e7488423bbd64b2a253ae38007bc78d2

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date 2041-May-26 16:52:54
Detected languages English - United States
Debug artifacts l3codeca.pdb
CompanyName Fraunhofer Institut Integrierte Schaltungen IIS
FileDescription MPEG Layer-3 Audio Codec for MSACM
FileVersion 1, 9, 0, 0401
InternalName l3codec.acm
LegalCopyright Copyright © 1996-1999 Fraunhofer Institut Integrierte Schaltungen IIS
OriginalFilename l3codec.acm
ProductName MPEG Layer-3 Audio Codec for MSACM
ProductVersion 1, 0, 0, 0

Plugin Output

Safe VirusTotal score: 0/69 (Scanned on 2023-05-23 18:32:27) All the AVs think this file is safe.

Hashes

MD5 e7488423bbd64b2a253ae38007bc78d2
SHA1 b2b3b715b0b54ae7afa7d9b023c0a96f7018237a
SHA256 444916c6976dba59fdb613329590efea7072261d442eb29341b5f8f6d36b4985
SHA3 6373ced842e0be2f5c8f922bf05834e7e1f5459f02a45b66fa21d2fe1807f485
SSDeep 1536:VhO1loCviA91Xt1UoC7nFBY1MSymYDbMfQ/Hgg7y8YR5Rn:y1loCicoDnFBwMSyTqmHVy8cP
Imports Hash 76fead419e2780acde4854d8390aa5a8

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x100

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 7
TimeDateStamp 2041-May-26 16:52:54
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0xe000
SizeOfInitializedData 0x8e00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000000000000E000 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x180000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion A.0
ImageVersion A.0
SubsystemVersion A.0
Win32VersionValue 0
SizeOfImage 0x1b000
SizeOfHeaders 0x400
Checksum 0x1d978
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
SizeofStackReserve 0x40000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 8313c3bf4a87810905fa0db991bfae6b
SHA1 12641630af0d34a1dac200302ab1dc1d75ab4fd3
SHA256 973e3d11db7d0420c72f40b5d5e50e988b244b7bd4dd70d60cb6771010bdfc75
SHA3 80cf6a6085a9da48fc834284d6864a56c8ca491c8f33d9a976e28629452e1ce0
VirtualSize 0xdfb0
VirtualAddress 0x1000
SizeOfRawData 0xe000
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.4598

.rdata

MD5 10d7c199dda8917d10843861e884d000
SHA1 72ca3cce7c1ea13a2ff4958cf6e5fafdeef8cb72
SHA256 1235651426a860c010327cd71f651fd737ad73b60d1b034949233196d898673c
SHA3 d7313d0edfbb68ab7861320b849539c4b472c4ed69f1c2d3263ecd8bf990eae2
VirtualSize 0x6aa0
VirtualAddress 0xf000
SizeOfRawData 0x6c00
PointerToRawData 0xe400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.79813

.data

MD5 cb532525d5d7223049fe7149f3bb6cf9
SHA1 69225a16cfdeda431961eb6237e9e078f8ae71c6
SHA256 913a46cba195ed2feb8372b59ecf46118603ac457847711e5a3326ab9ea32071
SHA3 f6426040c85274bdebaec7c468c942ad97e99a212587634ac8abb9ef3cbb1e0d
VirtualSize 0x698
VirtualAddress 0x16000
SizeOfRawData 0x200
PointerToRawData 0x15000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0.335931

.pdata

MD5 16cb9bc483b93a2a828fe86641805baf
SHA1 e8d0cc84cd917c5ddee23ef1bf524dfbb44a3c20
SHA256 2099744c2f350a8239bfa3869245918417aafd27938cf1b81feb25d8f3e0ab7c
SHA3 bf13cc1d6947e6ea43bc5945ec88c8e24785c76381e32e6d7cf702d90d6cb8fc
VirtualSize 0x7bc
VirtualAddress 0x17000
SizeOfRawData 0x800
PointerToRawData 0x15200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.7574

.didat

MD5 8fa23a20b4818ae46d5ce02a1a14bbd3
SHA1 b4b1a3f1e1dabf62bd4bac5455eb9565e7ce84c3
SHA256 496c0fb72968514b67173509118a8abd9ca0e2c77f03bc89ab04826ff3a066b5
SHA3 2a6d8a07ac41b5b16c9241b50a107386d320ceac49d94135d9e030324c32c3ba
VirtualSize 0xa0
VirtualAddress 0x18000
SizeOfRawData 0x200
PointerToRawData 0x15a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0.771685

.rsrc

MD5 a6232ca8dd9806466ab1b0e075d86735
SHA1 1cbd83cfcd359e916fa993195dc9f8706f900109
SHA256 a4fa745d195458abda53c3514d7fed98741e4e9be7c590314e207f3a410488f1
SHA3 50574b9408d3ee90b82f70067f476f36d9832dfaf63b474e217b013ded8620e6
VirtualSize 0xdc0
VirtualAddress 0x19000
SizeOfRawData 0xe00
PointerToRawData 0x15c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.76296

.reloc

MD5 f35526ad6f1c8a6edf831a383ac359ad
SHA1 38f92800237fece3189903b19885c4da2a1da915
SHA256 9e81de25261f8c7991bd14d294c42d8a2f0479674504f9650d2543f7b2d41336
SHA3 fabdb28ab6af03f34715581282b345808e21438f07d18ce5d2fe1ed3477a040b
VirtualSize 0xb4
VirtualAddress 0x1a000
SizeOfRawData 0x200
PointerToRawData 0x16a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 2.31041

Imports

msvcrt.dll _vsnwprintf
pow
__C_specific_handler
_purecall
_callnewh
malloc
free
_amsg_exit
_XcptFilter
_initterm
memcpy
memset
sqrt
api-ms-win-core-heap-l2-1-0.dll LocalFree
LocalAlloc
api-ms-win-core-libraryloader-l1-2-0.dll GetModuleFileNameA
DisableThreadLibraryCalls
LoadStringW
GetModuleHandleW
api-ms-win-core-synch-l1-2-0.dll Sleep
api-ms-win-core-profile-l1-1-0.dll QueryPerformanceCounter
api-ms-win-core-processthreads-l1-1-0.dll TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GetCurrentProcessId
api-ms-win-core-sysinfo-l1-1-0.dll GetTickCount
GetSystemTimeAsFileTime
api-ms-win-core-rtlsupport-l1-1-0.dll RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind
api-ms-win-core-errorhandling-l1-1-0.dll SetUnhandledExceptionFilter
UnhandledExceptionFilter
api-ms-win-mm-misc-l1-1-0.dll GetDriverModuleHandle
DefDriverProc
api-ms-win-core-delayload-l1-1-1.dll ResolveDelayLoadedAPI
api-ms-win-core-delayload-l1-1-0.dll DelayLoadFailureHook
ext-ms-win-gdi-draw-l1-1-0.dll (delay-loaded) CreateSolidBrush

Delayed Imports

Attributes 0x1
Name ext-ms-win-gdi-draw-l1-1-0.dll
ModuleHandle 0x165a0
DelayImportAddressTable 0x18000
DelayImportNameTable 0x151a0
BoundDelayImportTable 0x15308
UnloadDelayImportTable 0
TimeStamp 1970-Jan-01 00:00:00

DriverProc

Ordinal 1
Address 0x2510

1

Type MUI
Language English - United States
Codepage UNKNOWN
Size 0xe0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.5906
MD5 3411d468878fc730db21704b313dced4
SHA1 78365c375012d9611320ee3d4415e8fcab0123d9
SHA256 00f8da2b68abad766c52a7318af1901d80a1936e633094618553f49ba371814f
SHA3 391b81e519c62cbf05554861473cc3499cfda4c8bb49e1c86a0bad12b77f46cf

1 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.28992
MD5 6089d281b63350d662db31a24700076c
SHA1 e0ab0d2efe52976078049d0666a67534ecc2eb8a
SHA256 19cb41dd03580da1387629c80965df34ba6ea5b22f01d06859b4127f3b1a239f
SHA3 485d7e500a5c21b40447851e76d6f3b6da94a0a1e619ee653d3c53ddd1c91496

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.00379
MD5 2eeda126580fed6d47784520e258a5a9
SHA1 23eb8c0bb875d8f66eef0e692abf0db2cf5b1e16
SHA256 ad5bd00e4c43cf201b82bb845c43a487f6df4203865191f18b65a7dff938ef4e
SHA3 bfe8a3c2c5f071465de9db5afeb3a6a86ef9db7de4324c5145169a8e60278998

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.77102
MD5 2f9d0199a395a735113cf6e9f66abdae
SHA1 1f1665974162c76c1c600dc4ed942eba9ce21286
SHA256 5af3ac92a84fddcf681a397162c99e6889ed1d0a8c4ee2b34e67c31f97546d9c
SHA3 05bb9e01b98694f54d202b580655185861326a8b7ee9c2439f8a16f0748f101a

25101

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.16096
Detected Filetype Icon file
MD5 42cf62b780813706e75fb9f2b2e8c258
SHA1 a022d5c1cfdd8aace0089f3e72f2eedd41bda464
SHA256 a0c9d012e2bf6b2fe05c2d97cb5594d97cf2f539e97935c12abd7a3562f4d9bf
SHA3 0aafc8e3d8b6bde595537da4ffe0efc5fe53f01dafe336a2a5828b6a71283d3c

25102

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x22
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.47702
Detected Filetype Icon file
MD5 29a1f473b6fc0b877ce30be83212f25a
SHA1 a66309103e9f7ff118fd964f2cd5ae04bbd4a322
SHA256 e5d571d7f26fa57c7e00290d0fa8aef8c1d519983e0aa5ecd75f5d4b41fa4cda
SHA3 c3b0b1b14385cdc2d88d02c11aaca33ca55d509d2fe1dce1777c05d32c0e8a30

1 (#3)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x3d4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.46169
MD5 142757b35567b533a1bd4156f833ed9e
SHA1 482f977e1a92cb3bea1aaadb6179f3145d5cde16
SHA256 7c6e12d0f01650189f347face06a4a31ffd13de2ac107a29cbdd624800641cd7
SHA3 60cd54c52f079c79b424a77701e59e5cb07e44e510a0df1838a9987d6efce315

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.9.0.401
ProductVersion 1.0.0.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_DRV
FileSubtype VFT2_DRV_SOUND
Language English - United States
CompanyName Fraunhofer Institut Integrierte Schaltungen IIS
FileDescription MPEG Layer-3 Audio Codec for MSACM
FileVersion (#2) 1, 9, 0, 0401
InternalName l3codec.acm
LegalCopyright Copyright © 1996-1999 Fraunhofer Institut Integrierte Schaltungen IIS
OriginalFilename l3codec.acm
ProductName MPEG Layer-3 Audio Codec for MSACM
ProductVersion (#2) 1, 0, 0, 0
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2041-May-26 16:52:54
Version 0.0
SizeofData 37
AddressOfRawData 0x14274
PointerToRawData 0x13674
Referenced File l3codeca.pdb

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2041-May-26 16:52:54
Version 0.0
SizeofData 608
AddressOfRawData 0x1429c
PointerToRawData 0x1369c

UNKNOWN

Characteristics 0
TimeDateStamp 2041-May-26 16:52:54
Version 0.0
SizeofData 36
AddressOfRawData 0x144fc
PointerToRawData 0x138fc

TLS Callbacks

Load Configuration

Size 0x118
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x180016008
GuardCFCheckFunctionPointer 6442513832
GuardCFDispatchFunctionPointer 0
GuardCFFunctionTable 0
GuardCFFunctionCount 0
GuardFlags (EMPTY)
CodeIntegrity.Flags 0
CodeIntegrity.Catalog 0
CodeIntegrity.CatalogOffset 0
CodeIntegrity.Reserved 0
GuardAddressTakenIatEntryTable 0
GuardAddressTakenIatEntryCount 0
GuardLongJumpTargetTable 0
GuardLongJumpTargetCount 0

RICH Header

XOR Key 0x877c103f
Unmarked objects 0
Imports (VS2008 SP1 build 30729) 22
ASM objects (27412) 2
C objects (27412) 12
Total imports 53
Imports (27412) 3
C++ objects (27412) 2
Exports (27412) 1
C objects (LTCG) (27412) 27
Resource objects (27412) 1
Linker (27412) 1

Errors