNC_freeWStr

libmmd

floor

kernel32

CloseHandle
CreateFileW
DeleteCriticalSection
DeleteFileW
DisableThreadLibraryCalls
EnterCriticalSection
FormatMessageA
GetACP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileSizeEx
GetSystemTimeAsFileTime
GetThreadLocale
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryExA
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEndOfFile
SetFileAttributesW
SetFilePointer
SetFilePointerEx
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
WakeConditionVariable
WideCharToMultiByte
WriteFile

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
_purecall
memcpy
memmove
memset

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
_chsize_s
_fileno
_fseeki64
_ftelli64
_setmode
_wfopen
fclose
fopen
fread
fwrite
ungetc

api-ms-win-crt-filesystem-l1-1-0

_fstat64

api-ms-win-crt-string-l1-1-0

_wcsicmp
isalnum
strcmp
strcpy
strlen
strncmp
strncpy
wcscpy
wcslen

api-ms-win-crt-convert-l1-1-0

_wtoi
strtoul

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc
realloc

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
exit

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

Add_AlbumGain
Read_Metadata
Write_Metadata

Sections

.text
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
metm_wma.dll
.dll windows:6 windows x64 arch:x64

625a964f19c3b61f36a2077abc13859f

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:67:83:b8:e9:4a:8b:c8:12:41:8a:a0:f9:27:a7:cd:86:5c:22:52:1a:b5:02:02:3f:e6:57:97:93:9a:27:83
Signer

Actual PE Digest

02:67:83:b8:e9:4a:8b:c8:12:41:8a:a0:f9:27:a7:cd:86:5c:22:52:1a:b5:02:02:3f:e6:57:97:93:9a:27:83

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

wmvcore

WMCreateEditor
WMCreateSyncReader

acdbase

ID3Helper_IsNaN
ID3Helper_GetNext
ID3Helper_GetFirst
ID3Helper_GetDword
UNC_RemoveUnicodeAPIPath
ID3Helper_AddFloat
ID3Helper_AddDword
UNC_Utf8ToUnicode
ID3Helper_Alloc
ID3Helper_GetNextImage
ID3Helper_GetNaN
ID3Helper_AddImage
UNC_UnicodeToUtf8
UNC_freeWStr
ID3Helper_AddStr
UNC_freeStr
ID3Helper_GetFirstImage

user32

wsprintfW

kernel32

IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
SetFileAttributesW
GetShortPathNameW
lstrlenW
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
DisableThreadLibraryCalls

vcruntime140

__C_specific_handler
wcsstr
__std_type_info_destroy_list
memset
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memcpy

api-ms-win-crt-string-l1-1-0

_wcsicmp
strcmp
_wcslwr

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf
__stdio_common_vsprintf

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free

Exports

Exports

Add_AlbumGain
Read_Metadata
Write_Metadata

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mp4v2.dll
.dll windows:6 windows x64 arch:x64

f1b7d4d4f9f8350e69a9d39d51da2c24

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ff:b7:d4:85:04:aa:ce:c1:7e:2b:4b:7f:20:91:56:11:1c:f2:8a:7e:22:f1:88:03:58:9d:8e:56:fa:73:6a:42
Signer

Actual PE Digest

ff:b7:d4:85:04:aa:ce:c1:7e:2b:4b:7f:20:91:56:11:1c:f2:8a:7e:22:f1:88:03:58:9d:8e:56:fa:73:6a:42

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetFileAttributesW
GetFileAttributesExW
GetLastError
MoveFileExW
GetCurrentProcess
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TerminateProcess

msvcp140

?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?_Xout_of_range@std@@YAXPEBD@Z
?rdstate@ios_base@std@@QEBAHXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?flags@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?uncaught_exception@std@@YA_NXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

vcruntime140

__current_exception_context
strchr
memchr
memset
__RTDynamicCast
_CxxThrowException
__std_type_info_destroy_list
__current_exception
__std_exception_copy
memmove
memcpy
memcmp
__std_terminate
_purecall
__std_exception_destroy
__C_specific_handler

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_initterm
_getpid
_crt_atexit
_register_onexit_function
_initterm_e
_errno
strerror
_invalid_parameter_noinfo_noreturn
terminate
_cexit
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table

api-ms-win-crt-heap-l1-1-0

realloc
_callnewh
malloc
free

api-ms-win-crt-string-l1-1-0

strcpy
strncmp
tolower
strcat
toupper
_strdup
isalnum
_stricmp
wcslen
strncat
strncpy
strcmp
strlen

api-ms-win-crt-stdio-l1-1-0

fwrite
fsetpos
fread
fclose
__acrt_iob_func
__stdio_common_vsprintf
_wfopen
__stdio_common_vsscanf
__stdio_common_vfprintf

api-ms-win-crt-utility-l1-1-0

rand
srand
_byteswap_ulong

api-ms-win-crt-math-l1-1-0

round
ceil

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-time-l1-1-0

_ftime64

Exports

Exports

??0Entry@?$Enum@W4AccountType@itmf@impl@mp4v2@@$0PP@@impl@mp4v2@@QEAA@$$QEAU0123@@Z
??0Entry@?$Enum@W4AccountType@itmf@impl@mp4v2@@$0PP@@impl@mp4v2@@QEAA@AEBU0123@@Z
??0Entry@?$Enum@W4AccountType@itmf@impl@mp4v2@@$0PP@@impl@mp4v2@@QEAA@XZ
??0Entry@?$Enum@W4BasicType@itmf@impl@mp4v2@@$0PP@@impl@mp4v2@@QEAA@$$QEAU0123@@Z
??0Entry@?$Enum@W4BasicType@itmf@impl@mp4v2@@$0PP@@impl@mp4v2@@QEAA@AEBU0123@@Z
??0Entry@?$Enum@W4BasicType@itmf@impl@mp4v2@@$0PP@@impl@mp4v2@@QEAA@XZ
??0Entry@?$Enum@W4ContentRating@itmf@impl@mp4v2@@$0PP@@impl@mp4v2@@QEAA@$$QEAU0123@@Z
??0Entry@?$Enum@W4ContentRating@itmf@impl@mp4v2@@$0PP@@impl@mp4v2@@QEAA@AEBU0123@@Z
??0Entry@?$Enum@W4ContentRating@itmf@impl@mp4v2@@$0PP@@impl@mp4v2@@QEAA@XZ
??0Entry@?$Enum@W4CountryCode@itmf@impl@mp4v2@@$0A@@impl@mp4v2@@QEAA@$$QEAU0123@@Z
??0Entry@?$Enum@W4CountryCode@itmf@impl@mp4v2@@$0A@@impl@mp4v2@@QEAA@AEBU0123@@Z
??0Entry@?$Enum@W4CountryCode@itmf@impl@mp4v2@@$0A@@impl@mp4v2@@QEAA@XZ
??0Entry@?$Enum@W4GenreType@itmf@impl@mp4v2@@$0A@@impl@mp4v2@@QEAA@$$QEAU0123@@Z
??0Entry@?$Enum@W4GenreType@itmf@impl@mp4v2@@$0A@@impl@mp4v2@@QEAA@AEBU0123@@Z
??0Entry@?$Enum@W4GenreType@itmf@impl@mp4v2@@$0A@@impl@mp4v2@@QEAA@XZ
??0Entry@?$Enum@W4LanguageCode@bmff@impl@mp4v2@@$0A@@impl@mp4v2@@QEAA@$$QEAU0123@@Z
??0Entry@?$Enum@W4LanguageCode@bmff@impl@mp4v2@@$0A@@impl@mp4v2@@QEAA@AEBU0123@@Z
??0Entry@?$Enum@W4LanguageCode@bmff@impl@mp4v2@@$0A@@impl@mp4v2@@QEAA@XZ
??0Entry@?$Enum@W4StikType@itmf@impl@mp4v2@@$0PP@@impl@mp4v2@@QEAA@$$QEAU0123@@Z
??0Entry@?$Enum@W4StikType@itmf@impl@mp4v2@@$0PP@@impl@mp4v2@@QEAA@AEBU0123@@Z
??0Entry@?$Enum@W4StikType@itmf@impl@mp4v2@@$0PP@@impl@mp4v2@@QEAA@XZ
??0Exception@impl@mp4v2@@QEAA@AEBV012@@Z
??0Exception@impl@mp4v2@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBDH1@Z
??0File@io@platform@mp4v2@@QEAA@AEBV0123@@Z
??0File@io@platform@mp4v2@@QEAA@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4Mode@FileProvider@123@PEAV7123@@Z
??0FileProvider@io@platform@mp4v2@@IEAA@XZ
??0FileProvider@io@platform@mp4v2@@QEAA@AEBV0123@@Z
??0IndexedItem@ColorParameterBox@qtff@impl@mp4v2@@QEAA@XZ
??0IndexedItem@PictureAspectRatioBox@qtff@impl@mp4v2@@QEAA@XZ
??0Item@ColorParameterBox@qtff@impl@mp4v2@@QEAA@XZ
??0Item@CoverArtBox@itmf@impl@mp4v2@@QEAA@AEBV01234@@Z
??0Item@CoverArtBox@itmf@impl@mp4v2@@QEAA@XZ
??0Item@PictureAspectRatioBox@qtff@impl@mp4v2@@QEAA@XZ
??0PlatformException@impl@mp4v2@@QEAA@AEBV012@@Z
??0PlatformException@impl@mp4v2@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HPEBDH1@Z
??1Entry@?$Enum@W4AccountType@itmf@impl@mp4v2@@$0PP@@impl@mp4v2@@QEAA@XZ
??1Entry@?$Enum@W4BasicType@itmf@impl@mp4v2@@$0PP@@impl@mp4v2@@QEAA@XZ
??1Entry@?$Enum@W4ContentRating@itmf@impl@mp4v2@@$0PP@@impl@mp4v2@@QEAA@XZ
??1Entry@?$Enum@W4CountryCode@itmf@impl@mp4v2@@$0A@@impl@mp4v2@@QEAA@XZ
??1Entry@?$Enum@W4GenreType@itmf@impl@mp4v2@@$0A@@impl@mp4v2@@QEAA@XZ
??1Entry@?$Enum@W4LanguageCode@bmff@impl@mp4v2@@$0A@@impl@mp4v2@@QEAA@XZ
??1Entry@?$Enum@W4StikType@itmf@impl@mp4v2@@$0PP@@impl@mp4v2@@QEAA@XZ
??1Exception@impl@mp4v2@@UEAA@XZ
??1File@io@platform@mp4v2@@UEAA@XZ
??1FileProvider@io@platform@mp4v2@@UEAA@XZ
??1Item@CoverArtBox@itmf@impl@mp4v2@@QEAA@XZ
??1PlatformException@impl@mp4v2@@UEAA@XZ
??4?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@std@@QEAAAEAU01@$$QEAU01@@Z
??4?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@std@@QEAAAEAU01@AEBU01@@Z
??4ColorParameterBox@qtff@impl@mp4v2@@QEAAAEAV0123@$$QEAV0123@@Z
??4ColorParameterBox@qtff@impl@mp4v2@@QEAAAEAV0123@AEBV0123@@Z
??4CoverArtBox@itmf@impl@mp4v2@@QEAAAEAV0123@$$QEAV0123@@Z
??4CoverArtBox@itmf@impl@mp4v2@@QEAAAEAV0123@AEBV0123@@Z
??4FileProvider@io@platform@mp4v2@@QEAAAEAV0123@AEBV0123@@Z
??4FileSystem@io@platform@mp4v2@@QEAAAEAV0123@$$QEAV0123@@Z
??4FileSystem@io@platform@mp4v2@@QEAAAEAV0123@AEBV0123@@Z
??4IndexedItem@ColorParameterBox@qtff@impl@mp4v2@@QEAAAEAV01234@$$QEAV01234@@Z
??4IndexedItem@ColorParameterBox@qtff@impl@mp4v2@@QEAAAEAV01234@AEBV01234@@Z
??4IndexedItem@PictureAspectRatioBox@qtff@impl@mp4v2@@QEAAAEAV01234@$$QEAV01234@@Z
??4IndexedItem@PictureAspectRatioBox@qtff@impl@mp4v2@@QEAAAEAV01234@AEBV01234@@Z
??4Item@ColorParameterBox@qtff@impl@mp4v2@@QEAAAEAV01234@$$QEAV01234@@Z
??4Item@ColorParameterBox@qtff@impl@mp4v2@@QEAAAEAV01234@AEBV01234@@Z
??4Item@CoverArtBox@itmf@impl@mp4v2@@QEAAAEAV01234@AEBV01234@@Z
??4Item@PictureAspectRatioBox@qtff@impl@mp4v2@@QEAAAEAV01234@$$QEAV01234@@Z
??4Item@PictureAspectRatioBox@qtff@impl@mp4v2@@QEAAAEAV01234@AEBV01234@@Z
??4LessIgnoreCase@impl@mp4v2@@QEAAAEAU012@$$QEAU012@@Z
??4LessIgnoreCase@impl@mp4v2@@QEAAAEAU012@AEBU012@@Z
??4Option@prog@platform@mp4v2@@QEAAAEAU0123@$$QEAU0123@@Z
??4Option@prog@platform@mp4v2@@QEAAAEAU0123@AEBU0123@@Z
??4PictureAspectRatioBox@qtff@impl@mp4v2@@QEAAAEAV0123@$$QEAV0123@@Z
??4PictureAspectRatioBox@qtff@impl@mp4v2@@QEAAAEAV0123@AEBV0123@@Z
??R?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@std@@QEBA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@0@Z
??RLessIgnoreCase@impl@mp4v2@@QEBA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
??_7Exception@impl@mp4v2@@6B@
??_7File@io@platform@mp4v2@@6B@
??_7FileProvider@io@platform@mp4v2@@6B@
??_7PlatformException@impl@mp4v2@@6B@
??_FFile@io@platform@mp4v2@@QEAAXXZ
?DIR_SEPARATOR@FileSystem@io@platform@mp4v2@@2V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@A
?PATH_SEPARATOR@FileSystem@io@platform@mp4v2@@2V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@A
?add@ColorParameterBox@qtff@impl@mp4v2@@SA_NPEAXGAEBVItem@1234@@Z
?add@ColorParameterBox@qtff@impl@mp4v2@@SA_NPEAXIAEBVItem@1234@@Z
?add@CoverArtBox@itmf@impl@mp4v2@@SA_NPEAXAEBVItem@1234@@Z
?add@PictureAspectRatioBox@qtff@impl@mp4v2@@SA_NPEAXGAEBVItem@1234@@Z
?add@PictureAspectRatioBox@qtff@impl@mp4v2@@SA_NPEAXIAEBVItem@1234@@Z
?close@File@io@platform@mp4v2@@UEAA_NXZ
?computeBasicType@itmf@impl@mp4v2@@YA?AW4BasicType@123@PEBXI@Z
?convertFromCSV@Item@ColorParameterBox@qtff@impl@mp4v2@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?convertFromCSV@Item@PictureAspectRatioBox@qtff@impl@mp4v2@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?convertToCSV@Item@ColorParameterBox@qtff@impl@mp4v2@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?convertToCSV@Item@ColorParameterBox@qtff@impl@mp4v2@@QEBAAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAV67@@Z
?convertToCSV@Item@PictureAspectRatioBox@qtff@impl@mp4v2@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?convertToCSV@Item@PictureAspectRatioBox@qtff@impl@mp4v2@@QEBAAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAV67@@Z
?enumAccountType@itmf@impl@mp4v2@@3V?$Enum@W4AccountType@itmf@impl@mp4v2@@$0PP@@23@B
?enumBasicType@itmf@impl@mp4v2@@3V?$Enum@W4BasicType@itmf@impl@mp4v2@@$0PP@@23@B
?enumContentRating@itmf@impl@mp4v2@@3V?$Enum@W4ContentRating@itmf@impl@mp4v2@@$0PP@@23@B
?enumCountryCode@itmf@impl@mp4v2@@3V?$Enum@W4CountryCode@itmf@impl@mp4v2@@$0A@@23@B
?enumGenreType@itmf@impl@mp4v2@@3V?$Enum@W4GenreType@itmf@impl@mp4v2@@$0A@@23@B
?enumLanguageCode@bmff@impl@mp4v2@@3V?$Enum@W4LanguageCode@bmff@impl@mp4v2@@$0A@@23@B
?enumStikType@itmf@impl@mp4v2@@3V?$Enum@W4StikType@itmf@impl@mp4v2@@$0PP@@23@B
?exists@FileSystem@io@platform@mp4v2@@SA_NV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?get@ColorParameterBox@qtff@impl@mp4v2@@SA_NPEAXGAEAVItem@1234@@Z
?get@ColorParameterBox@qtff@impl@mp4v2@@SA_NPEAXIAEAVItem@1234@@Z
?get@CoverArtBox@itmf@impl@mp4v2@@SA_NPEAXAEAVItem@1234@I@Z
?get@PictureAspectRatioBox@qtff@impl@mp4v2@@SA_NPEAXGAEAVItem@1234@@Z
?get@PictureAspectRatioBox@qtff@impl@mp4v2@@SA_NPEAXIAEAVItem@1234@@Z
?getErrorStr@sys@platform@mp4v2@@YAPEBDH@Z
?getFileSize@FileSystem@io@platform@mp4v2@@SA_NV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEA_J@Z
?getLastError@sys@platform@mp4v2@@YAHXZ
?getLastErrorStr@sys@platform@mp4v2@@YAPEBDXZ
?getLocalTimeMilliseconds@time@platform@mp4v2@@YA_JXZ
?getLocalTimeSeconds@time@platform@mp4v2@@YA_JXZ
?getOption@prog@platform@mp4v2@@YAHHPEBQEADPEBDPEBUOption@123@PEAH@Z
?getOptionSingle@prog@platform@mp4v2@@YAHHPEBQEADPEBDPEBUOption@123@PEAH@Z
?getpid@process@platform@mp4v2@@YAHXZ
?isDirectory@FileSystem@io@platform@mp4v2@@SA_NV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?isFile@FileSystem@io@platform@mp4v2@@SA_NV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?list@ColorParameterBox@qtff@impl@mp4v2@@SA_NPEAXAEAV?$vector@VIndexedItem@ColorParameterBox@qtff@impl@mp4v2@@V?$allocator@VIndexedItem@ColorParameterBox@qtff@impl@mp4v2@@@std@@@std@@@Z
?list@CoverArtBox@itmf@impl@mp4v2@@SA_NPEAXAEAV?$vector@VItem@CoverArtBox@itmf@impl@mp4v2@@V?$allocator@VItem@CoverArtBox@itmf@impl@mp4v2@@@std@@@std@@@Z
?list@PictureAspectRatioBox@qtff@impl@mp4v2@@SA_NPEAXAEAV?$vector@VIndexedItem@PictureAspectRatioBox@qtff@impl@mp4v2@@V?$allocator@VIndexedItem@PictureAspectRatioBox@qtff@impl@mp4v2@@@std@@@std@@@Z
?msg@Exception@impl@mp4v2@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?msg@PlatformException@impl@mp4v2@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?open@File@io@platform@mp4v2@@UEAA_NV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4Mode@FileProvider@234@@Z
?optarg@prog@platform@mp4v2@@3PEBDEB
?opterr@prog@platform@mp4v2@@3HA
?optind@prog@platform@mp4v2@@3HA
?optopt@prog@platform@mp4v2@@3HA
?optreset@prog@platform@mp4v2@@3HA
?pathnameCleanup@FileSystem@io@platform@mp4v2@@SAXAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?pathnameOnlyExtension@FileSystem@io@platform@mp4v2@@SAXAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?pathnameStripExtension@FileSystem@io@platform@mp4v2@@SAXAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?pathnameTemp@FileSystem@io@platform@mp4v2@@SAXAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V56@11@Z
?random32@number@platform@mp4v2@@YAIXZ
?read@File@io@platform@mp4v2@@UEAA_NPEAX_JAEA_J1@Z
?remove@ColorParameterBox@qtff@impl@mp4v2@@SA_NPEAXG@Z
?remove@ColorParameterBox@qtff@impl@mp4v2@@SA_NPEAXI@Z
?remove@CoverArtBox@itmf@impl@mp4v2@@SA_NPEAXI@Z
?remove@PictureAspectRatioBox@qtff@impl@mp4v2@@SA_NPEAXG@Z
?remove@PictureAspectRatioBox@qtff@impl@mp4v2@@SA_NPEAXI@Z
?rename@FileSystem@io@platform@mp4v2@@SA_NV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?reset@Item@ColorParameterBox@qtff@impl@mp4v2@@QEAAXXZ
?reset@Item@CoverArtBox@itmf@impl@mp4v2@@QEAAXXZ
?reset@Item@PictureAspectRatioBox@qtff@impl@mp4v2@@QEAAXXZ
?seek@File@io@platform@mp4v2@@UEAA_N_J@Z
?set@ColorParameterBox@qtff@impl@mp4v2@@SA_NPEAXGAEBVItem@1234@@Z
?set@ColorParameterBox@qtff@impl@mp4v2@@SA_NPEAXIAEBVItem@1234@@Z
?set@CoverArtBox@itmf@impl@mp4v2@@SA_NPEAXAEBVItem@1234@I@Z
?set@PictureAspectRatioBox@qtff@impl@mp4v2@@SA_NPEAXGAEBVItem@1234@@Z
?set@PictureAspectRatioBox@qtff@impl@mp4v2@@SA_NPEAXIAEBVItem@1234@@Z
?setMode@File@io@platform@mp4v2@@QEAAXW4Mode@FileProvider@234@@Z
?setName@File@io@platform@mp4v2@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?srandom@number@platform@mp4v2@@YAXI@Z
?standard@FileProvider@io@platform@mp4v2@@SAAEAV1234@XZ
?write@File@io@platform@mp4v2@@UEAA_NPEBX_JAEA_J1@Z
MP4AddAC3AudioTrack
MP4AddALACAudioTrack
MP4AddALawAudioTrack
MP4AddAmrAudioTrack
MP4AddAudioTrack
MP4AddChapter
MP4AddChapterTextTrack
MP4AddColr
MP4AddDataAtom
MP4AddEncAudioTrack
MP4AddEncH264VideoTrack
MP4AddEncVideoTrack
MP4AddH263VideoTrack
MP4AddH264PictureParameterSet
MP4AddH264SequenceParameterSet
MP4AddH264VideoTrack
MP4AddHintTrack
MP4AddHrefTrack
MP4AddNeroChapter
MP4AddODTrack
MP4AddPixelAspectRatio
MP4AddRtpESConfigurationPacket
MP4AddRtpHint
MP4AddRtpImmediateData
MP4AddRtpPacket
MP4AddRtpSampleData
MP4AddRtpVideoHint
MP4AddSceneTrack
MP4AddSubpicTrack
MP4AddSubtitleTrack
MP4AddSystemsTrack
MP4AddTextTrack
MP4AddTrack
MP4AddTrackEdit
MP4AddTrueHDAudioTrack
MP4AddULawAudioTrack
MP4AddVideoTrack
MP4AppendHintTrackSdp
MP4AppendSessionSdp
MP4BinaryToBase16
MP4BinaryToBase64
MP4Calloc
MP4ChangeMovieTimeScale
MP4CloneTrack
MP4Close
MP4ConvertChapters
MP4ConvertFromMovieDuration
MP4ConvertFromTrackDuration
MP4ConvertFromTrackTimestamp
MP4ConvertToTrackDuration
MP4ConvertToTrackTimestamp
MP4CopySample
MP4CopyTrack
MP4Create
MP4CreateAudioSampleGroupDescription
MP4CreateEx
MP4CreateProvider
MP4CreateProviderEx
MP4DefaultISMACrypParams
MP4DeleteChapters
MP4DeleteTrack
MP4DeleteTrackEdit
MP4EncAndCloneTrack
MP4EncAndCopySample
MP4EncAndCopyTrack
MP4FileInfo
MP4FindTrackId
MP4FindTrackIndex
MP4Free
MP4FreeH264SeqPictHeaders
MP4GetAmrModeSet
MP4GetAudioProfileLevel
MP4GetBytesProperty
MP4GetChapters
MP4GetDuration
MP4GetFilename
MP4GetFloatProperty
MP4GetGraphicsProfileLevel
MP4GetHintTrackReferenceTrackId
MP4GetHintTrackRtpPayload
MP4GetHintTrackSdp
MP4GetHrefTrackBaseUrl
MP4GetIntegerProperty
MP4GetNumberOfTracks
MP4GetODProfileLevel
MP4GetRtpHintNumberOfPackets
MP4GetRtpPacketBFrame
MP4GetRtpPacketTransmitOffset
MP4GetRtpTimestampStart
MP4GetSampleDuration
MP4GetSampleIdFromEditTime
MP4GetSampleIdFromTime
MP4GetSampleRenderingOffset
MP4GetSampleSize
MP4GetSampleSync
MP4GetSampleTime
MP4GetSceneProfileLevel
MP4GetSessionSdp
MP4GetStringProperty
MP4GetTimeScale
MP4GetTrackAudioChannels
MP4GetTrackAudioMpeg4Type
MP4GetTrackBitRate
MP4GetTrackBytesProperty
MP4GetTrackDuration
MP4GetTrackDurationPerChunk
MP4GetTrackESConfiguration
MP4GetTrackEditDuration
MP4GetTrackEditDwell
MP4GetTrackEditMediaStart
MP4GetTrackEditTotalDuration
MP4GetTrackEsdsObjectTypeId
MP4GetTrackFixedSampleDuration
MP4GetTrackFloatProperty
MP4GetTrackH264LengthSize
MP4GetTrackH264ProfileLevel
MP4GetTrackH264SeqPictHeaders
MP4GetTrackIntegerProperty
MP4GetTrackLanguage
MP4GetTrackMaxSampleSize
MP4GetTrackMediaDataName
MP4GetTrackMediaDataOriginalFormat
MP4GetTrackName
MP4GetTrackNumberOfEdits
MP4GetTrackNumberOfSamples
MP4GetTrackStringProperty
MP4GetTrackTimeScale
MP4GetTrackType
MP4GetTrackVideoFrameRate
MP4GetTrackVideoHeight
MP4GetTrackVideoMetadata
MP4GetTrackVideoWidth
MP4GetVideoProfileLevel
MP4HaveAtom
MP4HaveTrackAtom
MP4Info
MP4IsIsmaCrypMediaTrack
MP4ItmfAddItem
MP4ItmfGetItems
MP4ItmfGetItemsByCode
MP4ItmfGetItemsByMeaning
MP4ItmfItemAlloc
MP4ItmfItemFree
MP4ItmfItemListFree
MP4ItmfRemoveItem
MP4ItmfSetItem
MP4Make3GPCompliant
MP4MakeIsmaCompliant
MP4MakeIsmaSdpIod
MP4Malloc
MP4Modify
MP4Optimize
MP4ReWriteSample
MP4Read
MP4ReadProvider
MP4ReadRtpHint
MP4ReadRtpPacket
MP4ReadSample
MP4ReadSampleFromEditTime
MP4ReadSampleFromTime
MP4Realloc
MP4ReferenceSample
MP4SetAmrDecoderVersion
MP4SetAmrModeSet
MP4SetAmrVendor
MP4SetAudioProfileLevel
MP4SetBytesProperty
MP4SetChapters
MP4SetDuration
MP4SetFloatProperty
MP4SetGraphicsProfileLevel
MP4SetH263Bitrates
MP4SetH263DecoderVersion
MP4SetH263Vendor
MP4SetHintTrackRtpPayload
MP4SetHintTrackSdp
MP4SetIntegerProperty
MP4SetODProfileLevel
MP4SetRtpTimestampStart
MP4SetSampleRenderingOffset
MP4SetSceneProfileLevel
MP4SetSessionSdp
MP4SetStringProperty
MP4SetTimeScale
MP4SetTrackBytesProperty
MP4SetTrackDuration
MP4SetTrackDurationPerChunk
MP4SetTrackESConfiguration
MP4SetTrackEditDuration
MP4SetTrackEditDwell
MP4SetTrackEditMediaStart
MP4SetTrackFloatProperty
MP4SetTrackIntegerProperty
MP4SetTrackLanguage
MP4SetTrackName
MP4SetTrackStringProperty
MP4SetTrackTimeScale
MP4SetVideoProfileLevel
MP4Stralloc
MP4TagsAddArtwork
MP4TagsAlloc
MP4TagsFetch
MP4TagsFree
MP4TagsHasMetadata
MP4TagsRemoveArtwork
MP4TagsSetAlbum
MP4TagsSetAlbumArtist
MP4TagsSetArranger
MP4TagsSetArtist
MP4TagsSetArtistID
MP4TagsSetArtwork
MP4TagsSetCategory
MP4TagsSetComments
MP4TagsSetCompilation
MP4TagsSetComposer
MP4TagsSetComposerID
MP4TagsSetConductor
MP4TagsSetContentID
MP4TagsSetContentRating
MP4TagsSetCopyright
MP4TagsSetDescription
MP4TagsSetDisk
MP4TagsSetEncodedBy
MP4TagsSetEncodingTool
MP4TagsSetGapless
MP4TagsSetGenre
MP4TagsSetGenreID
MP4TagsSetGenreType
MP4TagsSetGrouping
MP4TagsSetHDVideo
MP4TagsSetISRC
MP4TagsSetITunesAccount
MP4TagsSetITunesAccountType
MP4TagsSetITunesCountry
MP4TagsSetKeywords
MP4TagsSetLabel
MP4TagsSetLongDescription
MP4TagsSetLyrics
MP4TagsSetMediaType
MP4TagsSetName
MP4TagsSetOriginalArtist
MP4TagsSetPlaylistID
MP4TagsSetPodcast
MP4TagsSetProducer
MP4TagsSetPublisher
MP4TagsSetPurchaseDate
MP4TagsSetReleaseDate
MP4TagsSetSortAlbum
MP4TagsSetSortAlbumArtist
MP4TagsSetSortArtist
MP4TagsSetSortComposer
MP4TagsSetSortName
MP4TagsSetSortTVShow
MP4TagsSetTVEpisode
MP4TagsSetTVEpisodeID
MP4TagsSetTVNetwork
MP4TagsSetTVSeason
MP4TagsSetTVShow
MP4TagsSetTempo
MP4TagsSetTrack
MP4TagsSetXID
MP4TagsStore
MP4WriteRtpHint
MP4WriteSample
MP4WriteSampleDependency
MP4XtraTagFree
MP4XtraTagsGet
MP4XtraTagsRemove
MP4XtraTagsSetFileTime
MP4XtraTagsSetGUID
MP4XtraTagsSetInt
MP4XtraTagsSetString

Sections

.text
Size: 435KB - Virtual size: 435KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 209KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msvcp140.dll
.dll windows:6 windows x64 arch:x64

9433fb5ddec7b65c9b51bd9dc5813de2

Code Sign

33:00:00:01:00:21:68:09:b9:0a:f6:55:f3:00:00:00:00:01:00
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:59

Not After

20/08/2025, 19:59

Subject

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:14:9d:fb:c3:1f:1f:63:c3:10:00:00:00:00:00:14
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/05/2013, 20:44

Not After

01/05/2028, 20:54

Subject

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:fe:6b:ce:da:d6:c8:03:03:a3:00:00:00:00:03:fe
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:26

Not After

20/08/2025, 19:26

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

54:27:0c:64:5e:07:9b:b9:a1:22:ae:2e:1c:45:4f:2e:2c:bc:be:5c:1a:b1:f5:c3:d3:89:42:23:77:e6:e1:b8
Signer

Actual PE Digest

54:27:0c:64:5e:07:9b:b9:a1:22:ae:2e:1c:45:4f:2e:2c:bc:be:5c:1a:b1:f5:c3:d3:89:42:23:77:e6:e1:b8

Digest Algorithm

sha256

PE Digest Matches

true

54:27:0c:64:5e:07:9b:b9:a1:22:ae:2e:1c:45:4f:2e:2c:bc:be:5c:1a:b1:f5:c3:d3:89:42:23:77:e6:e1:b8
Signer

Actual PE Digest

54:27:0c:64:5e:07:9b:b9:a1:22:ae:2e:1c:45:4f:2e:2c:bc:be:5c:1a:b1:f5:c3:d3:89:42:23:77:e6:e1:b8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\msvcp140.amd64.pdb

Imports

vcruntime140

__current_exception_context
__C_specific_handler
memcmp
__uncaught_exceptions
__uncaught_exception
memchr
memmove
__std_terminate
_purecall
memset
memcpy
_CxxThrowException
__AdjustPointer
__current_exception
__std_exception_destroy
__std_type_info_destroy_list
__std_exception_copy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-heap-l1-1-0

free
realloc
malloc
_callnewh
calloc

api-ms-win-crt-runtime-l1-1-0

terminate
_initterm
_initterm_e
_crt_atexit
_execute_onexit_table
_cexit
_register_onexit_function
_endthreadex
_beginthreadex
_set_new_handler
abort
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
_initialize_onexit_table
_errno
_configure_narrow_argv
_seh_filter_dll

api-ms-win-crt-string-l1-1-0

isdigit
iswxdigit
isspace
isxdigit
__strncnt
wcsnlen
iswspace
isupper
wcscpy_s
iswalnum
iswdigit
isalnum
islower
_wcsdup
tolower
strcspn

api-ms-win-crt-locale-l1-1-0

_unlock_locales
_lock_locales
__pctype_func
___lc_locale_name_func
setlocale
___lc_codepage_func
___mb_cur_max_func
___lc_collate_cp_func
localeconv

api-ms-win-crt-stdio-l1-1-0

fputs
fgetwc
fseek
_fsopen
_wfsopen
fputwc
ungetwc
fsetpos
__acrt_iob_func
_get_stream_buffer_pointers
fclose
fflush
fgetc
fgetpos
fputc
fread
__stdio_common_vsprintf_s
_fseeki64
fwrite
setvbuf
ungetc

api-ms-win-crt-filesystem-l1-1-0

_wremove
_unlock_file
_lock_file
_wchdir
_wrmdir
_wrename

api-ms-win-crt-time-l1-1-0

_W_Getmonths
_W_Getdays
_Getdays
_Strftime
_Wcsftime
_Getmonths
_Gettnames
_W_Gettnames

api-ms-win-crt-environment-l1-1-0

_wgetcwd

api-ms-win-crt-math-l1-1-0

frexp
copysign
ldexp
log
logf

api-ms-win-crt-convert-l1-1-0

strtof
btowc
strtod

api-ms-win-crt-utility-l1-1-0

rand_s

kernel32

EnterCriticalSection
RaiseException
CompareStringEx
MultiByteToWideChar
GetCPInfo
InitializeSListHead
WideCharToMultiByte
LCMapStringEx
GetLocaleInfoEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
GetDiskFreeSpaceExW
GetFileAttributesExW
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetFileInformationByHandleEx
GetProcAddress
GetModuleHandleW
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CreateThreadpoolTimer
GetTickCount64
GetSystemTimeAsFileTime
GetCurrentProcessorNumber
FlushProcessWriteBuffers
CreateSemaphoreExW
CreateEventExW
GetTempPathW
InitOnceExecuteOnce
GetStringTypeW
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
RtlPcToFileHeader
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleHandleExW
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
IsProcessorFeaturePresent
RtlCaptureStackBackTrace
TryAcquireSRWLockExclusive
GetNativeSystemInfo
GetExitCodeThread
SwitchToThread
Sleep
WaitForSingleObjectEx
GetCurrentThreadId
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
FormatMessageA
LocalFree
DecodePointer
EncodePointer
CreateSymbolicLinkW
CreateHardLinkW
CopyFileW
GetLastError
CloseHandle
AreFileApisANSI
SetFileTime
SetFileInformationByHandle
SetFileAttributesW
GetFileInformationByHandle

Exports

Exports

??$_Getvals@_W@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IEAAX_WAEBV_Locinfo@1@@Z
??$_Getvals@_W@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IEAAX_WAEBV_Locinfo@1@@Z
??$_Getvals@_W@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IEAAX_WAEBV_Locinfo@1@@Z
??0?$_Yarn@D@std@@QEAA@AEBV01@@Z
??0?$_Yarn@D@std@@QEAA@PEBD@Z
??0?$_Yarn@D@std@@QEAA@XZ
??0?$_Yarn@G@std@@QEAA@AEBV01@@Z
??0?$_Yarn@G@std@@QEAA@PEBG@Z
??0?$_Yarn@G@std@@QEAA@XZ
??0?$_Yarn@_W@std@@QEAA@AEBV01@@Z
??0?$_Yarn@_W@std@@QEAA@PEB_W@Z
??0?$_Yarn@_W@std@@QEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@IEAA@$$QEAV01@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@IEAA@$$QEAV01@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@IEAA@$$QEAV01@@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@IEAA@$$QEAV01@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@W4_Uninitialized@1@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@IEAA@$$QEAV01@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N1@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA@W4_Uninitialized@1@@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@IEAA@$$QEAV01@@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N1@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@W4_Uninitialized@1@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@IEAA@$$QEAV01@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@W4_Uninitialized@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@IEAA@$$QEAV01@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@W4_Uninitialized@1@_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@IEAA@$$QEAV01@@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@W4_Uninitialized@1@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@AEBV01@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@W4_Uninitialized@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@AEBV01@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@W4_Uninitialized@1@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@AEBV01@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@W4_Uninitialized@1@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$codecvt@DDU_Mbstatet@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$codecvt@DDU_Mbstatet@@@std@@QEAA@_K@Z
??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z
??0?$codecvt@_SDU_Mbstatet@@@std@@QEAA@AEBV_Locinfo@1@KW4_Codecvt_mode@1@_K@Z
??0?$codecvt@_SDU_Mbstatet@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$codecvt@_SDU_Mbstatet@@@std@@QEAA@_K@Z
??0?$codecvt@_UDU_Mbstatet@@@std@@QEAA@AEBV_Locinfo@1@KW4_Codecvt_mode@1@_K@Z
??0?$codecvt@_UDU_Mbstatet@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$codecvt@_UDU_Mbstatet@@@std@@QEAA@_K@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
??0?$ctype@D@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$ctype@D@std@@QEAA@PEBF_N_K@Z
??0?$ctype@G@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$ctype@G@std@@QEAA@_K@Z
??0?$ctype@_W@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$ctype@_W@std@@QEAA@_K@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@_K@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@_K@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@_K@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@_K@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@_K@Z
??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@_K@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IEAA@PEBD_K@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@_K@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IEAA@PEBD_K@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@_K@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IEAA@PEBD_K@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@_K@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@_K@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IEAA@PEBD_K@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@_K@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IEAA@PEBD_K@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@_K@Z
??0Init@ios_base@std@@QEAA@XZ
??0_Facet_base@std@@QEAA@AEBV01@@Z
??0_Facet_base@std@@QEAA@XZ
??0_Init_locks@std@@QEAA@XZ
??0_Locimp@locale@std@@AEAA@AEBV012@@Z
??0_Locimp@locale@std@@AEAA@_N@Z
??0_Locinfo@std@@QEAA@HPEBD@Z
??0_Locinfo@std@@QEAA@PEBD@Z
??0_Lockit@std@@QEAA@H@Z
??0_Lockit@std@@QEAA@XZ
??0_Timevec@std@@QEAA@AEBV01@@Z
??0_Timevec@std@@QEAA@PEAX@Z
??0_UShinit@std@@QEAA@XZ
??0_Winit@std@@QEAA@XZ
??0codecvt_base@std@@QEAA@_K@Z
??0ctype_base@std@@QEAA@_K@Z
??0facet@locale@std@@IEAA@_K@Z
??0id@locale@std@@QEAA@_K@Z
??0ios_base@std@@IEAA@XZ
??0task_continuation_context@Concurrency@@AEAA@XZ
??0time_base@std@@QEAA@_K@Z
??1?$_Yarn@D@std@@QEAA@XZ
??1?$_Yarn@G@std@@QEAA@XZ
??1?$_Yarn@_W@std@@QEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UEAA@XZ
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$codecvt@DDU_Mbstatet@@@std@@MEAA@XZ
??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ
??1?$codecvt@_SDU_Mbstatet@@@std@@MEAA@XZ
??1?$codecvt@_UDU_Mbstatet@@@std@@MEAA@XZ
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??1?$ctype@D@std@@MEAA@XZ
??1?$ctype@G@std@@MEAA@XZ
??1?$ctype@_W@std@@MEAA@XZ
??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEAA@XZ
??1?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEAA@XZ
??1?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEAA@XZ
??1?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEAA@XZ
??1?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEAA@XZ
??1?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEAA@XZ
??1?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEAA@XZ
??1?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEAA@XZ
??1?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEAA@XZ
??1?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEAA@XZ
??1?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEAA@XZ
??1?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEAA@XZ
??1Init@ios_base@std@@QEAA@XZ
??1_Facet_base@std@@UEAA@XZ
??1_Init_locks@std@@QEAA@XZ
??1_Locimp@locale@std@@MEAA@XZ
??1_Locinfo@std@@QEAA@XZ
??1_Lockit@std@@QEAA@XZ
??1_Timevec@std@@QEAA@XZ
??1_UShinit@std@@QEAA@XZ
??1_Winit@std@@QEAA@XZ
??1codecvt_base@std@@UEAA@XZ
??1ctype_base@std@@UEAA@XZ
??1facet@locale@std@@MEAA@XZ
??1ios_base@std@@UEAA@XZ
??1time_base@std@@UEAA@XZ
??4?$_Iosb@H@std@@QEAAAEAV01@$$QEAV01@@Z
??4?$_Iosb@H@std@@QEAAAEAV01@AEBV01@@Z
??4?$_Yarn@D@std@@QEAAAEAV01@AEBV01@@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??4?$_Yarn@G@std@@QEAAAEAV01@AEBV01@@Z
??4?$_Yarn@G@std@@QEAAAEAV01@PEBG@Z
??4?$_Yarn@_W@std@@QEAAAEAV01@AEBV01@@Z
??4?$_Yarn@_W@std@@QEAAAEAV01@PEB_W@Z
??4?$basic_iostream@DU?$char_traits@D@std@@@std@@IEAAAEAV01@$$QEAV01@@Z
??4?$basic_iostream@GU?$char_traits@G@std@@@std@@IEAAAEAV01@$$QEAV01@@Z
??4?$basic_iostream@_WU?$char_traits@_W@std@@@std@@IEAAAEAV01@$$QEAV01@@Z
??4?$basic_istream@DU?$char_traits@D@std@@@std@@IEAAAEAV01@$$QEAV01@@Z
??4?$basic_istream@GU?$char_traits@G@std@@@std@@IEAAAEAV01@$$QEAV01@@Z
??4?$basic_istream@_WU?$char_traits@_W@std@@@std@@IEAAAEAV01@$$QEAV01@@Z
??4?$basic_ostream@DU?$char_traits@D@std@@@std@@IEAAAEAV01@$$QEAV01@@Z
??4?$basic_ostream@GU?$char_traits@G@std@@@std@@IEAAAEAV01@$$QEAV01@@Z
??4?$basic_ostream@_WU?$char_traits@_W@std@@@std@@IEAAAEAV01@$$QEAV01@@Z
??4?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAAEAV01@AEBV01@@Z
??4?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAAEAV01@AEBV01@@Z
??4?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAAEAV01@AEBV01@@Z
??4Init@ios_base@std@@QEAAAEAV012@AEBV012@@Z
??4_Crt_new_delete@std@@QEAAAEAU01@$$QEAU01@@Z
??4_Crt_new_delete@std@@QEAAAEAU01@AEBU01@@Z
??4_Facet_base@std@@QEAAAEAV01@AEBV01@@Z
??4_Init_locks@std@@QEAAAEAV01@AEBV01@@Z
??4_Timevec@std@@QEAAAEAV01@AEBV01@@Z
??4_UShinit@std@@QEAAAEAV01@AEBV01@@Z
??4_Winit@std@@QEAAAEAV01@AEBV01@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAF@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAJ@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAK@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAO@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAPEAX@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_K@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV?$basic_ios@DU?$char_traits@D@std@@@1@AEAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAF@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAG@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAH@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAI@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAJ@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAK@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAM@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAN@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAO@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAPEAX@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEA_J@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEA_K@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEA_N@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV?$basic_ios@GU?$char_traits@G@std@@@1@AEAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAF@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAG@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAH@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAI@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAJ@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAK@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAM@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAN@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAO@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAPEAX@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEA_J@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEA_K@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEA_N@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AEAV21@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV?$basic_ios@DU?$char_traits@D@std@@@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@F@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@O@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV?$basic_ios@GU?$char_traits@G@std@@@1@AEAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@F@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@O@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AEAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z
??7ios_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
??Bios_base@std@@QEBA_NXZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ios@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_iostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_iostream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_iostream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_istream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_istream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ostream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_streambuf@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_streambuf@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$codecvt@DDU_Mbstatet@@@std@@6B@
??_7?$codecvt@GDU_Mbstatet@@@std@@6B@
??_7?$codecvt@_SDU_Mbstatet@@@std@@6B@
??_7?$codecvt@_UDU_Mbstatet@@@std@@6B@
??_7?$codecvt@_WDU_Mbstatet@@@std@@6B@
??_7?$ctype@D@std@@6B@
??_7?$ctype@G@std@@6B@
??_7?$ctype@_W@std@@6B@
??_7?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7_Facet_base@std@@6B@
??_7_Locimp@locale@std@@6B@
??_7codecvt_base@std@@6B@
??_7ctype_base@std@@6B@
??_7facet@locale@std@@6B@
??_7ios_base@std@@6B@
??_7time_base@std@@6B@
??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@
??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@
??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_istream@GU?$char_traits@G@std@@@1@@
??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_ostream@GU?$char_traits@G@std@@@1@@
??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_istream@_WU?$char_traits@_W@std@@@1@@
??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_ostream@_WU?$char_traits@_W@std@@@1@@
??_8?$basic_istream@DU?$char_traits@D@std@@@std@@7B@
??_8?$basic_istream@GU?$char_traits@G@std@@@std@@7B@
??_8?$basic_istream@_WU?$char_traits@_W@std@@@std@@7B@
??_8?$basic_ostream@DU?$char_traits@D@std@@@std@@7B@
??_8?$basic_ostream@GU?$char_traits@G@std@@@std@@7B@
??_8?$basic_ostream@_WU?$char_traits@_W@std@@@std@@7B@
??_D?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??_D?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
??_D?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??_D?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAXXZ
??_D?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??_D?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
??_D?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
??_F?$codecvt@DDU_Mbstatet@@@std@@QEAAXXZ
??_F?$codecvt@GDU_Mbstatet@@@std@@QEAAXXZ
??_F?$codecvt@_SDU_Mbstatet@@@std@@QEAAXXZ
??_F?$codecvt@_UDU_Mbstatet@@@std@@QEAAXXZ
??_F?$codecvt@_WDU_Mbstatet@@@std@@QEAAXXZ
??_F?$ctype@D@std@@QEAAXXZ
??_F?$ctype@G@std@@QEAAXXZ
??_F?$ctype@_W@std@@QEAAXXZ
??_F?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAAXXZ
??_F?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAAXXZ
??_F?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAAXXZ
??_F?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAAXXZ
??_F?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAAXXZ
??_F?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAAXXZ
??_F?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAAXXZ
??_F?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAAXXZ
??_F?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAAXXZ
??_F?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAAXXZ
??_F?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAAXXZ
??_F?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAAXXZ
??_F_Locinfo@std@@QEAAXXZ
??_F_Timevec@std@@QEAAXXZ
??_Fcodecvt_base@std@@QEAAXXZ
??_Fctype_base@std@@QEAAXXZ
??_Ffacet@locale@std@@QEAAXXZ
??_Fid@locale@std@@QEAAXXZ
??_Ftime_base@std@@QEAAXXZ
?CaptureCallstack@platform@details@Concurrency@@YA_KPEAPEAX_K1@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?GetNextAsyncId@platform@details@Concurrency@@YAIXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Addcats@_Locinfo@std@@QEAAAEAV12@HPEBD@Z
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
?_Addstd@ios_base@std@@SAXPEAV12@@Z
?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z
?_Atexit@@YAXP6AXXZ@Z
?_BADOFF@std@@3_JB
?_C_str@?$_Yarn@D@std@@QEBAPEBDXZ
?_C_str@?$_Yarn@G@std@@QEBAPEBGXZ
?_C_str@?$_Yarn@_W@std@@QEBAPEB_WXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Callfns@ios_base@std@@AEAAXW4event@12@@Z
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Clocptr@_Locimp@locale@std@@0PEAV123@EA
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Donarrow@?$ctype@G@std@@IEBADGD@Z
?_Donarrow@?$ctype@_W@std@@IEBAD_WD@Z
?_Dowiden@?$ctype@G@std@@IEBAGD@Z
?_Dowiden@?$ctype@_W@std@@IEBA_WD@Z
?_Empty@?$_Yarn@D@std@@QEBA_NXZ
?_Empty@?$_Yarn@G@std@@QEBA_NXZ
?_Empty@?$_Yarn@_W@std@@QEBA_NXZ
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
?_Ffmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAPEADPEADDH@Z
?_Ffmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAPEADPEADDH@Z
?_Ffmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAPEADPEADDH@Z
?_Findarr@ios_base@std@@AEAAAEAU_Iosarray@12@H@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBGHH@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Fput@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBD_K@Z
?_Fput@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AEAVios_base@2@GPEBD_K@Z
?_Fput@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WPEBD_K@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$codecvt@GDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$codecvt@_SDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$codecvt@_UDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@facet@locale@std@@SA_KPEAPEBV123@PEBV23@@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?_Getctype@_Locinfo@std@@QEBA?AU_Ctypevec@@XZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Getdateorder@_Locinfo@std@@QEBAHXZ
?_Getdays@_Locinfo@std@@QEBAPEBDXZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Getffld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AEAVios_base@2@PEAH@Z
?_Getffld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AEAVios_base@2@PEAH@Z
?_Getffld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AEAVios_base@2@PEAH@Z
?_Getffldx@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AEAVios_base@2@PEAH@Z
?_Getffldx@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AEAVios_base@2@PEAH@Z
?_Getffldx@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AEAVios_base@2@PEAH@Z
?_Getfmt@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD@Z
?_Getfmt@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD@Z
?_Getfmt@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Getifld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1HAEBVlocale@2@@Z
?_Getifld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1HAEBVlocale@2@@Z
?_Getifld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1HAEBVlocale@2@@Z
?_Getint@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAHAEAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@0HHAEAHAEBV?$ctype@D@2@@Z
?_Getint@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAHAEAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@0HHAEAHAEBV?$ctype@G@2@@Z
?_Getint@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAHAEAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@0HHAEAHAEBV?$ctype@_W@2@@Z
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ
?_Getmonths@_Locinfo@std@@QEBAPEBDXZ
?_Getname@_Locinfo@std@@QEBAPEBDXZ
?_Getptr@_Timevec@std@@QEBAPEAXXZ
?_Gettnames@_Locinfo@std@@QEBA?AV_Timevec@2@XZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Gnavail@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBA_JXZ
?_Gnavail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBA_JXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gndec@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?_Gnpreinc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gnpreinc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?_Gnpreinc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?_Id_cnt@id@locale@std@@0HA
?_Ifmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAPEADPEADPEBDH@Z
?_Ifmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAPEADPEADPEBDH@Z
?_Ifmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAPEADPEADPEBDH@Z
?_Incref@facet@locale@std@@UEAAXXZ
?_Index@ios_base@std@@0HA

Sections

.text
Size: 334KB - Virtual size: 334KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msvcp140_1.dll
.dll windows:6 windows x64 arch:x64

20717227ccb65afbaea7feeb74196ea2

Code Sign

33:00:00:01:00:21:68:09:b9:0a:f6:55:f3:00:00:00:00:01:00
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:59

Not After

20/08/2025, 19:59

Subject

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:14:9d:fb:c3:1f:1f:63:c3:10:00:00:00:00:00:14
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/05/2013, 20:44

Not After

01/05/2028, 20:54

Subject

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:fe:6b:ce:da:d6:c8:03:03:a3:00:00:00:00:03:fe
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:26

Not After

20/08/2025, 19:26

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

72:5b:25:d8:02:0b:2b:61:81:cb:13:0c:ef:78:57:84:d2:c6:2d:b0:64:43:9d:5c:1b:2f:a3:12:4e:79:0e:67
Signer

Actual PE Digest

72:5b:25:d8:02:0b:2b:61:81:cb:13:0c:ef:78:57:84:d2:c6:2d:b0:64:43:9d:5c:1b:2f:a3:12:4e:79:0e:67

Digest Algorithm

sha256

PE Digest Matches

true

72:5b:25:d8:02:0b:2b:61:81:cb:13:0c:ef:78:57:84:d2:c6:2d:b0:64:43:9d:5c:1b:2f:a3:12:4e:79:0e:67
Signer

Actual PE Digest

72:5b:25:d8:02:0b:2b:61:81:cb:13:0c:ef:78:57:84:d2:c6:2d:b0:64:43:9d:5c:1b:2f:a3:12:4e:79:0e:67

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\msvcp140_1.amd64.pdb

Imports

msvcp140

?_Xbad_alloc@std@@YAXXZ

vcruntime140

__std_type_info_destroy_list
_CxxThrowException
memset
__std_exception_copy
memcpy
__C_specific_handler
__std_exception_destroy

api-ms-win-crt-heap-l1-1-0

_aligned_malloc
_callnewh
free
_aligned_free
malloc

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_cexit
_initterm_e
_initterm
_initialize_narrow_environment
_execute_onexit_table

kernel32

QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
IsProcessorFeaturePresent
DisableThreadLibraryCalls
SetUnhandledExceptionFilter

Exports

Exports

_Aligned_get_default_resource
_Aligned_new_delete_resource
_Aligned_set_default_resource
_Unaligned_get_default_resource
_Unaligned_new_delete_resource
_Unaligned_set_default_resource
null_memory_resource

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msvcp140_2.dll
.dll windows:6 windows x64 arch:x64

daf7b489610bd3f69721a48e198b645e

Code Sign

33:00:00:00:ff:ed:62:7b:87:d0:66:0d:fa:00:00:00:00:00:ff
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:59

Not After

20/08/2025, 19:59

Subject

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:14:9d:fb:c3:1f:1f:63:c3:10:00:00:00:00:00:14
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/05/2013, 20:44

Not After

01/05/2028, 20:54

Subject

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:fd:36:44:39:73:0d:dc:02:28:00:00:00:00:03:fd
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:26

Not After

20/08/2025, 19:26

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e7:2f:d6:ed:7e:e8:6b:ea:e1:1d:42:c7:a7:4a:76:6e:fc:43:90:c5:77:23:0f:99:cd:75:6d:d8:61:38:bd:0a
Signer

Actual PE Digest

e7:2f:d6:ed:7e:e8:6b:ea:e1:1d:42:c7:a7:4a:76:6e:fc:43:90:c5:77:23:0f:99:cd:75:6d:d8:61:38:bd:0a

Digest Algorithm

sha256

PE Digest Matches

true

e7:2f:d6:ed:7e:e8:6b:ea:e1:1d:42:c7:a7:4a:76:6e:fc:43:90:c5:77:23:0f:99:cd:75:6d:d8:61:38:bd:0a
Signer

Actual PE Digest

e7:2f:d6:ed:7e:e8:6b:ea:e1:1d:42:c7:a7:4a:76:6e:fc:43:90:c5:77:23:0f:99:cd:75:6d:d8:61:38:bd:0a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\msvcp140_2.amd64.pdb

Imports

msvcp140

?widen@?$ctype@D@std@@QEBAPEBDPEBD0PEAD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?clear@ios_base@std@@QEAAXH_N@Z
?rdstate@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?precision@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
?widen@?$ctype@D@std@@QEBADD@Z
??1ios_base@std@@UEAA@XZ
?_Addstd@ios_base@std@@SAXPEAV12@@Z
??0ios_base@std@@IEAA@XZ
?_Init@ios_base@std@@IEAAXXZ
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$numpunct@D@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
??Bid@locale@std@@QEAA_KXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?uncaught_exceptions@std@@YAHXZ
??1_Lockit@std@@QEAA@XZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??0_Lockit@std@@QEAA@H@Z

vcruntime140

memcmp
__std_exception_destroy
memcpy
memchr
__C_specific_handler
__std_terminate
memmove
memset
__std_exception_copy
__std_type_info_destroy_list
_CxxThrowException

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_initterm
_initterm_e
_errno

api-ms-win-crt-math-l1-1-0

tan
sin
pow
frexp
log
ldexp
sqrt
atan
ceil
cos
cosh
sqrtf
fmod
exp
sinh
floor

api-ms-win-crt-heap-l1-1-0

calloc
free
_callnewh
malloc

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s

api-ms-win-crt-string-l1-1-0

strcspn

api-ms-win-crt-locale-l1-1-0

localeconv

kernel32

DisableThreadLibraryCalls
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent

Exports

Exports

__std_smf_assoc_laguerre
__std_smf_assoc_laguerref
__std_smf_assoc_legendre
__std_smf_assoc_legendref
__std_smf_beta
__std_smf_betaf
__std_smf_comp_ellint_1
__std_smf_comp_ellint_1f
__std_smf_comp_ellint_2
__std_smf_comp_ellint_2f
__std_smf_comp_ellint_3
__std_smf_comp_ellint_3f
__std_smf_cyl_bessel_i
__std_smf_cyl_bessel_if
__std_smf_cyl_bessel_j
__std_smf_cyl_bessel_jf
__std_smf_cyl_bessel_k
__std_smf_cyl_bessel_kf
__std_smf_cyl_neumann
__std_smf_cyl_neumannf
__std_smf_ellint_1
__std_smf_ellint_1f
__std_smf_ellint_2
__std_smf_ellint_2f
__std_smf_ellint_3
__std_smf_ellint_3f
__std_smf_expint
__std_smf_expintf
__std_smf_hermite
__std_smf_hermitef
__std_smf_hypot3
__std_smf_hypot3f
__std_smf_laguerre
__std_smf_laguerref
__std_smf_legendre
__std_smf_legendref
__std_smf_riemann_zeta
__std_smf_riemann_zetaf
__std_smf_sph_bessel
__std_smf_sph_besself
__std_smf_sph_legendre
__std_smf_sph_legendref
__std_smf_sph_neumann
__std_smf_sph_neumannf

Sections

.text
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msvcp140_atomic_wait.dll
.dll windows:6 windows x64 arch:x64

b44ab1d7afee46659653d329ac3b1ea7

Code Sign

33:00:00:00:ff:ed:62:7b:87:d0:66:0d:fa:00:00:00:00:00:ff
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:59

Not After

20/08/2025, 19:59

Subject

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:14:9d:fb:c3:1f:1f:63:c3:10:00:00:00:00:00:14
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/05/2013, 20:44

Not After

01/05/2028, 20:54

Subject

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:fd:36:44:39:73:0d:dc:02:28:00:00:00:00:03:fd
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:26

Not After

20/08/2025, 19:26

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

10:96:9c:ad:33:d2:eb:1a:40:3a:cf:3d:5c:7c:8d:3e:f0:08:40:2a:7c:69:0a:db:c4:83:37:cb:17:f7:5b:07
Signer

Actual PE Digest

10:96:9c:ad:33:d2:eb:1a:40:3a:cf:3d:5c:7c:8d:3e:f0:08:40:2a:7c:69:0a:db:c4:83:37:cb:17:f7:5b:07

Digest Algorithm

sha256

PE Digest Matches

true

10:96:9c:ad:33:d2:eb:1a:40:3a:cf:3d:5c:7c:8d:3e:f0:08:40:2a:7c:69:0a:db:c4:83:37:cb:17:f7:5b:07
Signer

Actual PE Digest

10:96:9c:ad:33:d2:eb:1a:40:3a:cf:3d:5c:7c:8d:3e:f0:08:40:2a:7c:69:0a:db:c4:83:37:cb:17:f7:5b:07

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\msvcp140_atomic_wait.amd64.pdb

Imports

msvcp140

??0_Init_locks@std@@QEAA@XZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
??1_Init_locks@std@@QEAA@XZ
_Thrd_hardware_concurrency

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException
memcpy
__std_exception_destroy
__std_exception_copy
__std_terminate
memset
__C_specific_handler
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
abort

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
calloc
free

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

kernel32

TerminateProcess
GetCurrentProcess
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WideCharToMultiByte
AreFileApisANSI
MultiByteToWideChar
GetLastError
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
GetTickCount64
GetModuleHandleW
GetProcAddress
CreateThreadpoolWork
SubmitThreadpoolWork
WaitForThreadpoolWorkCallbacks
CloseThreadpoolWork
SetLastError
LoadLibraryExW
DisableThreadLibraryCalls
GetCurrentThreadId

Exports

Exports

__std_acquire_shared_mutex_for_instance
__std_atomic_compare_exchange_128
__std_atomic_get_mutex
__std_atomic_has_cmpxchg16b
__std_atomic_notify_all_direct
__std_atomic_notify_all_indirect
__std_atomic_notify_one_direct
__std_atomic_notify_one_indirect
__std_atomic_set_api_level
__std_atomic_wait_direct
__std_atomic_wait_get_deadline
__std_atomic_wait_get_remaining_timeout
__std_atomic_wait_indirect
__std_bulk_submit_threadpool_work
__std_calloc_crt
__std_close_threadpool_work
__std_create_threadpool_work
__std_execution_wait_on_uchar
__std_execution_wake_by_address_all
__std_free_crt
__std_parallel_algorithms_hw_threads
__std_release_shared_mutex_for_instance
__std_submit_threadpool_work
__std_tzdb_delete_current_zone
__std_tzdb_delete_leap_seconds
__std_tzdb_delete_sys_info
__std_tzdb_delete_time_zones
__std_tzdb_get_current_zone
__std_tzdb_get_leap_seconds
__std_tzdb_get_sys_info
__std_tzdb_get_time_zones
__std_wait_for_threadpool_work_callbacks

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msvcp140_codecvt_ids.dll
.dll windows:6 windows x64 arch:x64

8e3190ca5b1dfe3662e83fefed12f437

Code Sign

33:00:00:00:ff:ed:62:7b:87:d0:66:0d:fa:00:00:00:00:00:ff
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:59

Not After

20/08/2025, 19:59

Subject

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:14:9d:fb:c3:1f:1f:63:c3:10:00:00:00:00:00:14
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/05/2013, 20:44

Not After

01/05/2028, 20:54

Subject

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:fd:36:44:39:73:0d:dc:02:28:00:00:00:00:03:fd
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:26

Not After

20/08/2025, 19:26

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

be:80:6d:f8:d0:4f:ee:53:41:bd:f1:96:14:ae:20:8e:c2:84:af:6e:22:e7:35:75:71:8b:05:80:6f:38:1b:67
Signer

Actual PE Digest

be:80:6d:f8:d0:4f:ee:53:41:bd:f1:96:14:ae:20:8e:c2:84:af:6e:22:e7:35:75:71:8b:05:80:6f:38:1b:67

Digest Algorithm

sha256

PE Digest Matches

true

be:80:6d:f8:d0:4f:ee:53:41:bd:f1:96:14:ae:20:8e:c2:84:af:6e:22:e7:35:75:71:8b:05:80:6f:38:1b:67
Signer

Actual PE Digest

be:80:6d:f8:d0:4f:ee:53:41:bd:f1:96:14:ae:20:8e:c2:84:af:6e:22:e7:35:75:71:8b:05:80:6f:38:1b:67

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\msvcp140_codecvt_ids.amd64.pdb

Imports

vcruntime140

memcpy
__std_type_info_destroy_list
__C_specific_handler
memset

api-ms-win-crt-runtime-l1-1-0

_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm

kernel32

IsDebuggerPresent
QueryPerformanceCounter
DisableThreadLibraryCalls
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcessId
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

Exports

Exports

?id@?$codecvt@_SDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$codecvt@_S_QU_Mbstatet@@@std@@2V0locale@2@A
?id@?$codecvt@_UDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$codecvt@_U_QU_Mbstatet@@@std@@2V0locale@2@A

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
notify.wav
register64.exe
.exe windows:6 windows x64 arch:x64

8b7f10dce4c583b2ebb1876581177cf0

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d8:c7:04:34:83:3e:02:90:65:0b:14:89:3f:1f:92:39
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

31/12/2021, 00:00

Not After

30/12/2024, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5a:ee:4b:72:b0:92:86:2f:db:41:af:e6:ef:8b:51:73:28:f4:71:e6:89:f8:ef:a0:98:2e:53:1a:f1:b6:bf:f9
Signer

Actual PE Digest

5a:ee:4b:72:b0:92:86:2f:db:41:af:e6:ef:8b:51:73:28:f4:71:e6:89:f8:ef:a0:98:2e:53:1a:f1:b6:bf:f9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetCommandLineW
lstrlenW
GetModuleFileNameW
lstrcatW
LoadLibraryW
GetProcAddress
FreeLibrary
lstrcpyW
lstrcmpiW

shell32

CommandLineToArgvW

Sections

.text
Size: 512B - Virtual size: 418B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
registershell.exe
.exe windows:6 windows x64 arch:x64

9fb1ceda2ed71a2d7a8afd2d4074a54b

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d8:c7:04:34:83:3e:02:90:65:0b:14:89:3f:1f:92:39
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

31/12/2021, 00:00

Not After

30/12/2024, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

49:92:f8:d0:3d:eb:53:90:f9:cb:e5:68:da:c1:ff:d8:d0:ae:bf:2f:8d:bb:e0:9b:33:d2:8c:cb:78:55:70:4e
Signer

Actual PE Digest

49:92:f8:d0:3d:eb:53:90:f9:cb:e5:68:da:c1:ff:d8:d0:ae:bf:2f:8d:bb:e0:9b:33:d2:8c:cb:78:55:70:4e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetCommandLineW
lstrlenW
GetModuleFileNameW
lstrcatW
lstrcpyW
lstrcmpiW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
FreeLibrary
FormatMessageW
CloseHandle
GetProcAddress
SetEvent
CreateEventW
GetProcessHeap
WaitForSingleObject
HeapAlloc
LoadLibraryW
InterlockedPushEntrySList
HeapFree
GetLastError
QueryPerformanceCounter

shell32

CommandLineToArgvW

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception
__std_exception_copy
_CxxThrowException
memcpy
__current_exception_context
memset
__C_specific_handler
__std_exception_destroy
__std_terminate

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
_register_onexit_function
_exit
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_initialize_onexit_table
_set_app_type
_seh_filter_exe
abort
_invalid_parameter_noinfo_noreturn
_errno
_invalid_parameter_noinfo
terminate

api-ms-win-crt-string-l1-1-0

iswspace

api-ms-win-crt-heap-l1-1-0

_set_new_mode
_callnewh
malloc
free

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

oleaut32

SysFreeString
SysAllocString
SysStringLen
GetErrorInfo
SetErrorInfo

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources.pri
resources.scale-125.pri
resources.scale-150.pri
resources.scale-200.pri
resources.scale-400.pri
svml_dispmd.dll
.dll windows:6 windows x64 arch:x64

05583d28d047f1a598f2665f40c8ee35

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5a:ff:39:40:0b:66:9e:30:05:54:bb:74:85:5b:44:3f
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

19/03/2024, 00:00

Not After

19/03/2025, 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

91:62:1d:23:df:12:e5:e1:60:cf:9f:55:a0:ce:a0:ba:88:eb:bc:a0:c8:ef:c5:55:e4:85:f1:8e:b6:e2:76:d7
Signer

Actual PE Digest

91:62:1d:23:df:12:e5:e1:60:cf:9f:55:a0:ce:a0:ba:88:eb:bc:a0:c8:ef:c5:55:e4:85:f1:8e:b6:e2:76:d7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

svml_dispmd.pdb

Imports

kernel32

QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
WriteConsoleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle

Exports

Exports

__svml_acos1
__svml_acos1_br
__svml_acos1_br_e7
__svml_acos1_br_e9
__svml_acos1_br_z0
__svml_acos1_e7
__svml_acos1_e9
__svml_acos1_ep
__svml_acos1_ep_e7
__svml_acos1_ep_e9
__svml_acos1_ep_l9
__svml_acos1_ep_z0
__svml_acos1_ha
__svml_acos1_ha_e7
__svml_acos1_ha_e9
__svml_acos1_ha_l9
__svml_acos1_ha_z0
__svml_acos1_l9
__svml_acos1_z0
__svml_acos2
__svml_acos2_br
__svml_acos2_br_e7
__svml_acos2_br_e9
__svml_acos2_br_mask
__svml_acos2_br_mask_e9
__svml_acos2_br_z0
__svml_acos2_e7
__svml_acos2_e9
__svml_acos2_ep
__svml_acos2_ep_e7
__svml_acos2_ep_e9
__svml_acos2_ep_l9
__svml_acos2_ep_mask
__svml_acos2_ep_mask_e9
__svml_acos2_ep_z0
__svml_acos2_ha
__svml_acos2_ha_e7
__svml_acos2_ha_e9
__svml_acos2_ha_l9
__svml_acos2_ha_mask
__svml_acos2_ha_mask_e9
__svml_acos2_ha_z0
__svml_acos2_l9
__svml_acos2_mask
__svml_acos2_mask_e9
__svml_acos2_z0
__svml_acos4
__svml_acos4_br
__svml_acos4_br_e9
__svml_acos4_br_mask
__svml_acos4_br_mask_e9
__svml_acos4_br_z0
__svml_acos4_e9
__svml_acos4_ep
__svml_acos4_ep_e9
__svml_acos4_ep_l9
__svml_acos4_ep_mask
__svml_acos4_ep_mask_e9
__svml_acos4_ep_z0
__svml_acos4_ha
__svml_acos4_ha_e9
__svml_acos4_ha_l9
__svml_acos4_ha_mask
__svml_acos4_ha_mask_e9
__svml_acos4_ha_z0
__svml_acos4_l9
__svml_acos4_mask
__svml_acos4_mask_e9
__svml_acos4_z0
__svml_acos8
__svml_acos8_br
__svml_acos8_br_mask
__svml_acos8_br_mask_z0
__svml_acos8_br_z0
__svml_acos8_ep
__svml_acos8_ep_l0
__svml_acos8_ep_mask
__svml_acos8_ep_mask_l0
__svml_acos8_ep_mask_z0
__svml_acos8_ep_z0
__svml_acos8_ha
__svml_acos8_ha_l0
__svml_acos8_ha_mask
__svml_acos8_ha_mask_l0
__svml_acos8_ha_mask_z0
__svml_acos8_ha_z0
__svml_acos8_l0
__svml_acos8_mask
__svml_acos8_mask_l0
__svml_acos8_mask_z0
__svml_acos8_z0
__svml_acosf1
__svml_acosf16
__svml_acosf16_br
__svml_acosf16_br_mask
__svml_acosf16_br_mask_z0
__svml_acosf16_br_z0
__svml_acosf16_ep
__svml_acosf16_ep_l0
__svml_acosf16_ep_mask
__svml_acosf16_ep_mask_l0
__svml_acosf16_ep_mask_z0
__svml_acosf16_ep_z0
__svml_acosf16_ha
__svml_acosf16_ha_l0
__svml_acosf16_ha_mask
__svml_acosf16_ha_mask_l0
__svml_acosf16_ha_mask_z0
__svml_acosf16_ha_z0
__svml_acosf16_l0
__svml_acosf16_mask
__svml_acosf16_mask_l0
__svml_acosf16_mask_z0
__svml_acosf16_z0
__svml_acosf1_br
__svml_acosf1_br_e7
__svml_acosf1_br_e9
__svml_acosf1_br_z0
__svml_acosf1_e7
__svml_acosf1_e9
__svml_acosf1_ep
__svml_acosf1_ep_e7
__svml_acosf1_ep_e9
__svml_acosf1_ep_l9
__svml_acosf1_ep_z0
__svml_acosf1_ha
__svml_acosf1_ha_e7
__svml_acosf1_ha_e9
__svml_acosf1_ha_l9
__svml_acosf1_ha_z0
__svml_acosf1_l9
__svml_acosf1_z0
__svml_acosf4
__svml_acosf4_br
__svml_acosf4_br_e7
__svml_acosf4_br_e9
__svml_acosf4_br_mask
__svml_acosf4_br_mask_e9
__svml_acosf4_br_z0
__svml_acosf4_e7
__svml_acosf4_e9
__svml_acosf4_ep
__svml_acosf4_ep_e7
__svml_acosf4_ep_e9
__svml_acosf4_ep_l9
__svml_acosf4_ep_mask
__svml_acosf4_ep_mask_e9
__svml_acosf4_ep_z0
__svml_acosf4_ha
__svml_acosf4_ha_e7
__svml_acosf4_ha_e9
__svml_acosf4_ha_l9
__svml_acosf4_ha_mask
__svml_acosf4_ha_mask_e9
__svml_acosf4_ha_z0
__svml_acosf4_l9
__svml_acosf4_mask
__svml_acosf4_mask_e9
__svml_acosf4_z0
__svml_acosf8
__svml_acosf8_br
__svml_acosf8_br_e9
__svml_acosf8_br_mask
__svml_acosf8_br_mask_e9
__svml_acosf8_br_z0
__svml_acosf8_e9
__svml_acosf8_ep
__svml_acosf8_ep_e9
__svml_acosf8_ep_l9
__svml_acosf8_ep_mask
__svml_acosf8_ep_mask_e9
__svml_acosf8_ep_z0
__svml_acosf8_ha
__svml_acosf8_ha_e9
__svml_acosf8_ha_l9
__svml_acosf8_ha_mask
__svml_acosf8_ha_mask_e9
__svml_acosf8_ha_z0
__svml_acosf8_l9
__svml_acosf8_mask
__svml_acosf8_mask_e9
__svml_acosf8_z0
__svml_acosh1
__svml_acosh1_br
__svml_acosh1_br_e7
__svml_acosh1_br_e9
__svml_acosh1_br_z0
__svml_acosh1_e7
__svml_acosh1_e9
__svml_acosh1_ep
__svml_acosh1_ep_e7
__svml_acosh1_ep_e9
__svml_acosh1_ep_l9
__svml_acosh1_ep_z0
__svml_acosh1_ha
__svml_acosh1_ha_e7
__svml_acosh1_ha_e9
__svml_acosh1_ha_l9
__svml_acosh1_ha_z0
__svml_acosh1_l9
__svml_acosh1_z0
__svml_acosh2
__svml_acosh2_br
__svml_acosh2_br_e7
__svml_acosh2_br_e9
__svml_acosh2_br_mask
__svml_acosh2_br_mask_e9
__svml_acosh2_br_z0
__svml_acosh2_e7
__svml_acosh2_e9
__svml_acosh2_ep
__svml_acosh2_ep_e7
__svml_acosh2_ep_e9
__svml_acosh2_ep_l9
__svml_acosh2_ep_mask
__svml_acosh2_ep_mask_e9
__svml_acosh2_ep_z0
__svml_acosh2_ha
__svml_acosh2_ha_e7
__svml_acosh2_ha_e9
__svml_acosh2_ha_l9
__svml_acosh2_ha_mask
__svml_acosh2_ha_mask_e9
__svml_acosh2_ha_z0
__svml_acosh2_l9
__svml_acosh2_mask
__svml_acosh2_mask_e9
__svml_acosh2_z0
__svml_acosh4
__svml_acosh4_br
__svml_acosh4_br_e9
__svml_acosh4_br_mask
__svml_acosh4_br_mask_e9
__svml_acosh4_br_z0
__svml_acosh4_e9
__svml_acosh4_ep
__svml_acosh4_ep_e9
__svml_acosh4_ep_l9
__svml_acosh4_ep_mask
__svml_acosh4_ep_mask_e9
__svml_acosh4_ep_z0
__svml_acosh4_ha
__svml_acosh4_ha_e9
__svml_acosh4_ha_l9
__svml_acosh4_ha_mask
__svml_acosh4_ha_mask_e9
__svml_acosh4_ha_z0
__svml_acosh4_l9
__svml_acosh4_mask
__svml_acosh4_mask_e9
__svml_acosh4_z0
__svml_acosh8
__svml_acosh8_br
__svml_acosh8_br_mask
__svml_acosh8_br_mask_z0
__svml_acosh8_br_z0
__svml_acosh8_ep
__svml_acosh8_ep_l0
__svml_acosh8_ep_mask
__svml_acosh8_ep_mask_l0
__svml_acosh8_ep_mask_z0
__svml_acosh8_ep_z0
__svml_acosh8_ha
__svml_acosh8_ha_l0
__svml_acosh8_ha_mask
__svml_acosh8_ha_mask_l0
__svml_acosh8_ha_mask_z0
__svml_acosh8_ha_z0
__svml_acosh8_l0
__svml_acosh8_mask
__svml_acosh8_mask_l0
__svml_acosh8_mask_z0
__svml_acosh8_z0
__svml_acoshf1
__svml_acoshf16
__svml_acoshf16_br
__svml_acoshf16_br_mask
__svml_acoshf16_br_mask_z0
__svml_acoshf16_br_z0
__svml_acoshf16_ep
__svml_acoshf16_ep_l0
__svml_acoshf16_ep_mask
__svml_acoshf16_ep_mask_l0
__svml_acoshf16_ep_mask_z0
__svml_acoshf16_ep_z0
__svml_acoshf16_ha
__svml_acoshf16_ha_l0
__svml_acoshf16_ha_mask
__svml_acoshf16_ha_mask_l0
__svml_acoshf16_ha_mask_z0
__svml_acoshf16_ha_z0
__svml_acoshf16_l0
__svml_acoshf16_mask
__svml_acoshf16_mask_l0
__svml_acoshf16_mask_z0
__svml_acoshf16_z0
__svml_acoshf1_br
__svml_acoshf1_br_e7
__svml_acoshf1_br_e9
__svml_acoshf1_br_z0
__svml_acoshf1_e7
__svml_acoshf1_e9
__svml_acoshf1_ep
__svml_acoshf1_ep_e7
__svml_acoshf1_ep_e9
__svml_acoshf1_ep_l9
__svml_acoshf1_ep_z0
__svml_acoshf1_ha
__svml_acoshf1_ha_e7
__svml_acoshf1_ha_e9
__svml_acoshf1_ha_l9
__svml_acoshf1_ha_z0
__svml_acoshf1_l9
__svml_acoshf1_z0
__svml_acoshf4
__svml_acoshf4_br
__svml_acoshf4_br_e7
__svml_acoshf4_br_e9
__svml_acoshf4_br_mask
__svml_acoshf4_br_mask_e9
__svml_acoshf4_br_z0
__svml_acoshf4_e7
__svml_acoshf4_e9
__svml_acoshf4_ep
__svml_acoshf4_ep_e7
__svml_acoshf4_ep_e9
__svml_acoshf4_ep_l9
__svml_acoshf4_ep_mask
__svml_acoshf4_ep_mask_e9
__svml_acoshf4_ep_z0
__svml_acoshf4_ha
__svml_acoshf4_ha_e7
__svml_acoshf4_ha_e9
__svml_acoshf4_ha_l9
__svml_acoshf4_ha_mask
__svml_acoshf4_ha_mask_e9
__svml_acoshf4_ha_z0
__svml_acoshf4_l9
__svml_acoshf4_mask
__svml_acoshf4_mask_e9
__svml_acoshf4_z0
__svml_acoshf8
__svml_acoshf8_br
__svml_acoshf8_br_e9
__svml_acoshf8_br_mask
__svml_acoshf8_br_mask_e9
__svml_acoshf8_br_z0
__svml_acoshf8_e9
__svml_acoshf8_ep
__svml_acoshf8_ep_e9
__svml_acoshf8_ep_l9
__svml_acoshf8_ep_mask
__svml_acoshf8_ep_mask_e9
__svml_acoshf8_ep_z0
__svml_acoshf8_ha
__svml_acoshf8_ha_e9
__svml_acoshf8_ha_l9
__svml_acoshf8_ha_mask
__svml_acoshf8_ha_mask_e9
__svml_acoshf8_ha_z0
__svml_acoshf8_l9
__svml_acoshf8_mask
__svml_acoshf8_mask_e9
__svml_acoshf8_z0
__svml_acoshs1
__svml_acoshs16
__svml_acoshs16_br
__svml_acoshs16_br_mask
__svml_acoshs16_br_mask_z1
__svml_acoshs16_br_z1
__svml_acoshs16_ep
__svml_acoshs16_ep_mask
__svml_acoshs16_ep_mask_z1
__svml_acoshs16_ep_z1
__svml_acoshs16_ha
__svml_acoshs16_ha_mask
__svml_acoshs16_ha_mask_z1
__svml_acoshs16_ha_z1
__svml_acoshs16_mask
__svml_acoshs16_mask_z1
__svml_acoshs16_z1
__svml_acoshs1_br
__svml_acoshs1_br_z1
__svml_acoshs1_ep
__svml_acoshs1_ep_z1
__svml_acoshs1_ha
__svml_acoshs1_ha_z1
__svml_acoshs1_z1
__svml_acoshs32
__svml_acoshs32_br
__svml_acoshs32_br_mask
__svml_acoshs32_br_mask_z1
__svml_acoshs32_br_z1
__svml_acoshs32_ep
__svml_acoshs32_ep_mask
__svml_acoshs32_ep_mask_z1
__svml_acoshs32_ep_z1
__svml_acoshs32_ha
__svml_acoshs32_ha_mask
__svml_acoshs32_ha_mask_z1
__svml_acoshs32_ha_z1
__svml_acoshs32_mask
__svml_acoshs32_mask_z1
__svml_acoshs32_z1
__svml_acoshs4
__svml_acoshs4_br
__svml_acoshs4_br_mask
__svml_acoshs4_br_mask_z1
__svml_acoshs4_br_z1
__svml_acoshs4_ep
__svml_acoshs4_ep_mask
__svml_acoshs4_ep_mask_z1
__svml_acoshs4_ep_z1
__svml_acoshs4_ha
__svml_acoshs4_ha_mask
__svml_acoshs4_ha_mask_z1
__svml_acoshs4_ha_z1
__svml_acoshs4_mask
__svml_acoshs4_mask_z1
__svml_acoshs4_z1
__svml_acoshs8
__svml_acoshs8_br
__svml_acoshs8_br_mask
__svml_acoshs8_br_mask_z1
__svml_acoshs8_br_z1
__svml_acoshs8_ep
__svml_acoshs8_ep_mask
__svml_acoshs8_ep_mask_z1
__svml_acoshs8_ep_z1
__svml_acoshs8_ha
__svml_acoshs8_ha_mask
__svml_acoshs8_ha_mask_z1
__svml_acoshs8_ha_z1
__svml_acoshs8_mask
__svml_acoshs8_mask_z1
__svml_acoshs8_z1
__svml_acospi1
__svml_acospi1_br
__svml_acospi1_br_e9
__svml_acospi1_br_z0
__svml_acospi1_e9
__svml_acospi1_ep
__svml_acospi1_ep_e9
__svml_acospi1_ep_l9
__svml_acospi1_ep_z0
__svml_acospi1_ha
__svml_acospi1_ha_e9
__svml_acospi1_ha_l9
__svml_acospi1_ha_z0
__svml_acospi1_l9
__svml_acospi1_z0
__svml_acospi2
__svml_acospi2_br
__svml_acospi2_br_e9
__svml_acospi2_br_mask
__svml_acospi2_br_mask_e9
__svml_acospi2_br_z0
__svml_acospi2_e9
__svml_acospi2_ep
__svml_acospi2_ep_e9
__svml_acospi2_ep_l9
__svml_acospi2_ep_mask
__svml_acospi2_ep_mask_e9
__svml_acospi2_ep_z0
__svml_acospi2_ha
__svml_acospi2_ha_e9
__svml_acospi2_ha_l9
__svml_acospi2_ha_mask
__svml_acospi2_ha_mask_e9
__svml_acospi2_ha_z0
__svml_acospi2_l9
__svml_acospi2_mask
__svml_acospi2_mask_e9
__svml_acospi2_z0
__svml_acospi4
__svml_acospi4_br
__svml_acospi4_br_e9
__svml_acospi4_br_mask
__svml_acospi4_br_mask_e9
__svml_acospi4_br_z0
__svml_acospi4_e9
__svml_acospi4_ep
__svml_acospi4_ep_e9
__svml_acospi4_ep_l9
__svml_acospi4_ep_mask
__svml_acospi4_ep_mask_e9
__svml_acospi4_ep_z0
__svml_acospi4_ha
__svml_acospi4_ha_e9
__svml_acospi4_ha_l9
__svml_acospi4_ha_mask
__svml_acospi4_ha_mask_e9
__svml_acospi4_ha_z0
__svml_acospi4_l9
__svml_acospi4_mask
__svml_acospi4_mask_e9
__svml_acospi4_z0
__svml_acospi8
__svml_acospi8_br
__svml_acospi8_br_mask

Sections

.text
Size: 7.9MB - Virtual size: 7.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8.8MB - Virtual size: 8.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 359KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 279KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
swresample-5.dll
.dll windows:6 windows x64 arch:x64

3d7c679f3ab977d47670abd51739eb70

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d8:c7:04:34:83:3e:02:90:65:0b:14:89:3f:1f:92:39
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

31/12/2021, 00:00

Not After

30/12/2024, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

51:15:cf:ec:b1:74:91:30:3e:9b:c9:5f:e6:a8:0e:b9:7a:25:20:d8:0b:e7:eb:00:9d:38:14:6b:f4:d8:8e:6f
Signer

Actual PE Digest

51:15:cf:ec:b1:74:91:30:3e:9b:c9:5f:e6:a8:0e:b9:7a:25:20:d8:0b:e7:eb:00:9d:38:14:6b:f4:d8:8e:6f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\workspace\ffmpeg-7.0-64\libswresample\swresample-5.pdb

Imports

avutil-59

av_get_packed_sample_fmt
av_get_cpu_flags
av_frame_get_buffer
av_opt_set_chlayout
av_opt_set_int
av_sample_fmt_is_planar
av_get_sample_fmt_name
av_channel_layout_default
av_bessel_i0
av_rescale_rnd
av_rescale
av_reduce
av_calloc
av_channel_layout_compare
av_channel_layout_check
av_channel_layout_subset
av_channel_layout_index_from_channel
av_channel_layout_channel_from_index
av_channel_layout_describe
av_channel_layout_copy
av_channel_layout_uninit
av_channel_layout_from_mask
av_channel_name
av_opt_set_defaults
av_free
av_malloc_array
av_freep
av_mallocz
av_get_bytes_per_sample
av_get_planar_sample_fmt
av_log

kernel32

TlsFree
WriteConsoleW
CloseHandle
CreateFileW
OutputDebugStringW
ReadConsoleW
ReadFile
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
GetFileType
GetStdHandle
GetProcessHeap
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetTempPathW
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
RtlUnwind
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
SetConsoleCtrlHandler
GetCurrentThread
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW

Exports

Exports

swr_alloc
swr_alloc_set_opts2
swr_build_matrix2
swr_close
swr_config_frame
swr_convert
swr_convert_frame
swr_drop_output
swr_ffversion
swr_free
swr_get_class
swr_get_delay
swr_get_out_samples
swr_init
swr_inject_silence
swr_is_initialized
swr_next_pts
swr_set_channel_mapping
swr_set_compensation
swr_set_matrix
swresample_configuration
swresample_license
swresample_version

Sections

.text
Size: 632KB - Virtual size: 632KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 373B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1024B - Virtual size: 863B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ucrtbase.dll
.dll windows:10 windows x64 arch:x64

00abed89ba5e6cf95f5c70be53069caa

Code Sign

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:25

Not After

05/07/2025, 19:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

66:79:67:e7:4b:9f:63:f2:69:dc:66:9d:2e:71:9b:e0:d1:5c:96:e8:e2:73:2f:6a:fc:9a:fc:0d:69:84:ec:57
Signer

Actual PE Digest

66:79:67:e7:4b:9f:63:f2:69:dc:66:9d:2e:71:9b:e0:d1:5c:96:e8:e2:73:2f:6a:fc:9a:fc:0d:69:84:ec:57

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

ucrtbase.pdb

Imports

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetErrorMode
RaiseException
GetLastError
SetLastError

api-ms-win-core-heap-l1-1-0

HeapQueryInformation
HeapCompact
HeapFree
HeapAlloc
HeapWalk
HeapValidate
HeapReAlloc
GetProcessHeap
HeapSize

api-ms-win-core-processthreads-l1-1-0

ResumeThread
CreateProcessW
ExitProcess
ExitThread
TlsFree
GetCurrentThreadId
CreateThread
TlsSetValue
GetExitCodeProcess
TlsGetValue
TlsAlloc
GetCurrentThread
GetStartupInfoW
GetCurrentProcessId
TerminateProcess
GetCurrentProcess

api-ms-win-core-libraryloader-l1-1-0

FreeLibraryAndExitThread
LoadLibraryExW
GetModuleHandleExW
GetModuleFileNameW
GetModuleHandleW
FreeLibrary
GetProcAddress

api-ms-win-core-sysinfo-l1-2-0

VerSetConditionMask

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

api-ms-win-core-synch-l1-1-0

InitializeCriticalSectionAndSpinCount
EnterCriticalSection
WaitForSingleObject
InitializeCriticalSectionEx
LeaveCriticalSection
DeleteCriticalSection

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent

api-ms-win-core-processenvironment-l1-1-0

GetCommandLineW
SetEnvironmentVariableW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetCommandLineA
GetStdHandle
SetStdHandle
GetEnvironmentStringsW
FreeEnvironmentStringsW

api-ms-win-core-file-l1-1-0

SetFileAttributesW
ReadFile
GetFileSizeEx
SetFilePointerEx
WriteFile
CreateDirectoryW
CreateFileW
GetFileType
GetDriveTypeW
FindClose
FindNextFileW
GetFileAttributesExW
GetFullPathNameW
FindFirstFileExW
GetDiskFreeSpaceW
GetLogicalDrives
RemoveDirectoryW
SetFileTime
DeleteFileW
LockFileEx
UnlockFileEx
FlushFileBuffers
SetEndOfFile
GetFileInformationByHandle

api-ms-win-core-string-l1-1-0

GetStringTypeW
CompareStringW
MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-memory-l1-1-0

VirtualQuery
VirtualProtect
VirtualAlloc

api-ms-win-core-fibers-l1-1-0

FlsFree
FlsAlloc
FlsSetValue
FlsGetValue

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-localization-l1-2-0

GetUserDefaultLCID
GetCPInfo
IsValidLocale
GetACP
IsValidCodePage
GetLocaleInfoW
GetOEMCP
EnumSystemLocalesW
LCMapStringW

api-ms-win-core-fibers-l1-1-1

IsThreadAFiber

api-ms-win-core-datetime-l1-1-0

GetDateFormatW
GetTimeFormatW

api-ms-win-core-sysinfo-l1-1-0

GetLocalTime
SetLocalTime
GetSystemInfo
GetSystemTimeAsFileTime

api-ms-win-core-rtlsupport-l1-1-0

RtlUnwindEx
RtlUnwind
RtlCaptureContext
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlVirtualUnwind

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-console-l1-1-0

ReadConsoleInputW
SetConsoleCtrlHandler
WriteConsoleW
GetConsoleCP
SetConsoleMode
PeekConsoleInputA
GetConsoleOutputCP
GetNumberOfConsoleInputEvents
ReadConsoleW
GetConsoleMode

api-ms-win-core-handle-l1-1-0

DuplicateHandle
CloseHandle

api-ms-win-core-namedpipe-l1-1-0

CreatePipe
PeekNamedPipe

api-ms-win-core-timezone-l1-1-0

TzSpecificLocalTimeToSystemTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
GetTimeZoneInformation

api-ms-win-core-file-l2-1-0

MoveFileExW

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-util-l1-1-0

Beep
EncodePointer

api-ms-win-core-interlocked-l1-1-0

InterlockedPushEntrySList
InterlockedFlushSList

Exports

Exports

_Cbuild
_Cmulcc
_Cmulcr
_CreateFrameInfo
_CxxThrowException
_Exit
_FCbuild
_FCmulcc
_FCmulcr
_FindAndUnlinkFrame
_GetImageBase
_GetThrowImageBase
_Getdays
_Getmonths
_Gettnames
_IsExceptionObjectToBeDestroyed
_LCbuild
_LCmulcc
_LCmulcr
_SetImageBase
_SetThrowImageBase
_SetWinRTOutOfMemoryExceptionCallback
_Strftime
_W_Getdays
_W_Getmonths
_W_Gettnames
_Wcsftime
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__C_specific_handler
__C_specific_handler_noexcept
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxFrameHandler4
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__NLG_Dispatch2
__NLG_Return2
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
___lc_codepage_func
___lc_collate_cp_func
___lc_locale_name_func
___mb_cur_max_func
___mb_cur_max_l_func
__acrt_iob_func
__conio_common_vcprintf
__conio_common_vcprintf_p
__conio_common_vcprintf_s
__conio_common_vcscanf
__conio_common_vcwprintf
__conio_common_vcwprintf_p
__conio_common_vcwprintf_s
__conio_common_vcwscanf
__current_exception
__current_exception_context
__daylight
__dcrt_get_wide_environment_from_os
__dcrt_initial_narrow_environment
__doserrno
__dstbias
__fpe_flt_rounds
__fpecode
__initialize_lconv_for_unsigned_char
__intrinsic_setjmp
__intrinsic_setjmpex
__isascii
__iscsym
__iscsymf
__iswcsym
__iswcsymf
__p___argc
__p___argv
__p___wargv
__p__acmdln
__p__commode
__p__environ
__p__fmode
__p__mbcasemap
__p__mbctype
__p__pgmptr
__p__wcmdln
__p__wenviron
__p__wpgmptr
__pctype_func
__processing_throw
__pwctype_func
__pxcptinfoptrs
__report_gsfailure
__setusermatherr
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__stdio_common_vfprintf
__stdio_common_vfprintf_p
__stdio_common_vfprintf_s
__stdio_common_vfscanf
__stdio_common_vfwprintf
__stdio_common_vfwprintf_p
__stdio_common_vfwprintf_s
__stdio_common_vfwscanf
__stdio_common_vsnprintf_s
__stdio_common_vsnwprintf_s
__stdio_common_vsprintf
__stdio_common_vsprintf_p
__stdio_common_vsprintf_s
__stdio_common_vsscanf
__stdio_common_vswprintf
__stdio_common_vswprintf_p
__stdio_common_vswprintf_s
__stdio_common_vswscanf
__strncnt
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__timezone
__toascii
__tzname
__unDName
__unDNameEx
__uncaught_exception
__uncaught_exceptions
__wcserror
__wcserror_s
__wcsncnt
_abs64
_access
_access_s
_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_assert
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_atoll_l
_beep
_beginthread
_beginthreadex
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_c_exit
_cabs
_callnewh
_calloc_base
_cexit
_cgets
_cgets_s
_cgetws
_cgetws_s
_chdir
_chdrive
_chgsign
_chgsignf
_chmod
_chsize
_chsize_s
_clearfp
_close
_commit
_configthreadlocale
_configure_narrow_argv
_configure_wide_argv
_control87
_controlfp
_controlfp_s
_copysign
_copysignf
_cputs
_cputws
_creat
_create_locale
_crt_at_quick_exit
_crt_atexit
_ctime32
_ctime32_s
_ctime64
_ctime64_s
_cwait
_d_int
_dclass
_dexp
_difftime32
_difftime64
_dlog
_dnorm
_dpcomp
_dpoly
_dscale
_dsign
_dsin
_dtest
_dunscale
_dup
_dup2
_dupenv_s
_ecvt
_ecvt_s
_endthread
_endthreadex
_eof
_errno
_except1
_execl
_execle
_execlp
_execlpe
_execute_onexit_table
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fclose_nolock
_fcloseall
_fcvt
_fcvt_s
_fd_int
_fdclass
_fdexp
_fdlog
_fdnorm
_fdopen
_fdpcomp
_fdpoly
_fdscale
_fdsign
_fdsin
_fdtest
_fdunscale
_fflush_nolock
_fgetc_nolock
_fgetchar
_fgetwc_nolock
_fgetwchar
_filelength
_filelengthi64
_fileno
_findclose
_findfirst32
_findfirst32i64
_findfirst64
_findfirst64i32
_findnext32
_findnext32i64
_findnext64
_findnext64i32
_finite
_finitef
_flushall
_fpclass
_fpclassf
_fpieee_flt
_fpreset
_fputc_nolock
_fputchar
_fputwc_nolock
_fputwchar
_fread_nolock
_fread_nolock_s
_free_base
_free_locale
_fseek_nolock
_fseeki64
_fseeki64_nolock
_fsopen
_fstat32
_fstat32i64
_fstat64
_fstat64i32
_ftell_nolock
_ftelli64
_ftelli64_nolock
_ftime32
_ftime32_s
_ftime64
_ftime64_s
_fullpath
_futime32
_futime64
_fwrite_nolock
_gcvt
_gcvt_s
_get_FMA3_enable
_get_current_locale
_get_daylight
_get_doserrno
_get_dstbias
_get_errno
_get_fmode
_get_heap_handle
_get_initial_narrow_environment
_get_initial_wide_environment
_get_invalid_parameter_handler
_get_narrow_winmain_command_line
_get_osfhandle
_get_pgmptr
_get_printf_count_output
_get_purecall_handler
_get_stream_buffer_pointers
_get_terminate
_get_thread_local_invalid_parameter_handler
_get_timezone
_get_tzname
_get_unexpected
_get_wide_winmain_command_line
_get_wpgmptr
_getc_nolock
_getch
_getch_nolock
_getche
_getche_nolock
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getsystime
_getw
_getwc_nolock
_getwch
_getwch_nolock
_getwche
_getwche_nolock
_getws
_getws_s
_gmtime32
_gmtime32_s
_gmtime64
_gmtime64_s
_heapchk
_heapmin
_heapwalk
_hypot
_hypotf
_i64toa
_i64toa_s
_i64tow
_i64tow_s
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_initterm_e
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_invoke_watson
_is_exception_typeof
_isalnum_l
_isalpha_l
_isatty
_isblank_l
_iscntrl_l
_isctype
_isctype_l
_isdigit_l
_isgraph_l
_isleadbyte_l
_islower_l
_ismbbalnum
_ismbbalnum_l
_ismbbalpha
_ismbbalpha_l
_ismbbblank
_ismbbblank_l
_ismbbgraph
_ismbbgraph_l
_ismbbkalnum
_ismbbkalnum_l
_ismbbkana
_ismbbkana_l
_ismbbkprint
_ismbbkprint_l
_ismbbkpunct
_ismbbkpunct_l
_ismbblead
_ismbblead_l
_ismbbprint
_ismbbprint_l
_ismbbpunct
_ismbbpunct_l
_ismbbtrail
_ismbbtrail_l
_ismbcalnum
_ismbcalnum_l
_ismbcalpha
_ismbcalpha_l
_ismbcblank
_ismbcblank_l
_ismbcdigit
_ismbcdigit_l
_ismbcgraph
_ismbcgraph_l
_ismbchira
_ismbchira_l
_ismbckata
_ismbckata_l
_ismbcl0
_ismbcl0_l
_ismbcl1
_ismbcl1_l
_ismbcl2
_ismbcl2_l
_ismbclegal
_ismbclegal_l
_ismbclower
_ismbclower_l
_ismbcprint
_ismbcprint_l
_ismbcpunct
_ismbcpunct_l
_ismbcspace
_ismbcspace_l
_ismbcsymbol
_ismbcsymbol_l
_ismbcupper
_ismbcupper_l
_ismbslead
_ismbslead_l
_ismbstrail
_ismbstrail_l
_isnan
_isnanf
_isprint_l
_ispunct_l
_isspace_l
_isupper_l
_iswalnum_l
_iswalpha_l
_iswblank_l
_iswcntrl_l
_iswcsym_l
_iswcsymf_l
_iswctype_l
_iswdigit_l
_iswgraph_l
_iswlower_l
_iswprint_l
_iswpunct_l
_iswspace_l
_iswupper_l
_iswxdigit_l
_isxdigit_l
_itoa
_itoa_s
_itow
_itow_s
_j0
_j1
_jn
_kbhit
_ld_int
_ldclass
_ldexp
_ldlog
_ldpcomp
_ldpoly
_ldscale
_ldsign
_ldsin
_ldtest
_ldunscale
_lfind
_lfind_s
_loaddll
_local_unwind

Sections

.text
Size: 984KB - Virtual size: 983KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

fothk
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fptable
Size: 4KB - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
uninstall.exe
.exe windows:4 windows x86 arch:x86

6e7f9a29f2c85394521a08b9f31f6275

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1f:97:9d:91:df:34:b3:a1:16:0d:d6:77:0d:4b:20:ae:02:5e:84:28:bd:59:73:c9:89:82:ae:49:1e:ad:b1:f5
Signer

Actual PE Digest

1f:97:9d:91:df:34:b3:a1:16:0d:d6:77:0d:4b:20:ae:02:5e:84:28:bd:59:73:c9:89:82:ae:49:1e:ad:b1:f5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityW
RegOpenKeyExW
RegEnumValueW

shell32

SHGetSpecialFolderLocation
SHFileOperationW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
SHGetFileInfoW

ole32

OleInitialize
OleUninitialize
CoCreateInstance
IIDFromString
CoTaskMemFree

comctl32

ord17
ImageList_Create
ImageList_Destroy
ImageList_AddMasked

user32

GetClientRect
EndPaint
DrawTextW
IsWindowEnabled
DispatchMessageW
wsprintfA
CharNextA
CharPrevW
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
GetSystemMetrics
FillRect
AppendMenuW
TrackPopupMenu
OpenClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
SetWindowPos
PeekMessageW
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
EmptyClipboard
CreatePopupMenu

gdi32

SetBkMode
SetBkColor
GetDeviceCaps
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
SetTextColor
SelectObject

kernel32

GetExitCodeProcess
WaitForSingleObject
GetModuleHandleA
GetProcAddress
GetSystemDirectoryW
lstrcatW
Sleep
lstrcpyA
WriteFile
GetTempFileNameW
CreateFileW
lstrcmpiA
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersion
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
ExitProcess
CopyFileW
GetCurrentProcess
GetModuleFileNameW
GetFileSize
GetTickCount
MulDiv
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
MoveFileExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 176KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/LangDLL.dll
.dll windows:4 windows x86 arch:x86

3e8d18bb71c7ebbda2ddc2a4bb03547b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
GlobalFree
lstrcpynW
lstrcmpW
GlobalAlloc
MulDiv
GetModuleHandleW
lstrcpyW

user32

DialogBoxParamW
SetDlgItemTextW
SendDlgItemMessageW
EndDialog
SetWindowTextW
LoadIconW
ShowWindow
SendMessageW
GetDC

gdi32

GetDeviceCaps
CreateFontIndirectW
DeleteObject

Exports

Exports

LangDialog

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 681B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

fc0224e99e736751432961db63a41b76

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError

user32

wsprintfW

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/nsDialogs.dll
.dll windows:4 windows x86 arch:x86

6b5c4f7d679059f68f1269aad3a5cecd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileAttributesW
lstrcpyW
MulDiv
lstrlenW
HeapFree
GetCurrentDirectoryW
lstrcmpiW
GetProcessHeap
HeapReAlloc
GlobalFree
lstrcpynW
GlobalAlloc
SetCurrentDirectoryW
HeapAlloc

user32

DestroyWindow
CallWindowProcW
SetCursor
LoadCursorW
GetPropW
CharPrevW
DrawFocusRect
GetWindowLongW
DrawTextW
GetClientRect
SetWindowLongW
GetDlgItem
GetSysColor
SetWindowPos
CreateDialogParamW
MapDialogRect
GetWindowRect
SetPropW
CreateWindowExW
IsWindow
SetTimer
KillTimer
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
wsprintfW
CharNextW
SendMessageW
MapWindowPoints
RemovePropW
GetWindowTextW

gdi32

SetTextColor

shell32

SHBrowseForFolderW
SHGetPathFromIDListW

comdlg32

GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 638B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vccorlib140.dll
.dll windows:6 windows x64 arch:x64

d5ec94ca50152cc1e7188b825074fef2

Code Sign

33:00:00:01:00:21:68:09:b9:0a:f6:55:f3:00:00:00:00:01:00
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:59

Not After

20/08/2025, 19:59

Subject

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:14:9d:fb:c3:1f:1f:63:c3:10:00:00:00:00:00:14
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/05/2013, 20:44

Not After

01/05/2028, 20:54

Subject

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:fe:6b:ce:da:d6:c8:03:03:a3:00:00:00:00:03:fe
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:26

Not After

20/08/2025, 19:26

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

18:bf:b9:28:61:c3:a3:c1:1c:37:91:1b:b6:73:95:8e:55:34:f5:cf:8c:d0:62:59:35:75:db:26:56:11:44:cd
Signer

Actual PE Digest

18:bf:b9:28:61:c3:a3:c1:1c:37:91:1b:b6:73:95:8e:55:34:f5:cf:8c:d0:62:59:35:75:db:26:56:11:44:cd

Digest Algorithm

sha256

PE Digest Matches

true

18:bf:b9:28:61:c3:a3:c1:1c:37:91:1b:b6:73:95:8e:55:34:f5:cf:8c:d0:62:59:35:75:db:26:56:11:44:cd
Signer

Actual PE Digest

18:bf:b9:28:61:c3:a3:c1:1c:37:91:1b:b6:73:95:8e:55:34:f5:cf:8c:d0:62:59:35:75:db:26:56:11:44:cd

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\binaries\amd64ret\bin\amd64\vccorlib140.amd64.pdb

Imports

kernel32

RaiseException
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
FormatMessageW
GetProcAddress
LoadLibraryExW
HeapFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
GetLastError
OutputDebugStringW
HeapAlloc
DeleteCriticalSection
GetProcessHeap
CreateEventExW
WaitForMultipleObjectsEx
SetEvent
CloseHandle
DecodePointer
InitializeSRWLock
TryAcquireSRWLockShared
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memset
_CxxThrowException
__C_specific_handler
memmove
__std_type_info_destroy_list
_purecall
__current_exception_context
__current_exception
_SetWinRTOutOfMemoryExceptionCallback
__GetPlatformExceptionInfo
__std_exception_copy
__std_exception_destroy
__std_terminate
memcpy

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vswprintf_s

api-ms-win-crt-runtime-l1-1-0

_invoke_watson
__p___wargv
__p___argc
_invalid_parameter_noinfo_noreturn
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_configure_wide_argv
_register_onexit_function
_execute_onexit_table
_initterm_e
_initterm
_cexit
_crt_atexit

api-ms-win-crt-heap-l1-1-0

_aligned_offset_malloc
_aligned_free
free
_callnewh
malloc

api-ms-win-crt-string-l1-1-0

wcscpy_s

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

ole32

CoTaskMemAlloc
CoGetApartmentType
CoMarshalInterThreadInterfaceInStream
CoAddRefServerProcess
CoGetContextToken
CoGetInterfaceAndReleaseStream
CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoReleaseServerProcess
CoGetObjectContext

oleaut32

SysAllocStringLen
SysFreeString

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringLen
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsDeleteString
WindowsCompareStringOrdinal
WindowsIsStringEmpty
WindowsDuplicateString
WindowsStringHasEmbeddedNull
WindowsCreateString

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo
RoOriginateError
GetRestrictedErrorInfo
RoTransformError

api-ms-win-core-winrt-l1-1-0

RoRegisterForApartmentShutdown
RoGetActivationFactory
RoUnregisterForApartmentShutdown
RoGetApartmentIdentifier
RoInitialize
RoUninitialize
RoRevokeActivationFactories
RoRegisterActivationFactories

api-ms-win-crt-math-l1-1-0

ceilf

Exports

Exports

?<Dispose>@Exception@Platform@@UE$AAAXXZ
?<Dispose>@String@Platform@@UE$AAAXXZ
?<Dispose>@Type@Platform@@UE$AAAXXZ
??0AccessDeniedException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0AccessDeniedException@Platform@@QE$AAA@XZ
??0Attribute@Metadata@Platform@@QE$AAA@XZ
??0Boolean@Platform@@QEAA@_N@Z
??0COMException@Platform@@QE$AAA@H@Z
??0COMException@Platform@@QE$AAA@HPE$AAVString@1@@Z
??0ChangedStateException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0ChangedStateException@Platform@@QE$AAA@XZ
??0ClassNotRegisteredException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0ClassNotRegisteredException@Platform@@QE$AAA@XZ
??0Delegate@Platform@@QE$AAA@XZ
??0DisconnectedException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0DisconnectedException@Platform@@QE$AAA@XZ
??0Enum@Platform@@QE$AAA@XZ
??0Exception@Platform@@QE$AAA@H@Z
??0Exception@Platform@@QE$AAA@HPE$AAVString@1@@Z
??0FailureException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0FailureException@Platform@@QE$AAA@XZ
??0GridLength@Xaml@UI@Windows@@QEAA@NW4GridUnitType@123@@Z
??0IntPtr@Platform@@QEAA@H@Z
??0IntPtr@Platform@@QEAA@PEAX@Z
??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0InvalidArgumentException@Platform@@QE$AAA@XZ
??0InvalidCastException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0InvalidCastException@Platform@@QE$AAA@XZ
??0MTAThreadAttribute@Platform@@QE$AAA@XZ
??0NotImplementedException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0NotImplementedException@Platform@@QE$AAA@XZ
??0NullReferenceException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0NullReferenceException@Platform@@QE$AAA@XZ
??0Object@Platform@@QE$AAA@XZ
??0ObjectDisposedException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0ObjectDisposedException@Platform@@QE$AAA@XZ
??0OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@QE$AAA@XZ
??0OperationCanceledException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0OperationCanceledException@Platform@@QE$AAA@XZ
??0OutOfBoundsException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0OutOfBoundsException@Platform@@QE$AAA@XZ
??0OutOfMemoryException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0OutOfMemoryException@Platform@@QE$AAA@XZ
??0Rect@Foundation@Windows@@QEAA@VPoint@12@0@Z
??0Rect@Foundation@Windows@@QEAA@VPoint@12@VSize@12@@Z
??0RepeatBehavior@Animation@Media@Xaml@UI@Windows@@QEAA@N@Z
??0STAThreadAttribute@Platform@@QE$AAA@XZ
??0SizeT@Platform@@QEAA@H@Z
??0SizeT@Platform@@QEAA@PEAX@Z
??0Type@Platform@@QE$AAA@PE$AAVObject@1@@Z
??0Type@Platform@@QE$AAA@VIntPtr@1@@Z
??0Type@Platform@@QE$AAA@VTypeName@Interop@Xaml@UI@Windows@@@Z
??0ValueType@Platform@@QE$AAA@XZ
??0WrongThreadException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0WrongThreadException@Platform@@QE$AAA@XZ
??0char16@default@@QEAA@_W@Z
??0float32@default@@QEAA@M@Z
??0float64@default@@QEAA@N@Z
??0int16@default@@QEAA@F@Z
??0int32@default@@QEAA@H@Z
??0int64@default@@QEAA@_J@Z
??0int8@default@@QEAA@C@Z
??0uint16@default@@QEAA@G@Z
??0uint32@default@@QEAA@I@Z
??0uint64@default@@QEAA@_K@Z
??0uint8@default@@QEAA@E@Z
??BIntPtr@Platform@@SA?AV01@H@Z
??BIntPtr@Platform@@SA?AV01@PEAX@Z
??BIntPtr@Platform@@SAPEAXV01@@Z
??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z
??BType@Platform@@SAPE$AAV01@VTypeName@Interop@Xaml@UI@Windows@@@Z
??DMatrix3D@Media3D@Media@Xaml@UI@Windows@@SA?AV012345@V012345@0@Z
??GDuration@Xaml@UI@Windows@@SA?AV0123@V0123@0@Z
??HDuration@Xaml@UI@Windows@@SA?AV0123@V0123@0@Z
??MDuration@Xaml@UI@Windows@@SA_NV0123@0@Z
??NDuration@Xaml@UI@Windows@@SA_NV0123@0@Z
??ODuration@Xaml@UI@Windows@@SA_NV0123@0@Z
??PDuration@Xaml@UI@Windows@@SA_NV0123@0@Z
?AlignedAllocate@Heap@Details@Platform@@SAPEAX_K00@Z
?AlignedAllocate@Heap@Details@Platform@@SAPEAX_K0@Z
?AlignedAllocateException@Heap@Details@Platform@@SAPEAX_K00@Z
?AlignedAllocateException@Heap@Details@Platform@@SAPEAX_K0@Z
?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z
?AlignedFreeException@Heap@Details@Platform@@SAXPEAX@Z
?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z
?Allocate@Heap@Details@Platform@@SAPEAX_K@Z
?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z
?AllocateException@Heap@Details@Platform@@SAPEAX_K@Z
?Compare@Duration@Xaml@UI@Windows@@SAHV1234@0@Z
?Contains@Rect@Foundation@Windows@@QEAA_NVPoint@23@@Z
?CreateException@Exception@Platform@@SAPE$AAV12@H@Z
?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z
?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z
?EnableFactoryCache@@YAXXZ
?EnumerateAllocatedObjects@Heap@Details@Platform@@SAXPE$AAVHeapEntryHandler@23@@Z
?Equals@Attribute@Metadata@Platform@@QE$AAA_NPE$AAVObject@3@@Z
?Equals@Boolean@Platform@@QEAA_NPE$AAVObject@2@@Z
?Equals@Delegate@Platform@@QE$AAA_NPE$AAVObject@2@@Z
?Equals@Enum@Platform@@QE$AAA_NPE$AAVObject@2@@Z
?Equals@Exception@Platform@@UE$AAA_NPE$AAVObject@2@@Z
?Equals@MTAThreadAttribute@Platform@@QE$AAA_NPE$AAVObject@2@@Z
?Equals@Object@Platform@@QE$AAA_NPE$AAV12@@Z
?Equals@OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@QE$AAA_NPE$AAVObject@4@@Z
?Equals@STAThreadAttribute@Platform@@QE$AAA_NPE$AAVObject@2@@Z
?Equals@Type@Platform@@UE$AAA_NPE$AAVObject@2@@Z
?Equals@ValueType@Platform@@QE$AAA_NPE$AAVObject@2@@Z
?Equals@char16@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@float32@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@float64@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@int16@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@int32@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@int64@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@int8@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@uint16@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@uint32@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@uint64@default@@QEAA_NPE$AAVObject@Platform@@@Z
?Equals@uint8@default@@QEAA_NPE$AAVObject@Platform@@@Z
?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z
?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z
?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z
?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z
?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z
?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z
?FlushFactoryCache@@YAXXZ
?Free@Heap@Details@Platform@@SAXPEAX@Z
?FreeException@Heap@Details@Platform@@SAXPEAX@Z
?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z
?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z
?GetCmdArguments@Details@Platform@@YAPEAPEA_WPEAH@Z
?GetHashCode@Attribute@Metadata@Platform@@QE$AAAHXZ
?GetHashCode@Boolean@Platform@@QEAAHXZ
?GetHashCode@Delegate@Platform@@QE$AAAHXZ
?GetHashCode@Enum@Platform@@QE$AAAHXZ
?GetHashCode@Exception@Platform@@UE$AAAHXZ
?GetHashCode@Guid@Platform@@QEAAHXZ
?GetHashCode@MTAThreadAttribute@Platform@@QE$AAAHXZ
?GetHashCode@Object@Platform@@QE$AAAHXZ
?GetHashCode@OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@QE$AAAHXZ
?GetHashCode@STAThreadAttribute@Platform@@QE$AAAHXZ
?GetHashCode@Type@Platform@@UE$AAAHXZ
?GetHashCode@ValueType@Platform@@QE$AAAHXZ
?GetHashCode@char16@default@@QEAAHXZ
?GetHashCode@float32@default@@QEAAHXZ
?GetHashCode@float64@default@@QEAAHXZ
?GetHashCode@int16@default@@QEAAHXZ
?GetHashCode@int32@default@@QEAAHXZ
?GetHashCode@int64@default@@QEAAHXZ
?GetHashCode@int8@default@@QEAAHXZ
?GetHashCode@uint16@default@@QEAAHXZ
?GetHashCode@uint32@default@@QEAAHXZ
?GetHashCode@uint64@default@@QEAAHXZ
?GetHashCode@uint8@default@@QEAAHXZ
?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z
?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z
?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z
?GetObjectContext@Details@Platform@@YAPEAUIUnknown@@XZ
?GetProxyImpl@Details@Platform@@YAJPEAUIUnknown@@AEBU_GUID@@0PEAPEAU3@@Z
?GetType@Boolean@Platform@@QEAAPE$AAVType@2@XZ
?GetType@Guid@Platform@@QEAAPE$AAVType@2@XZ
?GetType@Object@Platform@@QE$AAAPE$AAVType@2@XZ
?GetType@char16@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@float32@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@float64@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@int16@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@int32@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@int64@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@int8@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@uint16@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@uint32@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@uint64@default@@QEAAPE$AAVType@Platform@@XZ
?GetType@uint8@default@@QEAAPE$AAVType@Platform@@XZ
?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z
?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z
?InitControlBlock@ControlBlock@Details@Platform@@AEAAXPEAX_N11@Z
?InitializeData@Details@Platform@@YAJH@Z
?Intersect@Rect@Foundation@Windows@@QEAAXV123@@Z
?IntersectsWith@Rect@Foundation@Windows@@QEAA_NV123@@Z
?Invert@Matrix3D@Media3D@Media@Xaml@UI@Windows@@QEAAXXZ
?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z
?ReferenceEquals@Object@Platform@@SA_NPE$AAV12@0@Z
?ReferenceEquals@Object@Platform@@SA_NPE$AAVString@2@0@Z
?RegisterFactories@Details@Platform@@YAPE$AAVObject@2@PEAPEAVModuleBase@1WRL@Microsoft@@PEAPEAU__abi_Module@@P6AXXZ@Z
?ReleaseInContextImpl@Details@Platform@@YAJPEAUIUnknown@@0@Z
?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ
?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z
?RunApplicationServer@Details@Platform@@YAXPEAPEAVModuleBase@1WRL@Microsoft@@PEAPEAU__abi_Module@@PEB_W@Z
?RunServer@Details@Platform@@YAXPEAPEAVModuleBase@1WRL@Microsoft@@PEAPEAU__abi_Module@@PEB_W@Z
?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z
?ToInt32@IntPtr@Platform@@QEAAHXZ
?ToString@Attribute@Metadata@Platform@@QE$AAAPE$AAVString@3@XZ
?ToString@Boolean@Platform@@QEAAPE$AAVString@2@XZ
?ToString@Delegate@Platform@@QE$AAAPE$AAVString@2@XZ
?ToString@Enum@Platform@@QE$AAAPE$AAVString@2@XZ
?ToString@Exception@Platform@@UE$AAAPE$AAVString@2@XZ
?ToString@Guid@Platform@@QEAAPE$AAVString@2@XZ
?ToString@MTAThreadAttribute@Platform@@QE$AAAPE$AAVString@2@XZ
?ToString@OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@QE$AAAPE$AAVString@4@XZ
?ToString@STAThreadAttribute@Platform@@QE$AAAPE$AAVString@2@XZ
?ToString@Type@Platform@@UE$AAAPE$AAVString@2@XZ
?ToString@ValueType@Platform@@QE$AAAPE$AAVString@2@XZ
?ToString@char16@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@float32@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@float64@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@int16@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@int32@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@int64@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@int8@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@uint16@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@uint32@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@uint64@default@@QEAAPE$AAVString@Platform@@XZ
?ToString@uint8@default@@QEAAPE$AAVString@Platform@@XZ
?UninitializeData@Details@Platform@@YAXH@Z
?Union@Rect@Foundation@Windows@@QEAAXV123@@Z
?Union@Rect@Foundation@Windows@@QEAAXVPoint@23@@Z
?WriteLine@Console@Details@Platform@@SAXPE$AAVObject@3@@Z
?WriteLine@Console@Details@Platform@@SAXPE$AAVString@3@@Z
?WriteLine@Console@Details@Platform@@SAXXZ
?__abi_FailFast@@YAXXZ
?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z
?__abi_Resolve@ControlBlock@Details@Platform@@UEAAJAEAVGuid@3@PEAPEAU__abi_IInspectable@@@Z
?__abi_WinRTraiseAccessDeniedException@@YAXXZ
?__abi_WinRTraiseCOMException@@YAXJ@Z
?__abi_WinRTraiseChangedStateException@@YAXXZ
?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ
?__abi_WinRTraiseDisconnectedException@@YAXXZ
?__abi_WinRTraiseFailureException@@YAXXZ
?__abi_WinRTraiseInvalidArgumentException@@YAXXZ
?__abi_WinRTraiseInvalidCastException@@YAXXZ
?__abi_WinRTraiseNotImplementedException@@YAXXZ
?__abi_WinRTraiseNullReferenceException@@YAXXZ
?__abi_WinRTraiseObjectDisposedException@@YAXXZ
?__abi_WinRTraiseOperationCanceledException@@YAXXZ
?__abi_WinRTraiseOutOfBoundsException@@YAXXZ
?__abi_WinRTraiseOutOfMemoryException@@YAXXZ
?__abi_WinRTraiseWrongThreadException@@YAXXZ
?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z
?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z
?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z
?__abi_translateCurrentException@@YAJ_N@Z
?__getActivationFactoryByHSTRING@@YAJPEAUHSTRING__@@AEAVGuid@Platform@@PEAPEAX@Z
?get@Bottom@Rect@Foundation@Windows@@QEAAMXZ
?get@BreakOnAllocationId@Heap@Details@Platform@@SAHXZ
?get@BreakOnFreeId@Heap@Details@Platform@@SAHXZ
?get@CurrentAllocationId@Heap@Details@Platform@@SAHXZ
?get@Empty@Rect@Foundation@Windows@@SA?AV234@XZ
?get@Empty@Size@Foundation@Windows@@SA?AV234@XZ
?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ
?get@HasInverse@Matrix3D@Media3D@Media@Xaml@UI@Windows@@QEAA_NXZ
?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ
?get@ObjectCount@Heap@Details@Platform@@SAHXZ
?get@Right@Rect@Foundation@Windows@@QEAAMXZ
?get@TrackingLevel@Heap@Details@Platform@@SA?AW4HeapAllocationTrackingLevel@34@XZ
?set@BreakOnAllocationId@Heap@Details@Platform@@SAXH@Z
?set@BreakOnFreeId@Heap@Details@Platform@@SAXH@Z
?set@TrackingLevel@Heap@Details@Platform@@SAXW4HeapAllocationTrackingLevel@34@@Z

Sections

.text
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vcruntime140.dll
.dll windows:6 windows x64 arch:x64

7f91c705cf579114968b3edc12e1175e

Code Sign

33:00:00:01:00:21:68:09:b9:0a:f6:55:f3:00:00:00:00:01:00
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:59

Not After

20/08/2025, 19:59

Subject

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:14:9d:fb:c3:1f:1f:63:c3:10:00:00:00:00:00:14
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/05/2013, 20:44

Not After

01/05/2028, 20:54

Subject

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:fe:6b:ce:da:d6:c8:03:03:a3:00:00:00:00:03:fe
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:26

Not After

20/08/2025, 19:26

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d1:d4:df:c0:5a:8b:1c:49:9e:96:3e:ac:14:84:c1:b7:d5:64:32:ef:60:80:73:47:fe:8b:a0:24:6e:48:19:3f
Signer

Actual PE Digest

d1:d4:df:c0:5a:8b:1c:49:9e:96:3e:ac:14:84:c1:b7:d5:64:32:ef:60:80:73:47:fe:8b:a0:24:6e:48:19:3f

Digest Algorithm

sha256

PE Digest Matches

true

d1:d4:df:c0:5a:8b:1c:49:9e:96:3e:ac:14:84:c1:b7:d5:64:32:ef:60:80:73:47:fe:8b:a0:24:6e:48:19:3f
Signer

Actual PE Digest

d1:d4:df:c0:5a:8b:1c:49:9e:96:3e:ac:14:84:c1:b7:d5:64:32:ef:60:80:73:47:fe:8b:a0:24:6e:48:19:3f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

terminate
abort

api-ms-win-crt-heap-l1-1-0

calloc
malloc
free

api-ms-win-crt-string-l1-1-0

strcpy_s
strncmp
wcsncmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
__stdio_common_vsprintf_s

api-ms-win-crt-convert-l1-1-0

atol

kernel32

SetLastError
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
RtlLookupFunctionEntry
RtlUnwindEx
RtlUnwind
GetModuleHandleW
EncodePointer
RaiseException
RtlPcToFileHeader
InterlockedPushEntrySList
InterlockedFlushSList
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetLastError
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
GetModuleFileNameW

Exports

Exports

_CreateFrameInfo
_CxxThrowException
_FindAndUnlinkFrame
_IsExceptionObjectToBeDestroyed
_SetWinRTOutOfMemoryExceptionCallback
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__C_specific_handler
__C_specific_handler_noexcept
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__NLG_Dispatch2
__NLG_Return2
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
__current_exception
__current_exception_context
__intrinsic_setjmp
__intrinsic_setjmpex
__processing_throw
__report_gsfailure
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__telemetry_main_invoke_trigger
__telemetry_main_return_trigger
__unDName
__unDNameEx
__uncaught_exception
__uncaught_exceptions
__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW
__vcrt_InitializeCriticalSectionEx
__vcrt_LoadLibraryExW
_get_purecall_handler
_get_unexpected
_is_exception_typeof
_local_unwind
_purecall
_set_purecall_handler
_set_se_translator
longjmp
memchr
memcmp
memcpy
memmove
memset
set_unexpected
strchr
strrchr
strstr
unexpected
wcschr
wcsrchr
wcsstr

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

fothk
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vcruntime140_1.dll
.dll windows:6 windows x64 arch:x64

72707e942878aac770fcc118ce3ec1c9

Code Sign

33:00:00:00:ff:ed:62:7b:87:d0:66:0d:fa:00:00:00:00:00:ff
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:59

Not After

20/08/2025, 19:59

Subject

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:14:9d:fb:c3:1f:1f:63:c3:10:00:00:00:00:00:14
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/05/2013, 20:44

Not After

01/05/2028, 20:54

Subject

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:fd:36:44:39:73:0d:dc:02:28:00:00:00:00:03:fd
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:26

Not After

20/08/2025, 19:26

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

37:99:8a:f5:7b:66:a9:e5:b9:c8:a3:4c:0d:1a:e3:ef:eb:53:9d:f1:c1:24:90:db:00:b5:3c:a8:6c:fa:e8:a0
Signer

Actual PE Digest

37:99:8a:f5:7b:66:a9:e5:b9:c8:a3:4c:0d:1a:e3:ef:eb:53:9d:f1:c1:24:90:db:00:b5:3c:a8:6c:fa:e8:a0

Digest Algorithm

sha256

PE Digest Matches

true

37:99:8a:f5:7b:66:a9:e5:b9:c8:a3:4c:0d:1a:e3:ef:eb:53:9d:f1:c1:24:90:db:00:b5:3c:a8:6c:fa:e8:a0
Signer

Actual PE Digest

37:99:8a:f5:7b:66:a9:e5:b9:c8:a3:4c:0d:1a:e3:ef:eb:53:9d:f1:c1:24:90:db:00:b5:3c:a8:6c:fa:e8:a0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140_1.amd64.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

terminate
abort

api-ms-win-crt-heap-l1-1-0

malloc
calloc
free

api-ms-win-crt-string-l1-1-0

strcpy_s
wcsncmp

vcruntime140

memcpy
__processing_throw
__C_specific_handler
memmove
__current_exception

kernel32

IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
RtlUnwindEx
RtlLookupFunctionEntry
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
RaiseException
RtlPcToFileHeader
GetLastError
DeleteCriticalSection
SetLastError

Exports

Exports

__CxxFrameHandler4
__NLG_Dispatch2
__NLG_Return2

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vcruntime140_threads.dll
.dll windows:6 windows x64 arch:x64

5ec0377a6cf6fab1a21b56f09428ef6a

Code Sign

33:00:00:01:00:21:68:09:b9:0a:f6:55:f3:00:00:00:00:01:00
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:59

Not After

20/08/2025, 19:59

Subject

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:14:9d:fb:c3:1f:1f:63:c3:10:00:00:00:00:00:14
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/05/2013, 20:44

Not After

01/05/2028, 20:54

Subject

CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:fe:6b:ce:da:d6:c8:03:03:a3:00:00:00:00:03:fe
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/08/2024, 19:26

Not After

20/08/2025, 19:26

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5d:e1:f9:19:41:f6:6f:19:39:b6:20:a6:d5:24:27:32:80:01:6d:4a:37:12:27:b1:72:9c:fa:5a:c8:64:c3:b4
Signer

Actual PE Digest

5d:e1:f9:19:41:f6:6f:19:39:b6:20:a6:d5:24:27:32:80:01:6d:4a:37:12:27:b1:72:9c:fa:5a:c8:64:c3:b4

Digest Algorithm

sha256

PE Digest Matches

true

5d:e1:f9:19:41:f6:6f:19:39:b6:20:a6:d5:24:27:32:80:01:6d:4a:37:12:27:b1:72:9c:fa:5a:c8:64:c3:b4
Signer

Actual PE Digest

5d:e1:f9:19:41:f6:6f:19:39:b6:20:a6:d5:24:27:32:80:01:6d:4a:37:12:27:b1:72:9c:fa:5a:c8:64:c3:b4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140_threads.amd64.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_cexit
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_execute_onexit_table
abort
_beginthreadex
_errno

api-ms-win-crt-heap-l1-1-0

calloc
malloc
free

api-ms-win-crt-time-l1-1-0

_timespec64_get
_timespec32_get

vcruntime140

__std_type_info_destroy_list
__C_specific_handler
__CxxFrameHandler3
memset
memcpy

kernel32

AcquireSRWLockExclusive
SwitchToThread
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetThreadId
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetExitCodeThread
Sleep
WaitForSingleObject
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
ExitThread
CloseHandle
GetLastError
ReleaseSRWLockExclusive
ReleaseSRWLockShared
InitOnceExecuteOnce
AcquireSRWLockShared
GetCurrentThreadId

Exports

Exports

_cnd_timedwait32
_cnd_timedwait64
_mtx_timedlock32
_mtx_timedlock64
_thrd_sleep32
_thrd_sleep64
call_once
cnd_broadcast
cnd_destroy
cnd_init
cnd_signal
cnd_wait
mtx_destroy
mtx_init
mtx_lock
mtx_trylock
mtx_unlock
thrd_create
thrd_current
thrd_detach
thrd_equal
thrd_exit
thrd_join
thrd_yield
tss_create
tss_delete
tss_get
tss_set

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
xml.dll
.dll windows:6 windows x64 arch:x64

7a40e79900e585084f90ec476ece79f1

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

05/12/2024, 00:00

Not After

05/12/2027, 23:59

Subject

CN=Poikosoft,O=Poikosoft,ST=Pirkanmaa,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fa:a3:0e:c4:2a:2b:3b:90:19:c7:8b:dd:5a:4e:be:50:e0:19:7b:97:ba:83:48:dc:df:f6:26:08:43:6b:f5:32
Signer

Actual PE Digest

fa:a3:0e:c4:2a:2b:3b:90:19:c7:8b:dd:5a:4e:be:50:e0:19:7b:97:ba:83:48:dc:df:f6:26:08:43:6b:f5:32

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
DuplicateHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReleaseMutex
WaitForSingleObject
CreateMutexW
Sleep
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
GetVersionExW
MultiByteToWideChar
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent

vcruntime140

memcpy
memmove
memset
strchr
__C_specific_handler
__std_type_info_destroy_list

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
__acrt_iob_func
__stdio_common_vfprintf
_getcwd
_read
__stdio_common_vsscanf
fread
fopen
fflush
fclose
_wfopen
_close
fwrite

api-ms-win-crt-string-l1-1-0

strncpy
_stricmp
strlen
toupper
strcpy
strcat
strcmp

api-ms-win-crt-heap-l1-1-0

realloc
malloc
free

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_cexit
_execute_onexit_table
_errno
_endthread
_beginthread
_initialize_onexit_table
_initialize_narrow_environment
_seh_filter_dll
_initterm_e
_initterm

api-ms-win-crt-filesystem-l1-1-0

_wstat64i32
_stat64i32

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-math-l1-1-0

_isnan
_dclass

Exports

Exports

__oldXMLWDcompatibility
__xmlBufferAllocScheme
__xmlDefaultBufferSize
__xmlDefaultSAXLocator
__xmlDeregisterNodeDefaultValue
__xmlDoValidityCheckingDefaultValue
__xmlErrEncoding
__xmlGenericError
__xmlGenericErrorContext
__xmlGetWarningsDefaultValue
__xmlIndentTreeOutput
__xmlKeepBlanksDefaultValue
__xmlLastError
__xmlLineNumbersDefaultValue
__xmlLoadExtDtdDefaultValue
__xmlOutputBufferCreateFilenameValue
__xmlParserDebugEntities
__xmlParserInputBufferCreateFilenameValue
__xmlParserVersion
__xmlPedanticParserDefaultValue
__xmlRaiseError
__xmlRegisterNodeDefaultValue
__xmlSaveNoEmptyTags
__xmlSimpleError
__xmlStructuredError
__xmlStructuredErrorContext
__xmlSubstituteEntitiesDefaultValue
__xmlTreeIndentString
initGenericErrorDefaultFunc
inputPop
inputPush
isolat1ToUTF8
myXmlFree
namePop
namePush
nodePop
nodePush
xmlAddAttributeDecl
xmlAddChild
xmlAddChildList
xmlAddDocEntity
xmlAddDtdEntity
xmlAddElementDecl
xmlAddEncodingAlias
xmlAddID
xmlAddNextSibling
xmlAddNotationDecl
xmlAddPrevSibling
xmlAddRef
xmlAddSibling
xmlAllocParserInputBuffer
xmlBufContent
xmlBufEnd
xmlBufGetNodeContent
xmlBufShrink
xmlBufUse
xmlBufferAdd
xmlBufferAddHead
xmlBufferCCat
xmlBufferCat
xmlBufferContent
xmlBufferCreate
xmlBufferCreateSize
xmlBufferCreateStatic
xmlBufferDetach
xmlBufferDump
xmlBufferEmpty
xmlBufferFree
xmlBufferGrow
xmlBufferLength
xmlBufferResize
xmlBufferSetAllocationScheme
xmlBufferShrink
xmlBufferWriteCHAR
xmlBufferWriteChar
xmlBufferWriteQuotedString
xmlBuildQName
xmlBuildRelativeURI
xmlBuildURI
xmlByteConsumed
xmlCanonicPath
xmlCharEncCloseFunc
xmlCharEncFirstLine
xmlCharEncInFunc
xmlCharEncOutFunc
xmlCharInRange
xmlCharStrdup
xmlCharStrndup
xmlCheckFilename
xmlCheckHTTPInput
xmlCheckLanguageID
xmlCheckUTF8
xmlCheckVersion
xmlChildElementCount
xmlCleanupCharEncodingHandlers
xmlCleanupEncodingAliases
xmlCleanupGlobals
xmlCleanupInputCallbacks
xmlCleanupMemory
xmlCleanupParser
xmlCleanupThreads
xmlClearNodeInfoSeq
xmlClearParserCtxt
xmlCopyAttributeTable
xmlCopyChar
xmlCopyCharMultiByte
xmlCopyDoc
xmlCopyDocElementContent
xmlCopyDtd
xmlCopyElementContent
xmlCopyElementTable
xmlCopyEntitiesTable
xmlCopyEnumeration
xmlCopyError
xmlCopyNamespace
xmlCopyNamespaceList
xmlCopyNode
xmlCopyNodeList
xmlCopyNotationTable
xmlCopyProp
xmlCopyPropList
xmlCreateDocParserCtxt
xmlCreateEntitiesTable
xmlCreateEntityParserCtxt
xmlCreateEnumeration
xmlCreateFileParserCtxt
xmlCreateIOParserCtxt
xmlCreateIntSubset
xmlCreateMemoryParserCtxt
xmlCreateURI
xmlCreateURLParserCtxt
xmlCtxtGetLastError
xmlCtxtReadDoc
xmlCtxtReadFd
xmlCtxtReadFile
xmlCtxtReadIO
xmlCtxtReadMemory
xmlCtxtReset
xmlCtxtResetLastError
xmlCtxtResetPush
xmlCtxtUseOptions
xmlCurrentChar
xmlDOMWrapAdoptNode
xmlDOMWrapCloneNode
xmlDOMWrapFreeCtxt
xmlDOMWrapNewCtxt
xmlDOMWrapReconcileNamespaces
xmlDOMWrapRemoveNode
xmlDefaultSAXHandlerInit
xmlDelEncodingAlias
xmlDeregisterNodeDefault
xmlDetectCharEncoding
xmlDictCleanup
xmlDictCreate
xmlDictCreateSub
xmlDictExists
xmlDictFree
xmlDictGetUsage
xmlDictLookup
xmlDictOwns
xmlDictQLookup
xmlDictReference
xmlDictSetLimit
xmlDictSize
xmlDocCopyNode
xmlDocCopyNodeList
xmlDocGetRootElement
xmlDocSetRootElement
xmlEncodeEntitiesReentrant
xmlEncodeSpecialChars
xmlErrMemory
xmlFileClose
xmlFileMatch
xmlFileOpen
xmlFileRead
xmlFindCharEncodingHandler
xmlFirstElementChild
xmlFree
xmlFreeAttributeTable
xmlFreeDoc
xmlFreeDocElementContent
xmlFreeDtd
xmlFreeElementContent
xmlFreeElementTable
xmlFreeEntitiesTable
xmlFreeEnumeration
xmlFreeIDTable
xmlFreeInputStream
xmlFreeMutex
xmlFreeNode
xmlFreeNodeList
xmlFreeNotationTable
xmlFreeNs
xmlFreeNsList
xmlFreeParserCtxt
xmlFreeParserInputBuffer
xmlFreeProp
xmlFreePropList
xmlFreeRMutex
xmlFreeRefTable
xmlFreeURI
xmlGcMemGet
xmlGcMemSetup
xmlGetBufferAllocationScheme
xmlGetCharEncodingHandler
xmlGetCharEncodingName
xmlGetCompressMode
xmlGetDocCompressMode
xmlGetDocEntity
xmlGetDtdAttrDesc
xmlGetDtdElementDesc
xmlGetDtdEntity
xmlGetDtdNotationDesc
xmlGetDtdQAttrDesc
xmlGetDtdQElementDesc
xmlGetEncodingAlias
xmlGetExternalEntityLoader
xmlGetGlobalState
xmlGetID
xmlGetIntSubset
xmlGetLastChild
xmlGetLastError
xmlGetLineNo
xmlGetNoNsProp
xmlGetNodePath
xmlGetNsList
xmlGetNsProp
xmlGetParameterEntity
xmlGetPredefinedEntity
xmlGetProp
xmlGetRefs
xmlGetThreadId
xmlGetUTF8Char
xmlHasFeature
xmlHasNsProp
xmlHasProp
xmlHashAddEntry
xmlHashAddEntry2
xmlHashAddEntry3
xmlHashCopy
xmlHashCreate
xmlHashCreateDict
xmlHashFree
xmlHashLookup
xmlHashLookup2
xmlHashLookup3
xmlHashQLookup
xmlHashQLookup2
xmlHashQLookup3
xmlHashRemoveEntry
xmlHashRemoveEntry2
xmlHashRemoveEntry3
xmlHashScan
xmlHashScan3
xmlHashScanFull
xmlHashScanFull3
xmlHashSize
xmlHashUpdateEntry
xmlHashUpdateEntry2
xmlHashUpdateEntry3
xmlInitCharEncodingHandlers
xmlInitGlobals
xmlInitMemory
xmlInitNodeInfoSeq
xmlInitParser
xmlInitParserCtxt
xmlInitThreads
xmlInitializeDict
xmlInitializeGlobalState
xmlIsBaseChar
xmlIsBaseCharGroup
xmlIsBlank
xmlIsBlankNode
xmlIsChar
xmlIsCharGroup
xmlIsCombining
xmlIsCombiningGroup
xmlIsDigit
xmlIsDigitGroup
xmlIsExtender
xmlIsExtenderGroup
xmlIsID
xmlIsIdeographic
xmlIsIdeographicGroup
xmlIsLetter
xmlIsMainThread
xmlIsMixedElement
xmlIsPubidChar
xmlIsPubidChar_tab
xmlIsRef
xmlIsXHTML
xmlKeepBlanksDefault
xmlLastElementChild
xmlLineNumbersDefault
xmlLinkGetData
xmlListAppend
xmlListClear
xmlListCopy
xmlListCreate
xmlListDelete
xmlListDup
xmlListEmpty
xmlListEnd
xmlListFront
xmlListInsert
xmlListMerge
xmlListPopBack
xmlListPopFront
xmlListPushBack
xmlListPushFront
xmlListRemoveAll
xmlListRemoveFirst
xmlListRemoveLast
xmlListReverse
xmlListReverseSearch
xmlListReverseWalk
xmlListSearch
xmlListSize
xmlListSort
xmlListWalk
xmlLoadExternalEntity
xmlLockLibrary
xmlMalloc
xmlMallocAtomic
xmlMallocAtomicLoc
xmlMallocLoc
xmlMemBlocks
xmlMemDisplay
xmlMemDisplayLast
xmlMemFree
xmlMemGet
xmlMemMalloc
xmlMemRealloc
xmlMemSetup
xmlMemShow
xmlMemStrdup
xmlMemStrdupLoc
xmlMemUsed
xmlMemoryDump
xmlMemoryStrdup
xmlMutexLock
xmlMutexUnlock
xmlNewCDataBlock
xmlNewCharEncodingHandler
xmlNewCharRef
xmlNewChild
xmlNewComment
xmlNewDoc
xmlNewDocComment
xmlNewDocElementContent
xmlNewDocFragment
xmlNewDocNode
xmlNewDocNodeEatName
xmlNewDocPI
xmlNewDocProp
xmlNewDocRawNode
xmlNewDocText
xmlNewDocTextLen
xmlNewDtd
xmlNewElementContent
xmlNewEntity
xmlNewEntityInputStream
xmlNewIOInputStream
xmlNewInputFromFile
xmlNewInputStream
xmlNewMutex
xmlNewNode
xmlNewNodeEatName
xmlNewNs
xmlNewNsProp
xmlNewNsPropEatName
xmlNewPI
xmlNewParserCtxt
xmlNewProp
xmlNewRMutex
xmlNewReference
xmlNewStringInputStream
xmlNewText
xmlNewTextChild
xmlNewTextLen
xmlNextChar
xmlNextElementSibling
xmlNoNetExternalEntityLoader
xmlNodeAddContent
xmlNodeAddContentLen
xmlNodeBufGetContent
xmlNodeGetBase
xmlNodeGetContent
xmlNodeGetLang
xmlNodeGetSpacePreserve
xmlNodeIsText
xmlNodeListGetRawString
xmlNodeListGetString
xmlNodeSetBase
xmlNodeSetContent
xmlNodeSetContentLen
xmlNodeSetLang
xmlNodeSetName
xmlNodeSetSpacePreserve
xmlNormalizeURIPath
xmlNormalizeWindowsPath
xmlOutputBufferCreateFilenameDefault
xmlParseAttValue
xmlParseAttributeListDecl
xmlParseAttributeType
xmlParseCDSect
xmlParseCharData
xmlParseCharEncoding
xmlParseCharRef
xmlParseComment
xmlParseContent
xmlParseCtxtExternalEntity
xmlParseDefaultDecl
xmlParseDocTypeDecl
xmlParseDocument
xmlParseElement
xmlParseElementChildrenContentDecl
xmlParseElementContentDecl
xmlParseElementDecl
xmlParseElementMixedContentDecl
xmlParseEncName
xmlParseEncodingDecl
xmlParseEntityDecl
xmlParseEntityRef
xmlParseEntityValue
xmlParseEnumeratedType
xmlParseEnumerationType
xmlParseExtParsedEnt
xmlParseExternalID
xmlParseExternalSubset
xmlParseInNodeContext
xmlParseMarkupDecl
xmlParseMisc
xmlParseName
xmlParseNmtoken
xmlParseNotationDecl
xmlParseNotationType
xmlParsePEReference
xmlParsePI
xmlParsePITarget
xmlParsePubidLiteral
xmlParseReference
xmlParseSDDecl
xmlParseSystemLiteral
xmlParseTextDecl
xmlParseURI
xmlParseURIRaw
xmlParseURIReference
xmlParseVersionInfo
xmlParseVersionNum
xmlParseXMLDecl
xmlParserAddNodeInfo
xmlParserError
xmlParserFindNodeInfo
xmlParserFindNodeInfoIndex
xmlParserGetDirectory
xmlParserHandlePEReference
xmlParserInputBufferCreateFd
xmlParserInputBufferCreateFile
xmlParserInputBufferCreateFilename
xmlParserInputBufferCreateFilenameDefault
xmlParserInputBufferCreateIO
xmlParserInputBufferCreateMem
xmlParserInputBufferCreateStatic
xmlParserInputBufferGrow
xmlParserInputBufferPush
xmlParserInputBufferRead
xmlParserInputGrow
xmlParserInputRead
xmlParserInputShrink
xmlParserMaxDepth
xmlParserPrintFileContext
xmlParserPrintFileInfo
xmlParserValidityError
xmlParserValidityWarning
xmlParserWarning
xmlPathToURI
xmlPedanticParserDefault
xmlPopInput
xmlPopInputCallbacks
xmlPreviousElementSibling
xmlPrintURI
xmlPushInput
xmlRMutexLock
xmlRMutexUnlock
xmlReadDoc
xmlReadFd
xmlReadFile
xmlReadIO
xmlReadMemory
xmlRealloc
xmlReallocLoc
xmlReconciliateNs
xmlRegisterCharEncodingHandler
xmlRegisterDefaultInputCallbacks
xmlRegisterInputCallbacks
xmlRegisterNodeDefault
xmlRemoveID
xmlRemoveProp
xmlRemoveRef

Sections

.text
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e7f9a29f2c85394521a08b9f31f6275

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67Certificate

Extended Key Usages

Key Usages

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89Certificate

Extended Key Usages

Key Usages

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3fCertificate

Extended Key Usages

Key Usages

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68Certificate

Extended Key Usages

Key Usages

a5:1b:19:0f:34:92:3f:56:f2:cb:d9:21:c7:66:63:ce:5f:7c:0e:b7:5f:bf:9a:63:fd:82:bd:1c:c4:b4:15:4dSigner

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 1KB - Virtual size: 128KB

.ndata Size: - Virtual size: 176KB

.rsrc Size: 138KB - Virtual size: 138KB

3e8d18bb71c7ebbda2ddc2a4bb03547b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 1024B - Virtual size: 681B

.data Size: 512B - Virtual size: 6KB

.rsrc Size: 512B - Virtual size: 352B

.reloc Size: 512B - Virtual size: 352B

fc0224e99e736751432961db63a41b76

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 1024B - Virtual size: 867B

.data Size: 512B - Virtual size: 120B

.reloc Size: 1024B - Virtual size: 648B

6b5c4f7d679059f68f1269aad3a5cecd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

a5:1b:19:0f:34:92:3f:56:f2:cb:d9:21:c7:66:63:ce:5f:7c:0e:b7:5f:bf:9a:63:fd:82:bd:1c:c4:b4:15:4d
Signer

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 1KB - Virtual size: 128KB

.ndata
Size: - Virtual size: 176KB

.rsrc
Size: 138KB - Virtual size: 138KB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 1024B - Virtual size: 681B

.data
Size: 512B - Virtual size: 6KB

.rsrc
Size: 512B - Virtual size: 352B

.reloc
Size: 512B - Virtual size: 352B

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 1024B - Virtual size: 867B

.data
Size: 512B - Virtual size: 120B

.reloc
Size: 1024B - Virtual size: 648B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 8KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 638B

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

d3:a8:45:1b:2c:12:9c:16:03:84:6e:c2:4f:99:97:39:ef:c5:d2:5f:7a:b3:5f:4a:93:5c:8a:19:ad:36:9b:e2
Signer

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: - Virtual size: 56B

.pdata
Size: 512B - Virtual size: 120B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 28B

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

52:4c:4a:d2:d5:b1:b2:9e:fe:0a:3c:61:19:c7:b9:67
Certificate

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate