IriunWebcam-2[.]9[.]8[.]exe

resource
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsExec.dll
unpack001/AdbWinApi.dll
unpack001/AdbWinUsbApi.dll
unpack001/IriunWebcam.exe
unpack001/adb.exe
unpack001/avcodec-62.dll
unpack001/avutil-60.dll
unpack001/engine.dll
unpack001/swscale-9.dll

IriunWebcam-2.9.8.exe

IMPHASH 46ce5c12b293febbeb513b196aa7f843
SHA256 dfc4ac4c72fc3443821894b3de9064d1dd80ad4a24b39d15c9afb1f68049c9a1
MD5 c8933b2997cd88fc70b2dc36b307c5d9
SHA1 47e95379c1cd9cb60db654d66b98fe38cabfbc0c
SHA512 4c1647b3df3e34f927853b112dcc65e04454579050b11de10a66db11a900df83a3dab7fc1540e7af15547af7a723509d33a91fbc63481aeb373b80d4eafaebc8
SSDEEP 49152:R/pk1XYnGDiMtI8LQCzUWDT4orWk0YVp6v+4UdCS7wIEVaHvsP:RGisBLWBorW6VgUpwIgaHvs
TLSH
T126C52384E268C9D1C8404A3498BBC57355377CF74BA9421AAA5CFE1B693FA318DC731B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

9a:1f:bb:b5:71:61:48:1f:db:cc:4a:29:ea:fb:af:d5:ce:d3:ad:2f:b4:2a:19:60:53:6c:47:b8:3d:32:f8:d2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=3144761-4,CN=Iriun Oy,O=Iriun Oy,STREET=Loimukoivuntie 9,L=Oulu,ST=Pohjois-Pohjanmaa,C=FI,1.3.6.1.4.1.311.60.2.1.3=#13024649,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Aug 4, 2026

SERIALNUMBER=3144761-4,CN=Iriun Oy,O=Iriun Oy,STREET=Loimukoivuntie 9,L=Oulu,ST=Pohjois-Pohjanmaa,C=FI,1.3.6.1.4.1.311.60.2.1.3=#13024649,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=3144761-4,CN=Iriun Oy,O=Iriun Oy,STREET=Loimukoivuntie 9,L=Oulu,ST=Pohjois-Pohjanmaa,C=FI,1.3.6.1.4.1.311.60.2.1.3=#13024649,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=3144761-4,CN=Iriun Oy,O=Iriun Oy,STREET=Loimukoivuntie 9,L=Oulu,ST=Pohjois-Pohjanmaa,C=FI,1.3.6.1.4.1.311.60.2.1.3=#13024649,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

1a:b3:9b:51:15:15:cb:d7:0f:3e:1e:c0

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 24, 2025 - Dec 13, 2028

Subject

CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE

Serial Number

84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4

Issuer

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 15, 2025 - Jan 10, 2037

Subject

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Serial Number

83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f

Issuer

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 16, 2025 - Jul 16, 2041

Subject

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:4a:aa:81:73:66:9c:90:09:54:e4:21:c9:47:eb:c0

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 9, 2020 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

4

Entry point

13983

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

RemoveDirectoryW lstrcmpiA GetTempFileNameW CreateProcessW CreateDirectoryW CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW WriteFile GetCurrentProcess GetModuleFileNameW GetLastError GetFileSize CreateFileW GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject ExitProcess

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
MD5 6d08f0d5503bb100b8429fefaad163a6
SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
TLSH
T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
TLSH
T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/nsDialogs.dll

IMPHASH 3b477381217c97b22146297f93df2a92
SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
MD5 cf0351a2ab9128838be6b54cea8238d3
SHA1 c3b1abb890d92a6058de7c3ac2b2185b2f4fd03c
SHA512 f1a68557d3825ca879f66c1b6828342528e41b8c746d137c51b85e8f8341dcf69bffc5bab76a498113cb53de3f4502644de8a26adaa27c22fa005ee7186f7785
SSDEEP 96:oXEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3Y8NqkzfFc:oXEvCu5e81785qHFcU0PuAw0uyWIFc
TLSH
T16012F892E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsExec.dll

IMPHASH 68b7023f8923dd087549802f8fa631c3
SHA256 3a101fa91d4e8831dfb748a1e345ab74fd4a551e64254710bdf53972ba9b473c
MD5 c953dd0aab774f1446fcd63fa7c5f613
SHA1 6b7e1ef30b3ce2b353d310a8c99111c01e1f752e
SHA512 7fdfc451ada1789ad44a33fee7a97acf9f482ae58b5207564ce8ac90fbc8b0fc891bc02d8c1d9a1d0d3fb77954106115582080e129bb93634a2cb16777201e14
SSDEEP 96:JbzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHwDQ:JEQHDb2vSuOc41ZfUNQZGdHo
TLSH
T15EE1093571C02DF7D08D897438167D2F83F4D52627BA05A046771AD579D0AF6EE28B42
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$TEMP/devcon.exe

IMPHASH a0225eb3236ea941773b705076ada2af
SHA256 8b9bf2c01136e203732dda5232924aff40ae67d6168d05ca80efd19902cb8fc9
MD5 320e3210bbffe99e5f0b6ce4dc943b9d
SHA1 23c131c8603ec8f9e064c05d302a557714cbe806
SHA512 6e6d58995f5f668ebba52b51c73fa86839a750acd35c7daeeec5ab8371ca660a3077cabfaadd8b80b0463055b099a4b2c863fdadff75eaa553e8611ac91b692e
SSDEEP 3072:C4xbslWCBChVAyJCMhcuk6cqp2vJVx/6TuOp4oEk4ZBMHWxS:rbslrBChVAyJCMhKQ
TLSH
T1DDC3C60263E85659F6F77A3069B552215A777CA1AF38C6CF0298912D0BE3EC0DC74B63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Digest

e4:42:9e:19:1a:ac:79:3b:81:3b:db:26:62:d3:d0:bd:d9:fe:cf:01:22:c2:58:2e:91:6c:aa:98:9b:80:44:ac

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 23, 2025

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 22, 2024 - Jul 5, 2025

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0c:52:4c:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 6, 2010 - Jul 6, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:591A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:f4:17:46:85:c0:cb:3f:39:e5:00:01:00:00:01:f4

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 25, 2024 - Oct 22, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

10

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

devcon.pdb

advapi32

RegQueryValueExW InitiateSystemShutdownExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW RegCloseKey OpenServiceW RegDeleteValueW RegSetValueExW OpenSCManagerW CloseServiceHandle

kernel32

GetCurrentProcess FormatMessageW GetLastError CloseHandle LocalFree FileTimeToSystemTime LoadLibraryW GetProcAddress FreeLibrary GetDateFormatW FindFirstFileW GetFullPathNameW FindNextFileW FindClose GetFileAttributesW GetWindowsDirectoryW RtlCaptureContext GetTickCount GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetModuleHandleW TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry Sleep

msvcrt

?terminate@@YAXXZ _commode _fmode __C_specific_handler _initterm _cexit _exit exit __set_app_type __wgetmainargs _amsg_exit _XcptFilter memset towlower __iob_func __setusermatherr free _callnewh malloc wprintf towupper wcsrchr _wcsnicmp fputs wcschr iswalpha fputws _wcsicmp

ole32

CLSIDFromString

setupapi

SetupDiClassNameFromGuidExW SetupCopyOEMInfW SetupDiCreateDeviceInfoList SetupDiGetINFClassW CM_Connect_MachineW SetupDiSetClassInstallParamsW CM_Locate_DevNode_ExW CM_Disconnect_Machine CM_Reenumerate_DevNode_Ex SetupDiSetDeviceRegistryPropertyW SetupDiBuildClassInfoListExW SetupDiCreateDeviceInfoW SetupDiGetDriverInstallParamsW SetupDiOpenClassRegKeyExW CM_Free_Log_Conf_Handle SetupFindFirstLineW SetupDiSetDeviceInstallParamsW CM_Free_Res_Des_Handle SetupOpenInfFileW SetupDiCallClassInstaller SetupDiDestroyDeviceInfoList SetupDiClassGuidsFromNameExW CM_Get_Device_ID_ExW SetupDiGetClassDevsExW SetupDiGetDeviceInfoListDetailW SetupDiCreateDeviceInfoListExW SetupDiEnumDeviceInfo SetupDiGetDeviceRegistryPropertyW SetupDiOpenDeviceInfoW SetupScanFileQueueW SetupDiGetClassDescriptionExW SetupOpenFileQueue CM_Get_Next_Res_Des_Ex CM_Get_DevNode_Status_Ex SetupCloseInfFile CM_Get_Res_Des_Data_Ex SetupDiOpenDevRegKey SetupDiDestroyDriverInfoList SetupCloseFileQueue SetupDiGetDeviceInstallParamsW SetupDiEnumDriverInfoW SetupDiSetSelectedDriverW CM_Get_First_Log_Conf_Ex SetupDiGetDriverInfoDetailW CM_Get_Res_Des_Data_Size_Ex SetupDiBuildDriverInfoList SetupGetStringFieldW

user32

CharPrevW CharNextW LoadStringW

Name

.text

Size

28KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

fothk

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

12KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

936B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

48KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

248B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$TEMP/devgen.exe

SHA256 7a8503cb534e005ef3c756a59758e6404dee22faea047dcf5e7ba32f4813ca9b
MD5 161545cbd1d5f80cc8fcc577b418f0c4
SHA1 8ee77b283e8ae47d07931a6fd851a2a8870a1841
SHA512 ca8a6ca5e9f0df1be74f0aa842dc3177b6c5dfda3a8c9bbf0e2af6286910a201004f33156c389481c6d15240a737c7c5220cc320f68b00a76e7b39e21e7da662
SSDEEP 768:C9f2BdPbvMpICaDuDElxeo++Va+6KQsoFAsXszi9zZOT:Gf2Bd7KaDuDELN7Vj6KkFbcyzZQ
TLSH
T18E33F78123DC0545FAF67778D9B4485A583FB9A68834C61E2179818E8FB7BC0D9B03E3
MD5 SHA1 SHA512 SSDEEP TLSH

$TEMP/iriuna0.sys

SHA256 55162d9720de92b9275856d7a3c541f1a964f4b29dc404920a63ba19c26660a9
MD5 65df51a48e935372ffe1790140ef7840
SHA1 dc5b2ab6cb35a4051c22bebf5d99922ad23463c2
SHA512 af94f465cdb94e0e162b8fceec95a840e49936cfa4c7747cab4bd31ab98be22b60b6659b1d206aa5821dbdd4a67ec8397cddbdd55931b69344e7433168776c16
SSDEEP 768:P6+BDNQ9Nea+4WHfIAIUlKzeVQbWg23JkC9z06:P6kDNC+vHeeVQbWg2uezp
TLSH
T1D9131962E64C2DD5F5C696B8EBA58F217A3BD2A08810435B7172421EECA3FC1DF640E5
MD5 SHA1 SHA512 SSDEEP TLSH

$TEMP/iriuna1.sys

SHA256 6ce95e09e00d5f17bfc03e780e06c0833ffea00329a5b638ace51c3bbe912ffb
MD5 f0b8c513cfdcfea619518015aa376112
SHA1 bd27c590cadd3c722dadd196fda18faeae21c494
SHA512 23202b98c81f36466f0b76d20ccbc46a59491d52f53bdd66e5ee276aa0ec22109e961b18eb217491062d3a99be031167525f4214258b7386f245cded11ba7091
SSDEEP 768:D+BDNQ9Nea+4WHfIAIUlKzeVQKWg23xtU9zV6s1V:DkDNC+vHeeVQKWg20z0k
TLSH
T1F0131961E28C3DD5F5C697B8DBA58F217A3BE2A08810425B7272421EDCA3BC1DF641E5
MD5 SHA1 SHA512 SSDEEP TLSH

$TEMP/iriuna2.sys

SHA256 d0e70d693cee0de572758b433586a8b2fc481499a434a8a3b31b372c26a8d344
MD5 4a027f7c3c0f015834293e15eec9de17
SHA1 1389328fb7fba6a8d597cd9b991bba073cd40dd1
SHA512 972a8adf1ce0ce6a27a5afb0b2b2c483a161d4bb97f355bb5ba853d4d40d4b039da05a30e4d571a1a5c69650b00f69deb704acc3ef5f1c6149d0960448655245
SSDEEP 768:e+BDNQ9Nea+4WHfIAIUlKzeVQbWg23d9zH:ekDNC+vHeeVQbWg2PzH
TLSH
T1E0132A61E25C3DD5F5C686B8EBA58F217A3BD3A08810425B3172461EECA3FC1CF651E9
MD5 SHA1 SHA512 SSDEEP TLSH

$TEMP/iriuna3.sys

SHA256 60a28cd3be34951a206dd40ce2696500c0f64771396e840768bc7199cdc6ec49
MD5 b2e8771007effc76c13a46a5e3ffbe59
SHA1 2e3b7316a5dcae93da823c8bc6229c4ccd988513
SHA512 960e4339432bf7a411e09466a3449ecf620e52e794f6fa21b4380a300e498ac2e89251630a9d936a8127afeea34683a78a82c4e7bad38fe827292b343d791e7c
SSDEEP 768:b+BDNQ9Nea+4WHfIAIUlKzeVQ78Wg23Q9zQXV:bkDNC+vHeeVQIWg2oz2
TLSH
T161132A61E28C2DD5F5C696B8EB658F217B3BD2A08810435B7272421EECA3FC1DF641E5
MD5 SHA1 SHA512 SSDEEP TLSH

$TEMP/iriunaud.cat

SHA256 e91ac5e8e6c10353c30faf9c5bf1e25311648558c03ef2f7a05482c732340d20
MD5 21c31e171ce59f38d8bf7e6a028eae0f
SHA1 c57f4c8b347526e4c55c1d5a8bd7749e3fbcddf7
SHA512 2f49eb013de7134c3398bb65653d3d96a382c9ca0c690ac340bd1a0816d5df4067d8063ca7c1df06e2dba65e5288138ee54a21ba4c0c0f48ab7544f77281cd9f
SSDEEP 384:xFU93r9y9xWIdFRgC1ah3z33jIZR9zm7ep9:jU9b9y9xWat23z33jIT9zkej
TLSH
T12552F7B1545C0282F9A79D7012E4E56B6C7E3BCF980051AA35AFFB6D0C623C4F72852E
MD5 SHA1 SHA512 SSDEEP TLSH

$TEMP/iriunaud.inf

SHA256 8e21019c4c8352a24e31af6f7fd1c04b9fc4b2b6a9656f742aeda01008e3af82
MD5 c3403fa603c8e0f17f77e64698463010
SHA1 0b47ac3cf4ef9ba74d87d967df064cecf1a628dd
SHA512 e01f8dc72f68234a7d65aea9c1fa0bcbfd87538d456991677031f7bef23e6cd64d9c4579185b92d041a6febb0f595826ba9bf547ab77bc43755ed768e554aff0
SSDEEP 96:jqhnqJqKprqKpnqKBgXXpydD8CP8yd3dIydOmEydKlXrvMD5MWCPRCkgoiWdp:jqh7bHbpydDXUyd2ydoydpoq2
TLSH
T185F1C0CD8AFF5CAEE105C0A7CCC341D169953B9433EB4568A6436643A9CDBFC3219C56
MD5 SHA1 SHA512 SSDEEP TLSH

$TEMP/iriunv.dll

SHA256 c053d6e7e490a286370e9114a2ad4bb360c2824a5f3184b1433c9c37998d001d
MD5 bd204fc42b59b93394ba3fe68f98011a
SHA1 5c2ae01b59b657222725ed38edb9e838bbd9ea4c
SHA512 fcc237d0e4245025ed0a91c60ceef73b342113232d427d46372e4b751d88edbc2e03b95c68777f2e38d5155fd8715d35e6249a1f74bea8d8bed202ace8864c52
SSDEEP 3072:Kl45dialP7me4dBlhrnToLJn1gX1M+M2XLpLngJ8n2VCpaSh+A69KfpmoB:j5v7me4dBlhrnToLJn1ge+P0HSh+A690
TLSH
T15B044BA2278C5422C1C6D97D9FAB9E65363BB538C7348747B04A432EFD2B7C4ED94122
MD5 SHA1 SHA512 SSDEEP TLSH

$TEMP/iriunv0.cat

SHA256 80bf6ee43dc4f177f869fcbb4e5627f3c37d3a8895f76642472d2c0689e63a22
MD5 e9c67375447024a07c19cf3a3f821034
SHA1 a5b9008e6bfab2f265d065250716e9e1704f2ccd
SHA512 2465dd111c27d63414f6c7a4d176262e92af006ff9e02af2f10f5fe2a00ae0132806302c0a73c50f40a19cf64f2748f779e9e6e7f9a87c82472fc050a54943b1
SSDEEP 192:6ONq6qlytyPOFXgdJC0xPZDMPXWEwGJhYCTlIUHWX01k9z3AN4jE:9MxU82FQdlPZDMP3h3TujR9zMSE
TLSH
T11D420AA241A840C2E997AC6053F8E44B7C3E6BCF5810596927AFF7194CB73C4FB1916E
MD5 SHA1 SHA512 SSDEEP TLSH

$TEMP/iriunv0.inf

SHA256 647aed3abf0ad3c7d8a24a31ffb463f0913b499330e289f3fb4d8edb17a5829c
MD5 4e9069abfa1f736069a959cb14a57253
SHA1 3bac793ad1c26054fbed95f98d7085ed0dd1518d
SHA512 9faa398bcd25281dcc1fefd458d4a3ebb11a2fb8e08ff38b1229e7de9154eb68afcba61ed70c3b42a90b8c3736931dd30142b46e477cb3b0c980a878b3111563
SSDEEP 96:rFSxwnOg2MuDOQDFgWSowU2wUTwCSowU2wUTwr2se0U2m9jpg1wecnia7xuVQVMW:xSxwnOg2OMK1wXVxuyxub+cQ
TLSH
T1CAF19052F7E80A18B2B25BC4A7B0C565CA36FCE2583CCF4D0681514E26F9F419D61FA7
MD5 SHA1 SHA512 SSDEEP TLSH

$TEMP/iriunv0Driver.dll

SHA256 1efd96d336cd84559428ddb41f477800f4107898fe95173d355a4ebf254bc67e
MD5 df3c5b0f567dd6510eb18dd4bd9be814
SHA1 ef7856178b8c199573957a4ae7bd0d57db6f0dd7
SHA512 7d815694eb5500b729ecf2f9593de460645eaa5f9e747f74c2dd067eaa75a47b6f30826ee0c4fb51e913e18db36ff8e875fea137c755e78ccb625e0e120634fe
SSDEEP 384:NXfCNvyTA29jq8VsRICtTy5MPvkVxQHLYfHAxMElSs1dqnP3h3tEtifX7R9zA5ag:NXaNvSAvTXfrSDqSSq53tfF9zA5KM
TLSH
T19AF24C9057981883D5DBDA38C896DD5A383FE7A59521C51332BA130EDE5F3C0AA780EB
MD5 SHA1 SHA512 SSDEEP TLSH

$TEMP/iriunv1.cat

SHA256 ec28c4b9108e36ba618d6c96107c1d1640c2b005917a70bc232a3bfa7c0fa176
MD5 e4cae84fa2495f848c1fb24ee5b8d65a
SHA1 807a6b309daaf16cf36b6c0a6961e5911a59bf58
SHA512 649a193f72795fd6f5f8ed59cbac0cd94eb9c3a7ba3ef13e750648604c8e48649223f63d15bf0a1977a3e01a2d313051de244346bf0986ba8868b9e427b70260
SSDEEP 192:5qaOYyzOJyvqpXgdJC0xPZDMPXWEwGJhYCSmETsX01k9z3Atc2/w9b8:IdTqoCpQdlPZDMP3h3CoR9zKpY+
TLSH
T15C42FBA655A940C3FA876D6003E8E59B7C3E67CF5C10547922ABF7290CA73C4F71816E
MD5 SHA1 SHA512 SSDEEP TLSH

$TEMP/iriunv1.inf

SHA256 12381ef88267c045242a20753e1c5888bea87a1ffedda8342b53168c89beb554
MD5 8243fe3a68790b73a90e462bf643650d
SHA1 cd3b413b8d2555fb9ce55ab89611837ce96db4f3
SHA512 76d2729fc1bd3dbdbb5082acc0379c3d92e48aa91036c062ef180ed8222b34be5ec0c11313470518c468f7d0237818782df5f1532ae5a47baac73c91e61c1650
SSDEEP 96:rFSxTkOg2MuDxQDkgWSowU2wUTwCSowU2wUTwr2se0U2m9jpg17ecnia7xx6QVMB:xSxTkOg2xXK17XVxxNxx69r
TLSH
T151F17252F7E80A18B2B25BC4A7B0C566CA36FCE6583CCF4D0281514E26F9F419D61FA7
MD5 SHA1 SHA512 SSDEEP TLSH

$TEMP/iriunv1Driver.dll

SHA256 081c700ab291f07bc082c623f189a565e54dd72eac044ce6b8d790f613607a40
MD5 084d983652b7db8b10944886ff5687c8
SHA1 d0f3befbbc11bad9bd54e7b504f6feab163fa183
SHA512 8a249670dd0fab10e0ee12685ccd31d8201eed42ba7d7774af129b2e3b1ede5de1c5b007a3422fa7d3162506faf3573a732e777bd1b86c4207210896badbfb57
SSDEEP 384:IXfCNvyTA29jq8VsRICtTy5MPvkVxQHLYft3MElSs1dquP3h3xojR9zMS9P:IXaNvSAvTXfrSGqSSqK3o9z19P
TLSH
T155F24C9067981883D5D7DA38C8968C5A393FF7A99121C41323BA530EDE5F7D0AB780E7
MD5 SHA1 SHA512 SSDEEP TLSH

$TEMP/iriunv2.cat

SHA256 45b62dffea1a20387bb7219595905d55c7f3cc1a5560a3f5f3ffba3edb51c89a
MD5 10a0937ea7bad7b441d886bc22bb15cd
SHA1 b03635ab219b4407d4f7441a16f3f0cb64b876d0
SHA512 ab5cdd147dc2b65bde10ced253b10bb7d9653e2a0e5f97be26fa81c09eb7511d09221615806b250114eff45cb6f7eba94831849394712bf6aa8835c7b85a4a4a
SSDEEP 384:/wdixOCaCQdlPZDMP3h3FcUthXBnR9zae:n3KCf9z1
TLSH
T19642FAA6416941C3EA879CA043E8E95B7C7E3BCF5810557916EBF7191C633C4FB1812E
MD5 SHA1 SHA512 SSDEEP TLSH

$TEMP/iriunv2.inf

SHA256 a90b2d63cc6c36350d4f34445a9f0d3ecc330cd4104fd9040fc29d7d11f092b4
MD5 8299a9d2fc09f68886b9891ec7e84dc2
SHA1 317dfc398e9aaf185b74b24b3cced559ec63fa39
SHA512 86c2dd210c249b517d47abde546715a6f8cc722ba51cebfa12b600a769f12af51be4eefce9787853621acc5309cb96785fd2e39f1cca88105e3a376310e9526f
SSDEEP 96:rFSx2NOg2MuDoQDngWSowU2wUTwCSowU2wUTwr2se0U2m9jpg1Gecnia7xIfQVM+:xSx2NOg2oCK1GXVxI8xIa0O
TLSH
T186F17052F7E80A18B2B29AC4A6B0C565CA36FCE7583CCF4D0281514E26F9F419D61FA7
MD5 SHA1 SHA512 SSDEEP TLSH

$TEMP/iriunv2Driver.dll

SHA256 df8801aa8ec84e96b389bf6c7cc35322f46c6447e993be78e3415762d87b2948
MD5 0b21ea2dc78bbb1ae6544c1bebe28e9d
SHA1 d8f4e3794a0fdab34210c7d30c36fff38495c2b8
SHA512 47ca6b6962810519d0ad0caebd84e9e76e4460a020fd29e3c3f4a910be29af21613ee5c943bc8cb9e6c5ffb620015e7c6fe689fcccde96c985aecc4d370de903
SSDEEP 384:WXfCNvyTA29jq8VsRICtTy5MPvkVxQHLYfYx4MElSs1dqRVP3h3EyjR9zMSsT:WXaNvSAvTXfrSWqSSqJ3Ec9z1sT
TLSH
T11CF24D9097A81883D5D7DA38C8978C4A353BF7A99121C41273B6530EDE5F3D0AB780EB
MD5 SHA1 SHA512 SSDEEP TLSH

$TEMP/iriunv3.cat

SHA256 cb98cb849fbd00e96c3d6620072578678c97ccd84442feaa6c44d0c7d04c76d0
MD5 0c117f1207a87f51f8fe8bd9fe9dd098
SHA1 7ae6f3b3f4a09f05fae6778bb1e0c6ee932c3294
SHA512 83987b82d4f1fffa525422b66d2a9a72a8c3a690de0ade6bb4566836cf86b67b1303723a48b1500e0361cfdf34cc9cbd2435e5200e77b770a4d2535eeea66260
SSDEEP 192:7OpLyQNOxqryYqCXgdJC0xPZDMPXWEwGJhYCoZU34DcX01k9z3ADb0xRsD:ycTQGDCQdlPZDMP3h3oZcDR9zMbKOD
TLSH
T16E4209A681984082F997A87057E8E5577C3E2BCF581044BA26EFF7295C733C9F71812E
MD5 SHA1 SHA512 SSDEEP TLSH

$TEMP/iriunv3.inf

SHA256 f511289dcc077d91a4f428935cb87d811454bc2df1b23b6a0a413a1a45bd5972
MD5 ffdbd003f4ee97cb9b2c0840255f2ed7
SHA1 cae1d813c0b3c15af9cef00033487946212246ce
SHA512 9e5bdfa3e44bf7aac6028855d6cbf5a4e30cb6c10aee30085475e28d1f24c4dea5ab9f0648094c4a0b4b7bf8b1e3d64062eb49287506679f7c6c203b54235442
SSDEEP 96:rFSxZKOg2MuDLQDGgWSowU2wUTwCSowU2wUTwr2se0U2m9jpg1Recnia7xLEQVMg:xSxZKOg2LNK1RXVxLXxLaLC
TLSH
T198F17E52F7E80A18B2B25AC4A7B0C565CA36FCE7983CCF4D0281514E26F9F419D61FA7
MD5 SHA1 SHA512 SSDEEP TLSH

$TEMP/iriunv3Driver.dll

SHA256 25f08ed7bdeb98a071da6f5a2c752b615e6d2a2a070bd37ad64ac290385d4843
MD5 825e34392e4699500f15e4455ed57ac6
SHA1 f5d53046a863aba6a9afdf3ab7ec5d26172d634b
SHA512 f363e20c35616e582339715a33b1077de71c9e9af7b01a33cbd36f9e970304667a42622159158b362e3727dd8ee67dab0468ce63c335610699909e165da7b046
SSDEEP 384:0XfCNvyTA29jq8VsRICtTy5MPvkVxQHLYfg9MElSs1dqeP3h3tlMgYR9z6SsVl5:0XaNvSAvTXfrSRqSSq63t6gE9zPm
TLSH
T1D6F24D90A7981883D5D7AA38C896DC56353FFBA59121C41373BA130EDE1F3C0A7690EB
MD5 SHA1 SHA512 SSDEEP TLSH

AdbWinApi.dll

IMPHASH 776334619bd19ec23e3a7a275473b5a7
SHA256 d60103a5e99bc9888f786ee916f5d6e45493c3247972cb053833803de7e95cf9
MD5 ed5a809dc0024d83cbab4fb9933d598d
SHA1 0bc5a82327f8641d9287101e4cc7041af20bad57
SHA512 1fdb74ee5912fbdd2c0cba501e998349fecfbef5f4f743c7978c38996aa7e1f38e8ac750f2dc8f84b8094de3dd6fa3f983a29f290b3fa2cdbdaed691748baf17
SSDEEP 1536:Jwqdq+3pvspmLh8SCykrpTG7kfGHuNezq02XJqo+iFi1yCP:JwqD3L8Tezq0et+ui1y
TLSH
T17BA3592138A1C172C8D261B90AECF76193AEF4B10B3599C7379803DEDD653D25B7528B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

31308

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

z:\development\usb\api\objfre_win7_x86\i386\AdbWinApi.pdb

ole32

CoCreateInstance

kernel32

GetStartupInfoA SetLastError CloseHandle GetLastError DeviceIoControl WriteFile ReadFile GetOverlappedResult CreateFileW WideCharToMultiByte Sleep InterlockedIncrement InterlockedDecrement EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection GetProcAddress LoadLibraryW GetFileAttributesW GetSystemDirectoryW RaiseException FreeLibrary InterlockedExchange MultiByteToWideChar InitializeCriticalSectionAndSpinCount GetCommandLineA GetVersionExA RtlUnwind HeapFree HeapAlloc HeapReAlloc VirtualProtect VirtualAlloc GetModuleHandleW GetSystemInfo VirtualQuery GetModuleHandleA ExitProcess TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetHandleCount GetStdHandle GetFileType GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter GetCPInfo GetACP GetOEMCP OutputDebugStringA HeapSize LoadLibraryExA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA FlushFileBuffers

setupapi

SetupDiEnumDeviceInterfaces SetupDiGetDeviceInterfaceDetailW SetupDiDestroyDeviceInfoList SetupDiGetClassDevsW

??0AdbEndpointObject@@QAE@ABV0@@Z ??0AdbEndpointObject@@QAE@PAVAdbInterfaceObject@@EE@Z ??0AdbIOCompletion@@QAE@ABV0@@Z ??0AdbIOCompletion@@QAE@PAVAdbEndpointObject@@KPAX@Z ??0AdbInterfaceObject@@QAE@ABV0@@Z ??0AdbInterfaceObject@@QAE@PBG@Z ??0AdbObjectHandle@@QAE@ABV0@@Z ??0AdbObjectHandle@@QAE@W4AdbObjectType@@@Z ??1AdbEndpointObject@@MAE@XZ ??1AdbIOCompletion@@MAE@XZ ??1AdbInterfaceObject@@MAE@XZ ??1AdbObjectHandle@@MAE@XZ ??4AdbEndpointObject@@QAEAAV0@ABV0@@Z ??4AdbIOCompletion@@QAEAAV0@ABV0@@Z ??4AdbInterfaceObject@@QAEAAV0@ABV0@@Z ??4AdbObjectHandle@@QAEAAV0@ABV0@@Z ??_7AdbEndpointObject@@6B@ ??_7AdbIOCompletion@@6B@ ??_7AdbInterfaceObject@@6B@ ??_7AdbObjectHandle@@6B@ ?AddRef@AdbObjectHandle@@UAEJXZ ?AsyncRead@AdbEndpointObject@@UAEPAXPAXKPAK0K@Z ?AsyncWrite@AdbEndpointObject@@UAEPAXPAXKPAK0K@Z ?CloseHandle@AdbObjectHandle@@UAE_NXZ ?CreateHandle@AdbObjectHandle@@UAEPAXXZ ?GetEndpointInformation@AdbEndpointObject@@UAE_NPAU_AdbEndpointInformation@@@Z ?GetInterfaceName@AdbInterfaceObject@@UAE_NPAXPAK_N@Z ?GetParentInterfaceHandle@AdbEndpointObject@@QBEPAXXZ ?GetParentObjectHandle@AdbIOCompletion@@QBEPAXXZ ?GetUsbConfigurationDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_CONFIGURATION_DESCRIPTOR@@@Z ?GetUsbDeviceDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_DEVICE_DESCRIPTOR@@@Z ?GetUsbInterfaceDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_INTERFACE_DESCRIPTOR@@@Z ?IsCompleted@AdbIOCompletion@@UAE_NXZ ?IsObjectOfType@AdbObjectHandle@@UBE_NW4AdbObjectType@@@Z ?IsOpened@AdbObjectHandle@@QBE_NXZ ?LastReferenceReleased@AdbObjectHandle@@MAEXXZ ?Lookup@AdbObjectHandle@@SGPAV1@PAX@Z ?Release@AdbObjectHandle@@UAEJXZ ?SyncRead@AdbEndpointObject@@UAE_NPAXKPAKK@Z ?SyncWrite@AdbEndpointObject@@UAE_NPAXKPAKK@Z ?Type@AdbEndpointObject@@SG?AW4AdbObjectType@@XZ ?Type@AdbIOCompletion@@SG?AW4AdbObjectType@@XZ ?Type@AdbInterfaceObject@@SG?AW4AdbObjectType@@XZ ?adb_handle@AdbObjectHandle@@QBEPAXXZ ?endpoint_id@AdbEndpointObject@@QBEEXZ ?endpoint_index@AdbEndpointObject@@QBEEXZ ?interface_name@AdbInterfaceObject@@QBEABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@XZ ?object_type@AdbObjectHandle@@QBE?AW4AdbObjectType@@XZ ?overlapped@AdbIOCompletion@@QAEPAU_OVERLAPPED@@XZ ?parent_interface@AdbEndpointObject@@QBEPAVAdbInterfaceObject@@XZ ?parent_io_object@AdbIOCompletion@@QBEPAVAdbEndpointObject@@XZ ?usb_config_descriptor@AdbInterfaceObject@@QBEPBU_USB_CONFIGURATION_DESCRIPTOR@@XZ ?usb_device_descriptor@AdbInterfaceObject@@QBEPBU_USB_DEVICE_DESCRIPTOR@@XZ ?usb_interface_descriptor@AdbInterfaceObject@@QBEPBU_USB_INTERFACE_DESCRIPTOR@@XZ AdbCloseHandle AdbCreateInterface AdbCreateInterfaceByName AdbEnumInterfaces AdbGetDefaultBulkReadEndpointInformation AdbGetDefaultBulkWriteEndpointInformation AdbGetEndpointInformation AdbGetEndpointInterface AdbGetInterfaceName AdbGetOvelappedIoResult AdbGetSerialNumber AdbGetUsbConfigurationDescriptor AdbGetUsbDeviceDescriptor AdbGetUsbInterfaceDescriptor AdbHasOvelappedIoComplated AdbNextInterface AdbOpenDefaultBulkReadEndpoint AdbOpenDefaultBulkWriteEndpoint AdbOpenEndpoint AdbQueryInformationEndpoint AdbReadEndpointAsync AdbReadEndpointSync AdbResetInterfaceEnum AdbWriteEndpointAsync AdbWriteEndpointSync

AdbWinUsbApi.dll

IMPHASH 72b8c869f01047191838df5f58e88dd8
SHA256 25207c506d29c4e8dceb61b4bd50e8669ba26012988a43fbf26a890b1e60fc97
MD5 0e24119daf1909e398fa1850b6112077
SHA1 293eedadb3172e756a421790d551e407457e0a8c
SHA512 9cbb26e555ab40b019a446337db58770b9a0c9c08316ff1e1909c4b6d99c00bd33522d05890870a91b4b581e20c7dce87488ab0d22fc3c4bbdd7e9b38f164b43
SSDEEP 1536:l72doFmOiHizFbPlspcsbj5ZsP+YeTs1p:lSSfN9+YeTs1p
TLSH
T1C8534B227991C072C89661B909FDE651A27FBA601BB184C7779C03EBED303D1AB79347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

17226

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

z:\development\usb\winusb\objfre_win7_x86\i386\AdbWinUsbApi.pdb

ole32

CoCreateInstance

kernel32

GetCommandLineA GetVersionExA RtlUnwind HeapAlloc HeapFree HeapReAlloc VirtualProtect VirtualAlloc GetProcAddress GetModuleHandleW GetSystemInfo VirtualQuery GetModuleHandleA ExitProcess TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter HeapSize WriteFile OutputDebugStringA LoadLibraryExA GetCPInfo GetACP GetOEMCP GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW MultiByteToWideChar InterlockedIncrement RaiseException CreateFileW WideCharToMultiByte CreateEventW CloseHandle Sleep DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection GetLastError SetLastError InterlockedDecrement GetEnvironmentStringsW

winusb

WinUsb_GetOverlappedResult WinUsb_ResetPipe WinUsb_Free WinUsb_SetPipePolicy WinUsb_ReadPipe WinUsb_WritePipe WinUsb_GetDescriptor WinUsb_QueryPipe WinUsb_QueryInterfaceSettings WinUsb_GetCurrentAlternateSetting WinUsb_Initialize WinUsb_AbortPipe

adbwinapi

??1AdbIOCompletion@@MAE@XZ ??0AdbEndpointObject@@QAE@PAVAdbInterfaceObject@@EE@Z ?AddRef@AdbObjectHandle@@UAEJXZ ?CreateHandle@AdbObjectHandle@@UAEPAXXZ ?IsObjectOfType@AdbObjectHandle@@UBE_NW4AdbObjectType@@@Z ?LastReferenceReleased@AdbObjectHandle@@MAEXXZ ?GetEndpointInformation@AdbEndpointObject@@UAE_NPAU_AdbEndpointInformation@@@Z ?AsyncRead@AdbEndpointObject@@UAEPAXPAXKPAK0K@Z ?AsyncWrite@AdbEndpointObject@@UAEPAXPAXKPAK0K@Z ?SyncRead@AdbEndpointObject@@UAE_NPAXKPAKK@Z ?SyncWrite@AdbEndpointObject@@UAE_NPAXKPAKK@Z ?CloseHandle@AdbObjectHandle@@UAE_NXZ ??0AdbInterfaceObject@@QAE@PBG@Z ?GetInterfaceName@AdbInterfaceObject@@UAE_NPAXPAK_N@Z ?GetUsbDeviceDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_DEVICE_DESCRIPTOR@@@Z ?GetUsbConfigurationDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_CONFIGURATION_DESCRIPTOR@@@Z ?GetUsbInterfaceDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_INTERFACE_DESCRIPTOR@@@Z ??1AdbInterfaceObject@@MAE@XZ ??0AdbIOCompletion@@QAE@PAVAdbEndpointObject@@KPAX@Z ?IsCompleted@AdbIOCompletion@@UAE_NXZ ??1AdbEndpointObject@@MAE@XZ

IriunWebcam.exe

IMPHASH 606666d1fa3a53647d0747ec602cb219
SHA256 a321ce1ab7516afaf6de60097f5967cb0d899d781b3eadbd10dd8942c421b292
MD5 781e6f76d202842e1b989f56a6c224ba
SHA1 dcb8a8850fb22789c147d687f0c48961f81d298c
SHA512 f154233c90536ec4120f9c0e9ab104dd78d62848ce52ca61361fb7a856b55d8c2e307cf00d41225bfcca588acae623058144fd45db12c473b6eb503a64718631
SSDEEP 6144:bMXF+7Gh6xcl4btYpl1wfxRf5gXQDdrmY5Ky5:bMA9q4bQufxRf0QZToC
TLSH
T1A3B46994F28585A2D511067284376AB7462BADF39B2492E327ECFC5B89733B10DE3713
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

69184

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\a\_work\1\s\src\runtime\artifacts\obj\win-x86.Release\corehost\apphost\standalone\apphost.pdb

shell32

ShellExecuteW

advapi32

RegCloseKey ReportEventW RegisterEventSourceW RegOpenKeyExW RegGetValueW DeregisterEventSource

kernel32

TlsFree CreateActCtxW ActivateActCtx GetLastError FindResourceW GetWindowsDirectoryW GetProcAddress GetModuleHandleW FreeLibrary LoadLibraryExW FindFirstFileExW EnterCriticalSection GetFullPathNameW FindNextFileW GetCurrentProcess GetStdHandle GetModuleHandleExW GetModuleFileNameW LeaveCriticalSection GetEnvironmentVariableW FindClose GetFileAttributesW MultiByteToWideChar GetConsoleMode GetFileAttributesExW LoadLibraryA WriteConsoleW DeleteCriticalSection WideCharToMultiByte IsWow64Process OutputDebugStringW GetCurrentProcessId TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError RaiseException RtlUnwind InitializeSListHead IsDebuggerPresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter IsProcessorFeaturePresent GetSystemTimeAsFileTime GetStringTypeW SwitchToThread GetCurrentThreadId InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx QueryPerformanceCounter

user32

MessageBoxW

api-ms-win-crt-runtime-l1-1-0

_initterm _get_initial_wide_environment _errno _initialize_wide_environment _configure_wide_argv _initterm_e _set_app_type _seh_filter_exe _cexit exit _exit _crt_atexit _register_onexit_function _initialize_onexit_table _invoke_watson __p___argc abort _c_exit _register_thread_local_exe_atexit_callback __p___wargv _controlfp_s terminate

api-ms-win-crt-heap-l1-1-0

malloc _set_new_mode _callnewh calloc free

api-ms-win-crt-time-l1-1-0

_time64 wcsftime _gmtime64_s

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func fputwc __stdio_common_vfwprintf __stdio_common_vsnwprintf_s __p__commode __stdio_common_vswprintf setvbuf _wfsopen fflush _set_fmode

api-ms-win-crt-locale-l1-1-0

___lc_locale_name_func __pctype_func setlocale ___mb_cur_max_func _unlock_locales _lock_locales _create_locale _configthreadlocale _free_locale ___lc_codepage_func

api-ms-win-crt-string-l1-1-0

_wcsdup toupper wcsncmp wcsnlen strcpy_s

api-ms-win-crt-convert-l1-1-0

wcstoul _wtoi

api-ms-win-crt-math-l1-1-0

__setusermatherr

adb.exe

IMPHASH 3d25355dc24d5f7fe12b6f877adaaf96
SHA256 766bd599dc2012ec79826cc54690276b46682d067ca8723e322a65a921a24226
MD5 96c1a1f9ece6eee131f57117717d5990
SHA1 304fd11cd4fa1694ad572c44edbae34a5d2be7e1
SHA512 8995af1b47e115c249619634dfead94193b979fb53b923b822f56f3f94e3bfd0dc5d8cad3333c5b7987eb717fceddce072fdf722255e22399994f29ed7c4809c
SSDEEP 49152:0RiLyc3hcPSsYKKRo+EqGxhznNhYnQk3:Ii9WkxEfxhzAQk3
TLSH
T11A958D0EF6C3E1B9FA8714B0512EB3BF7E3506009526CEF7C6808D706D625126A9E76D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5264

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

adbwinapi

AdbCloseHandle AdbCreateInterfaceByName AdbEnumInterfaces AdbGetEndpointInformation AdbGetInterfaceName AdbGetSerialNumber AdbGetUsbDeviceDescriptor AdbGetUsbInterfaceDescriptor AdbNextInterface AdbOpenDefaultBulkReadEndpoint AdbOpenDefaultBulkWriteEndpoint AdbReadEndpointSync AdbWriteEndpointSync

advapi32

CloseServiceHandle EnumServicesStatusA OpenSCManagerA SystemFunction036

kernel32

AcquireSRWLockExclusive AddVectoredExceptionHandler CancelIo CloseHandle CreateEventA CreateFileA CreateFileW CreateMutexA CreatePipe CreateProcessW CreateSemaphoreA DeleteCriticalSection DeviceIoControl DuplicateHandle EnterCriticalSection FlsAlloc FlsGetValue FlsSetValue FormatMessageA FormatMessageW FreeLibrary GetConsoleMode GetConsoleScreenBufferInfo GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetFileAttributesA GetFileAttributesW GetHandleInformation GetLastError GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetOverlappedResult GetProcAddress GetProcessAffinityMask GetStartupInfoW GetStdHandle GetSystemInfo GetSystemTimeAsFileTime GetTempPathA GetTempPathW GetThreadContext GetThreadId GetThreadPriority GetTickCount GetTimeZoneInformation GetVersionExA InitOnceExecuteOnce InitializeCriticalSection IsDBCSLeadByteEx IsDebuggerPresent LeaveCriticalSection LoadLibraryA MultiByteToWideChar OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleInputA ReadFile ReleaseMutex ReleaseSRWLockExclusive ReleaseSemaphore RemoveVectoredExceptionHandler ResetEvent ResumeThread SetConsoleMode SetEvent SetFilePointerEx SetHandleInformation SetLastError SetProcessAffinityMask SetThreadAffinityMask SetThreadContext SetThreadPriority SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW SleepEx SuspendThread SwitchToThread TerminateProcess TerminateThread TlsAlloc TlsFree TlsGetValue TlsSetValue TryAcquireSRWLockExclusive TryEnterCriticalSection UnhandledExceptionFilter VerSetConditionMask VerifyVersionInfoA VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteConsoleOutputW WriteConsoleW WriteFile

msvcrt

___mb_cur_max_func __lconv_init __p___argv __p__fmode __p__wcmdln __set_app_type __setusermatherr __wgetmainargs __winitenv _aligned_free _aligned_malloc _amsg_exit _beginthreadex _cexit _endthreadex _errno _exit _findclose _fstati64 _fullpath _get_osfhandle _initterm _iob _isctype_l _iswalpha_l _iswcntrl_l _iswdigit_l _iswlower_l _iswprint_l _iswpunct_l _iswspace_l _iswupper_l _iswxdigit_l _lock _lseeki64 _mbtowc_l _mkdir _mktemp _onexit _pctype _setjmp3 _setmode _snprintf _stati64 _vsnwprintf _wstati64 fwprintf _sscanf_l _strcoll_l _strdup _strerror _stricmp _strnicmp _strtod_l _strtoi64_l _tolower_l _toupper_l _towlower_l _towupper_l _ultoa _unlock _vscprintf _vsnprintf _wchmod _wcscoll_l _wcsxfrm_l _wenviron _wfopen _wfullpath _wgetcwd _wmkdir _wopen _wunlink _wutime abort atoi bsearch calloc exit fclose feof ferror fflush fgets fgetwc fopen fprintf fputc fputs fputwc fread free fseek ftell fwrite getc getenv isalnum islower isprint isspace isupper iswctype isxdigit localeconv malloc mbstowcs memchr memcmp memcpy memmove memset localtime gmtime perror printf qsort raise realloc setlocale setvbuf signal strchr strcmp strcpy strerror strftime strlen strncmp strrchr strstr strtok strtol strtoul tolower toupper ungetc vfprintf time _strtoui64_l _strxfrm_l _sys_nerr wcrtomb_s wcscat wcschr wcscpy wcslen wcstol wcstombs wcstoul _wfindnext _wfindfirst _stat _findnext _findfirst longjmp _write _wcsicmp _unlink _umask _strdup _rmdir _read _putenv _open _isatty _getpid _fileno _fdopen _dup2 _dup _close

shell32

SHGetFolderPathW

api-ms-win-crt-locale-l1-1-0

_create_locale _free_locale

user32

CreateWindowExW DefWindowProcW DispatchMessageW GetMessageW MapVirtualKeyA RegisterClassExW ToAscii TranslateMessage

ws2_32

WSAGetLastError WSAIoctl WSAPoll WSASend WSASetLastError WSAStartup accept bind closesocket connect freeaddrinfo getaddrinfo getsockname htonl htons inet_addr inet_ntoa inet_ntop ioctlsocket listen ntohl ntohs recv select send setsockopt shutdown socket

ACCESS_DESCRIPTION_free ACCESS_DESCRIPTION_it ACCESS_DESCRIPTION_new AES_cbc_encrypt AES_cfb128_encrypt AES_ctr128_encrypt AES_decrypt AES_ecb_encrypt AES_encrypt AES_ofb128_encrypt AES_set_decrypt_key AES_set_encrypt_key AES_unwrap_key AES_wrap_key ASN1_ANY_it ASN1_BIT_STRING_check ASN1_BIT_STRING_free ASN1_BIT_STRING_get_bit ASN1_BIT_STRING_it ASN1_BIT_STRING_new ASN1_BIT_STRING_set ASN1_BIT_STRING_set_bit ASN1_BMPSTRING_free ASN1_BMPSTRING_it ASN1_BMPSTRING_new ASN1_BOOLEAN_it ASN1_ENUMERATED_free ASN1_ENUMERATED_get ASN1_ENUMERATED_it ASN1_ENUMERATED_new ASN1_ENUMERATED_set ASN1_ENUMERATED_to_BN ASN1_FBOOLEAN_it ASN1_GENERALIZEDTIME_adj ASN1_GENERALIZEDTIME_check ASN1_GENERALIZEDTIME_free ASN1_GENERALIZEDTIME_it ASN1_GENERALIZEDTIME_new ASN1_GENERALIZEDTIME_print ASN1_GENERALIZEDTIME_set ASN1_GENERALIZEDTIME_set_string ASN1_GENERALSTRING_free ASN1_GENERALSTRING_it ASN1_GENERALSTRING_new ASN1_IA5STRING_free ASN1_IA5STRING_it ASN1_IA5STRING_new ASN1_INTEGER_cmp ASN1_INTEGER_dup ASN1_INTEGER_free ASN1_INTEGER_get ASN1_INTEGER_it ASN1_INTEGER_new ASN1_INTEGER_set ASN1_INTEGER_set_uint64 ASN1_INTEGER_to_BN ASN1_NULL_free ASN1_NULL_it ASN1_NULL_new ASN1_OBJECT_create ASN1_OBJECT_free ASN1_OBJECT_it ASN1_OBJECT_new ASN1_OCTET_STRING_NDEF_it ASN1_OCTET_STRING_cmp ASN1_OCTET_STRING_dup ASN1_OCTET_STRING_free ASN1_OCTET_STRING_it ASN1_OCTET_STRING_new ASN1_OCTET_STRING_set ASN1_PRINTABLESTRING_free ASN1_PRINTABLESTRING_it ASN1_PRINTABLESTRING_new ASN1_PRINTABLE_free ASN1_PRINTABLE_it ASN1_PRINTABLE_new ASN1_PRINTABLE_type ASN1_SEQUENCE_ANY_it ASN1_SEQUENCE_it ASN1_SET_ANY_it ASN1_STRING_TABLE_add ASN1_STRING_TABLE_cleanup ASN1_STRING_TABLE_get ASN1_STRING_cmp ASN1_STRING_copy ASN1_STRING_data ASN1_STRING_dup ASN1_STRING_free ASN1_STRING_get0_data ASN1_STRING_get_default_mask ASN1_STRING_length ASN1_STRING_length_set ASN1_STRING_new ASN1_STRING_print ASN1_STRING_print_ex ASN1_STRING_print_ex_fp ASN1_STRING_set ASN1_STRING_set0 ASN1_STRING_set_by_NID ASN1_STRING_set_default_mask ASN1_STRING_set_default_mask_asc ASN1_STRING_to_UTF8 ASN1_STRING_type ASN1_STRING_type_new ASN1_T61STRING_free ASN1_T61STRING_it ASN1_T61STRING_new ASN1_TBOOLEAN_it ASN1_TIME_adj ASN1_TIME_check ASN1_TIME_diff ASN1_TIME_free ASN1_TIME_it ASN1_TIME_new ASN1_TIME_print ASN1_TIME_set ASN1_TIME_set_string ASN1_TIME_to_generalizedtime ASN1_TYPE_cmp ASN1_TYPE_free ASN1_TYPE_get ASN1_TYPE_new ASN1_TYPE_set ASN1_TYPE_set1 ASN1_UNIVERSALSTRING_free ASN1_UNIVERSALSTRING_it ASN1_UNIVERSALSTRING_new ASN1_UTCTIME_adj ASN1_UTCTIME_check ASN1_UTCTIME_cmp_time_t ASN1_UTCTIME_free ASN1_UTCTIME_it ASN1_UTCTIME_new ASN1_UTCTIME_print ASN1_UTCTIME_set ASN1_UTCTIME_set_string ASN1_UTF8STRING_free ASN1_UTF8STRING_it ASN1_UTF8STRING_new ASN1_VISIBLESTRING_free ASN1_VISIBLESTRING_it ASN1_VISIBLESTRING_new ASN1_digest ASN1_generate_nconf ASN1_generate_v3 ASN1_get_object ASN1_item_d2i ASN1_item_d2i_bio ASN1_item_d2i_fp ASN1_item_digest ASN1_item_dup ASN1_item_free ASN1_item_i2d ASN1_item_i2d_bio ASN1_item_i2d_fp ASN1_item_ndef_i2d ASN1_item_new ASN1_item_pack ASN1_item_sign ASN1_item_sign_ctx ASN1_item_unpack ASN1_item_verify ASN1_mbstring_copy ASN1_mbstring_ncopy ASN1_object_size ASN1_put_eoc ASN1_put_object ASN1_tag2bit ASN1_tag2str AUTHORITY_INFO_ACCESS_free AUTHORITY_INFO_ACCESS_it AUTHORITY_INFO_ACCESS_new AUTHORITY_KEYID_free AUTHORITY_KEYID_it AUTHORITY_KEYID_new BASIC_CONSTRAINTS_free BASIC_CONSTRAINTS_it BASIC_CONSTRAINTS_new BIO_append_filename BIO_callback_ctrl BIO_clear_flags BIO_clear_retry_flags BIO_copy_next_retry BIO_ctrl BIO_ctrl_pending BIO_eof BIO_find_type BIO_flush BIO_free BIO_free_all BIO_get_data BIO_get_fp BIO_get_init BIO_get_new_index BIO_get_retry_flags BIO_get_retry_reason BIO_get_shutdown BIO_gets BIO_hexdump BIO_indent BIO_int_ctrl BIO_meth_free BIO_meth_new BIO_meth_set_create BIO_meth_set_ctrl BIO_meth_set_destroy BIO_meth_set_gets BIO_meth_set_puts BIO_meth_set_read BIO_meth_set_write BIO_method_type BIO_new BIO_new_file BIO_new_fp BIO_next BIO_number_read BIO_number_written BIO_pending BIO_pop BIO_printf BIO_ptr_ctrl BIO_push BIO_puts BIO_read BIO_read_asn1 BIO_read_filename BIO_reset BIO_rw_filename BIO_s_file BIO_set_close BIO_set_data BIO_set_flags BIO_set_fp BIO_set_init BIO_set_retry_read BIO_set_retry_special BIO_set_retry_write BIO_set_shutdown BIO_set_write_buffer_size BIO_should_io_special BIO_should_read BIO_should_retry BIO_should_write BIO_snprintf BIO_test_flags BIO_up_ref BIO_vfree BIO_vsnprintf BIO_wpending BIO_write BIO_write_all BIO_write_filename BN_CTX_end BN_CTX_free BN_CTX_get BN_CTX_new BN_CTX_start BN_GENCB_call BN_GENCB_set BN_MONT_CTX_copy BN_MONT_CTX_free BN_MONT_CTX_new BN_MONT_CTX_new_consttime BN_MONT_CTX_new_for_modulus BN_MONT_CTX_set BN_abs_is_word BN_add BN_add_word BN_asc2bn BN_bin2bn BN_bn2bin BN_bn2bin_padded BN_bn2binpad BN_bn2cbb_padded BN_bn2dec BN_bn2hex BN_bn2le_padded BN_bn2mpi BN_clear BN_clear_bit BN_clear_free BN_cmp BN_cmp_word BN_copy BN_count_low_zero_bits BN_dec2bn BN_div BN_div_word BN_dup BN_enhanced_miller_rabin_primality_test BN_equal_consttime BN_exp BN_free BN_from_montgomery BN_gcd BN_generate_prime_ex BN_get_u64 BN_get_word BN_hex2bn BN_init BN_is_bit_set BN_is_negative BN_is_odd BN_is_one BN_is_pow2 BN_is_prime_ex BN_is_prime_fasttest_ex BN_is_word BN_is_zero BN_le2bn BN_lshift BN_lshift1 BN_marshal_asn1 BN_mask_bits BN_mod_add BN_mod_add_quick BN_mod_exp BN_mod_exp2_mont BN_mod_exp_mont BN_mod_exp_mont_consttime BN_mod_exp_mont_word BN_mod_inverse BN_mod_lshift BN_mod_lshift1 BN_mod_lshift1_quick BN_mod_lshift_quick BN_mod_mul BN_mod_mul_montgomery BN_mod_pow2 BN_mod_sqr BN_mod_sqrt BN_mod_sub BN_mod_sub_quick BN_mod_word BN_mpi2bn BN_mul BN_mul_word BN_new BN_nnmod BN_nnmod_pow2 BN_num_bits BN_num_bits_word BN_num_bytes BN_one BN_parse_asn1_unsigned BN_primality_test BN_print BN_print_fp BN_pseudo_rand BN_pseudo_rand_range BN_rand BN_rand_range BN_rand_range_ex BN_rshift BN_rshift1 BN_set_bit BN_set_negative BN_set_u64 BN_set_word BN_sqr BN_sqrt BN_sub BN_sub_word BN_to_ASN1_ENUMERATED BN_to_ASN1_INTEGER BN_to_montgomery BN_uadd BN_ucmp BN_usub BN_value_one BN_zero BORINGSSL_self_test BUF_MEM_append BUF_MEM_free BUF_MEM_grow BUF_MEM_grow_clean BUF_MEM_new BUF_MEM_reserve BUF_memdup BUF_strdup BUF_strlcat BUF_strlcpy BUF_strndup BUF_strnlen CBB_add_asn1 CBB_add_asn1_bool CBB_add_asn1_octet_string CBB_add_asn1_oid_from_text CBB_add_asn1_uint64 CBB_add_bytes CBB_add_space CBB_add_u16 CBB_add_u16_length_prefixed CBB_add_u24 CBB_add_u24_length_prefixed CBB_add_u32 CBB_add_u64 CBB_add_u8 CBB_add_u8_length_prefixed CBB_cleanup CBB_data CBB_did_write CBB_discard_child CBB_finish CBB_flush CBB_flush_asn1_set_of CBB_init CBB_init_fixed CBB_len CBB_reserve CBB_zero CBS_asn1_ber_to_der CBS_asn1_bitstring_has_bit CBS_asn1_oid_to_text CBS_contains_zero_byte CBS_copy_bytes CBS_data CBS_get_any_asn1 CBS_get_any_asn1_element CBS_get_any_ber_asn1_element CBS_get_asn1 CBS_get_asn1_bool CBS_get_asn1_element CBS_get_asn1_implicit_string CBS_get_asn1_uint64 CBS_get_bytes CBS_get_last_u8 CBS_get_optional_asn1 CBS_get_optional_asn1_bool CBS_get_optional_asn1_octet_string CBS_get_optional_asn1_uint64 CBS_get_u16 CBS_get_u16_length_prefixed CBS_get_u24 CBS_get_u24_length_prefixed CBS_get_u32 CBS_get_u64 CBS_get_u8 CBS_get_u8_length_prefixed CBS_init CBS_is_valid_asn1_bitstring CBS_len CBS_mem_equal CBS_peek_asn1_tag CBS_skip CBS_stow CBS_strdup CERTIFICATEPOLICIES_free CERTIFICATEPOLICIES_it CERTIFICATEPOLICIES_new CONF_modules_free CONF_modules_load_file CRL_DIST_POINTS_free CRL_DIST_POINTS_it CRL_DIST_POINTS_new CRYPTO_BUFFER_POOL_free CRYPTO_BUFFER_POOL_new CRYPTO_BUFFER_alloc CRYPTO_BUFFER_data CRYPTO_BUFFER_free CRYPTO_BUFFER_init_CBS CRYPTO_BUFFER_len CRYPTO_BUFFER_new CRYPTO_BUFFER_new_from_CBS CRYPTO_BUFFER_up_ref CRYPTO_MUTEX_cleanup CRYPTO_MUTEX_init CRYPTO_MUTEX_lock_read CRYPTO_MUTEX_lock_write CRYPTO_MUTEX_unlock_read CRYPTO_MUTEX_unlock_write CRYPTO_STATIC_MUTEX_lock_read CRYPTO_STATIC_MUTEX_lock_write CRYPTO_STATIC_MUTEX_unlock_read CRYPTO_STATIC_MUTEX_unlock_write CRYPTO_cleanup_all_ex_data CRYPTO_free_ex_data CRYPTO_gcm128_aad CRYPTO_gcm128_decrypt CRYPTO_gcm128_decrypt_ctr32 CRYPTO_gcm128_encrypt CRYPTO_gcm128_encrypt_ctr32 CRYPTO_gcm128_finish CRYPTO_gcm128_init_key CRYPTO_gcm128_setiv CRYPTO_gcm128_tag CRYPTO_get_ex_data CRYPTO_get_ex_new_index CRYPTO_get_thread_local CRYPTO_memcmp CRYPTO_new_ex_data CRYPTO_once CRYPTO_refcount_dec_and_test_zero CRYPTO_refcount_inc CRYPTO_set_ex_data CRYPTO_set_thread_local CRYPTO_tls1_prf CTR_DRBG_clear CTR_DRBG_generate CTR_DRBG_init CTR_DRBG_reseed DES_decrypt3 DES_ecb3_encrypt DES_ecb_encrypt DES_ede2_cbc_encrypt DES_ede3_cbc_encrypt DES_encrypt3 DES_ncbc_encrypt DES_set_key DES_set_key_unchecked DES_set_odd_parity DH_check DH_check_pub_key DH_compute_key DH_free DH_generate_key DH_generate_parameters_ex DH_get0_key DH_get0_pqg DH_get_ex_data DH_get_ex_new_index DH_marshal_parameters DH_new DH_num_bits DH_parse_parameters DH_set0_key DH_set0_pqg DH_set_ex_data DH_size DH_up_ref DHparams_dup DIRECTORYSTRING_free DIRECTORYSTRING_it DIRECTORYSTRING_new DISPLAYTEXT_free DISPLAYTEXT_it DISPLAYTEXT_new DIST_POINT_NAME_free DIST_POINT_NAME_it DIST_POINT_NAME_new DIST_POINT_free DIST_POINT_it DIST_POINT_new DIST_POINT_set_dpname DSA_SIG_free DSA_SIG_marshal DSA_SIG_new DSA_SIG_parse DSA_check_signature DSA_do_check_signature DSA_do_sign DSA_do_verify DSA_dup_DH DSA_free DSA_generate_key DSA_generate_parameters_ex DSA_get0_key DSA_get0_pqg DSA_get_ex_data DSA_get_ex_new_index DSA_marshal_parameters DSA_marshal_private_key DSA_marshal_public_key DSA_new DSA_parse_parameters DSA_parse_private_key DSA_parse_public_key DSA_set0_key DSA_set0_pqg DSA_set_ex_data DSA_sign DSA_size DSA_up_ref DSA_verify DSAparams_dup ECDH_compute_key ECDH_compute_key_fips ECDSA_SIG_free ECDSA_SIG_from_bytes ECDSA_SIG_get0 ECDSA_SIG_marshal ECDSA_SIG_max_len ECDSA_SIG_new ECDSA_SIG_parse ECDSA_SIG_set0 ECDSA_SIG_to_bytes ECDSA_do_sign ECDSA_do_verify ECDSA_sign ECDSA_size ECDSA_verify EC_GROUP_cmp EC_GROUP_dup EC_GROUP_free EC_GROUP_get0_generator EC_GROUP_get0_order EC_GROUP_get_cofactor EC_GROUP_get_curve_GFp EC_GROUP_get_curve_name EC_GROUP_get_degree EC_GROUP_get_order EC_GROUP_method_of EC_GROUP_new_by_curve_name EC_GROUP_new_curve_GFp EC_GROUP_order_bits EC_GROUP_set_asn1_flag EC_GROUP_set_generator EC_GROUP_set_point_conversion_form EC_KEY_check_fips EC_KEY_check_key EC_KEY_dup EC_KEY_free EC_KEY_generate_key EC_KEY_generate_key_fips EC_KEY_get0_group EC_KEY_get0_private_key EC_KEY_get0_public_key EC_KEY_get_conv_form EC_KEY_get_enc_flags EC_KEY_get_ex_data EC_KEY_get_ex_new_index EC_KEY_is_opaque EC_KEY_key2buf EC_KEY_marshal_curve_name EC_KEY_marshal_private_key EC_KEY_new EC_KEY_new_by_curve_name EC_KEY_new_method EC_KEY_parse_curve_name EC_KEY_parse_parameters EC_KEY_parse_private_key EC_KEY_set_asn1_flag EC_KEY_set_conv_form EC_KEY_set_enc_flags EC_KEY_set_ex_data EC_KEY_set_group EC_KEY_set_private_key EC_KEY_set_public_key EC_KEY_set_public_key_affine_coordinates EC_KEY_up_ref EC_METHOD_get_field_type EC_POINT_add EC_POINT_clear_free EC_POINT_cmp EC_POINT_copy EC_POINT_dbl EC_POINT_dup EC_POINT_free EC_POINT_get_affine_coordinates_GFp EC_POINT_invert EC_POINT_is_at_infinity EC_POINT_is_on_curve EC_POINT_mul EC_POINT_new EC_POINT_oct2point EC_POINT_point2cbb EC_POINT_point2oct EC_POINT_set_affine_coordinates_GFp EC_POINT_set_compressed_coordinates_GFp EC_POINT_set_to_infinity EC_curve_nid2nist EC_curve_nist2nid EC_get_builtin_curves ED25519_keypair ED25519_keypair_from_seed ED25519_sign ED25519_verify EDIPARTYNAME_free EDIPARTYNAME_it EDIPARTYNAME_new ENGINE_free ENGINE_get_ECDSA_method ENGINE_get_RSA_method ENGINE_new ENGINE_set_ECDSA_method ENGINE_set_RSA_method ERR_SAVE_STATE_free ERR_add_error_data ERR_add_error_dataf ERR_clear_error ERR_clear_system_error ERR_error_string ERR_error_string_n ERR_free_strings ERR_func_error_string ERR_get_error ERR_get_error_line ERR_get_error_line_data ERR_get_next_error_library ERR_lib_error_string ERR_load_BIO_strings ERR_load_ERR_strings ERR_load_RAND_strings ERR_load_crypto_strings ERR_peek_error ERR_peek_error_line ERR_peek_error_line_data ERR_peek_last_error ERR_peek_last_error_line ERR_peek_last_error_line_data ERR_pop_to_mark ERR_print_errors ERR_print_errors_cb ERR_print_errors_fp ERR_put_error ERR_reason_error_string ERR_remove_state ERR_remove_thread_state ERR_restore_state ERR_save_state ERR_set_mark EVP_AEAD_CTX_aead EVP_AEAD_CTX_cleanup EVP_AEAD_CTX_free EVP_AEAD_CTX_get_iv EVP_AEAD_CTX_init EVP_AEAD_CTX_init_with_direction EVP_AEAD_CTX_new EVP_AEAD_CTX_open EVP_AEAD_CTX_open_gather EVP_AEAD_CTX_seal EVP_AEAD_CTX_seal_scatter EVP_AEAD_CTX_tag_len EVP_AEAD_CTX_zero EVP_AEAD_key_length EVP_AEAD_max_overhead EVP_AEAD_max_tag_len EVP_AEAD_nonce_length EVP_BytesToKey EVP_CIPHER_CTX_block_size EVP_CIPHER_CTX_cipher EVP_CIPHER_CTX_cleanup EVP_CIPHER_CTX_copy EVP_CIPHER_CTX_ctrl EVP_CIPHER_CTX_encrypting EVP_CIPHER_CTX_flags EVP_CIPHER_CTX_free EVP_CIPHER_CTX_get_app_data EVP_CIPHER_CTX_init EVP_CIPHER_CTX_iv_length EVP_CIPHER_CTX_key_length EVP_CIPHER_CTX_mode EVP_CIPHER_CTX_new EVP_CIPHER_CTX_nid EVP_CIPHER_CTX_reset EVP_CIPHER_CTX_set_app_data EVP_CIPHER_CTX_set_flags EVP_CIPHER_CTX_set_key_length EVP_CIPHER_CTX_set_padding EVP_CIPHER_block_size EVP_CIPHER_flags EVP_CIPHER_iv_length EVP_CIPHER_key_length EVP_CIPHER_mode EVP_CIPHER_nid EVP_Cipher EVP_CipherFinal_ex EVP_CipherInit EVP_CipherInit_ex EVP_CipherUpdate EVP_DecodeBase64 EVP_DecodeBlock EVP_DecodeFinal EVP_DecodeInit EVP_DecodeUpdate EVP_DecodedLength EVP_DecryptFinal_ex EVP_DecryptInit EVP_DecryptInit_ex EVP_DecryptUpdate EVP_Digest EVP_DigestFinal EVP_DigestFinal_ex EVP_DigestInit EVP_DigestInit_ex EVP_DigestSign EVP_DigestSignFinal EVP_DigestSignInit EVP_DigestSignUpdate EVP_DigestUpdate EVP_DigestVerify EVP_DigestVerifyFinal EVP_DigestVerifyInit EVP_DigestVerifyUpdate EVP_EncodeBlock EVP_EncodeFinal EVP_EncodeInit EVP_EncodeUpdate EVP_EncodedLength EVP_EncryptFinal_ex EVP_EncryptInit EVP_EncryptInit_ex EVP_EncryptUpdate EVP_MD_CTX_block_size EVP_MD_CTX_cleanup EVP_MD_CTX_copy EVP_MD_CTX_copy_ex EVP_MD_CTX_create EVP_MD_CTX_destroy EVP_MD_CTX_free EVP_MD_CTX_init EVP_MD_CTX_md EVP_MD_CTX_new EVP_MD_CTX_reset EVP_MD_CTX_size EVP_MD_CTX_type EVP_MD_block_size EVP_MD_flags EVP_MD_size EVP_MD_type EVP_PKCS82PKEY EVP_PKEY2PKCS8 EVP_PKEY_CTX_ctrl EVP_PKEY_CTX_dup EVP_PKEY_CTX_free EVP_PKEY_CTX_get0_pkey EVP_PKEY_CTX_get0_rsa_oaep_label EVP_PKEY_CTX_get_rsa_mgf1_md EVP_PKEY_CTX_get_rsa_oaep_md EVP_PKEY_CTX_get_rsa_padding EVP_PKEY_CTX_get_rsa_pss_saltlen EVP_PKEY_CTX_get_signature_md EVP_PKEY_CTX_new EVP_PKEY_CTX_new_id EVP_PKEY_CTX_set0_rsa_oaep_label EVP_PKEY_CTX_set_ec_param_enc EVP_PKEY_CTX_set_ec_paramgen_curve_nid EVP_PKEY_CTX_set_rsa_keygen_bits EVP_PKEY_CTX_set_rsa_keygen_pubexp EVP_PKEY_CTX_set_rsa_mgf1_md EVP_PKEY_CTX_set_rsa_oaep_md EVP_PKEY_CTX_set_rsa_padding EVP_PKEY_CTX_set_rsa_pss_saltlen EVP_PKEY_CTX_set_signature_md EVP_PKEY_assign EVP_PKEY_assign_DSA EVP_PKEY_assign_EC_KEY EVP_PKEY_assign_RSA EVP_PKEY_bits EVP_PKEY_cmp EVP_PKEY_cmp_parameters EVP_PKEY_copy_parameters EVP_PKEY_decrypt EVP_PKEY_decrypt_init EVP_PKEY_derive EVP_PKEY_derive_init EVP_PKEY_derive_set_peer EVP_PKEY_encrypt EVP_PKEY_encrypt_init EVP_PKEY_free EVP_PKEY_get0_DH EVP_PKEY_get0_DSA EVP_PKEY_get0_EC_KEY EVP_PKEY_get0_RSA EVP_PKEY_get1_DH EVP_PKEY_get1_DSA EVP_PKEY_get1_EC_KEY EVP_PKEY_get1_RSA EVP_PKEY_id EVP_PKEY_is_opaque EVP_PKEY_keygen EVP_PKEY_keygen_init EVP_PKEY_missing_parameters EVP_PKEY_new EVP_PKEY_new_ed25519_private EVP_PKEY_new_ed25519_public EVP_PKEY_paramgen EVP_PKEY_paramgen_init EVP_PKEY_print_params EVP_PKEY_print_private EVP_PKEY_print_public EVP_PKEY_set1_DSA EVP_PKEY_set1_EC_KEY EVP_PKEY_set1_RSA EVP_PKEY_set_type EVP_PKEY_sign EVP_PKEY_sign_init EVP_PKEY_size EVP_PKEY_type EVP_PKEY_up_ref EVP_PKEY_verify EVP_PKEY_verify_init EVP_PKEY_verify_recover EVP_PKEY_verify_recover_init EVP_add_cipher_alias EVP_add_digest EVP_aead_aes_128_gcm EVP_aead_aes_128_gcm_tls12 EVP_aead_aes_128_gcm_tls13 EVP_aead_aes_256_gcm EVP_aead_aes_256_gcm_tls12 EVP_aead_aes_256_gcm_tls13 EVP_aes_128_cbc EVP_aes_128_ctr EVP_aes_128_ecb EVP_aes_128_gcm EVP_aes_128_ofb EVP_aes_192_cbc EVP_aes_192_ctr EVP_aes_192_ecb EVP_aes_192_gcm EVP_aes_192_ofb EVP_aes_256_cbc EVP_aes_256_ctr EVP_aes_256_ecb EVP_aes_256_gcm EVP_aes_256_ofb EVP_cleanup EVP_des_cbc EVP_des_ecb EVP_des_ede EVP_des_ede3 EVP_des_ede3_cbc EVP_des_ede3_ecb EVP_des_ede_cbc EVP_get_digestbyname EVP_get_digestbynid EVP_get_digestbyobj EVP_has_aes_hardware EVP_marshal_digest_algorithm EVP_marshal_private_key EVP_marshal_public_key EVP_md4 EVP_md5 EVP_md5_sha1 EVP_parse_digest_algorithm EVP_parse_private_key EVP_parse_public_key EVP_rc2_cbc EVP_rc4 EVP_sha1 EVP_sha224 EVP_sha256 EVP_sha384 EVP_sha512 EXTENDED_KEY_USAGE_free EXTENDED_KEY_USAGE_it EXTENDED_KEY_USAGE_new GENERAL_NAMES_free GENERAL_NAMES_it GENERAL_NAMES_new GENERAL_NAME_cmp GENERAL_NAME_dup GENERAL_NAME_free GENERAL_NAME_get0_otherName GENERAL_NAME_get0_value GENERAL_NAME_it GENERAL_NAME_new GENERAL_NAME_print GENERAL_NAME_set0_othername GENERAL_NAME_set0_value GENERAL_SUBTREE_free GENERAL_SUBTREE_it GENERAL_SUBTREE_new HMAC HMAC_CTX_cleanup HMAC_CTX_copy HMAC_CTX_copy_ex HMAC_CTX_free HMAC_CTX_init HMAC_CTX_new HMAC_CTX_reset HMAC_Final HMAC_Init HMAC_Init_ex HMAC_Update HMAC_size ISSUING_DIST_POINT_free ISSUING_DIST_POINT_it ISSUING_DIST_POINT_new MD4 MD4_Final MD4_Init MD4_Transform MD4_Update MD5 MD5_Final MD5_Init MD5_Transform MD5_Update NAME_CONSTRAINTS_check NAME_CONSTRAINTS_free NAME_CONSTRAINTS_it NAME_CONSTRAINTS_new NCONF_free NCONF_new NETSCAPE_SPKAC_free NETSCAPE_SPKAC_it NETSCAPE_SPKAC_new NETSCAPE_SPKI_free NETSCAPE_SPKI_it NETSCAPE_SPKI_new NETSCAPE_SPKI_sign NETSCAPE_SPKI_verify NOTICEREF_free NOTICEREF_it NOTICEREF_new OBJ_cbs2nid OBJ_cleanup OBJ_cmp OBJ_create OBJ_dup OBJ_find_sigid_algs OBJ_find_sigid_by_algs OBJ_get0_data OBJ_length OBJ_ln2nid OBJ_nid2cbb OBJ_nid2ln OBJ_nid2obj OBJ_nid2sn OBJ_obj2nid OBJ_obj2txt OBJ_sn2nid OBJ_txt2nid OBJ_txt2obj OPENSSL_add_all_algorithms_conf OPENSSL_cleanse OPENSSL_clear_free OPENSSL_config OPENSSL_free OPENSSL_hash32 OPENSSL_malloc OPENSSL_no_config OPENSSL_realloc OPENSSL_strcasecmp OPENSSL_strdup OPENSSL_strncasecmp OPENSSL_strnlen OPENSSL_tolower OTHERNAME_cmp OTHERNAME_free OTHERNAME_it OTHERNAME_new OpenSSL_add_all_algorithms OpenSSL_add_all_ciphers OpenSSL_add_all_digests PEM_ASN1_read PEM_ASN1_read_bio PEM_ASN1_write PEM_ASN1_write_bio PEM_bytes_read_bio PEM_def_callback PEM_dek_info PEM_do_header PEM_get_EVP_CIPHER_INFO PEM_proc_type PEM_read PEM_read_DHparams PEM_read_DSAPrivateKey PEM_read_DSA_PUBKEY PEM_read_DSAparams PEM_read_ECPrivateKey PEM_read_EC_PUBKEY PEM_read_PKCS7 PEM_read_PKCS8 PEM_read_PKCS8_PRIV_KEY_INFO PEM_read_PUBKEY PEM_read_PrivateKey PEM_read_RSAPrivateKey PEM_read_RSAPublicKey PEM_read_RSA_PUBKEY PEM_read_X509_CRL PEM_read_X509_REQ PEM_read_bio PEM_read_bio_DHparams PEM_read_bio_DSAPrivateKey PEM_read_bio_DSA_PUBKEY PEM_read_bio_DSAparams PEM_read_bio_ECPrivateKey PEM_read_bio_EC_PUBKEY PEM_read_bio_PKCS7 PEM_read_bio_PKCS8 PEM_read_bio_PKCS8_PRIV_KEY_INFO PEM_read_bio_PUBKEY PEM_read_bio_PrivateKey PEM_read_bio_RSAPrivateKey PEM_read_bio_RSAPublicKey PEM_read_bio_RSA_PUBKEY PEM_read_bio_X509_CRL PEM_read_bio_X509_REQ PEM_write PEM_write_DHparams PEM_write_DSAPrivateKey PEM_write_DSA_PUBKEY PEM_write_DSAparams PEM_write_ECPrivateKey PEM_write_EC_PUBKEY PEM_write_PKCS7 PEM_write_PKCS8 PEM_write_PKCS8PrivateKey PEM_write_PKCS8PrivateKey_nid PEM_write_PKCS8_PRIV_KEY_INFO PEM_write_PUBKEY PEM_write_PrivateKey PEM_write_RSAPrivateKey PEM_write_RSAPublicKey PEM_write_RSA_PUBKEY PEM_write_X509_CRL PEM_write_X509_REQ PEM_write_X509_REQ_NEW PEM_write_bio PEM_write_bio_DHparams PEM_write_bio_DSAPrivateKey PEM_write_bio_DSA_PUBKEY PEM_write_bio_DSAparams PEM_write_bio_ECPrivateKey PEM_write_bio_EC_PUBKEY PEM_write_bio_PKCS7 PEM_write_bio_PKCS8 PEM_write_bio_PKCS8PrivateKey PEM_write_bio_PKCS8PrivateKey_nid PEM_write_bio_PKCS8_PRIV_KEY_INFO PEM_write_bio_PUBKEY PEM_write_bio_PrivateKey PEM_write_bio_RSAPrivateKey PEM_write_bio_RSAPublicKey PEM_write_bio_RSA_PUBKEY PEM_write_bio_X509_CRL PEM_write_bio_X509_REQ PEM_write_bio_X509_REQ_NEW PKCS12_PBE_add PKCS12_create PKCS12_free PKCS12_get_key_and_certs PKCS12_parse PKCS12_verify_mac PKCS5_PBKDF2_HMAC PKCS5_PBKDF2_HMAC_SHA1 PKCS7_bundle_CRLs PKCS7_bundle_certificates PKCS7_free PKCS7_get_CRLs PKCS7_get_PEM_CRLs PKCS7_get_PEM_certificates PKCS7_get_certificates PKCS7_get_raw_certificates PKCS7_sign PKCS7_type_is_data PKCS7_type_is_digest PKCS7_type_is_encrypted PKCS7_type_is_enveloped PKCS7_type_is_signed PKCS7_type_is_signedAndEnveloped PKCS8_PRIV_KEY_INFO_free PKCS8_PRIV_KEY_INFO_it PKCS8_PRIV_KEY_INFO_new PKCS8_decrypt PKCS8_encrypt PKCS8_marshal_encrypted_private_key PKCS8_parse_encrypted_private_key PKCS8_pkey_get0 PKCS8_pkey_set0 PKEY_USAGE_PERIOD_free PKEY_USAGE_PERIOD_it PKEY_USAGE_PERIOD_new POLICYINFO_free POLICYINFO_it POLICYINFO_new POLICYQUALINFO_free POLICYQUALINFO_it POLICYQUALINFO_new POLICY_CONSTRAINTS_free POLICY_CONSTRAINTS_it POLICY_CONSTRAINTS_new POLICY_MAPPINGS_it POLICY_MAPPING_free POLICY_MAPPING_it POLICY_MAPPING_new PROXY_CERT_INFO_EXTENSION_free PROXY_CERT_INFO_EXTENSION_it PROXY_CERT_INFO_EXTENSION_new PROXY_POLICY_free PROXY_POLICY_it PROXY_POLICY_new RAND_bytes RAND_pseudo_bytes RC4 RC4_set_key RSAPrivateKey_dup RSAPublicKey_dup RSA_PSS_PARAMS_free RSA_PSS_PARAMS_it RSA_PSS_PARAMS_new RSA_add_pkcs1_prefix RSA_bits RSA_blinding_on RSA_check_fips RSA_check_key RSA_decrypt RSA_encrypt RSA_flags RSA_free RSA_generate_key_ex RSA_generate_key_fips RSA_get0_crt_params RSA_get0_factors RSA_get0_key RSA_get_ex_data RSA_get_ex_new_index RSA_is_opaque RSA_marshal_private_key RSA_marshal_public_key RSA_new RSA_new_method RSA_padding_add_PKCS1_OAEP_mgf1 RSA_padding_add_PKCS1_PSS_mgf1 RSA_parse_private_key RSA_parse_public_key RSA_private_decrypt RSA_private_encrypt RSA_private_key_from_bytes RSA_private_key_to_bytes RSA_public_decrypt RSA_public_encrypt RSA_public_key_from_bytes RSA_public_key_to_bytes RSA_set0_crt_params RSA_set0_factors RSA_set0_key RSA_set_ex_data RSA_sign RSA_sign_pss_mgf1 RSA_sign_raw RSA_size RSA_up_ref RSA_verify RSA_verify_PKCS1_PSS_mgf1 RSA_verify_pss_mgf1 RSA_verify_raw SHA1 SHA1_Final SHA1_Init SHA1_Transform SHA1_Update SHA224 SHA224_Final SHA224_Init SHA224_Update SHA256 SHA256_Final SHA256_Init SHA256_Transform SHA256_TransformBlocks SHA256_Update SHA384 SHA384_Final SHA384_Init SHA384_Update SHA512 SHA512_Final SHA512_Init SHA512_Transform SHA512_Update SXNETID_free SXNETID_it SXNETID_new SXNET_free SXNET_it SXNET_new USERNOTICE_free USERNOTICE_it USERNOTICE_new X25519 X25519_keypair X25519_public_from_private X509V3_EXT_CRL_add_nconf X509V3_EXT_REQ_add_nconf X509V3_EXT_add X509V3_EXT_add_alias X509V3_EXT_add_list X509V3_EXT_add_nconf X509V3_EXT_add_nconf_sk X509V3_EXT_cleanup X509V3_EXT_d2i X509V3_EXT_free X509V3_EXT_get X509V3_EXT_get_nid X509V3_EXT_i2d X509V3_EXT_nconf X509V3_EXT_nconf_nid X509V3_EXT_print X509V3_EXT_print_fp X509V3_EXT_val_prn X509V3_NAME_from_section X509V3_add1_i2d X509V3_add_standard_extensions X509V3_add_value X509V3_add_value_bool X509V3_add_value_bool_nf X509V3_add_value_int X509V3_add_value_uchar X509V3_conf_free X509V3_extensions_print X509V3_get_d2i X509V3_get_section X509V3_get_string X509V3_get_value_bool X509V3_get_value_int X509V3_parse_list X509V3_section_free X509V3_set_ctx X509V3_set_nconf X509V3_string_free X509_ALGORS_it X509_ALGOR_cmp X509_ALGOR_dup X509_ALGOR_free X509_ALGOR_get0 X509_ALGOR_it X509_ALGOR_new X509_ALGOR_set0 X509_ALGOR_set_md X509_ATTRIBUTE_count X509_ATTRIBUTE_create X509_ATTRIBUTE_create_by_NID X509_ATTRIBUTE_create_by_OBJ X509_ATTRIBUTE_create_by_txt X509_ATTRIBUTE_dup X509_ATTRIBUTE_free X509_ATTRIBUTE_get0_data X509_ATTRIBUTE_get0_object X509_ATTRIBUTE_get0_type X509_ATTRIBUTE_it X509_ATTRIBUTE_new X509_ATTRIBUTE_set1_data X509_ATTRIBUTE_set1_object X509_CERT_AUX_free X509_CERT_AUX_it X509_CERT_AUX_new X509_CERT_AUX_print X509_CINF_free X509_CINF_it X509_CINF_new X509_CRL_INFO_free X509_CRL_INFO_it X509_CRL_INFO_new X509_CRL_METHOD_free X509_CRL_METHOD_new X509_CRL_add0_revoked X509_CRL_add1_ext_i2d X509_CRL_add_ext X509_CRL_check_suiteb X509_CRL_cmp X509_CRL_delete_ext X509_CRL_digest X509_CRL_dup X509_CRL_free X509_CRL_get0_by_cert X509_CRL_get0_by_serial X509_CRL_get_ext X509_CRL_get_ext_by_NID X509_CRL_get_ext_by_OBJ X509_CRL_get_ext_by_critical X509_CRL_get_ext_count X509_CRL_get_ext_d2i X509_CRL_get_meth_data X509_CRL_it X509_CRL_match X509_CRL_new X509_CRL_set_default_method X509_CRL_set_meth_data X509_CRL_sign X509_CRL_sign_ctx X509_CRL_verify X509_EXTENSIONS_it X509_EXTENSION_create_by_NID X509_EXTENSION_create_by_OBJ X509_EXTENSION_dup X509_EXTENSION_free X509_EXTENSION_get_critical X509_EXTENSION_get_data X509_EXTENSION_get_object X509_EXTENSION_it X509_EXTENSION_new X509_EXTENSION_set_critical X509_EXTENSION_set_data X509_EXTENSION_set_object X509_NAME_ENTRY_create_by_NID X509_NAME_ENTRY_create_by_OBJ X509_NAME_ENTRY_create_by_txt X509_NAME_ENTRY_dup X509_NAME_ENTRY_free X509_NAME_ENTRY_get_data X509_NAME_ENTRY_get_object X509_NAME_ENTRY_it X509_NAME_ENTRY_new X509_NAME_ENTRY_set X509_NAME_ENTRY_set_data X509_NAME_ENTRY_set_object X509_NAME_add_entry X509_NAME_add_entry_by_NID X509_NAME_add_entry_by_OBJ X509_NAME_add_entry_by_txt X509_NAME_cmp X509_NAME_delete_entry X509_NAME_digest X509_NAME_dup X509_NAME_entry_count X509_NAME_free X509_NAME_get0_der X509_NAME_get_entry X509_NAME_get_index_by_NID X509_NAME_get_index_by_OBJ X509_NAME_get_text_by_NID X509_NAME_get_text_by_OBJ X509_NAME_hash X509_NAME_hash_old X509_NAME_it X509_NAME_new X509_NAME_oneline X509_NAME_print X509_NAME_print_ex X509_NAME_print_ex_fp X509_NAME_set X509_POLICY_NODE_print X509_PUBKEY_free X509_PUBKEY_get X509_PUBKEY_get0_param X509_PUBKEY_it X509_PUBKEY_new X509_PUBKEY_set X509_PUBKEY_set0_param X509_PURPOSE_add X509_PURPOSE_cleanup X509_PURPOSE_get0 X509_PURPOSE_get0_name X509_PURPOSE_get0_sname X509_PURPOSE_get_by_id X509_PURPOSE_get_by_sname X509_PURPOSE_get_count X509_PURPOSE_get_id X509_PURPOSE_get_trust X509_PURPOSE_set X509_REQ_INFO_free X509_REQ_INFO_it X509_REQ_INFO_new X509_REQ_add1_attr X509_REQ_add1_attr_by_NID X509_REQ_add1_attr_by_OBJ X509_REQ_add1_attr_by_txt X509_REQ_add_extensions X509_REQ_add_extensions_nid X509_REQ_check_private_key X509_REQ_delete_attr X509_REQ_digest X509_REQ_dup X509_REQ_extension_nid X509_REQ_free X509_REQ_get0_signature X509_REQ_get1_email X509_REQ_get_attr X509_REQ_get_attr_by_NID X509_REQ_get_attr_by_OBJ X509_REQ_get_attr_count X509_REQ_get_extension_nids X509_REQ_get_extensions X509_REQ_get_pubkey X509_REQ_get_signature_nid X509_REQ_it X509_REQ_new X509_REQ_set_extension_nids X509_REQ_set_pubkey X509_REQ_set_subject_name X509_REQ_set_version X509_REQ_sign X509_REQ_sign_ctx X509_REQ_verify X509_REVOKED_add1_ext_i2d X509_REVOKED_add_ext X509_REVOKED_delete_ext X509_REVOKED_dup X509_REVOKED_free X509_REVOKED_get_ext X509_REVOKED_get_ext_by_NID X509_REVOKED_get_ext_by_OBJ X509_REVOKED_get_ext_by_critical X509_REVOKED_get_ext_count X509_REVOKED_get_ext_d2i X509_REVOKED_it X509_REVOKED_new X509_SIG_free X509_SIG_it X509_SIG_new X509_VAL_free X509_VAL_it X509_VAL_new X509_add1_ext_i2d X509_add1_reject_object X509_add1_trust_object X509_add_ext X509_alias_get0 X509_alias_set1 X509_chain_check_suiteb X509_chain_up_ref X509_check_akid X509_check_ca X509_check_email X509_check_host X509_check_ip X509_check_ip_asc X509_check_issued X509_check_private_key X509_check_purpose X509_cmp X509_delete_ext X509_digest X509_dup X509_email_free X509_find_by_issuer_and_serial X509_find_by_subject X509_free X509_get0_pubkey_bitstr X509_get0_signature X509_get1_email X509_get1_ocsp X509_get_ex_data X509_get_ex_new_index X509_get_ext X509_get_ext_by_NID X509_get_ext_by_OBJ X509_get_ext_by_critical X509_get_ext_count X509_get_ext_d2i X509_get_extended_key_usage X509_get_extension_flags X509_get_issuer_name X509_get_key_usage X509_get_pubkey X509_get_serialNumber X509_get_signature_nid X509_get_subject_name X509_issuer_and_serial_cmp X509_issuer_and_serial_hash X509_issuer_name_cmp X509_issuer_name_hash X509_issuer_name_hash_old X509_it X509_keyid_get0 X509_keyid_set1 X509_new X509_ocspid_print X509_parse_from_buffer X509_print X509_print_ex X509_print_ex_fp X509_print_fp X509_pubkey_digest X509_reject_clear X509_set_ex_data X509_sign X509_sign_ctx X509_signature_dump X509_signature_print X509_subject_name_cmp X509_subject_name_hash X509_subject_name_hash_old X509_supported_extension X509_to_X509_REQ X509_trust_clear X509_up_ref X509_verify X509at_add1_attr X509at_add1_attr_by_NID X509at_add1_attr_by_OBJ X509at_add1_attr_by_txt X509at_delete_attr X509at_get0_data_by_OBJ X509at_get_attr X509at_get_attr_by_NID X509at_get_attr_by_OBJ X509at_get_attr_count X509v3_add_ext X509v3_delete_ext X509v3_get_ext X509v3_get_ext_by_NID X509v3_get_ext_by_OBJ X509v3_get_ext_by_critical X509v3_get_ext_count a2i_GENERAL_NAME a2i_IPADDRESS a2i_IPADDRESS_NC a2i_ipadd bn_abs_sub_consttime bn_div_consttime bn_is_relatively_prime bn_lcm_consttime bn_mod_inverse_consttime bn_mod_u16_consttime bn_resize_words bn_rshift_secret_shift c2i_ASN1_BIT_STRING c2i_ASN1_INTEGER c2i_ASN1_OBJECT cbb_add_latin1 cbb_add_ucs2_be cbb_add_utf32_be cbb_add_utf8 cbb_get_utf8_len cbs_get_latin1 cbs_get_ucs2_be cbs_get_utf32_be cbs_get_utf8 d2i_ACCESS_DESCRIPTION d2i_ASN1_BIT_STRING d2i_ASN1_BMPSTRING d2i_ASN1_ENUMERATED d2i_ASN1_GENERALIZEDTIME d2i_ASN1_GENERALSTRING d2i_ASN1_IA5STRING d2i_ASN1_INTEGER d2i_ASN1_NULL d2i_ASN1_OBJECT d2i_ASN1_OCTET_STRING d2i_ASN1_PRINTABLE d2i_ASN1_PRINTABLESTRING d2i_ASN1_SEQUENCE_ANY d2i_ASN1_SET_ANY d2i_ASN1_T61STRING d2i_ASN1_TIME d2i_ASN1_TYPE d2i_ASN1_UNIVERSALSTRING d2i_ASN1_UTCTIME d2i_ASN1_UTF8STRING d2i_ASN1_VISIBLESTRING d2i_AUTHORITY_INFO_ACCESS d2i_AUTHORITY_KEYID d2i_AutoPrivateKey d2i_BASIC_CONSTRAINTS d2i_CERTIFICATEPOLICIES d2i_CRL_DIST_POINTS d2i_DHparams d2i_DHparams_bio d2i_DIRECTORYSTRING d2i_DISPLAYTEXT d2i_DIST_POINT d2i_DIST_POINT_NAME d2i_DSAPrivateKey d2i_DSAPrivateKey_bio d2i_DSAPrivateKey_fp d2i_DSAPublicKey d2i_DSA_PUBKEY d2i_DSA_PUBKEY_bio d2i_DSA_PUBKEY_fp d2i_DSA_SIG d2i_DSAparams d2i_ECDSA_SIG d2i_ECParameters d2i_ECPrivateKey d2i_ECPrivateKey_bio d2i_ECPrivateKey_fp d2i_EC_PUBKEY d2i_EC_PUBKEY_bio d2i_EC_PUBKEY_fp d2i_EDIPARTYNAME d2i_EXTENDED_KEY_USAGE d2i_GENERAL_NAME d2i_GENERAL_NAMES d2i_ISSUING_DIST_POINT d2i_NETSCAPE_SPKAC d2i_NETSCAPE_SPKI d2i_NOTICEREF d2i_OTHERNAME d2i_PKCS12 d2i_PKCS12_bio d2i_PKCS12_fp d2i_PKCS7 d2i_PKCS7_bio d2i_PKCS8PrivateKey_bio d2i_PKCS8PrivateKey_fp d2i_PKCS8_PRIV_KEY_INFO d2i_PKCS8_PRIV_KEY_INFO_bio d2i_PKCS8_PRIV_KEY_INFO_fp d2i_PKCS8_bio d2i_PKCS8_fp d2i_PKEY_USAGE_PERIOD d2i_POLICYINFO d2i_POLICYQUALINFO d2i_PROXY_CERT_INFO_EXTENSION d2i_PROXY_POLICY d2i_PUBKEY d2i_PUBKEY_bio d2i_PUBKEY_fp d2i_PrivateKey d2i_PrivateKey_bio d2i_PrivateKey_fp d2i_PublicKey d2i_RSAPrivateKey d2i_RSAPrivateKey_bio d2i_RSAPrivateKey_fp d2i_RSAPublicKey d2i_RSAPublicKey_bio d2i_RSAPublicKey_fp d2i_RSA_PSS_PARAMS d2i_RSA_PUBKEY d2i_RSA_PUBKEY_bio d2i_RSA_PUBKEY_fp d2i_SXNET d2i_SXNETID d2i_USERNOTICE d2i_X509 d2i_X509_ALGOR d2i_X509_ALGORS d2i_X509_ATTRIBUTE d2i_X509_AUX d2i_X509_CERT_AUX d2i_X509_CINF d2i_X509_CRL d2i_X509_CRL_INFO d2i_X509_CRL_bio d2i_X509_CRL_fp d2i_X509_EXTENSION d2i_X509_EXTENSIONS d2i_X509_NAME d2i_X509_NAME_ENTRY d2i_X509_PUBKEY d2i_X509_REQ d2i_X509_REQ_INFO d2i_X509_REQ_bio d2i_X509_REQ_fp d2i_X509_REVOKED d2i_X509_SIG d2i_X509_VAL d2i_X509_bio d2i_X509_fp ec_bignum_to_scalar ec_point_mul_scalar_public i2a_ACCESS_DESCRIPTION i2a_ASN1_INTEGER i2a_ASN1_OBJECT i2c_ASN1_BIT_STRING i2c_ASN1_INTEGER i2d_ACCESS_DESCRIPTION i2d_ASN1_BIT_STRING i2d_ASN1_BMPSTRING i2d_ASN1_ENUMERATED i2d_ASN1_GENERALIZEDTIME i2d_ASN1_GENERALSTRING i2d_ASN1_IA5STRING i2d_ASN1_INTEGER i2d_ASN1_NULL i2d_ASN1_OBJECT i2d_ASN1_OCTET_STRING i2d_ASN1_PRINTABLE i2d_ASN1_PRINTABLESTRING i2d_ASN1_SEQUENCE_ANY i2d_ASN1_SET_ANY i2d_ASN1_T61STRING i2d_ASN1_TIME i2d_ASN1_TYPE i2d_ASN1_UNIVERSALSTRING i2d_ASN1_UTCTIME i2d_ASN1_UTF8STRING i2d_ASN1_VISIBLESTRING i2d_AUTHORITY_INFO_ACCESS i2d_AUTHORITY_KEYID i2d_BASIC_CONSTRAINTS i2d_CERTIFICATEPOLICIES i2d_CRL_DIST_POINTS i2d_DHparams i2d_DHparams_bio i2d_DIRECTORYSTRING i2d_DISPLAYTEXT i2d_DIST_POINT i2d_DIST_POINT_NAME i2d_DSAPrivateKey i2d_DSAPrivateKey_bio i2d_DSAPrivateKey_fp i2d_DSAPublicKey i2d_DSA_PUBKEY i2d_DSA_PUBKEY_bio i2d_DSA_PUBKEY_fp i2d_DSA_SIG i2d_DSAparams i2d_ECDSA_SIG i2d_ECParameters i2d_ECPrivateKey i2d_ECPrivateKey_bio i2d_ECPrivateKey_fp i2d_EC_PUBKEY i2d_EC_PUBKEY_bio i2d_EC_PUBKEY_fp i2d_EDIPARTYNAME i2d_EXTENDED_KEY_USAGE i2d_GENERAL_NAME i2d_GENERAL_NAMES i2d_ISSUING_DIST_POINT i2d_NETSCAPE_SPKAC i2d_NETSCAPE_SPKI i2d_NOTICEREF i2d_OTHERNAME i2d_PKCS12 i2d_PKCS12_bio i2d_PKCS12_fp i2d_PKCS7 i2d_PKCS7_bio i2d_PKCS8PrivateKeyInfo_bio i2d_PKCS8PrivateKeyInfo_fp i2d_PKCS8PrivateKey_bio i2d_PKCS8PrivateKey_fp i2d_PKCS8PrivateKey_nid_bio i2d_PKCS8PrivateKey_nid_fp i2d_PKCS8_PRIV_KEY_INFO i2d_PKCS8_PRIV_KEY_INFO_bio i2d_PKCS8_PRIV_KEY_INFO_fp i2d_PKCS8_bio i2d_PKCS8_fp i2d_PKEY_USAGE_PERIOD i2d_POLICYINFO i2d_POLICYQUALINFO i2d_PROXY_CERT_INFO_EXTENSION i2d_PROXY_POLICY i2d_PUBKEY i2d_PUBKEY_bio i2d_PUBKEY_fp i2d_PrivateKey i2d_PrivateKey_bio i2d_PrivateKey_fp i2d_PublicKey i2d_RSAPrivateKey i2d_RSAPrivateKey_bio i2d_RSAPrivateKey_fp i2d_RSAPublicKey i2d_RSAPublicKey_bio i2d_RSAPublicKey_fp i2d_RSA_PSS_PARAMS i2d_RSA_PUBKEY i2d_RSA_PUBKEY_bio i2d_RSA_PUBKEY_fp i2d_SXNET i2d_SXNETID i2d_USERNOTICE i2d_X509 i2d_X509_ALGOR i2d_X509_ALGORS i2d_X509_ATTRIBUTE i2d_X509_AUX i2d_X509_CERT_AUX i2d_X509_CINF i2d_X509_CRL i2d_X509_CRL_INFO i2d_X509_CRL_bio i2d_X509_CRL_fp i2d_X509_EXTENSION i2d_X509_EXTENSIONS i2d_X509_NAME i2d_X509_NAME_ENTRY i2d_X509_PUBKEY i2d_X509_REQ i2d_X509_REQ_INFO i2d_X509_REQ_bio i2d_X509_REQ_fp i2d_X509_REVOKED i2d_X509_SIG i2d_X509_VAL i2d_X509_bio i2d_X509_fp i2d_re_X509_REQ_tbs i2d_re_X509_tbs i2o_ECPublicKey i2s_ASN1_ENUMERATED i2s_ASN1_ENUMERATED_TABLE i2s_ASN1_INTEGER i2s_ASN1_OCTET_STRING i2t_ASN1_OBJECT i2v_ASN1_BIT_STRING i2v_GENERAL_NAME i2v_GENERAL_NAMES lh_delete lh_doall_arg lh_free lh_insert lh_new lh_num_items lh_retrieve lh_retrieve_key lh_strhash o2i_ECPublicKey s2i_ASN1_INTEGER s2i_ASN1_OCTET_STRING sk_deep_copy sk_delete sk_delete_ptr sk_dup sk_find sk_free sk_insert sk_is_sorted sk_new sk_new_null sk_num sk_pop sk_pop_free sk_pop_free_ex sk_push sk_set sk_set_cmp_func sk_shift sk_sort sk_value sk_zero v2i_ASN1_BIT_STRING v2i_GENERAL_NAME v2i_GENERAL_NAMES v2i_GENERAL_NAME_ex

Name

.text

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

257KB

Virtual Size

256KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

121KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

52KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

8B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

66KB

Virtual Size

65KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

avcodec-62.dll

IMPHASH f6760650981f250748bcc3ae5a55beae
SHA256 f0d91729a24dba84020badaaf7bb6f429b8283840e8f9239d0c8bb69fdc183a4
MD5 c3296cd76144c7c69d7633e04b6122a0
SHA1 9e8cedb2520dd9b84528c56811f262464b4f9873
SHA512 0c757fd9354ffc512478f4d1e29d42027ecaf9d1d3267c92007e9e655da66789f44dc7d41e98b48436b466274d1d7838a65fca2b3116cb96214cb8422e5ba4c0
SSDEEP 24576:Jt4HOgRuXRuqO6yonXQpr+neDGbzK3cu9c16XmVkml3cRRQR6XmH+MKuuJKC55v9:qOgRuXRuId5TcgRYTCsVh79rAbwz
TLSH
T1A3759E81E69713D2E94A14B4426B773FA63C2E2D0310DAF7DB846F61F872BC0953B649
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

1329134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

avutil-60

av_display_matrix_flip av_malloc av_fast_realloc av_fast_mallocz av_size_mult av_dict_set av_default_item_name av_buffer_allocz av_buffer_pool_init av_buffer_pool_uninit av_buffer_pool_get av_sample_fmt_is_planar av_samples_get_buffer_size av_hwframe_get_buffer av_image_fill_linesizes av_image_fill_plane_sizes av_reallocp_array av_buffer_is_writable av_buffer_alloc av_ambient_viewing_environment_alloc av_dynamic_hdr_plus_alloc av_dynamic_hdr_plus_from_t35 av_film_grain_params_create_side_data av_stereo3d_create_side_data av_dynamic_hdr_vivid_alloc av_image_check_size avpriv_report_missing_feature av_log_once av_refstruct_ref_c av_buffer_get_ref_count av_fast_malloc av_memcpy_backptr av_pix_fmt_get_chroma_sub_sample av_display_rotation_get av_timecode_make_smpte_tc_string2 av_refstruct_pool_alloc av_image_copy av_video_enc_params_create_side_data av_md5_alloc av_md5_init av_md5_update av_md5_final av_strlcatf av_container_fifo_alloc_avframe av_container_fifo_free av_container_fifo_read av_container_fifo_can_read av_film_grain_params_select av_tdrdi_alloc av_container_fifo_write av_frame_get_plane_buffer av_find_best_pix_fmt_of_2 av_opt_set_defaults2 av_container_fifo_alloc av_realloc av_buffer_default_free av_dict_iterate av_cpu_count av_opt_copy avpriv_slicethread_create avpriv_slicethread_execute avpriv_slicethread_free av_samples_fill_arrays av_frame_replace av_realloc_f av_get_cpu_flags av_get_picture_type_char av_alpha_mode_name av_realloc_array av_frame_copy_props av_frame_get_buffer av_frame_ref av_samples_set_silence av_get_planar_sample_fmt av_channel_layout_compare av_channel_layout_describe av_buffer_ref av_usleep av_malloc_array av_dovi_metadata_alloc av_frame_new_side_data_from_buf avpriv_request_sample av_crc av_crc_get_table av_refstruct_replace av_refstruct_pool_get av_refstruct_pool_alloc_ext_c av_refstruct_ref av_refstruct_alloc_ext_c av_content_light_metadata_alloc av_mastering_display_metadata_alloc_size av_pix_fmt_count_planes av_hwframe_ctx_init av_hwframe_ctx_alloc av_hwdevice_get_type_name av_frame_side_data_remove av_frame_side_data_get_c av_display_rotation_set av_frame_side_data_clone av_frame_apply_cropping av_frame_remove_side_data av_frame_new_side_data av_frame_move_ref av_samples_copy av_buffer_replace av_buffer_make_writable av_rescale_q av_strerror av_channel_layout_copy av_channel_layout_uninit av_memdup av_calloc av_bprint_finalize av_bprint_init av_strtok av_get_token av_opt_set_from_string av_opt_next av_dynarray_add_nofree av_refstruct_unref av_frame_side_data_new av_frame_side_data_free av_frame_unref av_frame_free av_frame_alloc av_opt_set av_opt_set_dict2 av_opt_free av_opt_set_defaults av_get_bytes_per_sample av_get_sample_fmt_name av_dict_get av_fourcc_make_string av_get_media_type_string av_image_check_sar av_image_check_size2 av_get_pix_fmt_name av_chroma_location_name av_color_space_name av_color_transfer_name av_color_primaries_name av_color_range_name av_gcd av_reduce av_channel_layout_check av_channel_layout_describe_bprint av_bprint_chars av_bprintf av_bprint_init_for_buffer av_match_list av_log_get_level av_frame_get_side_data av_buffer_realloc av_mallocz av_film_grain_params_alloc av_frame_side_data_add av_freep av_free av_image_copy_plane av_pix_fmt_desc_get av_buffer_unref av_buffer_create av_timecode_get_smpte av_log

ole32

CoTaskMemFree

kernel32

DecodePointer HeapSize GetStringTypeW GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetStdHandle SetFilePointerEx SetStdHandle LCMapStringW VirtualProtect InitializeCriticalSectionEx FlsFree FlsSetValue FlsGetValue FlsAlloc HeapAlloc GetConsoleMode GetConsoleOutputCP WriteFile HeapFree GetModuleFileNameW ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread GetFileType CreateFileW RaiseException EncodePointer LoadLibraryExW FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection SetLastError GetLastError RtlUnwind InterlockedFlushSList GetStartupInfoW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter IsProcessorFeaturePresent GetProcAddress GetModuleHandleW GetCurrentThread SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable InitializeConditionVariable InitializeSRWLock MultiByteToWideChar ReleaseMutex WaitForSingleObjectEx CloseHandle AcquireSRWLockExclusive ReleaseSRWLockExclusive InitOnceComplete InitOnceBeginInitialize FlushFileBuffers WriteConsoleW HeapReAlloc

av_ac3_parse_header av_adts_header_parse av_bsf_alloc av_bsf_flush av_bsf_free av_bsf_get_by_name av_bsf_get_class av_bsf_get_null_filter av_bsf_init av_bsf_iterate av_bsf_list_alloc av_bsf_list_append av_bsf_list_append2 av_bsf_list_finalize av_bsf_list_free av_bsf_list_parse_str av_bsf_receive_packet av_bsf_send_packet av_codec_ffversion av_codec_is_decoder av_codec_is_encoder av_codec_iterate av_container_fifo_alloc_avpacket av_cpb_properties_alloc av_d3d11va_alloc_context av_dirac_parse_sequence_header av_dv_codec_profile av_dv_codec_profile2 av_dv_frame_profile av_exif_clone_ifd av_exif_free av_exif_get_entry av_exif_get_tag_id av_exif_get_tag_name av_exif_ifd_to_dict av_exif_matrix_to_orientation av_exif_orientation_to_matrix av_exif_parse_buffer av_exif_remove_entry av_exif_set_entry av_exif_write av_fast_padded_malloc av_fast_padded_mallocz av_get_audio_frame_duration av_get_audio_frame_duration2 av_get_bits_per_sample av_get_exact_bits_per_sample av_get_pcm_codec av_get_profile_name av_grow_packet av_init_packet av_jni_get_java_vm av_jni_set_java_vm av_mediacodec_alloc_context av_mediacodec_default_free av_mediacodec_default_init av_mediacodec_release_buffer av_mediacodec_render_buffer_at_time av_new_packet av_packet_add_side_data av_packet_alloc av_packet_clone av_packet_copy_props av_packet_free av_packet_free_side_data av_packet_from_data av_packet_get_side_data av_packet_make_refcounted av_packet_make_writable av_packet_move_ref av_packet_new_side_data av_packet_pack_dictionary av_packet_ref av_packet_rescale_ts av_packet_shrink_side_data av_packet_side_data_add av_packet_side_data_free av_packet_side_data_from_frame av_packet_side_data_get av_packet_side_data_name av_packet_side_data_new av_packet_side_data_remove av_packet_side_data_to_frame av_packet_unpack_dictionary av_packet_unref av_parser_close av_parser_init av_parser_iterate av_parser_parse2 av_qsv_alloc_context av_shrink_packet av_vorbis_parse_frame av_vorbis_parse_frame_flags av_vorbis_parse_free av_vorbis_parse_init av_vorbis_parse_reset av_xiphlacing avcodec_align_dimensions avcodec_align_dimensions2 avcodec_alloc_context3 avcodec_configuration avcodec_dct_alloc avcodec_dct_get_class avcodec_dct_init avcodec_decode_subtitle2 avcodec_default_execute avcodec_default_execute2 avcodec_default_get_buffer2 avcodec_default_get_encode_buffer avcodec_default_get_format avcodec_descriptor_get avcodec_descriptor_get_by_name avcodec_descriptor_next avcodec_encode_subtitle avcodec_fill_audio_frame avcodec_find_best_pix_fmt_of_list avcodec_find_decoder avcodec_find_decoder_by_name avcodec_find_encoder avcodec_find_encoder_by_name avcodec_flush_buffers avcodec_free_context avcodec_get_class avcodec_get_hw_config avcodec_get_hw_frames_parameters avcodec_get_name avcodec_get_subtitle_rect_class avcodec_get_supported_config avcodec_get_type avcodec_is_open avcodec_license avcodec_open2 avcodec_parameters_alloc avcodec_parameters_copy avcodec_parameters_free avcodec_parameters_from_context avcodec_parameters_to_context avcodec_pix_fmt_to_codec_tag avcodec_profile_name avcodec_receive_frame avcodec_receive_frame_flags avcodec_receive_packet avcodec_send_frame avcodec_send_packet avcodec_string avcodec_version avpriv_ac3_parse_header avpriv_adts_header_parse avpriv_codec_get_cap_skip_frame_fill_param avpriv_exif_decode_ifd avpriv_find_start_code avpriv_h264_has_num_reorder_frames avpriv_packet_list_free avpriv_packet_list_get avpriv_packet_list_put avpriv_pix_fmt_find avpriv_split_xiph_headers avsubtitle_free

Name

.text

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

196KB

Virtual Size

195KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

762KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

856B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

31KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

avutil-60.dll

IMPHASH 38dbf4b0062f25ecfa24d54af8ce9683
SHA256 8cd48c0566ce5cd67172d0f38ece80f4975ed23309a58db0fc8b0331c1041b4b
MD5 bfc5b541343a76e5bb80d3b1ca4a6c2c
SHA1 564eb6629234e36b5295eb756b094fe2c24ab210
SHA512 00ca35496e997b6c8b1fbd05f61da029a8450ae64e3e52dc9ba9a02dcf0759efb10e8bfe6a3e5d18a4ad0a7962f2916b9f6ac4dc38be3ca07a048c92d10fc2ee
SSDEEP 12288:H8WW3TFEgj0zvIHxRVUuFTgh8pGe4fvVtJ9uZyMkePo1HYNEulOlSs3re16eypXW:OCpzAHxRVUv1pnh9SZs3rA6eYNQtx
TLSH
T1F015AE40F6D785F1D49D247832ABB37BAA3A22550B2CDAF7D7D05D6A9C302D09CB7284
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

488264

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

user32

GetDesktopWindow

bcrypt

BCryptOpenAlgorithmProvider BCryptCloseAlgorithmProvider BCryptGenRandom

kernel32

RaiseException GetStringTypeW GetFileSizeEx GetProcessHeap InitOnceBeginInitialize InitOnceComplete InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive GetCurrentProcess GetProcessAffinityMask CloseHandle InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableSRW WaitForSingleObjectEx MapViewOfFile UnmapViewOfFile CreateFileMappingA GetFullPathNameW MultiByteToWideChar ReleaseMutex CreateMutexA GetSystemDirectoryW GetModuleFileNameW GetModuleHandleW GetProcAddress LoadLibraryExA LoadLibraryExW LoadLibraryA CreateEventA FreeLibrary GetStdHandle GetConsoleMode WriteConsoleW GetConsoleScreenBufferInfo SetConsoleTextAttribute Sleep GetSystemTimeAsFileTime IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW SetEnvironmentVariableW InterlockedFlushSList RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree EncodePointer FlushFileBuffers CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW CreateFileW GetFileInformationByHandle GetFileType PeekNamedPipe SystemTimeToTzSpecificLocalTime FileTimeToSystemTime SetStdHandle QueryPerformanceFrequency ExitProcess DecodePointer HeapFree HeapAlloc WideCharToMultiByte FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetCurrentDirectoryW WriteFile GetConsoleOutputCP SetEndOfFile ReadFile ReadConsoleW SetFilePointerEx GetTimeZoneInformation HeapReAlloc HeapSize HeapQueryInformation FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW

av_add_i av_add_q av_add_stable av_adler32_update av_aes_alloc av_aes_crypt av_aes_ctr_alloc av_aes_ctr_crypt av_aes_ctr_free av_aes_ctr_get_iv av_aes_ctr_increment_iv av_aes_ctr_init av_aes_ctr_set_full_iv av_aes_ctr_set_iv av_aes_ctr_set_random_iv av_aes_init av_aes_size av_alpha_mode_from_name av_alpha_mode_name av_ambient_viewing_environment_alloc av_ambient_viewing_environment_create_side_data av_append_path_component av_asprintf av_assert0_fpu av_audio_fifo_alloc av_audio_fifo_drain av_audio_fifo_free av_audio_fifo_peek av_audio_fifo_peek_at av_audio_fifo_read av_audio_fifo_realloc av_audio_fifo_reset av_audio_fifo_size av_audio_fifo_space av_audio_fifo_write av_base64_decode av_base64_encode av_basename av_bessel_i0 av_blowfish_alloc av_blowfish_crypt av_blowfish_crypt_ecb av_blowfish_init av_bmg_get av_bprint_append_data av_bprint_chars av_bprint_clear av_bprint_escape av_bprint_finalize av_bprint_get_buffer av_bprint_init av_bprint_init_for_buffer av_bprint_strftime av_bprintf av_buffer_alloc av_buffer_allocz av_buffer_create av_buffer_default_free av_buffer_get_opaque av_buffer_get_ref_count av_buffer_is_writable av_buffer_make_writable av_buffer_pool_buffer_get_opaque av_buffer_pool_get av_buffer_pool_init av_buffer_pool_init2 av_buffer_pool_uninit av_buffer_realloc av_buffer_ref av_buffer_replace av_buffer_unref av_calloc av_camellia_alloc av_camellia_crypt av_camellia_init av_camellia_size av_cast5_alloc av_cast5_crypt av_cast5_crypt2 av_cast5_init av_cast5_size av_channel_description av_channel_description_bprint av_channel_from_string av_channel_layout_ambisonic_order av_channel_layout_channel_from_index av_channel_layout_channel_from_string av_channel_layout_check av_channel_layout_compare av_channel_layout_copy av_channel_layout_custom_init av_channel_layout_default av_channel_layout_describe av_channel_layout_describe_bprint av_channel_layout_from_mask av_channel_layout_from_string av_channel_layout_index_from_channel av_channel_layout_index_from_string av_channel_layout_retype av_channel_layout_standard av_channel_layout_subset av_channel_layout_uninit av_channel_name av_channel_name_bprint av_chroma_location_enum_to_pos av_chroma_location_from_name av_chroma_location_name av_chroma_location_pos_to_enum av_cmp_i av_color_primaries_from_name av_color_primaries_name av_color_range_from_name av_color_range_name av_color_space_from_name av_color_space_name av_color_transfer_from_name av_color_transfer_name av_compare_mod av_compare_ts av_container_fifo_alloc av_container_fifo_alloc_avframe av_container_fifo_can_read av_container_fifo_drain av_container_fifo_free av_container_fifo_peek av_container_fifo_read av_container_fifo_write av_content_light_metadata_alloc av_content_light_metadata_create_side_data av_cpu_count av_cpu_force_count av_cpu_max_align av_crc av_crc_get_table av_crc_init av_csp_approximate_eotf_gamma av_csp_approximate_trc_gamma av_csp_itu_eotf av_csp_itu_eotf_inv av_csp_luma_coeffs_from_avcsp av_csp_primaries_desc_from_id av_csp_primaries_id_from_desc av_csp_trc_func_from_id av_csp_trc_func_inv_from_id av_d2q av_default_get_category av_default_item_name av_des_alloc av_des_crypt av_des_init av_des_mac av_detection_bbox_alloc av_detection_bbox_create_side_data av_dict_copy av_dict_count av_dict_free av_dict_get av_dict_get_string av_dict_iterate av_dict_parse_string av_dict_set av_dict_set_int av_dirname av_display_matrix_flip av_display_rotation_get av_display_rotation_set av_div_i av_div_q av_dovi_alloc av_dovi_find_level av_dovi_metadata_alloc av_downmix_info_update_side_data av_dynamic_hdr_plus_alloc av_dynamic_hdr_plus_create_side_data av_dynamic_hdr_plus_from_t35 av_dynamic_hdr_plus_to_t35 av_dynamic_hdr_vivid_alloc av_dynamic_hdr_vivid_create_side_data av_dynarray2_add av_dynarray_add av_dynarray_add_nofree av_encryption_info_add_side_data av_encryption_info_alloc av_encryption_info_clone av_encryption_info_free av_encryption_info_get_side_data av_encryption_init_info_add_side_data av_encryption_init_info_alloc av_encryption_init_info_free av_encryption_init_info_get_side_data av_escape av_executor_alloc av_executor_execute av_executor_free av_expr_count_func av_expr_count_vars av_expr_eval av_expr_free av_expr_parse av_expr_parse_and_eval av_fast_malloc av_fast_mallocz av_fast_realloc av_fifo_alloc2 av_fifo_auto_grow_limit av_fifo_can_read av_fifo_can_write av_fifo_drain2 av_fifo_elem_size av_fifo_freep2 av_fifo_grow2 av_fifo_peek av_fifo_peek_to_cb av_fifo_read av_fifo_read_to_cb av_fifo_reset2 av_fifo_write av_fifo_write_from_cb av_file_map av_file_unmap av_film_grain_params_alloc av_film_grain_params_create_side_data av_film_grain_params_select av_find_best_pix_fmt_of_2 av_find_info_tag av_find_nearest_q_idx av_force_cpu_flags av_fourcc_make_string av_frame_alloc av_frame_apply_cropping av_frame_clone av_frame_copy av_frame_copy_props av_frame_free av_frame_get_buffer av_frame_get_plane_buffer av_frame_get_side_data av_frame_is_writable av_frame_make_writable av_frame_move_ref av_frame_new_side_data av_frame_new_side_data_from_buf av_frame_ref av_frame_remove_side_data av_frame_replace av_frame_side_data_add av_frame_side_data_clone av_frame_side_data_desc av_frame_side_data_free av_frame_side_data_get_c av_frame_side_data_name av_frame_side_data_new av_frame_side_data_remove av_frame_side_data_remove_by_props av_frame_unref av_free av_freep av_gcd av_gcd_q av_get_alt_sample_fmt av_get_bits_per_pixel av_get_bytes_per_sample av_get_cpu_flags av_get_known_color_name av_get_media_type_string av_get_packed_sample_fmt av_get_padded_bits_per_pixel av_get_picture_type_char av_get_pix_fmt av_get_pix_fmt_loss av_get_pix_fmt_name av_get_pix_fmt_string av_get_planar_sample_fmt av_get_random_seed av_get_sample_fmt av_get_sample_fmt_name av_get_sample_fmt_string av_get_time_base_q av_get_token av_gettime av_gettime_relative av_gettime_relative_is_monotonic av_hash_alloc av_hash_final av_hash_final_b64 av_hash_final_bin av_hash_final_hex av_hash_freep av_hash_get_name av_hash_get_size av_hash_init av_hash_names av_hash_update av_hmac_alloc av_hmac_calc av_hmac_final av_hmac_free av_hmac_init av_hmac_update av_hwdevice_ctx_alloc av_hwdevice_ctx_create av_hwdevice_ctx_create_derived av_hwdevice_ctx_create_derived_opts av_hwdevice_ctx_init av_hwdevice_find_type_by_name av_hwdevice_get_hwframe_constraints av_hwdevice_get_type_name av_hwdevice_hwconfig_alloc av_hwdevice_iterate_types av_hwframe_constraints_free av_hwframe_ctx_alloc av_hwframe_ctx_create_derived av_hwframe_ctx_init av_hwframe_get_buffer av_hwframe_map av_hwframe_transfer_data av_hwframe_transfer_get_formats av_i2int av_iamf_audio_element_add_layer av_iamf_audio_element_alloc av_iamf_audio_element_free av_iamf_audio_element_get_class av_iamf_mix_presentation_add_submix av_iamf_mix_presentation_alloc av_iamf_mix_presentation_free av_iamf_mix_presentation_get_class av_iamf_param_definition_alloc av_iamf_param_definition_get_class av_iamf_submix_add_element av_iamf_submix_add_layout av_image_alloc av_image_check_sar av_image_check_size av_image_check_size2 av_image_copy av_image_copy_plane av_image_copy_plane_uc_from av_image_copy_to_buffer av_image_copy_uc_from av_image_fill_arrays av_image_fill_black av_image_fill_color av_image_fill_linesizes av_image_fill_max_pixsteps av_image_fill_plane_sizes av_image_fill_pointers av_image_get_buffer_size av_image_get_linesize av_int2i av_int_list_length_for_size av_lfg_init av_lfg_init_from_data av_log av_log2 av_log2_16bit av_log2_i av_log_default_callback av_log_format_line av_log_format_line2 av_log_get_flags av_log_get_level av_log_once av_log_set_callback av_log_set_flags av_log_set_level av_lzo1x_decode av_malloc av_malloc_array av_mallocz av_mastering_display_metadata_alloc av_mastering_display_metadata_alloc_size av_mastering_display_metadata_create_side_data av_match_list av_match_name av_max_alloc av_md5_alloc av_md5_final av_md5_init av_md5_size av_md5_sum av_md5_update av_memcpy_backptr av_memdup av_mod_i av_mul_i av_mul_q av_murmur3_alloc av_murmur3_final av_murmur3_init av_murmur3_init_seeded av_murmur3_update av_nearer_q av_opt_child_class_iterate av_opt_child_next av_opt_copy av_opt_eval_double av_opt_eval_flags av_opt_eval_float av_opt_eval_int av_opt_eval_int64 av_opt_eval_q av_opt_eval_uint av_opt_find av_opt_find2 av_opt_flag_is_set av_opt_free av_opt_freep_ranges av_opt_get av_opt_get_array av_opt_get_array_size av_opt_get_chlayout av_opt_get_dict_val av_opt_get_double av_opt_get_image_size av_opt_get_int av_opt_get_key_value av_opt_get_pixel_fmt av_opt_get_q av_opt_get_sample_fmt av_opt_get_video_rate av_opt_is_set_to_default av_opt_is_set_to_default_by_name av_opt_next av_opt_ptr av_opt_query_ranges av_opt_query_ranges_default av_opt_serialize av_opt_set av_opt_set_array av_opt_set_bin av_opt_set_chlayout av_opt_set_defaults av_opt_set_defaults2 av_opt_set_dict av_opt_set_dict2 av_opt_set_dict_val av_opt_set_double av_opt_set_from_string av_opt_set_image_size av_opt_set_int av_opt_set_pixel_fmt av_opt_set_q av_opt_set_sample_fmt av_opt_set_video_rate av_opt_show2 av_parse_color av_parse_cpu_caps av_parse_ratio av_parse_time av_parse_video_rate av_parse_video_size av_pix_fmt_count_planes av_pix_fmt_desc_get av_pix_fmt_desc_get_id av_pix_fmt_desc_next av_pix_fmt_get_chroma_sub_sample av_pix_fmt_swap_endianness av_pixelutils_get_sad_fn av_q2intfloat av_random_bytes av_rc4_alloc av_rc4_crypt av_rc4_init av_read_image_line av_read_image_line2 av_realloc av_realloc_array av_realloc_f av_reallocp av_reallocp_array av_reduce av_refstruct_alloc_ext_c av_refstruct_exclusive av_refstruct_pool_alloc av_refstruct_pool_alloc_ext_c av_refstruct_pool_get av_refstruct_ref av_refstruct_ref_c av_refstruct_replace av_refstruct_unref av_rescale av_rescale_delta av_rescale_q av_rescale_q_rnd av_rescale_rnd av_ripemd_alloc av_ripemd_final av_ripemd_init av_ripemd_size av_ripemd_update av_sample_fmt_is_planar av_samples_alloc av_samples_alloc_array_and_samples av_samples_copy av_samples_fill_arrays av_samples_get_buffer_size av_samples_set_silence av_set_options_string av_sha512_alloc av_sha512_final av_sha512_init av_sha512_size av_sha512_update av_sha_alloc av_sha_final av_sha_init av_sha_size av_sha_update av_shr_i av_size_mult av_small_strptime av_spherical_alloc av_spherical_from_name av_spherical_projection_name av_spherical_tile_bounds av_sscanf av_stereo3d_alloc av_stereo3d_alloc_size av_stereo3d_create_side_data av_stereo3d_from_name av_stereo3d_primary_eye_from_name av_stereo3d_primary_eye_name av_stereo3d_type_name av_stereo3d_view_from_name av_stereo3d_view_name av_strcasecmp av_strdup av_strerror av_strireplace av_stristart av_stristr av_strlcat av_strlcatf av_strlcpy av_strncasecmp av_strndup av_strnstr av_strstart av_strtod av_strtok av_sub_i av_sub_q av_tdrdi_alloc av_tea_alloc av_tea_crypt av_tea_init av_tea_size av_thread_message_flush av_thread_message_queue_alloc av_thread_message_queue_free av_thread_message_queue_nb_elems av_thread_message_queue_recv av_thread_message_queue_send av_thread_message_queue_set_err_recv av_thread_message_queue_set_err_send av_thread_message_queue_set_free_func av_timecode_adjust_ntsc_framenum2 av_timecode_check_frame_rate av_timecode_get_smpte av_timecode_get_smpte_from_framenum av_timecode_init av_timecode_init_from_components av_timecode_init_from_string av_timecode_make_mpeg_tc_string av_timecode_make_smpte_tc_string av_timecode_make_smpte_tc_string2 av_timecode_make_string av_timegm av_tree_destroy av_tree_enumerate av_tree_find av_tree_insert av_tree_node_alloc av_tree_node_size av_ts_make_time_string2 av_twofish_alloc av_twofish_crypt av_twofish_init av_twofish_size av_tx_init av_tx_uninit av_usleep av_utf8_decode av_util_ffversion av_uuid_parse av_uuid_parse_range av_uuid_unparse av_uuid_urn_parse av_vbprintf av_version_info av_video_enc_params_alloc av_video_enc_params_create_side_data av_video_hint_alloc av_video_hint_create_side_data av_vk_frame_alloc av_vkfmt_from_pixfmt av_vlog av_write_image_line av_write_image_line2 av_xtea_alloc av_xtea_crypt av_xtea_init av_xtea_le_crypt av_xtea_le_init avpriv_alloc_fixed_dsp avpriv_cga_font avpriv_cga_font_get avpriv_float_dsp_alloc avpriv_init_lls avpriv_report_missing_feature avpriv_request_sample avpriv_set_systematic_pal2 avpriv_slicethread_create avpriv_slicethread_execute avpriv_slicethread_free avpriv_solve_lls avpriv_vga16_font avpriv_vga16_font_get avutil_configuration avutil_license avutil_version

Name

.text

Size

630KB

Virtual Size

630KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

210KB

Virtual Size

209KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

856B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

19KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

devcon.exe

SHA256 d86b7c46ab155a3193de84a6c0a43233d3653d765ccc0a106c6ca9e8b8f0c9eb
MD5 f323b3df9ecae3ce3760e44542648874
SHA1 c19131801cf3028f7d6613219cbf710c0bf4e662
SHA512 91a02761f9711c8ccfb5bd2bed2df88b1db56b33ea6a95c381991dbbd3b0f8c7259f07e33130377da017a5ed8a8ff30534daaf97438e1aad75b92a1aa9aba2fa
SSDEEP 3072:QuqZLvoHxwGse6ch8cqp2vJVx/6TuOp4oEk4ZBMHWqQO:UboHxwGse9Kt
TLSH
T133A3D50263E94649F2F77F3468B556215A3B7CA59D38C64C12A9911E4FF3E80CDB0BA3
MD5 SHA1 SHA512 SSDEEP TLSH

engine.dll

IMPHASH cd3186d1af7964d4e698f0ae7fb8cb3b
SHA256 27df9a33f6cb7f9841cf4ec3315dbb9fdb10efb9f17ee4331c9ae81110d2078c
MD5 ee33b76419dfa907b9c2aa66026c5e2d
SHA1 2d10bbc8ec8f15eda0d0abe88167d67f19f52250
SHA512 8e299544958b11684d045b87bf6b0268ff832588eb6aa315cd827a13407dfb9cc071f3ebf50b43f292b0ca2dc0fb3d12818bf3c016d8bd4f853c628440bc73dc
SSDEEP 12288:tqEuiUeriwaR9qbOzjZ+0FCEDYY9hkPr+Dm1Jda1v+kGY7vmVRNzVyLEH8dAZTM7:tqdhX5+kGYanNzM4cd8Mh
TLSH
T1ACA4AE11F581C033D4AD0171567DDFEAAA7DAA310B64A8CBA7C46CFA8D701C1AB35B1B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

236463

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d3d9

Direct3DCreate9

avcodec-62

avcodec_find_decoder avcodec_get_hw_config avcodec_receive_frame avcodec_open2 avcodec_alloc_context3 avcodec_send_packet av_packet_unref av_new_packet avcodec_free_context

avutil-60

av_log_set_level av_hwdevice_ctx_create av_frame_alloc av_frame_free av_hwdevice_iterate_types av_buffer_ref av_buffer_unref av_frame_unref av_opt_set_int av_hwframe_transfer_data

swscale-9

sws_getCachedContext sws_freeContext sws_scale

ws2_32

htons shutdown getaddrinfo freeaddrinfo send connect recv getsockopt WSAPoll ioctlsocket __WSAFDIsSet bind closesocket select inet_pton socket recvfrom htonl setsockopt WSACleanup WSACloseEvent WSACreateEvent WSAStartup WSAResetEvent WSAGetLastError

iphlpapi

NotifyAddrChange GetAdaptersAddresses

kernel32

GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers HeapReAlloc LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect FlsFree FlsSetValue SetStdHandle FlsAlloc HeapFree HeapAlloc WriteConsoleW GetModuleFileNameW GetFileType GetStdHandle GetModuleHandleExW FreeLibraryAndExitThread ExitThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount FlsGetValue MultiByteToWideChar ReadFile SetHandleInformation CreatePipe PeekNamedPipe WaitForSingleObject Sleep WideCharToMultiByte CloseHandle CreateProcessA GetModuleHandleA LoadLibraryW GetProcAddress QueryPerformanceFrequency QueryPerformanceCounter SizeofResource LockResource LoadResource InitializeCriticalSectionEx DecodePointer DeleteCriticalSection FreeLibrary DeviceIoControl CreateMutexW CreateFileW ReleaseMutex UnmapViewOfFile CreateEventW SetEvent ResetEvent FindResourceW CreateFileMappingW MapViewOfFile GetModuleFileNameA ExitProcess FormatMessageA EnterCriticalSection LeaveCriticalSection InitializeCriticalSection CreateThread EncodePointer SetLastError InterlockedFlushSList RtlUnwind RaiseException OutputDebugStringW InitializeSListHead GetCurrentProcessId GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetTimeZoneInformation GetFileSizeEx SetFilePointerEx FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap HeapSize GetStringTypeW GetLastError GetModuleHandleW GetCurrentThreadId ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive SleepConditionVariableSRW WaitForSingleObjectEx GetExitCodeThread WakeConditionVariable WakeAllConditionVariable GetSystemTimeAsFileTime

user32

GetDC DrawTextW ReleaseDC MonitorFromPoint UnregisterDeviceNotification DestroyWindow CreateWindowExW UnregisterClassW RegisterDeviceNotificationW DispatchMessageW PeekMessageW RegisterClassW TranslateMessage DefWindowProcW

gdi32

SelectObject CreateDIBSection CreateCompatibleDC GetStockObject DeleteDC SetTextColor Rectangle SetBkColor DeleteObject SetDIBitsToDevice

advapi32

RegGetValueA SetSecurityDescriptorDacl InitializeSecurityDescriptor RegCloseKey RegDeleteValueW RegCreateKeyExW RegSetValueExA RegOpenKeyExW

setupapi

SetupDiGetClassDevsW SetupDiGetDeviceRegistryPropertyW SetupDiEnumDeviceInterfaces SetupDiDestroyDeviceInfoList SetupDiGetDeviceInterfaceDetailW

ButtonEvent EFocus EFocusDistance EInitialize EOpen ERefresh ESelectPhone ESetActiveIdx ESetBlank ESetPasscode ESetVideoFormat EUninitialize SetCallback SetIdleCallback _Destroy@0 _GetBackBufferNoRef@4 _Render@0 _SetAdapter@8 _SetAlpha@4 _SetNumDesiredSamples@4 _SetSize@8 libusbmuxd_set_debug_level libusbmuxd_set_use_inotify plist_access_path plist_access_pathv plist_array_append_item plist_array_get_item plist_array_get_item_index plist_array_get_size plist_array_insert_item plist_array_item_remove plist_array_new_iter plist_array_next_item plist_array_remove_item plist_array_set_item plist_bool_val_is_true plist_compare_node_value plist_copy plist_data_val_compare plist_data_val_compare_with_size plist_data_val_contains plist_date_val_compare plist_dict_get_item plist_dict_get_item_key plist_dict_get_size plist_dict_insert_item plist_dict_item_get_key plist_dict_merge plist_dict_new_iter plist_dict_next_item plist_dict_remove_item plist_dict_set_item plist_free plist_from_bin plist_from_memory plist_from_xml plist_get_bool_val plist_get_data_ptr plist_get_data_val plist_get_date_val plist_get_key_val plist_get_node_type plist_get_parent plist_get_real_val plist_get_string_ptr plist_get_string_val plist_get_uid_val plist_get_uint_val plist_is_binary plist_key_val_compare plist_key_val_compare_with_size plist_key_val_contains plist_new_array plist_new_bool plist_new_data plist_new_date plist_new_dict plist_new_real plist_new_string plist_new_uid plist_new_uint plist_real_val_compare plist_set_bool_val plist_set_data_val plist_set_date_val plist_set_key_val plist_set_real_val plist_set_string_val plist_set_uid_val plist_set_uint_val plist_string_val_compare plist_string_val_compare_with_size plist_string_val_contains plist_to_bin plist_to_bin_free plist_to_xml plist_to_xml_free plist_uid_val_compare plist_uint_val_compare usbmuxd_connect usbmuxd_delete_pair_record usbmuxd_device_list_free usbmuxd_disconnect usbmuxd_events_subscribe usbmuxd_events_unsubscribe usbmuxd_get_device usbmuxd_get_device_by_udid usbmuxd_get_device_list usbmuxd_get_socket_type usbmuxd_get_tcp_endpoint usbmuxd_read_buid usbmuxd_read_pair_record usbmuxd_recv usbmuxd_recv_timeout usbmuxd_save_pair_record usbmuxd_save_pair_record_with_device_id usbmuxd_send usbmuxd_set_socket_type usbmuxd_set_tcp_endpoint usbmuxd_subscribe usbmuxd_unsubscribe

Name

.text

Size

365KB

Virtual Size

365KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

91KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

31.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

netcorecheck.exe

IMPHASH 73efb9b74bfc33e974bf9cd68082cf53
SHA256 ef10850b31b3dbe9ad6cf8cb55fb1f81a60ea9c5c0694b4b94b283601eb17c20
MD5 92e65cd72cf9f57deeac5c0c4186a5bd
SHA1 b187a4f6c84193d17fd79506206955dd6fabe897
SHA512 ae70051d857d1a7398fced3e12ec708e5580d60a3e1a39e89f5fbafce7da499d5d47ed8402db5d21a0994354673c1ea82acb5f7cedd1703e3562eb378c3c7bbe
SSDEEP 3072:s30DYngGsrM56P5oL4jeEdu3G7Ex1tTqlR5bx:2nbsMIPSG44Tn
TLSH
T124B37C21BAD545B2F5B21A714CB4AA91C37EF9B45F318ADB1344A20E0D346C19F31FA7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

71:c3:10:cf:76:93:04:43:08:c8:46:de:2e:74:91:7f:7b:f8:d0:47:0c:2c:da:5e:d0:20:9e:44:11:0a:66:6f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 8, 2020

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

6

Entry point

40576

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\Repos\deployment-tools\fork\deployment-tools\artifacts\obj\win-x86.Release\native\projects\NetCoreCheck\Release\NetCoreCheck.pdb

shlwapi

PathFileExistsW PathAppendW PathRemoveFileSpecW

kernel32

GetTempPathW GetTickCount64 GetLastError LoadLibraryW GetProcAddress FreeLibrary GetModuleFileNameW DeleteFileW OutputDebugStringW FindFirstFileExW EnterCriticalSection GetFullPathNameW FindNextFileW GetCurrentProcess InitializeCriticalSection GetEnvironmentVariableW FindClose MultiByteToWideChar GetFileAttributesExW LoadLibraryA DeleteCriticalSection GetModuleHandleW WideCharToMultiByte IsWow64Process LoadLibraryExW IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter LeaveCriticalSection RaiseException RtlUnwind LCMapStringW DecodePointer EncodePointer TlsFree TlsSetValue TlsGetValue TlsAlloc SwitchToThread InitializeCriticalSectionAndSpinCount SetLastError GetStringTypeW InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsDebuggerPresent UnhandledExceptionFilter

advapi32

RegOpenKeyExW RegGetValueW RegCloseKey

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s __stdio_common_vsprintf_s fflush _wfopen_s fclose _set_fmode setvbuf __stdio_common_vfwprintf _wfopen __stdio_common_vswprintf fputws fputwc __p__commode __acrt_iob_func __stdio_common_vfwprintf_p

api-ms-win-crt-time-l1-1-0

_time64 _gmtime64 _wstrdate_s _wstrtime_s wcsftime

api-ms-win-crt-string-l1-1-0

_wcsicmp wcscat_s _wcsdup strcspn strcpy_s wcsncmp wcsnlen

api-ms-win-crt-convert-l1-1-0

mbstowcs _wtoi wcstoul

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback _errno _c_exit __p___wargv __p___argc _exit exit _initterm_e _initterm _get_initial_wide_environment _initialize_wide_environment _controlfp_s _invalid_parameter_noinfo_noreturn abort _initialize_onexit_table _register_onexit_function _crt_atexit _cexit _seh_filter_exe _set_app_type terminate _configure_wide_argv

api-ms-win-crt-heap-l1-1-0

_callnewh free _set_new_mode malloc calloc

api-ms-win-crt-locale-l1-1-0

_configthreadlocale ___lc_codepage_func ___lc_locale_name_func __pctype_func setlocale _unlock_locales _lock_locales ___mb_cur_max_func localeconv

api-ms-win-crt-math-l1-1-0

frexp __setusermatherr

swscale-9.dll

IMPHASH 75696dc8e42ec43f6ea9ba21fd0ba065
SHA256 01b93855544b3ad835c491ad3427777ff100ce97750bce90940f5f746099293f
MD5 2e52393777214fabb1a4a833350ce0c7
SHA1 bddddd756c067f2c04c5fb8b03369b3db2290904
SHA512 cb3dc1254a7867a7d5e5b5ed355e834fafbe7bc984fffebd226f7124c6dbd89d084862f8ed4b8940c45ea38305dd1900cf9c87468815a9fbf161dd0ef5e5ae93
SSDEEP 12288:IlE2ZykgTfifAEAE9utgFzQAMTTbUTLxLO7f8xXBnS8VrLRaQSC0IV91rKv5E7VQ:IlE2ZykRfAEAESgFfxq7V7eLOT
TLSH
T103057CC196CB61E5DD4D18786165B39FAA31263A0310CEF3E7C80E62EC717C229B7799
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

602605

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

avutil-60

av_pix_fmt_desc_get av_opt_set_defaults av_fast_realloc av_malloc_array av_image_alloc av_pix_fmt_swap_endianness av_pix_fmt_get_chroma_sub_sample av_get_bits_per_pixel av_frame_get_buffer av_frame_unref av_frame_ref av_buffer_ref av_color_space_name av_color_transfer_name av_color_primaries_name av_fast_malloc av_strerror av_get_cpu_flags av_refstruct_ref av_dynarray2_add av_memdup av_strlcatf av_strlcat av_strlcpy av_freep av_frame_free av_frame_alloc av_buffer_alloc av_refstruct_unref av_opt_copy av_dynarray_add_nofree av_free av_calloc av_mallocz av_image_check_size2 av_image_fill_plane_sizes av_image_fill_linesizes av_get_pix_fmt_name av_chroma_location_enum_to_pos av_cpu_max_align av_malloc av_pix_fmt_count_planes av_csp_luma_coeffs_from_avcsp av_refstruct_alloc_ext_c av_frame_get_side_data av_add_q av_sub_q av_div_q av_mul_q avpriv_slicethread_free avpriv_slicethread_execute avpriv_slicethread_create av_csp_itu_eotf_inv av_csp_itu_eotf av_csp_primaries_desc_from_id av_log

kernel32

InterlockedFlushSList CreateFileW CloseHandle GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers HeapReAlloc HeapSize SetStdHandle GetStringTypeW SetFilePointerEx GetProcessHeap LCMapStringW VirtualProtect InitializeCriticalSectionEx FlsFree FlsSetValue FlsGetValue FlsAlloc FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetFileType GetStdHandle HeapAlloc HeapFree DecodePointer GetModuleFileNameW GetModuleHandleExW ExitProcess InitOnceBeginInitialize InitOnceComplete IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException WriteConsoleW RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer

Name

.text

Size

671KB

Virtual Size

670KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

83KB

Virtual Size

83KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

276KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

872B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer