General

Malware Config

Signatures

Files

• 20fad721ad99f8a82c2eaf4743229f8c921d00b9ee0caa49c96edfd15156d749

  .rar
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/!卸载.bat

  .bat .vbs
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/!绿化.bat

  .bat .vbs
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMFType.dat
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMFType64.dll

  .dll windows x64

  f811252742cee99958ced610cdfd96ef

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

  Certificate

  Issuer

  OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

  Not Before

  21-05-2009 00:00

  Not After

  20-05-2019 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  61:0c:12:06:00:00:00:00:00:1b

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  23-05-2006 17:01

  Not After

  23-05-2016 17:11

  Subject

  OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  46:60:fc:32:bd:52:1d:77:f2:11:c1:33:6a:a9:8b:9e

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

  Not Before

  02-06-2010 00:00

  Not After

  01-06-2013 23:59

  Subject

  CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Secure Application Development,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  3b:17:36:10:d3:f1:9e:b0:b4:cd:13:9f:ed:8e:66:47:32:f8:61:32

  Signer

  Actual PE Digest

  3b:17:36:10:d3:f1:9e:b0:b4:cd:13:9f:ed:8e:66:47:32:f8:61:32

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Secure Application Development,O=Tonec Inc.,L=New York,ST=New York,C=US

  21-03-2013 15:05

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  msvcrt

  realloc

  islower

  isupper

  toupper

  isspace

  asctime

  _strnicmp

  strncmp

  memcpy

  __C_specific_handler

  _CxxThrowException

  _snprintf

  ?terminate@@YAXXZ

  ??1type_info@@UEAA@XZ

  _XcptFilter

  _initterm

  _amsg_exit

  _vsnprintf

  strchr

  strcspn

  _stricmp

  tolower

  malloc

  strncpy

  _gmtime64

  _ctime64

  ??2@YAPEAX_K@Z

  ??3@YAXPEAX@Z

  fclose

  fseek

  fread

  fopen

  free

  __CxxFrameHandler

  kernel32

  GetCurrentProcessId

  GetCurrentThreadId

  GetTickCount

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  MultiByteToWideChar

  WideCharToMultiByte

  InitializeCriticalSection

  GetModuleFileNameA

  LeaveCriticalSection

  EnterCriticalSection

  Sleep

  VirtualProtect

  GetSystemTimeAsFileTime

  advapi32

  RegQueryValueExA

  RegOpenKeyExA

  RegCloseKey

  Exports

  Exports

  IDMExtensionForMimeType

  IDMFileType

  Sections

  .text

  Size: 29KB - Virtual size: 28KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 182B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMGCExt.crx

  .zip
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMGCExt59.crx

  .zip
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMGetAll.dll

  .dll regsvr32 windows x86

  44de3c890bc6860cd0fac57fb1bd1c86

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0c:4a:5b:49:b4:ab:8d:52:e8:3f:26:2f:37:bb:66:09:1c:4d:c1:10:47:7e:89:7f:e2:00:eb:58:fd:a1:1b:e6

  Signer

  Actual PE Digest

  0c:4a:5b:49:b4:ab:8d:52:e8:3f:26:2f:37:bb:66:09:1c:4d:c1:10:47:7e:89:7f:e2:00:eb:58:fd:a1:1b:e6

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  10-11-2019 04:24

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  46:93:71:35:d5:7e:46:d1:47:4b:d9:c2:3b:de:4f:9f:99:98:be:9e

  Signer

  Actual PE Digest

  46:93:71:35:d5:7e:46:d1:47:4b:d9:c2:3b:de:4f:9f:99:98:be:9e

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  10-11-2019 04:24

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  wininet

  InternetCombineUrlA

  InternetGetCookieA

  msvcrt

  _amsg_exit

  _initterm

  _XcptFilter

  _onexit

  _lock

  __dllonexit

  _unlock

  realloc

  ?terminate@@YAXXZ

  ??1type_info@@UAE@XZ

  _ismbblead

  isalpha

  _memicmp

  _purecall

  malloc

  memcmp

  _wcsicmp

  sprintf

  strlen

  strcpy

  wcscpy

  wcsncpy

  wcscat

  wcsncat

  _CxxThrowException

  free

  ??2@YAPAXI@Z

  wcsstr

  strstr

  strrchr

  strpbrk

  atoi

  _ismbcdigit

  wcslen

  vsprintf

  memset

  memcpy

  ??_U@YAPAXI@Z

  _mbclen

  _mbsinc

  _mbsstr

  _mbschr

  ??_V@YAXPAX@Z

  ??3@YAXPAX@Z

  __CxxFrameHandler

  _errno

  strchr

  wcschr

  kernel32

  GetModuleHandleW

  GetSystemInfo

  VirtualQuery

  GetVersion

  lstrlenA

  InterlockedDecrement

  GetProcAddress

  MultiByteToWideChar

  InterlockedIncrement

  GetLastError

  GetModuleHandleA

  GetCurrentThreadId

  lstrlenW

  VirtualAlloc

  VirtualProtect

  GetProcessHeap

  HeapFree

  WideCharToMultiByte

  InterlockedCompareExchange

  RaiseException

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSection

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetTickCount

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  Sleep

  InterlockedExchange

  RtlUnwind

  OutputDebugStringA

  LoadLibraryExA

  FindResourceA

  LoadResource

  SizeofResource

  FreeLibrary

  IsDBCSLeadByte

  GetModuleFileNameA

  DisableThreadLibraryCalls

  lstrcmpiA

  DeleteCriticalSection

  user32

  CharNextW

  CharNextA

  MessageBoxA

  advapi32

  RegDeleteKeyA

  RegCloseKey

  RegCreateKeyExA

  RegOpenKeyExA

  RegSetValueExA

  RegQueryInfoKeyA

  RegEnumKeyExA

  RegDeleteValueA

  ole32

  StringFromGUID2

  CoTaskMemFree

  CoTaskMemRealloc

  CoTaskMemAlloc

  CoInitialize

  CoCreateInstance

  CoUninitialize

  oleaut32

  SafeArrayDestroy

  SysAllocString

  SysFreeString

  VariantInit

  VariantChangeType

  VariantClear

  SysStringLen

  VarBstrCat

  SafeArrayPutElement

  SysAllocStringLen

  SafeArrayCreate

  LoadTypeLi

  UnRegisterTypeLi

  RegisterTypeLi

  VarUI4FromStr

  LoadRegTypeLi

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 36KB - Virtual size: 36KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 10KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMGetAll64.dll

  .dll regsvr32 windows x64

  381ecb1e5320448e597c487d572438dc

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  78:28:c7:31:58:08:bc:87:17:71:0e:13:fa:3c:0b:24

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  18-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  14:b9:55:fb:88:8e:2d:d6:c8:31:92:d7:e7:88:28:62

  Certificate

  Issuer

  CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Not Before

  16-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  10-12-2013 00:00

  Not After

  09-12-2023 23:59

  Subject

  CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

  Certificate

  Issuer

  CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  12-01-2016 00:00

  Not After

  11-01-2031 23:59

  Subject

  CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

  Certificate

  Issuer

  CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Not Before

  23-12-2017 00:00

  Not After

  22-03-2029 23:59

  Subject

  CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  62:3f:42:45:4f:ab:11:b3:ba:01:fa:b7:22:90:8a:57:5f:fe:54:a3:f1:5a:8e:18:88:38:60:b8:4d:a2:b6:a3

  Signer

  Actual PE Digest

  62:3f:42:45:4f:ab:11:b3:ba:01:fa:b7:22:90:8a:57:5f:fe:54:a3:f1:5a:8e:18:88:38:60:b8:4d:a2:b6:a3

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  28-05-2019 12:27

  Valid: false

  d2:da:d6:b5:63:29:47:97:d6:06:eb:9b:c9:8e:16:af:17:70:c5:31

  Signer

  Actual PE Digest

  d2:da:d6:b5:63:29:47:97:d6:06:eb:9b:c9:8e:16:af:17:70:c5:31

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  28-05-2019 12:27

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  wininet

  InternetGetCookieA

  InternetCombineUrlA

  kernel32

  GetCurrentThreadId

  lstrlenW

  RaiseException

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSection

  DeleteCriticalSection

  lstrcmpiA

  DisableThreadLibraryCalls

  GetModuleFileNameA

  GetModuleHandleW

  IsDBCSLeadByte

  GetModuleHandleA

  SizeofResource

  LoadResource

  FindResourceA

  LoadLibraryExA

  GetProcessHeap

  HeapFree

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetProcAddress

  GetLastError

  MultiByteToWideChar

  WideCharToMultiByte

  lstrlenA

  Sleep

  TerminateProcess

  FreeLibrary

  GetCurrentProcess

  GetTickCount

  QueryPerformanceCounter

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  user32

  CharNextW

  MessageBoxA

  CharNextA

  advapi32

  RegQueryInfoKeyA

  RegSetValueExA

  RegOpenKeyExA

  RegCreateKeyExA

  RegCloseKey

  RegDeleteValueA

  RegDeleteKeyA

  RegEnumKeyExA

  ole32

  CoInitialize

  CoTaskMemAlloc

  CoTaskMemRealloc

  CoTaskMemFree

  StringFromGUID2

  CoUninitialize

  CoCreateInstance

  oleaut32

  LoadRegTypeLi

  VarUI4FromStr

  RegisterTypeLi

  UnRegisterTypeLi

  LoadTypeLi

  SafeArrayCreate

  SafeArrayDestroy

  SysAllocStringLen

  SafeArrayPutElement

  VarBstrCat

  SysStringLen

  VariantClear

  VariantChangeType

  VariantInit

  SysFreeString

  SysAllocString

  msvcr90

  __clean_type_info_names_internal

  __crt_debugger_hook

  ?_type_info_dtor_internal_method@type_info@@QEAAXXZ

  __CppXcptFilter

  _amsg_exit

  _encoded_null

  _initterm_e

  _initterm

  _malloc_crt

  _decode_pointer

  _onexit

  _lock

  _encode_pointer

  __dllonexit

  _unlock

  ?terminate@@YAXXZ

  ??3@YAXPEAX@Z

  ??_V@YAXPEAX@Z

  _mbschr

  _mbsstr

  _mbsinc

  _mbclen

  ??_U@YAPEAX_K@Z

  memcpy

  memset

  vsprintf

  wcslen

  _ismbcdigit

  atoi

  __CxxFrameHandler3

  strpbrk

  strrchr

  strstr

  wcschr

  wcsstr

  ??2@YAPEAX_K@Z

  free

  _CxxThrowException

  wcsncat

  wcscat

  wcsncpy

  wcscpy

  strcpy

  strlen

  sprintf

  _wcsicmp

  memcmp

  _mbsnbcpy_s

  malloc

  memcpy_s

  strcpy_s

  wcsncpy_s

  strcat_s

  __C_specific_handler

  _resetstkoflw

  _purecall

  _recalloc

  strchr

  _memicmp

  isalpha

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 49KB - Virtual size: 49KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 19KB - Virtual size: 18KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 542B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMIECC.dll

  .dll regsvr32 windows x86

  c13c6684d64881fed2d675be5b452486

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  eb:8f:03:be:f8:0e:42:91:10:73:c7:05:da:32:0a:33:7b:26:14:59:50:f7:80:d5:a6:d8:9a:08:30:c0:aa:33

  Signer

  Actual PE Digest

  eb:8f:03:be:f8:0e:42:91:10:73:c7:05:da:32:0a:33:7b:26:14:59:50:f7:80:d5:a6:d8:9a:08:30:c0:aa:33

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  01-01-0001 00:00

  Valid: false

  04:39:d2:ee:66:00:ec:87:42:2b:51:8e:a1:d9:41:f7:cb:2e:59:0e

  Signer

  Actual PE Digest

  04:39:d2:ee:66:00:ec:87:42:2b:51:8e:a1:d9:41:f7:cb:2e:59:0e

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  21-01-2020 01:39

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  wininet

  InternetCanonicalizeUrlA

  InternetCanonicalizeUrlW

  InternetCrackUrlA

  InternetGetCookieA

  InternetCombineUrlW

  GetUrlCacheEntryInfoA

  InternetCombineUrlA

  ws2_32

  ntohl

  kernel32

  LoadLibraryA

  LoadLibraryW

  InterlockedDecrement

  GetLocaleInfoA

  GetProcAddress

  GetStringTypeW

  GetModuleHandleA

  GetCurrentProcessId

  SetEvent

  GetCurrentThreadId

  CreateThread

  GetModuleFileNameA

  RaiseException

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSection

  DeleteCriticalSection

  InterlockedIncrement

  lstrcmpiA

  TlsGetValue

  GetModuleHandleW

  TlsSetValue

  CloseHandle

  TlsFree

  CreateMutexA

  GetModuleFileNameW

  TlsAlloc

  IsDBCSLeadByte

  GlobalUnlock

  GlobalLock

  FreeLibrary

  SizeofResource

  LoadResource

  FindResourceA

  LoadLibraryExA

  GetWindowsDirectoryA

  GetCurrentProcess

  lstrcpynA

  ResetEvent

  CreateEventA

  WaitForMultipleObjects

  GetVersionExA

  MulDiv

  CreateFileA

  ReadFile

  FlushFileBuffers

  SetStdHandle

  SetFilePointer

  InitializeCriticalSectionAndSpinCount

  GetStringTypeA

  GetTickCount

  QueryPerformanceCounter

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetEnvironmentStrings

  FreeEnvironmentStringsA

  GetConsoleMode

  GetConsoleCP

  LCMapStringW

  LCMapStringA

  GetStartupInfoA

  GetFileType

  SetHandleCount

  GetStdHandle

  WriteFile

  HeapReAlloc

  VirtualFree

  HeapDestroy

  HeapCreate

  ExitProcess

  HeapSize

  Sleep

  IsValidCodePage

  GetOEMCP

  GetACP

  FindFirstFileA

  FindNextFileA

  SetEnvironmentVariableA

  FindClose

  MultiByteToWideChar

  GetFileAttributesA

  GetLastError

  lstrlenA

  WaitForSingleObject

  ReleaseMutex

  lstrlenW

  GetSystemTimeAsFileTime

  WideCharToMultiByte

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  SetEndOfFile

  HeapFree

  GetProcessHeap

  RtlUnwind

  GetCPInfo

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  SetLastError

  GetCommandLineA

  VirtualQuery

  VirtualProtect

  VirtualAlloc

  GetSystemInfo

  HeapAlloc

  user32

  PostMessageA

  PostQuitMessage

  ScreenToClient

  GetWindowRect

  IntersectRect

  GetSystemMetrics

  GetClientRect

  CharLowerBuffA

  SendMessageA

  IsWindow

  ReleaseDC

  GetParent

  GetCursorPos

  GetAsyncKeyState

  GetKeyboardState

  SetWindowsHookExA

  UnhookWindowsHookEx

  CallNextHookEx

  GetKeyState

  MessageBoxW

  MessageBoxA

  CharNextW

  CharNextA

  SetPropA

  LoadIconA

  LoadCursorA

  RegisterClassA

  GetPropA

  RemovePropA

  PtInRect

  DefWindowProcA

  CreateWindowExA

  GetMessageA

  TranslateMessage

  DispatchMessageA

  GetWindowTextLengthW

  GetWindowTextW

  GetClassNameA

  FindWindowExA

  GetDC

  gdi32

  TranslateCharsetInfo

  GetDeviceCaps

  GetStockObject

  advapi32

  RegDeleteValueA

  RegOpenKeyExW

  RegNotifyChangeKeyValue

  OpenProcessToken

  LookupPrivilegeValueA

  AdjustTokenPrivileges

  GetUserNameA

  RegRestoreKeyA

  RegLoadKeyA

  RegEnumKeyExA

  RegSetValueExA

  RegCreateKeyExA

  RegDeleteKeyA

  RegOpenKeyExA

  RegQueryInfoKeyA

  RegEnumKeyA

  RegCloseKey

  RegQueryValueExW

  RegQueryValueExA

  ole32

  CoInitialize

  CoUninitialize

  CoCreateInstance

  CoTaskMemAlloc

  CoTaskMemRealloc

  CoTaskMemFree

  StringFromGUID2

  CoGetClassObject

  oleaut32

  SysAllocStringByteLen

  SysStringByteLen

  VarBstrCat

  VariantClear

  VarBstrCmp

  SafeArrayDestroy

  SafeArrayGetElement

  SafeArrayGetLBound

  SafeArrayGetUBound

  VariantInit

  LoadTypeLi

  UnRegisterTypeLi

  RegisterTypeLi

  VarUI4FromStr

  LoadRegTypeLi

  SafeArrayPutElement

  SafeArrayCreate

  SafeArrayUnaccessData

  SafeArrayAccessData

  SafeArrayCreateVector

  SysAllocStringLen

  SysFreeString

  SysStringLen

  GetErrorInfo

  SysAllocString

  shlwapi

  UrlUnescapeA

  urlmon

  CoInternetGetSession

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  GetListenerState

  InstallNSH

  Sections

  .text

  Size: 330KB - Virtual size: 329KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 72KB - Virtual size: 71KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 10KB - Virtual size: 20KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 25KB - Virtual size: 25KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMIECC64.dll

  .dll regsvr32 windows x64

  627bea15912422f4b867d56b087a4374

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  11:31:ae:f1:cb:50:91:aa:37:0f:00:54:45:55:d1:36:76:86:e8:90:22:86:ea:f2:ad:f6:7d:52:e7:9d:9c:9c

  Signer

  Actual PE Digest

  11:31:ae:f1:cb:50:91:aa:37:0f:00:54:45:55:d1:36:76:86:e8:90:22:86:ea:f2:ad:f6:7d:52:e7:9d:9c:9c

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  21-01-2020 01:39

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  25:4c:d1:fd:06:9e:a9:2c:57:69:af:81:09:26:84:91:46:82:f8:b4

  Signer

  Actual PE Digest

  25:4c:d1:fd:06:9e:a9:2c:57:69:af:81:09:26:84:91:46:82:f8:b4

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  21-01-2020 01:39

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  wininet

  InternetCanonicalizeUrlA

  InternetCanonicalizeUrlW

  InternetCrackUrlA

  InternetGetCookieA

  InternetCombineUrlW

  GetUrlCacheEntryInfoA

  InternetCombineUrlA

  ws2_32

  ntohl

  kernel32

  GetVersionExA

  GetProcAddress

  GetLocaleInfoA

  GetStringTypeW

  GetModuleHandleA

  GetCurrentProcessId

  SetEvent

  GetCurrentThreadId

  CreateThread

  GetModuleFileNameA

  RaiseException

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSection

  DeleteCriticalSection

  lstrcmpiA

  TlsGetValue

  GetModuleHandleW

  TlsSetValue

  CloseHandle

  TlsFree

  CreateMutexA

  GetModuleFileNameW

  TlsAlloc

  IsDBCSLeadByte

  GlobalUnlock

  GlobalLock

  FreeLibrary

  SizeofResource

  LoadResource

  FindResourceA

  LoadLibraryExA

  LoadLibraryA

  GetWindowsDirectoryA

  GetCurrentProcess

  lstrcpynA

  ResetEvent

  CreateEventA

  WaitForMultipleObjects

  SetEnvironmentVariableA

  FindFirstFileA

  MulDiv

  ReadFile

  FlushFileBuffers

  SetStdHandle

  SetFilePointer

  InitializeCriticalSectionAndSpinCount

  GetStringTypeA

  GetTickCount

  QueryPerformanceCounter

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetEnvironmentStrings

  FreeEnvironmentStringsA

  GetConsoleMode

  GetConsoleCP

  HeapReAlloc

  LCMapStringW

  LCMapStringA

  GetStartupInfoA

  GetFileType

  SetHandleCount

  GetStdHandle

  WriteFile

  HeapDestroy

  HeapCreate

  HeapSetInformation

  ExitProcess

  HeapSize

  Sleep

  RtlCaptureContext

  RtlVirtualUnwind

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  FindNextFileA

  FindClose

  LoadLibraryW

  lstrlenA

  MultiByteToWideChar

  GetFileAttributesA

  GetLastError

  WaitForSingleObject

  ReleaseMutex

  lstrlenW

  WideCharToMultiByte

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  SetEndOfFile

  VirtualAlloc

  GetSystemInfo

  VirtualQuery

  FlsSetValue

  CreateFileA

  UnhandledExceptionFilter

  TerminateProcess

  IsValidCodePage

  GetOEMCP

  GetACP

  GetCPInfo

  FlsAlloc

  SetLastError

  VirtualProtect

  GetSystemTimeAsFileTime

  HeapAlloc

  RtlPcToFileHeader

  RtlUnwindEx

  RtlLookupFunctionEntry

  GetProcessHeap

  HeapFree

  EncodePointer

  DecodePointer

  FlsGetValue

  FlsFree

  GetCommandLineA

  user32

  PostMessageA

  PostQuitMessage

  ScreenToClient

  GetWindowRect

  IntersectRect

  GetSystemMetrics

  GetClientRect

  CharLowerBuffA

  SendMessageA

  IsWindow

  ReleaseDC

  GetParent

  GetCursorPos

  GetAsyncKeyState

  GetKeyboardState

  SetWindowsHookExA

  UnhookWindowsHookEx

  CallNextHookEx

  GetKeyState

  MessageBoxW

  MessageBoxA

  CharNextW

  CharNextA

  SetPropA

  LoadIconA

  LoadCursorA

  RegisterClassA

  GetPropA

  RemovePropA

  PtInRect

  DefWindowProcA

  CreateWindowExA

  GetMessageA

  TranslateMessage

  DispatchMessageA

  GetWindowTextLengthW

  GetWindowTextW

  GetClassNameA

  FindWindowExA

  GetDC

  gdi32

  TranslateCharsetInfo

  GetDeviceCaps

  GetStockObject

  advapi32

  GetUserNameA

  RegOpenKeyExW

  RegNotifyChangeKeyValue

  OpenProcessToken

  LookupPrivilegeValueA

  AdjustTokenPrivileges

  RegRestoreKeyA

  RegLoadKeyA

  RegEnumKeyExA

  RegSetValueExA

  RegCreateKeyExA

  RegDeleteValueA

  RegDeleteKeyA

  RegOpenKeyExA

  RegQueryInfoKeyA

  RegEnumKeyA

  RegCloseKey

  RegQueryValueExA

  RegQueryValueExW

  ole32

  CoInitialize

  CoUninitialize

  CoCreateInstance

  CoTaskMemAlloc

  CoTaskMemRealloc

  CoTaskMemFree

  StringFromGUID2

  CoGetClassObject

  oleaut32

  VariantInit

  LoadTypeLi

  UnRegisterTypeLi

  RegisterTypeLi

  VarUI4FromStr

  LoadRegTypeLi

  SafeArrayPutElement

  SafeArrayCreate

  SafeArrayUnaccessData

  SafeArrayAccessData

  SafeArrayCreateVector

  SafeArrayGetLBound

  SafeArrayGetElement

  SafeArrayDestroy

  VarBstrCmp

  VarBstrCat

  VariantClear

  SysStringByteLen

  SysAllocStringByteLen

  SysAllocString

  SysAllocStringLen

  SysFreeString

  SysStringLen

  GetErrorInfo

  SafeArrayGetUBound

  shlwapi

  UrlUnescapeA

  urlmon

  CoInternetGetSession

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  GetListenerState

  InstallNSH

  Sections

  .text

  Size: 464KB - Virtual size: 464KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 122KB - Virtual size: 122KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 13KB - Virtual size: 25KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 25KB - Virtual size: 25KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMIntegrator64.exe

  .exe windows x64

  1655926ba0713665e9265c19c8bd261a

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  ae:f1:78:1e:a4:84:30:6d:2c:47:47:f0:e9:f8:09:89:fb:91:9d:a9:94:02:29:0d:39:99:67:2b:a1:92:7c:99

  Signer

  Actual PE Digest

  ae:f1:78:1e:a4:84:30:6d:2c:47:47:f0:e9:f8:09:89:fb:91:9d:a9:94:02:29:0d:39:99:67:2b:a1:92:7c:99

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  18-04-2020 01:28

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  c1:78:ab:15:65:10:6c:65:9a:1f:4f:3e:ae:e0:88:8e:54:4c:92:82

  Signer

  Actual PE Digest

  c1:78:ab:15:65:10:6c:65:9a:1f:4f:3e:ae:e0:88:8e:54:4c:92:82

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  18-04-2020 01:28

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  kernel32

  CreateEventA

  CreateThread

  FreeLibrary

  GetProcAddress

  LoadLibraryA

  CreateMutexA

  ResetEvent

  HeapSize

  HeapReAlloc

  HeapAlloc

  LCMapStringW

  LCMapStringA

  GetStringTypeW

  MultiByteToWideChar

  GetStringTypeA

  GetVersionExA

  CloseHandle

  GetModuleFileNameA

  GetFileAttributesA

  GetLastError

  WaitForSingleObject

  GetLocaleInfoA

  RtlLookupFunctionEntry

  RtlUnwindEx

  GetCommandLineA

  GetStartupInfoA

  EncodePointer

  DecodePointer

  FlsGetValue

  FlsSetValue

  FlsFree

  SetLastError

  GetCurrentThreadId

  FlsAlloc

  RaiseException

  RtlPcToFileHeader

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  RtlVirtualUnwind

  RtlCaptureContext

  GetModuleHandleW

  Sleep

  ExitProcess

  WriteFile

  GetStdHandle

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  WideCharToMultiByte

  GetEnvironmentStringsW

  SetHandleCount

  GetFileType

  DeleteCriticalSection

  HeapSetInformation

  HeapCreate

  QueryPerformanceCounter

  GetTickCount

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  LeaveCriticalSection

  EnterCriticalSection

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  HeapFree

  InitializeCriticalSectionAndSpinCount

  user32

  wsprintfA

  GetForegroundWindow

  LoadIconA

  LoadCursorA

  RegisterClassA

  CreateWindowExA

  GetMessageA

  TranslateMessage

  DispatchMessageA

  PostQuitMessage

  DefWindowProcA

  PostMessageA

  gdi32

  GetStockObject

  advapi32

  RegNotifyChangeKeyValue

  RegQueryValueExA

  RegCloseKey

  RegOpenKeyExA

  shell32

  ShellExecuteExA

  ole32

  CoInitialize

  CoUninitialize

  Sections

  .text

  Size: 34KB - Virtual size: 33KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 14KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 900B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMMsgHost.json
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMMsgHostMoz.json
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMNetMon.dll

  .dll windows x86

  506db3639180511d7243c2d470ad1185

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  a3:00:31:fa:73:6f:27:00:a0:7e:86:cb:6a:4c:c8:dc:e8:57:42:37:02:6a:c0:24:35:c3:50:34:ba:25:43:66

  Signer

  Actual PE Digest

  a3:00:31:fa:73:6f:27:00:a0:7e:86:cb:6a:4c:c8:dc:e8:57:42:37:02:6a:c0:24:35:c3:50:34:ba:25:43:66

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  29-04-2020 20:56

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  97:5c:6a:49:96:af:19:e8:b0:fc:3f:1c:be:c5:bb:42:86:a4:4b:4c

  Signer

  Actual PE Digest

  97:5c:6a:49:96:af:19:e8:b0:fc:3f:1c:be:c5:bb:42:86:a4:4b:4c

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  29-04-2020 20:56

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  version

  VerQueryValueW

  GetFileVersionInfoW

  GetFileVersionInfoSizeW

  psapi

  GetModuleBaseNameW

  EnumProcesses

  ws2_32

  ntohs

  socket

  WSAEventSelect

  getsockname

  WSAStartup

  WSACreateEvent

  WSACloseEvent

  listen

  shutdown

  closesocket

  bind

  accept

  WSACleanup

  ntohl

  WSAGetLastError

  htons

  recv

  send

  getpeername

  WSAEnumNetworkEvents

  msvcrt

  _onexit

  _lock

  __dllonexit

  _unlock

  memmove

  memcpy

  memset

  _itow

  _i64toa

  _itoa

  isspace

  isalnum

  _memicmp

  isalpha

  _snwprintf

  fwrite

  fprintf

  _fstat64

  _fileno

  _wstat64

  _time64

  _purecall

  wcsrchr

  sscanf

  fgets

  wcsncat

  wcscspn

  wcsncmp

  _wcsnicmp

  strstr

  strspn

  _stricmp

  wcsspn

  wcsstr

  strncmp

  _strnicmp

  wcspbrk

  _XcptFilter

  wcsncpy

  strcspn

  tolower

  _wcsicmp

  toupper

  towlower

  strpbrk

  fread

  _wfopen

  fclose

  malloc

  free

  realloc

  _iob

  strchr

  _vsnprintf

  wcschr

  _vsnwprintf

  _wcsupr

  _wcslwr

  _strupr

  _strlwr

  ??1type_info@@UAE@XZ

  _initterm

  _amsg_exit

  floor

  isdigit

  _CxxThrowException

  printf

  sprintf

  isprint

  strncpy

  isupper

  islower

  memchr

  kernel32

  GetProcAddress

  GetModuleHandleW

  GetVersion

  WideCharToMultiByte

  FindFirstFileW

  FindNextFileW

  FindClose

  GetSystemDefaultLangID

  GetCurrentProcess

  MultiByteToWideChar

  GetProcessHeap

  HeapFree

  HeapAlloc

  OpenProcess

  CloseHandle

  DisableThreadLibraryCalls

  DeviceIoControl

  CreateNamedPipeW

  CreateMutexW

  WaitForSingleObject

  GetCurrentThreadId

  ResumeThread

  ExitThread

  CreateEventW

  GetExitCodeThread

  ProcessIdToSessionId

  GetLastError

  SetEvent

  TerminateThread

  CreateThread

  ResetEvent

  GetOverlappedResult

  GetCurrentProcessId

  GetTickCount

  ConnectNamedPipe

  GetModuleFileNameW

  FileTimeToSystemTime

  FileTimeToLocalFileTime

  GetLocalTime

  CreateFileW

  FreeLibrary

  LoadLibraryExW

  ReadFile

  WriteFile

  GetLocaleInfoW

  QueryDosDeviceW

  GetVersionExW

  GetLogicalDriveStringsW

  GetSystemTimeAsFileTime

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  RtlUnwind

  GetSystemTime

  ReadProcessMemory

  user32

  GetWindowThreadProcessId

  GetWindowLongW

  MessageBoxW

  GetClassNameW

  SendMessageW

  FindWindowExW

  GetClientRect

  ClientToScreen

  OffsetRect

  ShowWindow

  GetWindowRect

  DestroyWindow

  ReleaseDC

  GetDC

  GetWindowTextW

  GetAncestor

  GetParent

  FindWindowW

  IsRectEmpty

  EnumWindows

  GetWindowInfo

  EnumChildWindows

  GetWindowTextLengthW

  CreateWindowExW

  CallNextHookEx

  UnregisterClassW

  MsgWaitForMultipleObjects

  DispatchMessageW

  PeekMessageW

  RegisterClassW

  GetForegroundWindow

  UnhookWindowsHookEx

  TranslateMessage

  SetWindowsHookExW

  PostThreadMessageW

  DefWindowProcW

  PostMessageW

  SetWindowLongW

  gdi32

  GetDeviceCaps

  TranslateCharsetInfo

  advapi32

  RegDeleteValueW

  CryptAcquireContextW

  RegQueryValueExW

  RegOpenKeyExW

  RegSetValueExW

  RegCreateKeyExW

  RegCloseKey

  RegEnumValueW

  RegEnumKeyExW

  RegQueryInfoKeyW

  RegNotifyChangeKeyValue

  CryptReleaseContext

  CryptGetHashParam

  CryptDestroyHash

  CryptHashData

  CryptCreateHash

  ole32

  CoCreateInstance

  CoInitialize

  CoUninitialize

  oleaut32

  SysAllocStringLen

  SafeArrayCreate

  SafeArrayDestroy

  VariantInit

  SafeArrayPutElement

  SysStringLen

  SafeArrayCreateVector

  SysAllocString

  SysFreeString

  SysStringByteLen

  Exports

  Exports

  ControlMonitoring

  __acrt_iob_func

  Sections

  .text

  Size: 235KB - Virtual size: 235KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 41KB - Virtual size: 41KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 8KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMNetMon64.dll

  .dll windows x64

  65423f1cf441bd69b07f08c68c51be35

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  c6:67:d4:12:0d:c7:f8:b3:61:1c:65:74:84:1b:60:59:b5:8c:b0:12:1c:97:19:d6:fc:02:d1:87:b0:24:b8:4e

  Signer

  Actual PE Digest

  c6:67:d4:12:0d:c7:f8:b3:61:1c:65:74:84:1b:60:59:b5:8c:b0:12:1c:97:19:d6:fc:02:d1:87:b0:24:b8:4e

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  29-04-2020 20:56

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  e8:1c:63:e6:a0:de:0a:f6:5e:09:d2:8f:62:9f:61:1d:27:41:6d:df

  Signer

  Actual PE Digest

  e8:1c:63:e6:a0:de:0a:f6:5e:09:d2:8f:62:9f:61:1d:27:41:6d:df

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  29-04-2020 20:56

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  version

  VerQueryValueW

  GetFileVersionInfoW

  GetFileVersionInfoSizeW

  psapi

  EnumProcesses

  GetModuleBaseNameW

  ws2_32

  ntohs

  socket

  WSAEventSelect

  getsockname

  WSAStartup

  WSACreateEvent

  WSACloseEvent

  listen

  shutdown

  closesocket

  bind

  accept

  WSACleanup

  ntohl

  WSAGetLastError

  htons

  recv

  send

  getpeername

  WSAEnumNetworkEvents

  msvcrt

  _initterm

  _XcptFilter

  ??1type_info@@UEAA@XZ

  _onexit

  _lock

  __dllonexit

  _unlock

  _CxxThrowException

  __C_specific_handler

  memmove

  memset

  memcpy

  _itow

  _i64toa

  _itoa

  isspace

  isalnum

  _memicmp

  isalpha

  _snwprintf

  fwrite

  fprintf

  _fstat64

  _fileno

  _wstat64

  __iob_func

  _time64

  _purecall

  wcsrchr

  sscanf

  fgets

  wcsncat

  wcscspn

  memcmp

  _wcsnicmp

  strchr

  strstr

  strspn

  _stricmp

  wcsspn

  wcsstr

  wcschr

  _vscwprintf

  strncmp

  _vscprintf

  _strnicmp

  wcspbrk

  strncpy

  wcsncpy

  strcspn

  tolower

  _vsnprintf

  _wcsicmp

  toupper

  towlower

  strpbrk

  _vsnwprintf

  fread

  _wfopen

  fclose

  malloc

  free

  realloc

  _wcsupr

  _wcslwr

  _strupr

  _strlwr

  _amsg_exit

  isdigit

  memchr

  printf

  sprintf

  isprint

  wcsncmp

  isupper

  islower

  strcmp

  kernel32

  CreateNamedPipeW

  DeviceIoControl

  DisableThreadLibraryCalls

  GetModuleHandleW

  GetProcAddress

  CloseHandle

  OpenProcess

  GetVersionExW

  GetCurrentProcess

  Sleep

  MultiByteToWideChar

  WideCharToMultiByte

  FindFirstFileW

  CreateMutexW

  FindNextFileW

  GetSystemDefaultLangID

  WaitForSingleObject

  GetCurrentThreadId

  ResumeThread

  ExitThread

  CreateEventW

  GetExitCodeThread

  ProcessIdToSessionId

  GetLastError

  SetEvent

  TerminateThread

  CreateThread

  ResetEvent

  GetOverlappedResult

  GetCurrentProcessId

  GetTickCount

  ConnectNamedPipe

  GetModuleFileNameW

  FileTimeToSystemTime

  FileTimeToLocalFileTime

  GetLocalTime

  CreateFileW

  FreeLibrary

  LoadLibraryExW

  ReadFile

  WriteFile

  GetLocaleInfoW

  QueryDosDeviceW

  GetLogicalDriveStringsW

  ReadProcessMemory

  FindClose

  IsWow64Process

  GetSystemTime

  RtlVirtualUnwind

  RtlLookupFunctionEntry

  RtlCaptureContext

  TerminateProcess

  GetSystemTimeAsFileTime

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  user32

  DestroyWindow

  DefWindowProcW

  GetWindowThreadProcessId

  GetWindowLongW

  MessageBoxW

  GetClassNameW

  SendMessageW

  FindWindowExW

  GetClientRect

  ClientToScreen

  OffsetRect

  ShowWindow

  CreateWindowExW

  PostMessageW

  ReleaseDC

  GetDC

  GetWindowTextW

  GetAncestor

  GetParent

  FindWindowW

  IsRectEmpty

  EnumWindows

  GetWindowInfo

  EnumChildWindows

  GetWindowTextLengthW

  CallNextHookEx

  UnregisterClassW

  MsgWaitForMultipleObjects

  GetWindowLongPtrW

  DispatchMessageW

  RegisterClassW

  GetForegroundWindow

  UnhookWindowsHookEx

  TranslateMessage

  SetWindowsHookExW

  SetWindowLongW

  SetWindowLongPtrW

  PostThreadMessageW

  GetWindowRect

  PeekMessageW

  gdi32

  GetDeviceCaps

  TranslateCharsetInfo

  advapi32

  RegDeleteValueW

  CryptAcquireContextW

  RegQueryValueExW

  RegOpenKeyExW

  RegSetValueExW

  RegCreateKeyExW

  RegCloseKey

  RegEnumValueW

  RegEnumKeyExW

  RegQueryInfoKeyW

  RegNotifyChangeKeyValue

  CryptReleaseContext

  CryptGetHashParam

  CryptDestroyHash

  CryptHashData

  CryptCreateHash

  ole32

  CoCreateInstance

  CoInitialize

  CoUninitialize

  oleaut32

  SysAllocStringLen

  SafeArrayCreate

  SafeArrayDestroy

  VariantInit

  SafeArrayPutElement

  SysStringLen

  SafeArrayCreateVector

  SysAllocString

  SysFreeString

  SysStringByteLen

  Exports

  Exports

  ControlMonitoring

  __acrt_iob_func

  Sections

  .text

  Size: 277KB - Virtual size: 276KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 62KB - Virtual size: 61KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 3KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 13KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMOpExt.nex

  .zip
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMShellExt.dll

  .dll regsvr32 windows x86

  73b839504bd42548f1195ca0724b4866

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  78:28:c7:31:58:08:bc:87:17:71:0e:13:fa:3c:0b:24

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  18-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  61:19:93:e4:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  22-02-2011 19:25

  Not After

  22-02-2021 19:35

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  14:b9:55:fb:88:8e:2d:d6:c8:31:92:d7:e7:88:28:62

  Certificate

  Issuer

  CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Not Before

  16-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  10-12-2013 00:00

  Not After

  09-12-2023 23:59

  Subject

  CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  61:19:93:e4:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  22-02-2011 19:25

  Not After

  22-02-2021 19:35

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

  Certificate

  Issuer

  CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  12-01-2016 00:00

  Not After

  11-01-2031 23:59

  Subject

  CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

  Certificate

  Issuer

  CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Not Before

  23-12-2017 00:00

  Not After

  22-03-2029 23:59

  Subject

  CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  f5:9a:bf:1d:fe:cf:27:14:87:38:9c:bb:d9:1f:59:9e:c1:e2:f1:aa:6d:d4:89:66:90:b9:39:da:56:ac:c4:e7

  Signer

  Actual PE Digest

  f5:9a:bf:1d:fe:cf:27:14:87:38:9c:bb:d9:1f:59:9e:c1:e2:f1:aa:6d:d4:89:66:90:b9:39:da:56:ac:c4:e7

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  01-05-2019 16:48

  Valid: false

  95:c0:5b:2f:b6:92:6a:a4:5b:6a:9f:1f:28:2e:fb:60:83:95:6c:54

  Signer

  Actual PE Digest

  95:c0:5b:2f:b6:92:6a:a4:5b:6a:9f:1f:28:2e:fb:60:83:95:6c:54

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  01-05-2019 16:48

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  _amsg_exit

  _initterm

  _XcptFilter

  wcsrchr

  malloc

  free

  _wcsicmp

  shell32

  SHLoadNonloadedIconOverlayIdentifiers

  ord526

  SHChangeNotify

  shlwapi

  ord219

  kernel32

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetCurrentThreadId

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  RtlUnwind

  CreateThread

  WaitForMultipleObjects

  CreateEventW

  EnterCriticalSection

  LeaveCriticalSection

  LoadLibraryW

  GetTickCount

  FreeLibrary

  CloseHandle

  DisableThreadLibraryCalls

  GetLastError

  GetModuleFileNameW

  GetVersionExW

  InitializeCriticalSection

  GetCurrentProcess

  InterlockedDecrement

  InterlockedIncrement

  GetModuleHandleW

  GetProcAddress

  advapi32

  CreateWellKnownSid

  CheckTokenMembership

  RegNotifyChangeKeyValue

  RegQueryValueExW

  RegSetValueExW

  RegCloseKey

  RegOpenKeyExW

  RegDeleteValueW

  RegQueryValueW

  RegDeleteKeyW

  RegOpenKeyW

  RegCreateKeyExW

  RegEnumKeyW

  GetTokenInformation

  OpenProcessToken

  Exports

  Exports

  ControlMonitoring

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 6KB - Virtual size: 6KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMShellExt64.dll

  .dll regsvr32 windows x64

  e121d0f96d17ecc2ec9d21482bab1258

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  78:28:c7:31:58:08:bc:87:17:71:0e:13:fa:3c:0b:24

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  18-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  61:19:93:e4:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  22-02-2011 19:25

  Not After

  22-02-2021 19:35

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  14:b9:55:fb:88:8e:2d:d6:c8:31:92:d7:e7:88:28:62

  Certificate

  Issuer

  CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Not Before

  16-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  10-12-2013 00:00

  Not After

  09-12-2023 23:59

  Subject

  CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  61:19:93:e4:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  22-02-2011 19:25

  Not After

  22-02-2021 19:35

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

  Certificate

  Issuer

  CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  12-01-2016 00:00

  Not After

  11-01-2031 23:59

  Subject

  CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

  Certificate

  Issuer

  CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Not Before

  23-12-2017 00:00

  Not After

  22-03-2029 23:59

  Subject

  CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  9e:29:36:1f:40:28:95:cb:83:cc:27:20:a3:75:f1:ae:8c:4c:ec:52:52:4b:26:d0:11:f9:f9:d6:80:d6:48:ca

  Signer

  Actual PE Digest

  9e:29:36:1f:40:28:95:cb:83:cc:27:20:a3:75:f1:ae:8c:4c:ec:52:52:4b:26:d0:11:f9:f9:d6:80:d6:48:ca

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  01-05-2019 16:48

  Valid: false

  72:63:08:99:45:d5:50:26:a0:1b:5c:ec:ac:15:3d:53:7f:e2:12:8c

  Signer

  Actual PE Digest

  72:63:08:99:45:d5:50:26:a0:1b:5c:ec:ac:15:3d:53:7f:e2:12:8c

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  01-05-2019 16:48

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  msvcrt

  _amsg_exit

  _initterm

  _XcptFilter

  __C_specific_handler

  wcsrchr

  malloc

  free

  _wcsicmp

  shell32

  SHChangeNotify

  ord526

  SHLoadNonloadedIconOverlayIdentifiers

  shlwapi

  ord219

  kernel32

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetCurrentThreadId

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  CreateThread

  WaitForMultipleObjects

  CreateEventW

  EnterCriticalSection

  GetProcAddress

  LeaveCriticalSection

  LoadLibraryW

  GetTickCount

  GetModuleHandleW

  FreeLibrary

  CloseHandle

  DisableThreadLibraryCalls

  GetLastError

  GetModuleFileNameW

  GetVersionExW

  InitializeCriticalSection

  GetCurrentProcess

  Sleep

  advapi32

  CheckTokenMembership

  RegNotifyChangeKeyValue

  RegQueryValueExW

  RegSetValueExW

  RegCloseKey

  RegOpenKeyExW

  RegDeleteValueW

  RegQueryValueW

  RegDeleteKeyW

  RegOpenKeyW

  RegCreateKeyExW

  RegEnumKeyW

  GetTokenInformation

  OpenProcessToken

  CreateWellKnownSid

  Exports

  Exports

  ControlMonitoring

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 1024B - Virtual size: 672B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 170B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMVMPrs.dll

  .dll windows x86

  1ce280da040f8854dc0fbcc9ff0388df

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  60:76:11:b5:46:27:f2:0d:28:a1:c2:ff:36:2b:72:3e:44:c7:fe:7a:b5:34:73:2e:6a:6f:a2:96:0c:6f:af:84

  Signer

  Actual PE Digest

  60:76:11:b5:46:27:f2:0d:28:a1:c2:ff:36:2b:72:3e:44:c7:fe:7a:b5:34:73:2e:6a:6f:a2:96:0c:6f:af:84

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  31-03-2020 18:18

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  e1:cc:11:f4:0b:15:8c:58:ad:20:28:9d:55:17:08:ec:f7:2c:22:41

  Signer

  Actual PE Digest

  e1:cc:11:f4:0b:15:8c:58:ad:20:28:9d:55:17:08:ec:f7:2c:22:41

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  31-03-2020 18:18

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  isdigit

  malloc

  fwrite

  fprintf

  realloc

  free

  vfprintf

  fopen

  fflush

  fclose

  _wfopen

  fread

  toupper

  getenv

  _strnicmp

  _read

  _getcwd

  _close

  memset

  memcpy

  memmove

  _snprintf

  _XcptFilter

  _initterm

  _amsg_exit

  atoi

  vsprintf

  sscanf

  strncpy

  _strdup

  ??_U@YAPAXI@Z

  strncmp

  strcspn

  ??2@YAPAXI@Z

  _wstat

  _stat

  ??3@YAXPAX@Z

  ??_V@YAXPAX@Z

  _iob

  strchr

  _vsnprintf

  _errno

  kernel32

  GetCurrentProcessId

  GetTickCount

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  InterlockedCompareExchange

  InterlockedExchange

  RtlUnwind

  DeleteCriticalSection

  CloseHandle

  Sleep

  ReleaseMutex

  GetCurrentThreadId

  WaitForSingleObject

  CreateMutexA

  InitializeCriticalSection

  LeaveCriticalSection

  EnterCriticalSection

  MultiByteToWideChar

  lstrlenA

  GetVersion

  GetSystemTimeAsFileTime

  Exports

  Exports

  GetMPDParserInfo

  Parse1

  UTF8ToHtml

  __acrt_iob_func

  __htmlDefaultSAXHandler

  __oldXMLWDcompatibility

  __xmlBufferAllocScheme

  __xmlDefaultBufferSize

  __xmlDefaultSAXLocator

  __xmlDeregisterNodeDefaultValue

  __xmlDoValidityCheckingDefaultValue

  __xmlErrEncoding

  __xmlGenericError

  __xmlGenericErrorContext

  __xmlGetWarningsDefaultValue

  __xmlIndentTreeOutput

  __xmlKeepBlanksDefaultValue

  __xmlLastError

  __xmlLineNumbersDefaultValue

  __xmlLoadExtDtdDefaultValue

  __xmlOutputBufferCreateFilenameValue

  __xmlParserDebugEntities

  __xmlParserInputBufferCreateFilenameValue

  __xmlParserVersion

  __xmlPedanticParserDefaultValue

  __xmlRaiseError

  __xmlRegisterNodeDefaultValue

  __xmlSaveNoEmptyTags

  __xmlSimpleError

  __xmlStructuredError

  __xmlStructuredErrorContext

  __xmlSubstituteEntitiesDefaultValue

  __xmlTreeIndentString

  _stat32

  _wstat32

  htmlAttrAllowed

  htmlAutoCloseTag

  htmlCreateFileParserCtxt

  htmlCreateMemoryParserCtxt

  htmlCtxtReadDoc

  htmlCtxtReadFd

  htmlCtxtReadFile

  htmlCtxtReadIO

  htmlCtxtReadMemory

  htmlCtxtReset

  htmlCtxtUseOptions

  htmlDefaultSAXHandlerInit

  htmlElementAllowedHere

  htmlElementStatusHere

  htmlEncodeEntities

  htmlEntityLookup

  htmlEntityValueLookup

  htmlFreeParserCtxt

  htmlGetMetaEncoding

  htmlHandleOmittedElem

  htmlInitAutoClose

  htmlIsAutoClosed

  htmlIsBooleanAttr

  htmlIsScriptAttribute

  htmlNewDoc

  htmlNewDocNoDtD

  htmlNewParserCtxt

  htmlNodeStatus

  htmlParseCharRef

  htmlParseDoc

  htmlParseDocument

  htmlParseElement

  htmlParseEntityRef

  htmlParseFile

  htmlReadDoc

  htmlReadFd

  htmlReadFile

  htmlReadIO

  htmlReadMemory

  htmlSAXParseDoc

  htmlSAXParseFile

  htmlSetMetaEncoding

  htmlTagLookup

  initGenericErrorDefaultFunc

  inputPop

  inputPush

  isolat1ToUTF8

  namePop

  namePush

  nodePop

  nodePush

  xmlAddAttributeDecl

  xmlAddChild

  xmlAddChildList

  xmlAddDocEntity

  xmlAddDtdEntity

  xmlAddElementDecl

  xmlAddEncodingAlias

  xmlAddID

  xmlAddNextSibling

  xmlAddNotationDecl

  xmlAddPrevSibling

  xmlAddRef

  xmlAddSibling

  xmlAllocParserInputBuffer

  xmlBufContent

  xmlBufEnd

  xmlBufGetNodeContent

  xmlBufShrink

  xmlBufUse

  xmlBufferAdd

  xmlBufferAddHead

  xmlBufferCCat

  xmlBufferCat

  xmlBufferContent

  xmlBufferCreate

  xmlBufferCreateSize

  xmlBufferCreateStatic

  xmlBufferDetach

  xmlBufferDump

  xmlBufferEmpty

  xmlBufferFree

  xmlBufferGrow

  xmlBufferLength

  xmlBufferResize

  xmlBufferSetAllocationScheme

  xmlBufferShrink

  xmlBufferWriteCHAR

  xmlBufferWriteChar

  xmlBufferWriteQuotedString

  xmlBuildQName

  xmlBuildRelativeURI

  xmlBuildURI

  xmlByteConsumed

  xmlCanonicPath

  xmlCharEncCloseFunc

  xmlCharEncFirstLine

  xmlCharEncInFunc

  xmlCharEncOutFunc

  xmlCharInRange

  xmlCharStrdup

  xmlCharStrndup

  xmlCheckFilename

  xmlCheckHTTPInput

  xmlCheckLanguageID

  xmlCheckUTF8

  xmlCheckVersion

  xmlCleanupCharEncodingHandlers

  xmlCleanupEncodingAliases

  xmlCleanupGlobals

  xmlCleanupInputCallbacks

  xmlCleanupMemory

  xmlCleanupParser

  xmlCleanupThreads

  xmlClearNodeInfoSeq

  xmlClearParserCtxt

  xmlCopyChar

  xmlCopyCharMultiByte

  xmlCopyDocElementContent

  xmlCopyElementContent

  xmlCopyError

  xmlCopyNamespace

  xmlCopyNamespaceList

  xmlCopyNode

  xmlCopyNodeList

  xmlCopyProp

  xmlCopyPropList

  xmlCreateDocParserCtxt

  xmlCreateEntitiesTable

  xmlCreateEntityParserCtxt

  xmlCreateEnumeration

  xmlCreateFileParserCtxt

  xmlCreateIOParserCtxt

  xmlCreateIntSubset

  xmlCreateMemoryParserCtxt

  xmlCreateURI

  xmlCreateURLParserCtxt

  xmlCtxtGetLastError

  xmlCtxtReadDoc

  xmlCtxtReadFd

  xmlCtxtReadFile

  xmlCtxtReadIO

  xmlCtxtReadMemory

  xmlCtxtReset

  xmlCtxtResetLastError

  xmlCtxtResetPush

  xmlCtxtUseOptions

  xmlCurrentChar

  xmlDOMWrapAdoptNode

  xmlDOMWrapCloneNode

  xmlDOMWrapFreeCtxt

  xmlDOMWrapNewCtxt

  xmlDOMWrapReconcileNamespaces

  xmlDOMWrapRemoveNode

  xmlDefaultSAXHandlerInit

  xmlDelEncodingAlias

  xmlDeregisterNodeDefault

  xmlDetectCharEncoding

  xmlDictCleanup

  xmlDictCreate

  xmlDictCreateSub

  xmlDictExists

  xmlDictFree

  xmlDictGetUsage

  xmlDictLookup

  xmlDictOwns

  xmlDictQLookup

  xmlDictReference

  xmlDictSetLimit

  xmlDictSize

  xmlDocCopyNode

  xmlDocCopyNodeList

  xmlDocGetRootElement

  xmlEncodeEntitiesReentrant

  xmlEncodeSpecialChars

  xmlErrMemory

  xmlEscapeFormatString

  xmlFileClose

  xmlFileMatch

  xmlFileOpen

  xmlFileRead

  xmlFindCharEncodingHandler

  xmlFree

  xmlFreeAttributeTable

  xmlFreeDoc

  xmlFreeDocElementContent

  xmlFreeDtd

  xmlFreeElementContent

  xmlFreeElementTable

  xmlFreeEntitiesTable

  xmlFreeEnumeration

  xmlFreeIDTable

  xmlFreeInputStream

  xmlFreeMutex

  xmlFreeNode

  xmlFreeNodeList

  xmlFreeNotationTable

  xmlFreeNs

  xmlFreeNsList

  xmlFreeParserCtxt

  xmlFreeParserInputBuffer

  xmlFreeProp

  xmlFreePropList

  xmlFreeRMutex

  xmlFreeRefTable

  xmlFreeURI

  xmlGcMemGet

  xmlGcMemSetup

  xmlGetBufferAllocationScheme

  xmlGetCharEncodingHandler

  xmlGetCharEncodingName

  xmlGetCompressMode

  xmlGetDocCompressMode

  xmlGetDocEntity

  xmlGetDtdAttrDesc

  xmlGetDtdElementDesc

  xmlGetDtdEntity

  xmlGetDtdNotationDesc

  xmlGetDtdQAttrDesc

  xmlGetDtdQElementDesc

  xmlGetEncodingAlias

  xmlGetExternalEntityLoader

  xmlGetGlobalState

  xmlGetID

  xmlGetIntSubset

  xmlGetLastChild

  xmlGetLastError

  xmlGetLineNo

  xmlGetNoNsProp

  xmlGetNsProp

  xmlGetParameterEntity

  xmlGetPredefinedEntity

  xmlGetProp

  xmlGetRefs

  xmlGetThreadId

  xmlGetUTF8Char

  xmlHasFeature

  xmlHasNsProp

  xmlHasProp

  xmlHashAddEntry

  xmlHashAddEntry2

  xmlHashAddEntry3

  xmlHashCopy

  xmlHashCreate

  xmlHashCreateDict

  xmlHashDefaultDeallocator

  xmlHashFree

  xmlHashLookup

  xmlHashLookup2

  xmlHashLookup3

  xmlHashQLookup

  xmlHashQLookup2

  xmlHashQLookup3

  xmlHashRemoveEntry

  xmlHashRemoveEntry2

  xmlHashRemoveEntry3

  xmlHashScan

  xmlHashScan3

  xmlHashScanFull

  xmlHashScanFull3

  xmlHashSize

  xmlHashUpdateEntry

  xmlHashUpdateEntry2

  xmlHashUpdateEntry3

  xmlInitCharEncodingHandlers

  xmlInitGlobals

  xmlInitMemory

  xmlInitNodeInfoSeq

  xmlInitParser

  xmlInitParserCtxt

  xmlInitThreads

  xmlInitializeDict

  xmlInitializeGlobalState

  xmlIsBaseChar

  xmlIsBaseCharGroup

  xmlIsBlank

  xmlIsBlankNode

  xmlIsChar

  xmlIsCharGroup

  xmlIsCombining

  xmlIsCombiningGroup

  xmlIsDigit

  xmlIsDigitGroup

  xmlIsExtender

  xmlIsExtenderGroup

  xmlIsID

  xmlIsIdeographic

  xmlIsIdeographicGroup

  xmlIsLetter

  xmlIsMainThread

  xmlIsMixedElement

  xmlIsPubidChar

  xmlIsPubidChar_tab

  xmlIsRef

  xmlKeepBlanksDefault

  xmlLineNumbersDefault

  xmlLinkGetData

  xmlListAppend

  xmlListClear

  xmlListCopy

  xmlListCreate

  xmlListDelete

  xmlListDup

  xmlListEmpty

  xmlListEnd

  xmlListFront

  xmlListInsert

  xmlListMerge

  xmlListPopBack

  xmlListPopFront

  xmlListPushBack

  xmlListPushFront

  xmlListRemoveAll

  xmlListRemoveFirst

  xmlListRemoveLast

  xmlListReverse

  xmlListReverseSearch

  xmlListReverseWalk

  xmlListSearch

  xmlListSize

  xmlListSort

  xmlListWalk

  xmlLoadExternalEntity

  xmlLockLibrary

  xmlMalloc

  xmlMallocAtomic

  xmlMallocAtomicLoc

  xmlMallocLoc

  xmlMemBlocks

  xmlMemDisplay

  xmlMemDisplayLast

  xmlMemFree

  xmlMemGet

  xmlMemMalloc

  xmlMemRealloc

  xmlMemSetup

  xmlMemShow

  xmlMemStrdup

  xmlMemStrdupLoc

  xmlMemUsed

  xmlMemoryDump

  xmlMemoryStrdup

  xmlMutexLock

  xmlMutexUnlock

  xmlNewCDataBlock

  xmlNewCharEncodingHandler

  xmlNewCharRef

  xmlNewComment

  xmlNewDoc

  xmlNewDocComment

  xmlNewDocElementContent

  xmlNewDocNode

  xmlNewDocNodeEatName

  xmlNewDocPI

  xmlNewDocProp

  xmlNewDocText

  xmlNewDocTextLen

  xmlNewDtd

  xmlNewElementContent

  xmlNewEntity

  xmlNewEntityInputStream

  xmlNewIOInputStream

  xmlNewInputFromFile

  xmlNewInputStream

  xmlNewMutex

  xmlNewNode

  xmlNewNodeEatName

  xmlNewNs

  xmlNewNsProp

  xmlNewNsPropEatName

  xmlNewPI

  xmlNewParserCtxt

  xmlNewProp

  xmlNewRMutex

  xmlNewReference

  xmlNewStringInputStream

  xmlNewText

  xmlNewTextLen

  xmlNextChar

  xmlNoNetExternalEntityLoader

  xmlNodeAddContent

  xmlNodeAddContentLen

  xmlNodeBufGetContent

  xmlNodeGetBase

  xmlNodeGetContent

  xmlNodeGetLang

  xmlNodeGetSpacePreserve

  xmlNodeIsText

  xmlNodeListGetString

  xmlNodeSetContent

  xmlNormalizeURIPath

  xmlNormalizeWindowsPath

  xmlOutputBufferCreateFilenameDefault

  xmlParseAttValue

  xmlParseAttributeListDecl

  xmlParseAttributeType

  xmlParseCDSect

  xmlParseCharData

  xmlParseCharEncoding

  xmlParseCharRef

  xmlParseComment

  xmlParseContent

  xmlParseCtxtExternalEntity

  xmlParseDefaultDecl

  xmlParseDocTypeDecl

  xmlParseDocument

  xmlParseElement

  xmlParseElementChildrenContentDecl

  xmlParseElementContentDecl

  xmlParseElementDecl

  xmlParseElementMixedContentDecl

  xmlParseEncName

  xmlParseEncodingDecl

  xmlParseEntityDecl

  xmlParseEntityRef

  xmlParseEntityValue

  xmlParseEnumeratedType

  xmlParseEnumerationType

  xmlParseExtParsedEnt

  xmlParseExternalID

  xmlParseExternalSubset

  xmlParseInNodeContext

  xmlParseMarkupDecl

  xmlParseMisc

  xmlParseName

  xmlParseNmtoken

  xmlParseNotationDecl

  xmlParseNotationType

  xmlParsePEReference

  xmlParsePI

  xmlParsePITarget

  xmlParsePubidLiteral

  xmlParseReference

  xmlParseSDDecl

  xmlParseSystemLiteral

  xmlParseTextDecl

  xmlParseURI

  xmlParseURIRaw

  xmlParseURIReference

  xmlParseVersionInfo

  xmlParseVersionNum

  xmlParseXMLDecl

  xmlParserAddNodeInfo

  xmlParserError

  xmlParserFindNodeInfo

  xmlParserFindNodeInfoIndex

  xmlParserGetDirectory

  xmlParserHandlePEReference

  xmlParserInputBufferCreateFd

  xmlParserInputBufferCreateFile

  xmlParserInputBufferCreateFilename

  xmlParserInputBufferCreateFilenameDefault

  xmlParserInputBufferCreateIO

  xmlParserInputBufferCreateMem

  xmlParserInputBufferCreateStatic

  xmlParserInputBufferGrow

  xmlParserInputBufferPush

  xmlParserInputBufferRead

  xmlParserInputGrow

  xmlParserInputRead

  xmlParserInputShrink

  xmlParserMaxDepth

  xmlParserPrintFileContext

  xmlParserPrintFileInfo

  xmlParserValidityError

  Sections

  .text

  Size: 216KB - Virtual size: 216KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 84KB - Virtual size: 84KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 13KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMVMPrs64.dll

  .dll windows x64

  43987208e6c589fd7fee380a2c27c65f

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  18:17:44:2f:25:d4:2f:25:b7:a0:98:8e:9a:ac:32:be:78:c5:1b:e3:c6:b1:53:0d:c6:2d:c4:5d:8e:7e:d4:82

  Signer

  Actual PE Digest

  18:17:44:2f:25:d4:2f:25:b7:a0:98:8e:9a:ac:32:be:78:c5:1b:e3:c6:b1:53:0d:c6:2d:c4:5d:8e:7e:d4:82

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  31-03-2020 18:18

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  d3:1e:54:12:e7:be:09:59:82:9a:48:1a:c0:03:6b:30:50:4a:81:ef

  Signer

  Actual PE Digest

  d3:1e:54:12:e7:be:09:59:82:9a:48:1a:c0:03:6b:30:50:4a:81:ef

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  31-03-2020 18:18

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  msvcrt

  atoi

  _snprintf

  isdigit

  malloc

  fwrite

  fprintf

  realloc

  free

  vfprintf

  fopen

  fflush

  fclose

  _wfopen

  fread

  toupper

  getenv

  _strnicmp

  _read

  _getcwd

  _close

  memcpy

  memset

  memmove

  __C_specific_handler

  sscanf

  _XcptFilter

  _initterm

  _amsg_exit

  vsprintf

  strncpy

  _strdup

  strchr

  ??_U@YAPEAX_K@Z

  strncmp

  strcspn

  ??2@YAPEAX_K@Z

  _wstat

  __iob_func

  _stat

  ??3@YAXPEAX@Z

  _vsnprintf

  ??_V@YAXPEAX@Z

  _errno

  strcmp

  kernel32

  GetSystemTimeAsFileTime

  GetTickCount

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  DeleteCriticalSection

  CloseHandle

  ReleaseMutex

  GetCurrentThreadId

  WaitForSingleObject

  CreateMutexA

  InitializeCriticalSection

  LeaveCriticalSection

  EnterCriticalSection

  MultiByteToWideChar

  lstrlenA

  Sleep

  GetCurrentProcessId

  Exports

  Exports

  GetMPDParserInfo

  Parse1

  UTF8ToHtml

  __acrt_iob_func

  __htmlDefaultSAXHandler

  __oldXMLWDcompatibility

  __xmlBufferAllocScheme

  __xmlDefaultBufferSize

  __xmlDefaultSAXLocator

  __xmlDeregisterNodeDefaultValue

  __xmlDoValidityCheckingDefaultValue

  __xmlErrEncoding

  __xmlGenericError

  __xmlGenericErrorContext

  __xmlGetWarningsDefaultValue

  __xmlIndentTreeOutput

  __xmlKeepBlanksDefaultValue

  __xmlLastError

  __xmlLineNumbersDefaultValue

  __xmlLoadExtDtdDefaultValue

  __xmlOutputBufferCreateFilenameValue

  __xmlParserDebugEntities

  __xmlParserInputBufferCreateFilenameValue

  __xmlParserVersion

  __xmlPedanticParserDefaultValue

  __xmlRaiseError

  __xmlRegisterNodeDefaultValue

  __xmlSaveNoEmptyTags

  __xmlSimpleError

  __xmlStructuredError

  __xmlStructuredErrorContext

  __xmlSubstituteEntitiesDefaultValue

  __xmlTreeIndentString

  _stat64i32

  _wstat64i32

  htmlAttrAllowed

  htmlAutoCloseTag

  htmlCreateFileParserCtxt

  htmlCreateMemoryParserCtxt

  htmlCtxtReadDoc

  htmlCtxtReadFd

  htmlCtxtReadFile

  htmlCtxtReadIO

  htmlCtxtReadMemory

  htmlCtxtReset

  htmlCtxtUseOptions

  htmlDefaultSAXHandlerInit

  htmlElementAllowedHere

  htmlElementStatusHere

  htmlEncodeEntities

  htmlEntityLookup

  htmlEntityValueLookup

  htmlFreeParserCtxt

  htmlGetMetaEncoding

  htmlHandleOmittedElem

  htmlInitAutoClose

  htmlIsAutoClosed

  htmlIsBooleanAttr

  htmlIsScriptAttribute

  htmlNewDoc

  htmlNewDocNoDtD

  htmlNewParserCtxt

  htmlNodeStatus

  htmlParseCharRef

  htmlParseDoc

  htmlParseDocument

  htmlParseElement

  htmlParseEntityRef

  htmlParseFile

  htmlReadDoc

  htmlReadFd

  htmlReadFile

  htmlReadIO

  htmlReadMemory

  htmlSAXParseDoc

  htmlSAXParseFile

  htmlSetMetaEncoding

  htmlTagLookup

  initGenericErrorDefaultFunc

  inputPop

  inputPush

  isolat1ToUTF8

  namePop

  namePush

  nodePop

  nodePush

  xmlAddAttributeDecl

  xmlAddChild

  xmlAddChildList

  xmlAddDocEntity

  xmlAddDtdEntity

  xmlAddElementDecl

  xmlAddEncodingAlias

  xmlAddID

  xmlAddNextSibling

  xmlAddNotationDecl

  xmlAddPrevSibling

  xmlAddRef

  xmlAddSibling

  xmlAllocParserInputBuffer

  xmlBufContent

  xmlBufEnd

  xmlBufGetNodeContent

  xmlBufShrink

  xmlBufUse

  xmlBufferAdd

  xmlBufferAddHead

  xmlBufferCCat

  xmlBufferCat

  xmlBufferContent

  xmlBufferCreate

  xmlBufferCreateSize

  xmlBufferCreateStatic

  xmlBufferDetach

  xmlBufferDump

  xmlBufferEmpty

  xmlBufferFree

  xmlBufferGrow

  xmlBufferLength

  xmlBufferResize

  xmlBufferSetAllocationScheme

  xmlBufferShrink

  xmlBufferWriteCHAR

  xmlBufferWriteChar

  xmlBufferWriteQuotedString

  xmlBuildQName

  xmlBuildRelativeURI

  xmlBuildURI

  xmlByteConsumed

  xmlCanonicPath

  xmlCharEncCloseFunc

  xmlCharEncFirstLine

  xmlCharEncInFunc

  xmlCharEncOutFunc

  xmlCharInRange

  xmlCharStrdup

  xmlCharStrndup

  xmlCheckFilename

  xmlCheckHTTPInput

  xmlCheckLanguageID

  xmlCheckUTF8

  xmlCheckVersion

  xmlCleanupCharEncodingHandlers

  xmlCleanupEncodingAliases

  xmlCleanupGlobals

  xmlCleanupInputCallbacks

  xmlCleanupMemory

  xmlCleanupParser

  xmlCleanupThreads

  xmlClearNodeInfoSeq

  xmlClearParserCtxt

  xmlCopyChar

  xmlCopyCharMultiByte

  xmlCopyDocElementContent

  xmlCopyElementContent

  xmlCopyError

  xmlCopyNamespace

  xmlCopyNamespaceList

  xmlCopyNode

  xmlCopyNodeList

  xmlCopyProp

  xmlCopyPropList

  xmlCreateDocParserCtxt

  xmlCreateEntitiesTable

  xmlCreateEntityParserCtxt

  xmlCreateEnumeration

  xmlCreateFileParserCtxt

  xmlCreateIOParserCtxt

  xmlCreateIntSubset

  xmlCreateMemoryParserCtxt

  xmlCreateURI

  xmlCreateURLParserCtxt

  xmlCtxtGetLastError

  xmlCtxtReadDoc

  xmlCtxtReadFd

  xmlCtxtReadFile

  xmlCtxtReadIO

  xmlCtxtReadMemory

  xmlCtxtReset

  xmlCtxtResetLastError

  xmlCtxtResetPush

  xmlCtxtUseOptions

  xmlCurrentChar

  xmlDOMWrapAdoptNode

  xmlDOMWrapCloneNode

  xmlDOMWrapFreeCtxt

  xmlDOMWrapNewCtxt

  xmlDOMWrapReconcileNamespaces

  xmlDOMWrapRemoveNode

  xmlDefaultSAXHandlerInit

  xmlDelEncodingAlias

  xmlDeregisterNodeDefault

  xmlDetectCharEncoding

  xmlDictCleanup

  xmlDictCreate

  xmlDictCreateSub

  xmlDictExists

  xmlDictFree

  xmlDictGetUsage

  xmlDictLookup

  xmlDictOwns

  xmlDictQLookup

  xmlDictReference

  xmlDictSetLimit

  xmlDictSize

  xmlDocCopyNode

  xmlDocCopyNodeList

  xmlDocGetRootElement

  xmlEncodeEntitiesReentrant

  xmlEncodeSpecialChars

  xmlErrMemory

  xmlEscapeFormatString

  xmlFileClose

  xmlFileMatch

  xmlFileOpen

  xmlFileRead

  xmlFindCharEncodingHandler

  xmlFree

  xmlFreeAttributeTable

  xmlFreeDoc

  xmlFreeDocElementContent

  xmlFreeDtd

  xmlFreeElementContent

  xmlFreeElementTable

  xmlFreeEntitiesTable

  xmlFreeEnumeration

  xmlFreeIDTable

  xmlFreeInputStream

  xmlFreeMutex

  xmlFreeNode

  xmlFreeNodeList

  xmlFreeNotationTable

  xmlFreeNs

  xmlFreeNsList

  xmlFreeParserCtxt

  xmlFreeParserInputBuffer

  xmlFreeProp

  xmlFreePropList

  xmlFreeRMutex

  xmlFreeRefTable

  xmlFreeURI

  xmlGcMemGet

  xmlGcMemSetup

  xmlGetBufferAllocationScheme

  xmlGetCharEncodingHandler

  xmlGetCharEncodingName

  xmlGetCompressMode

  xmlGetDocCompressMode

  xmlGetDocEntity

  xmlGetDtdAttrDesc

  xmlGetDtdElementDesc

  xmlGetDtdEntity

  xmlGetDtdNotationDesc

  xmlGetDtdQAttrDesc

  xmlGetDtdQElementDesc

  xmlGetEncodingAlias

  xmlGetExternalEntityLoader

  xmlGetGlobalState

  xmlGetID

  xmlGetIntSubset

  xmlGetLastChild

  xmlGetLastError

  xmlGetLineNo

  xmlGetNoNsProp

  xmlGetNsProp

  xmlGetParameterEntity

  xmlGetPredefinedEntity

  xmlGetProp

  xmlGetRefs

  xmlGetThreadId

  xmlGetUTF8Char

  xmlHasFeature

  xmlHasNsProp

  xmlHasProp

  xmlHashAddEntry

  xmlHashAddEntry2

  xmlHashAddEntry3

  xmlHashCopy

  xmlHashCreate

  xmlHashCreateDict

  xmlHashDefaultDeallocator

  xmlHashFree

  xmlHashLookup

  xmlHashLookup2

  xmlHashLookup3

  xmlHashQLookup

  xmlHashQLookup2

  xmlHashQLookup3

  xmlHashRemoveEntry

  xmlHashRemoveEntry2

  xmlHashRemoveEntry3

  xmlHashScan

  xmlHashScan3

  xmlHashScanFull

  xmlHashScanFull3

  xmlHashSize

  xmlHashUpdateEntry

  xmlHashUpdateEntry2

  xmlHashUpdateEntry3

  xmlInitCharEncodingHandlers

  xmlInitGlobals

  xmlInitMemory

  xmlInitNodeInfoSeq

  xmlInitParser

  xmlInitParserCtxt

  xmlInitThreads

  xmlInitializeDict

  xmlInitializeGlobalState

  xmlIsBaseChar

  xmlIsBaseCharGroup

  xmlIsBlank

  xmlIsBlankNode

  xmlIsChar

  xmlIsCharGroup

  xmlIsCombining

  xmlIsCombiningGroup

  xmlIsDigit

  xmlIsDigitGroup

  xmlIsExtender

  xmlIsExtenderGroup

  xmlIsID

  xmlIsIdeographic

  xmlIsIdeographicGroup

  xmlIsLetter

  xmlIsMainThread

  xmlIsMixedElement

  xmlIsPubidChar

  xmlIsPubidChar_tab

  xmlIsRef

  xmlKeepBlanksDefault

  xmlLineNumbersDefault

  xmlLinkGetData

  xmlListAppend

  xmlListClear

  xmlListCopy

  xmlListCreate

  xmlListDelete

  xmlListDup

  xmlListEmpty

  xmlListEnd

  xmlListFront

  xmlListInsert

  xmlListMerge

  xmlListPopBack

  xmlListPopFront

  xmlListPushBack

  xmlListPushFront

  xmlListRemoveAll

  xmlListRemoveFirst

  xmlListRemoveLast

  xmlListReverse

  xmlListReverseSearch

  xmlListReverseWalk

  xmlListSearch

  xmlListSize

  xmlListSort

  xmlListWalk

  xmlLoadExternalEntity

  xmlLockLibrary

  xmlMalloc

  xmlMallocAtomic

  xmlMallocAtomicLoc

  xmlMallocLoc

  xmlMemBlocks

  xmlMemDisplay

  xmlMemDisplayLast

  xmlMemFree

  xmlMemGet

  xmlMemMalloc

  xmlMemRealloc

  xmlMemSetup

  xmlMemShow

  xmlMemStrdup

  xmlMemStrdupLoc

  xmlMemUsed

  xmlMemoryDump

  xmlMemoryStrdup

  xmlMutexLock

  xmlMutexUnlock

  xmlNewCDataBlock

  xmlNewCharEncodingHandler

  xmlNewCharRef

  xmlNewComment

  xmlNewDoc

  xmlNewDocComment

  xmlNewDocElementContent

  xmlNewDocNode

  xmlNewDocNodeEatName

  xmlNewDocPI

  xmlNewDocProp

  xmlNewDocText

  xmlNewDocTextLen

  xmlNewDtd

  xmlNewElementContent

  xmlNewEntity

  xmlNewEntityInputStream

  xmlNewIOInputStream

  xmlNewInputFromFile

  xmlNewInputStream

  xmlNewMutex

  xmlNewNode

  xmlNewNodeEatName

  xmlNewNs

  xmlNewNsProp

  xmlNewNsPropEatName

  xmlNewPI

  xmlNewParserCtxt

  xmlNewProp

  xmlNewRMutex

  xmlNewReference

  xmlNewStringInputStream

  xmlNewText

  xmlNewTextLen

  xmlNextChar

  xmlNoNetExternalEntityLoader

  xmlNodeAddContent

  xmlNodeAddContentLen

  xmlNodeBufGetContent

  xmlNodeGetBase

  xmlNodeGetContent

  xmlNodeGetLang

  xmlNodeGetSpacePreserve

  xmlNodeIsText

  xmlNodeListGetString

  xmlNodeSetContent

  xmlNormalizeURIPath

  xmlNormalizeWindowsPath

  xmlOutputBufferCreateFilenameDefault

  xmlParseAttValue

  xmlParseAttributeListDecl

  xmlParseAttributeType

  xmlParseCDSect

  xmlParseCharData

  xmlParseCharEncoding

  xmlParseCharRef

  xmlParseComment

  xmlParseContent

  xmlParseCtxtExternalEntity

  xmlParseDefaultDecl

  xmlParseDocTypeDecl

  xmlParseDocument

  xmlParseElement

  xmlParseElementChildrenContentDecl

  xmlParseElementContentDecl

  xmlParseElementDecl

  xmlParseElementMixedContentDecl

  xmlParseEncName

  xmlParseEncodingDecl

  xmlParseEntityDecl

  xmlParseEntityRef

  xmlParseEntityValue

  xmlParseEnumeratedType

  xmlParseEnumerationType

  xmlParseExtParsedEnt

  xmlParseExternalID

  xmlParseExternalSubset

  xmlParseInNodeContext

  xmlParseMarkupDecl

  xmlParseMisc

  xmlParseName

  xmlParseNmtoken

  xmlParseNotationDecl

  xmlParseNotationType

  xmlParsePEReference

  xmlParsePI

  xmlParsePITarget

  xmlParsePubidLiteral

  xmlParseReference

  xmlParseSDDecl

  xmlParseSystemLiteral

  xmlParseTextDecl

  xmlParseURI

  xmlParseURIRaw

  xmlParseURIReference

  xmlParseVersionInfo

  xmlParseVersionNum

  xmlParseXMLDecl

  xmlParserAddNodeInfo

  xmlParserError

  xmlParserFindNodeInfo

  xmlParserFindNodeInfoIndex

  xmlParserGetDirectory

  xmlParserHandlePEReference

  xmlParserInputBufferCreateFd

  xmlParserInputBufferCreateFile

  xmlParserInputBufferCreateFilename

  xmlParserInputBufferCreateFilenameDefault

  xmlParserInputBufferCreateIO

  xmlParserInputBufferCreateMem

  xmlParserInputBufferCreateStatic

  xmlParserInputBufferGrow

  xmlParserInputBufferPush

  xmlParserInputBufferRead

  xmlParserInputGrow

  xmlParserInputRead

  xmlParserInputShrink

  xmlParserMaxDepth

  xmlParserPrintFileContext

  xmlParserPrintFileInfo

  xmlParserValidityError

  Sections

  .text

  Size: 255KB - Virtual size: 255KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 108KB - Virtual size: 108KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 11KB - Virtual size: 11KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IEExt.htm

  .vbs
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IEGetAll.htm

  .vbs
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IEGetVL.htm

  .vbs
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IEGetVL2.htm

  .vbs
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IEMonitor.exe

  .exe windows x86

  cc50bc11c112d01154ce3385b76d7d36

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e9:41:7a:04:69:39:31:f3:f2:9a:fd:f7:12:24:b5:38:4c:6b:da:e1:1d:81:b0:2d:48:1e:8d:5f:8a:d1:e0:2d

  Signer

  Actual PE Digest

  e9:41:7a:04:69:39:31:f3:f2:9a:fd:f7:12:24:b5:38:4c:6b:da:e1:1d:81:b0:2d:48:1e:8d:5f:8a:d1:e0:2d

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  13-03-2020 22:24

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  1b:c3:5a:aa:22:41:5d:65:04:94:38:1b:0c:c2:d4:33:a8:94:45:5b

  Signer

  Actual PE Digest

  1b:c3:5a:aa:22:41:5d:65:04:94:38:1b:0c:c2:d4:33:a8:94:45:5b

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  13-03-2020 22:24

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetFileSizeEx

  GetFileTime

  RtlUnwind

  GetTimeZoneInformation

  GetSystemTimeAsFileTime

  Sleep

  HeapFree

  GetCommandLineA

  GetStartupInfoA

  HeapAlloc

  VirtualProtect

  VirtualAlloc

  GetSystemInfo

  VirtualQuery

  HeapReAlloc

  HeapSize

  TerminateProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  GetConsoleCP

  GetConsoleMode

  GetStdHandle

  InitializeCriticalSectionAndSpinCount

  GetFileAttributesA

  VirtualFree

  GetACP

  IsValidCodePage

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  SetHandleCount

  GetFileType

  QueryPerformanceCounter

  GetStringTypeA

  GetStringTypeW

  SetStdHandle

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  LCMapStringA

  LCMapStringW

  GetProcessHeap

  CompareStringW

  SetEnvironmentVariableA

  FileTimeToLocalFileTime

  SetErrorMode

  FileTimeToSystemTime

  GetOEMCP

  GetCPInfo

  GetModuleHandleW

  CreateFileA

  GetFullPathNameA

  GetVolumeInformationA

  FindFirstFileA

  FindClose

  GetCurrentProcess

  DuplicateHandle

  GetFileSize

  SetEndOfFile

  UnlockFile

  LockFile

  FlushFileBuffers

  SetFilePointer

  WriteFile

  ReadFile

  GetThreadLocale

  InterlockedIncrement

  TlsFree

  DeleteCriticalSection

  LocalReAlloc

  TlsSetValue

  TlsAlloc

  InitializeCriticalSection

  GlobalHandle

  GlobalReAlloc

  EnterCriticalSection

  TlsGetValue

  LeaveCriticalSection

  GlobalFlags

  WritePrivateProfileStringA

  GlobalGetAtomNameA

  GlobalFindAtomA

  lstrcmpW

  GetModuleFileNameW

  FormatMessageA

  MulDiv

  lstrlenA

  GetTickCount

  GlobalUnlock

  GlobalFree

  FreeResource

  GetCurrentProcessId

  SetLastError

  GlobalAddAtomA

  GlobalDeleteAtom

  GetCurrentThread

  GetCurrentThreadId

  ConvertDefaultLocale

  EnumResourceLanguagesA

  GetLocaleInfoA

  CompareStringA

  GlobalLock

  lstrcmpA

  GlobalAlloc

  RaiseException

  InterlockedExchange

  LocalFree

  LocalAlloc

  ExitProcess

  lstrcpynA

  FreeLibrary

  InterlockedDecrement

  GetVersionExA

  LoadLibraryW

  LoadLibraryA

  MultiByteToWideChar

  WideCharToMultiByte

  FindResourceA

  LoadResource

  LockResource

  SizeofResource

  ReleaseMutex

  CloseHandle

  CreateMutexA

  GetLastError

  GetProcAddress

  GetModuleHandleA

  HeapCreate

  GetModuleFileNameA

  user32

  SetRect

  IsRectEmpty

  CopyAcceleratorTableA

  CharNextA

  PostThreadMessageA

  CharUpperA

  GetSysColorBrush

  ReleaseCapture

  LoadCursorA

  SetCapture

  EndPaint

  BeginPaint

  GetWindowDC

  ReleaseDC

  GetDC

  ClientToScreen

  GrayStringA

  DrawTextExA

  DrawTextA

  TabbedTextOutA

  ShowWindow

  MoveWindow

  SetWindowTextA

  IsDialogMessageA

  RegisterWindowMessageA

  SendDlgItemMessageA

  WinHelpA

  GetCapture

  GetClassLongA

  SetPropA

  GetPropA

  RemovePropA

  SetFocus

  GetForegroundWindow

  GetTopWindow

  GetMessageTime

  GetMessagePos

  MapWindowPoints

  SetMenu

  SetForegroundWindow

  UpdateWindow

  CreateWindowExA

  GetClassInfoExA

  GetClassInfoA

  RegisterClassA

  GetSysColor

  AdjustWindowRectEx

  EqualRect

  CopyRect

  PtInRect

  GetDlgCtrlID

  DefWindowProcA

  CallWindowProcA

  GetMenu

  SetWindowLongA

  OffsetRect

  IntersectRect

  SystemParametersInfoA

  GetWindowPlacement

  GetWindowRect

  UnhookWindowsHookEx

  DrawIcon

  SendMessageA

  PostMessageA

  IsIconic

  GetMenuItemID

  GetMenuItemCount

  GetSubMenu

  GetWindow

  SetWindowContextHelpId

  MapDialogRect

  SetWindowPos

  RegisterClipboardFormatA

  GetDesktopWindow

  SetActiveWindow

  CreateDialogIndirectParamA

  DestroyMenu

  UnregisterClassA

  MessageBeep

  GetNextDlgGroupItem

  InvalidateRgn

  GetWindowTextA

  InvalidateRect

  GetClientRect

  SetTimer

  KillTimer

  LoadIconA

  GetSystemMetrics

  EnableWindow

  GetKeyboardState

  GetKeyState

  GetClassNameA

  PostQuitMessage

  CheckMenuItem

  EnableMenuItem

  GetMenuState

  ModifyMenuA

  GetParent

  GetFocus

  LoadBitmapA

  GetMenuCheckMarkDimensions

  SetMenuItemBitmaps

  ValidateRect

  GetCursorPos

  PeekMessageA

  IsWindowVisible

  GetActiveWindow

  DispatchMessageA

  TranslateMessage

  GetMessageA

  CallNextHookEx

  SetWindowsHookExA

  SetCursor

  MessageBoxA

  IsWindowEnabled

  GetLastActivePopup

  GetWindowLongA

  GetWindowThreadProcessId

  EndDialog

  GetNextDlgTabItem

  GetDlgItem

  DestroyWindow

  IsWindow

  IsChild

  gdi32

  GetStockObject

  GetBkColor

  GetTextColor

  CreateRectRgnIndirect

  GetRgnBox

  GetMapMode

  ExtSelectClipRgn

  DeleteDC

  ScaleWindowExtEx

  SetWindowExtEx

  ScaleViewportExtEx

  SetViewportExtEx

  OffsetViewportOrgEx

  CreateBitmap

  SelectObject

  Escape

  ExtTextOutA

  TextOutA

  RectVisible

  PtVisible

  GetWindowExtEx

  GetViewportExtEx

  DeleteObject

  SetMapMode

  RestoreDC

  SaveDC

  GetObjectA

  SetBkColor

  SetTextColor

  GetClipBox

  GetDeviceCaps

  SetViewportOrgEx

  comdlg32

  GetFileTitleA

  winspool.drv

  DocumentPropertiesA

  ClosePrinter

  OpenPrinterA

  advapi32

  RegCreateKeyExA

  RegQueryValueA

  RegOpenKeyA

  RegEnumKeyA

  RegDeleteKeyA

  RegSetValueExA

  RegQueryValueExW

  RegOpenKeyExA

  RegCloseKey

  RegQueryValueExA

  shlwapi

  PathFindFileNameA

  PathStripToRootA

  PathIsUNCA

  PathFindExtensionA

  oledlg

  ord8

  ole32

  CreateILockBytesOnHGlobal

  StgCreateDocfileOnILockBytes

  StgOpenStorageOnILockBytes

  CoRegisterMessageFilter

  OleFlushClipboard

  OleIsCurrentClipboard

  CoRevokeClassObject

  CoGetClassObject

  CoTaskMemAlloc

  CoTaskMemFree

  CLSIDFromString

  CLSIDFromProgID

  OleInitialize

  CoFreeUnusedLibraries

  OleUninitialize

  CoInitialize

  CoUninitialize

  CoCreateInstance

  oleaut32

  SysFreeString

  SysAllocStringByteLen

  SysStringByteLen

  VariantClear

  SysAllocStringLen

  SysAllocString

  VariantInit

  SafeArrayUnaccessData

  SafeArrayGetUBound

  SafeArrayGetLBound

  SafeArrayAccessData

  VariantChangeType

  VariantCopy

  OleCreateFontIndirect

  VariantTimeToSystemTime

  SystemTimeToVariantTime

  SafeArrayDestroy

  GetErrorInfo

  SysStringLen

  Sections

  .text

  Size: 227KB - Virtual size: 227KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 55KB - Virtual size: 55KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 10KB - Virtual size: 25KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 31KB - Virtual size: 31KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 34KB - Virtual size: 34KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/Languages/idm_chn2.lng
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/Languages/inst_chn.lng
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/Languages/tips_chn.txt
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/MediumILStart.exe

  .exe windows x86

  8b9e8171fedea437adc3b4da24139da4

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  b9:aa:c8:a0:5c:05:82:04:97:93:2f:0a:88:16:7d:6a:68:61:45:a8:49:df:17:b8:13:c3:f9:d0:34:76:8d:b1

  Signer

  Actual PE Digest

  b9:aa:c8:a0:5c:05:82:04:97:93:2f:0a:88:16:7d:6a:68:61:45:a8:49:df:17:b8:13:c3:f9:d0:34:76:8d:b1

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  10-11-2019 04:03

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  4a:ac:1a:c8:1d:c2:fe:39:68:e9:21:77:29:f0:9a:ce:ce:20:f4:5d

  Signer

  Actual PE Digest

  4a:ac:1a:c8:1d:c2:fe:39:68:e9:21:77:29:f0:9a:ce:ce:20:f4:5d

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  10-11-2019 04:03

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  ole32

  CoUninitialize

  CoCreateInstance

  CoInitialize

  kernel32

  TerminateProcess

  Sleep

  GetStartupInfoW

  SetUnhandledExceptionFilter

  GetModuleHandleW

  GetProcAddress

  ExitProcess

  WriteFile

  GetStdHandle

  GetModuleFileNameA

  GetModuleFileNameW

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  GetCommandLineW

  SetHandleCount

  GetFileType

  GetStartupInfoA

  DeleteCriticalSection

  TlsGetValue

  TlsAlloc

  TlsSetValue

  TlsFree

  InterlockedIncrement

  SetLastError

  GetCurrentThreadId

  GetLastError

  InterlockedDecrement

  HeapCreate

  VirtualFree

  HeapFree

  QueryPerformanceCounter

  GetTickCount

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  GetCurrentProcess

  UnhandledExceptionFilter

  IsDebuggerPresent

  LeaveCriticalSection

  EnterCriticalSection

  LoadLibraryA

  InitializeCriticalSectionAndSpinCount

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  HeapAlloc

  VirtualAlloc

  HeapReAlloc

  RtlUnwind

  HeapSize

  GetLocaleInfoA

  WideCharToMultiByte

  GetStringTypeA

  MultiByteToWideChar

  GetStringTypeW

  LCMapStringA

  LCMapStringW

  Sections

  .text

  Size: 24KB - Virtual size: 24KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 3KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/Toolbar/3d_largeHot_3.bmp
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/Toolbar/3d_largeHot_3_hdpi15.bmp
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/Toolbar/3d_large_3.bmp
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/Toolbar/3d_large_3_hdpi15.bmp
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/Toolbar/3d_smallHot_3.bmp
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/Toolbar/3d_small_3.bmp
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/Toolbar/3d_style_3.tbi
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/Toolbar/Faenza.tbi
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/Toolbar/Faenza_Small_Disable.bmp
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/Toolbar/Faenza_Small_Hot.bmp
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/Toolbar/Faenza_Small_Normal.bmp
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/defexclist.txt
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/downlWithIDM.dll

  .dll regsvr32 windows x86

  e9c835d9e0fff1797698bab84f6a63cd

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  55:66:90:8d:85:50:21:0d:ee:1d:11:c9:8c:f7:0f:16:35:4b:c4:d2:e8:7b:c3:d4:f1:52:c5:c8:71:d6:e7:16

  Signer

  Actual PE Digest

  55:66:90:8d:85:50:21:0d:ee:1d:11:c9:8c:f7:0f:16:35:4b:c4:d2:e8:7b:c3:d4:f1:52:c5:c8:71:d6:e7:16

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  10-11-2019 02:05

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  87:7a:44:8f:75:02:58:4e:98:e0:a9:99:43:ac:8c:6c:c0:56:02:72

  Signer

  Actual PE Digest

  87:7a:44:8f:75:02:58:4e:98:e0:a9:99:43:ac:8c:6c:c0:56:02:72

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  10-11-2019 02:05

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  wininet

  InternetGetCookieA

  InternetCombineUrlA

  kernel32

  FindFirstFileA

  GlobalUnlock

  GlobalLock

  GetModuleFileNameA

  GetCurrentThreadId

  InterlockedDecrement

  InterlockedIncrement

  RaiseException

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSection

  DeleteCriticalSection

  lstrcmpiA

  FindNextFileA

  GetModuleHandleW

  IsDBCSLeadByte

  FreeLibrary

  SizeofResource

  LoadResource

  FindResourceA

  LoadLibraryExA

  GetProcessHeap

  SetEndOfFile

  WriteConsoleW

  GetConsoleOutputCP

  WriteConsoleA

  GetModuleHandleA

  FindClose

  GetProcAddress

  GetLastError

  MultiByteToWideChar

  lstrlenA

  lstrlenW

  WideCharToMultiByte

  DisableThreadLibraryCalls

  LoadLibraryA

  SetFilePointer

  CreateFileA

  ReadFile

  FlushFileBuffers

  GetConsoleMode

  GetConsoleCP

  SetStdHandle

  GetLocaleInfoA

  InitializeCriticalSectionAndSpinCount

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetTickCount

  QueryPerformanceCounter

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetEnvironmentStrings

  FreeEnvironmentStringsA

  WriteFile

  GetStringTypeW

  GetStringTypeA

  HeapFree

  RtlUnwind

  HeapAlloc

  VirtualProtect

  VirtualAlloc

  GetSystemInfo

  VirtualQuery

  GetCommandLineA

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  TlsGetValue

  TlsAlloc

  TlsSetValue

  TlsFree

  SetLastError

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  HeapCreate

  HeapDestroy

  VirtualFree

  HeapReAlloc

  CloseHandle

  SetHandleCount

  GetStdHandle

  GetFileType

  GetStartupInfoA

  Sleep

  HeapSize

  ExitProcess

  LCMapStringA

  LCMapStringW

  user32

  CharNextW

  GetKeyState

  MessageBoxW

  MessageBoxA

  CharNextA

  gdi32

  TranslateCharsetInfo

  advapi32

  RegQueryInfoKeyA

  RegSetValueExA

  RegCreateKeyExA

  RegDeleteValueA

  RegDeleteKeyA

  RegQueryValueExA

  RegCloseKey

  RegOpenKeyExA

  RegEnumKeyExA

  ole32

  CoTaskMemFree

  CoCreateInstance

  CoGetMalloc

  CoInitialize

  GetHGlobalFromStream

  CreateStreamOnHGlobal

  CoTaskMemAlloc

  CoTaskMemRealloc

  StringFromGUID2

  CoUninitialize

  oleaut32

  LoadRegTypeLi

  VarUI4FromStr

  RegisterTypeLi

  UnRegisterTypeLi

  LoadTypeLi

  SafeArrayCreate

  SafeArrayDestroy

  SafeArrayPutElement

  SysStringByteLen

  SysAllocStringByteLen

  SysAllocString

  VarBstrCat

  SysFreeString

  SysStringLen

  VariantClear

  VariantInit

  SysAllocStringLen

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 111KB - Virtual size: 111KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 26KB - Virtual size: 26KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 7KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 26KB - Virtual size: 26KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 10KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/downlWithIDM64.dll

  .dll regsvr32 windows x64

  9eeba2f8f5a7367a86f73cef94d7d6e1

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  78:28:c7:31:58:08:bc:87:17:71:0e:13:fa:3c:0b:24

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  18-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  14:b9:55:fb:88:8e:2d:d6:c8:31:92:d7:e7:88:28:62

  Certificate

  Issuer

  CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Not Before

  16-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  10-12-2013 00:00

  Not After

  09-12-2023 23:59

  Subject

  CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

  Certificate

  Issuer

  CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  12-01-2016 00:00

  Not After

  11-01-2031 23:59

  Subject

  CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

  Certificate

  Issuer

  CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Not Before

  23-12-2017 00:00

  Not After

  22-03-2029 23:59

  Subject

  CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  2e:9a:7f:9b:95:09:15:2b:81:b7:f2:5f:09:93:95:59:3c:a4:8a:2e:e2:dc:d1:dc:0e:46:b9:2b:ea:ef:0b:cb

  Signer

  Actual PE Digest

  2e:9a:7f:9b:95:09:15:2b:81:b7:f2:5f:09:93:95:59:3c:a4:8a:2e:e2:dc:d1:dc:0e:46:b9:2b:ea:ef:0b:cb

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  05-05-2019 17:29

  Valid: false

  6a:e0:f1:e8:6d:9e:a5:4f:31:52:ca:76:8f:c4:8b:87:d9:9a:e1:11

  Signer

  Actual PE Digest

  6a:e0:f1:e8:6d:9e:a5:4f:31:52:ca:76:8f:c4:8b:87:d9:9a:e1:11

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  05-05-2019 17:29

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  wininet

  InternetGetCookieA

  InternetCombineUrlA

  kernel32

  FindFirstFileA

  GlobalUnlock

  GlobalLock

  GetModuleFileNameA

  GetCurrentThreadId

  RaiseException

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSection

  DeleteCriticalSection

  lstrcmpiA

  DisableThreadLibraryCalls

  FindNextFileA

  IsDBCSLeadByte

  FreeLibrary

  SizeofResource

  LoadResource

  FindResourceA

  LoadLibraryExA

  QueryPerformanceCounter

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  GetModuleHandleA

  FindClose

  GetProcAddress

  GetLastError

  MultiByteToWideChar

  lstrlenA

  lstrlenW

  WideCharToMultiByte

  GetTickCount

  GetCurrentProcessId

  GetModuleHandleW

  GetSystemTimeAsFileTime

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  Sleep

  user32

  MessageBoxW

  CharNextW

  CharNextA

  GetKeyState

  MessageBoxA

  gdi32

  TranslateCharsetInfo

  advapi32

  RegQueryInfoKeyA

  RegSetValueExA

  RegCreateKeyExA

  RegDeleteValueA

  RegDeleteKeyA

  RegQueryValueExA

  RegCloseKey

  RegOpenKeyExA

  RegEnumKeyExA

  ole32

  CoUninitialize

  CoCreateInstance

  CoTaskMemFree

  CoGetMalloc

  CoInitialize

  GetHGlobalFromStream

  CreateStreamOnHGlobal

  CoTaskMemAlloc

  CoTaskMemRealloc

  StringFromGUID2

  oleaut32

  LoadRegTypeLi

  VarUI4FromStr

  RegisterTypeLi

  UnRegisterTypeLi

  LoadTypeLi

  SafeArrayCreate

  SafeArrayDestroy

  SafeArrayPutElement

  SysStringByteLen

  SysAllocStringByteLen

  SysAllocString

  SysAllocStringLen

  VarBstrCat

  SysFreeString

  SysStringLen

  VariantClear

  VariantInit

  msvcr90

  __clean_type_info_names_internal

  __crt_debugger_hook

  ?_type_info_dtor_internal_method@type_info@@QEAAXXZ

  __CppXcptFilter

  _amsg_exit

  _encoded_null

  _initterm_e

  _initterm

  _malloc_crt

  ?terminate@@YAXXZ

  _decode_pointer

  _onexit

  _lock

  _encode_pointer

  __dllonexit

  _unlock

  isdigit

  _strnicmp

  ??2@YAPEAX_K@Z

  _recalloc

  _purecall

  _resetstkoflw

  __C_specific_handler

  ??3@YAXPEAX@Z

  strchr

  strpbrk

  strrchr

  strstr

  memchr

  wcschr

  wcsstr

  _mbsstr

  free

  _CxxThrowException

  memcpy_s

  memset

  __CxxFrameHandler3

  ??_V@YAXPEAX@Z

  strcmp

  strcpy

  ??_U@YAPEAX_K@Z

  strlen

  memcpy

  memmove

  _stricmp

  _memicmp

  wcsncat

  wcscat

  wcsncpy

  wcslen

  wcscpy

  wcscmp

  isalpha

  fclose

  sscanf

  memcmp

  fgets

  fopen

  sprintf

  _splitpath

  _wcsicmp

  _mbsinc

  _mbclen

  vsprintf

  _ismbcdigit

  atoi

  _mbsnbcpy_s

  malloc

  strcpy_s

  wcsncpy_s

  strcat_s

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 72KB - Virtual size: 72KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 32KB - Virtual size: 31KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 27KB - Virtual size: 26KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 1022B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmBroker.exe

  .exe windows x86

  e9bdfa0eca9121a8a6ea497367a8bd98

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  6d:0b:83:ab:e3:4e:b6:33:24:91:95:a6:22:22:0a:6c:7d:26:0b:32:19:c9:16:5b:be:3b:f2:ce:9f:c9:b8:64

  Signer

  Actual PE Digest

  6d:0b:83:ab:e3:4e:b6:33:24:91:95:a6:22:22:0a:6c:7d:26:0b:32:19:c9:16:5b:be:3b:f2:ce:9f:c9:b8:64

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  10-11-2019 02:06

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  d0:84:ef:60:6e:a1:d9:04:89:d7:54:5d:c0:62:b8:5e:ea:2b:a8:70

  Signer

  Actual PE Digest

  d0:84:ef:60:6e:a1:d9:04:89:d7:54:5d:c0:62:b8:5e:ea:2b:a8:70

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  10-11-2019 02:06

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  CreateEventW

  GetCurrentThreadId

  InterlockedIncrement

  InterlockedDecrement

  SetEvent

  FreeLibrary

  MultiByteToWideChar

  SizeofResource

  LoadResource

  FindResourceW

  LoadLibraryExW

  GetCommandLineW

  SetUnhandledExceptionFilter

  FindClose

  FindNextFileW

  FindFirstFileW

  GetVersionExW

  CreateThread

  GetACP

  UnmapViewOfFile

  MapViewOfFile

  CreateFileMappingW

  GetFileSize

  CreateFileW

  GetFileAttributesW

  EnterCriticalSection

  LeaveCriticalSection

  CreateFileA

  GetProcessHeap

  SetEndOfFile

  WriteConsoleW

  GetConsoleOutputCP

  GetModuleFileNameW

  Sleep

  lstrcmpiW

  GetModuleHandleW

  GetProcAddress

  GetLastError

  DeleteCriticalSection

  InitializeCriticalSection

  RaiseException

  lstrlenW

  WaitForSingleObject

  LoadLibraryW

  CloseHandle

  WriteConsoleA

  ReadFile

  FlushFileBuffers

  SetStdHandle

  GetLocaleInfoA

  GetStringTypeW

  GetStringTypeA

  LCMapStringA

  GetConsoleMode

  GetConsoleCP

  WideCharToMultiByte

  SetFilePointer

  LoadLibraryA

  InitializeCriticalSectionAndSpinCount

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetTickCount

  QueryPerformanceCounter

  GetEnvironmentStringsW

  HeapAlloc

  HeapFree

  RtlUnwind

  GetStartupInfoW

  VirtualFree

  VirtualAlloc

  HeapReAlloc

  HeapCreate

  ExitProcess

  WriteFile

  GetStdHandle

  GetModuleFileNameA

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  IsDebuggerPresent

  TlsGetValue

  TlsAlloc

  TlsSetValue

  TlsFree

  SetLastError

  HeapSize

  GetCPInfo

  GetOEMCP

  IsValidCodePage

  LCMapStringW

  SetHandleCount

  GetFileType

  GetStartupInfoA

  FreeEnvironmentStringsW

  user32

  CharUpperW

  TranslateMessage

  DispatchMessageW

  GetMessageW

  PostThreadMessageW

  GetAsyncKeyState

  CharNextW

  gdi32

  TranslateCharsetInfo

  advapi32

  RegQueryValueExW

  RegEnumKeyExW

  RegQueryInfoKeyW

  RegSetValueExW

  RegOpenKeyExW

  RegCreateKeyExW

  RegCloseKey

  RegDeleteValueW

  RegDeleteKeyW

  RegEnumKeyW

  ole32

  CoUninitialize

  CoTaskMemAlloc

  CoTaskMemRealloc

  CoRevokeClassObject

  CoRegisterClassObject

  CoTaskMemFree

  StringFromGUID2

  CoInitialize

  CoCreateInstance

  oleaut32

  LoadRegTypeLi

  SafeArrayGetLBound

  SafeArrayGetUBound

  SafeArrayGetElement

  SafeArrayDestroy

  SafeArrayAccessData

  SafeArrayUnaccessData

  SafeArrayCreate

  SafeArrayPutElement

  VarUI4FromStr

  RegisterTypeLi

  UnRegisterTypeLi

  LoadTypeLi

  SysAllocString

  SysFreeString

  SysStringLen

  SysAllocStringLen

  Sections

  .text

  Size: 94KB - Virtual size: 94KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 21KB - Virtual size: 20KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 5KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmantypeinfo.tlb
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmbrbtn.dll

  .dll windows x86

  9010d62ec3b5d68e1500cce35d20c5a2

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  48:c3:02:fd:cf:09:fe:c0:ee:dc:89:67:e5:8b:de:f3:53:7f:cf:28:e1:7c:de:da:35:49:09:5b:cb:eb:85:15

  Signer

  Actual PE Digest

  48:c3:02:fd:cf:09:fe:c0:ee:dc:89:67:e5:8b:de:f3:53:7f:cf:28:e1:7c:de:da:35:49:09:5b:cb:eb:85:15

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  03-03-2020 22:12

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  dd:77:de:8c:2a:41:0a:cc:c6:eb:35:a4:84:c0:3b:48:bf:13:3e:28

  Signer

  Actual PE Digest

  dd:77:de:8c:2a:41:0a:cc:c6:eb:35:a4:84:c0:3b:48:bf:13:3e:28

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  03-03-2020 22:12

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  advapi32

  RegDeleteValueW

  RegOpenKeyExW

  RegSetValueExW

  RegCreateKeyExW

  RegCloseKey

  RegQueryValueExW

  gdi32

  TranslateCharsetInfo

  CreateFontIndirectW

  DeleteObject

  GetObjectW

  SetBkMode

  SetTextColor

  GetTextExtentPoint32W

  DeleteDC

  GetTextMetricsW

  GetDeviceCaps

  GetStockObject

  StretchBlt

  CreateCompatibleDC

  SelectObject

  CreateCompatibleBitmap

  BitBlt

  EnumFontFamiliesExW

  msvcrt

  strchr

  wcschr

  _XcptFilter

  _wstat

  _stat

  _fstat

  _onexit

  _iob

  fclose

  realloc

  _wfopen

  free

  malloc

  wcsncat

  wcsncpy

  strncpy

  fgets

  strncmp

  sscanf

  strspn

  strstr

  wcsrchr

  wcscspn

  _wcsicmp

  _snwprintf

  _i64tow

  wcsstr

  wcsncmp

  wcsspn

  iswalnum

  _initterm

  _amsg_exit

  _lock

  __dllonexit

  _unlock

  memmove

  memcpy

  memset

  _wcsnicmp

  kernel32

  GetSystemTimeAsFileTime

  GetCurrentThreadId

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  RtlUnwind

  GetCurrentProcessId

  LoadLibraryW

  OpenProcess

  GetACP

  GetSystemDirectoryW

  GetVersionExW

  GetLocaleInfoW

  GetModuleFileNameW

  MulDiv

  GetTickCount

  lstrcmpiW

  GetFileSize

  CreateThread

  CloseHandle

  TerminateThread

  GetLastError

  DuplicateHandle

  CreateFileW

  CreateMutexW

  lstrlenW

  GetCurrentProcess

  WideCharToMultiByte

  MultiByteToWideChar

  GetSystemDefaultLangID

  FindClose

  FindNextFileW

  FindFirstFileW

  GetVersion

  GetModuleHandleW

  GetProcAddress

  user32

  CharUpperW

  CharLowerW

  GetWindowThreadProcessId

  GetWindowTextLengthW

  PostMessageW

  GetWindowRect

  DestroyWindow

  GetDC

  SetWindowPos

  MessageBoxW

  CreateWindowExW

  GetCursor

  UnregisterClassW

  CreatePopupMenu

  TrackPopupMenu

  ShowWindow

  OffsetRect

  SetTimer

  ClientToScreen

  DefDlgProcW

  RegisterClassW

  TrackMouseEvent

  MoveWindow

  DestroyMenu

  SetLayeredWindowAttributes

  IntersectRect

  LoadIconW

  LoadCursorW

  SetCapture

  GetWindowDC

  SetCursor

  SetWindowLongW

  GetClientRect

  AppendMenuW

  DrawTextW

  KillTimer

  PtInRect

  ReleaseCapture

  LoadImageW

  ShowCursor

  InvalidateRect

  ReleaseDC

  BeginPaint

  EndPaint

  GetWindowTextW

  GetWindowLongW

  FindWindowExW

  SendMessageW

  IsRectEmpty

  ole32

  CoInitialize

  CoUninitialize

  CoCreateInstance

  oleaut32

  VariantInit

  SafeArrayGetElement

  SafeArrayGetLBound

  SysStringByteLen

  SafeArrayPutElement

  SafeArrayCreateVector

  SysAllocStringLen

  SysFreeString

  SafeArrayCreate

  SysAllocString

  SafeArrayDestroy

  SysStringLen

  Exports

  Exports

  CreateDownlSelWtIDMButton

  CreateIDMButton

  CreateIDMButton2

  CreateIDMButton3

  GetVersionInfo

  SetIDMButtonValue3

  __acrt_iob_func

  _fstat32

  _stat32

  _wstat32

  Sections

  .text

  Size: 42KB - Virtual size: 41KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 13KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 158KB - Virtual size: 157KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmbrbtn64.dll

  .dll windows x64

  ad4a392d846846629f3d269285bed848

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  17:28:6f:20:03:57:9e:59:a2:3c:6a:8f:f9:e8:2d:2f:23:51:9e:a5:74:71:2f:45:90:ec:50:0d:b0:0d:85:50

  Signer

  Actual PE Digest

  17:28:6f:20:03:57:9e:59:a2:3c:6a:8f:f9:e8:2d:2f:23:51:9e:a5:74:71:2f:45:90:ec:50:0d:b0:0d:85:50

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  03-03-2020 22:12

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  57:df:46:4f:bb:f1:1e:4b:5e:2e:69:18:09:47:46:8b:61:29:60:c7

  Signer

  Actual PE Digest

  57:df:46:4f:bb:f1:1e:4b:5e:2e:69:18:09:47:46:8b:61:29:60:c7

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  03-03-2020 22:12

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  advapi32

  RegDeleteValueW

  RegOpenKeyExW

  RegSetValueExW

  RegCreateKeyExW

  RegCloseKey

  RegQueryValueExW

  gdi32

  TranslateCharsetInfo

  CreateFontIndirectW

  DeleteObject

  GetObjectW

  SetBkMode

  SetTextColor

  GetTextExtentPoint32W

  DeleteDC

  GetTextMetricsW

  GetDeviceCaps

  GetStockObject

  StretchBlt

  CreateCompatibleDC

  SelectObject

  CreateCompatibleBitmap

  BitBlt

  EnumFontFamiliesExW

  msvcrt

  wcsstr

  _i64tow

  _snwprintf

  _wcsicmp

  wcscspn

  wcsrchr

  strchr

  strstr

  strspn

  sscanf

  strncmp

  fgets

  wcsncmp

  wcsncpy

  wcsncat

  malloc

  free

  _wfopen

  realloc

  fclose

  wcschr

  wcsspn

  iswalnum

  _wcsnicmp

  memcpy

  memset

  memmove

  __C_specific_handler

  _fstat

  _amsg_exit

  _initterm

  _XcptFilter

  _onexit

  _lock

  __dllonexit

  _unlock

  strncpy

  _stat

  __iob_func

  _wstat

  kernel32

  Sleep

  FindFirstFileW

  FindNextFileW

  FindClose

  GetSystemDefaultLangID

  MultiByteToWideChar

  GetProcAddress

  WideCharToMultiByte

  GetCurrentProcess

  lstrlenW

  CreateMutexW

  CreateFileW

  DuplicateHandle

  GetSystemTimeAsFileTime

  GetCurrentThreadId

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  GetCurrentProcessId

  LoadLibraryW

  OpenProcess

  GetACP

  GetSystemDirectoryW

  GetVersionExW

  GetLocaleInfoW

  GetModuleFileNameW

  MulDiv

  GetTickCount

  lstrcmpiW

  GetModuleHandleW

  GetFileSize

  CreateThread

  CloseHandle

  TerminateThread

  GetLastError

  user32

  CharUpperW

  CharLowerW

  GetWindowLongW

  GetWindowThreadProcessId

  GetWindowTextLengthW

  PostMessageW

  GetWindowRect

  DestroyWindow

  GetDC

  SetWindowPos

  MessageBoxW

  SetWindowLongPtrW

  CreateWindowExW

  GetCursor

  UnregisterClassW

  CreatePopupMenu

  TrackPopupMenu

  ShowWindow

  OffsetRect

  SetTimer

  ClientToScreen

  DefDlgProcW

  RegisterClassW

  TrackMouseEvent

  MoveWindow

  DestroyMenu

  SetLayeredWindowAttributes

  IntersectRect

  LoadIconW

  LoadCursorW

  SetCapture

  GetWindowDC

  SetCursor

  GetClientRect

  AppendMenuW

  DrawTextW

  KillTimer

  PtInRect

  ReleaseCapture

  LoadImageW

  ShowCursor

  InvalidateRect

  ReleaseDC

  BeginPaint

  EndPaint

  GetWindowTextW

  FindWindowExW

  SendMessageW

  GetWindowLongPtrW

  IsRectEmpty

  ole32

  CoInitialize

  CoUninitialize

  CoCreateInstance

  oleaut32

  SafeArrayPutElement

  SysStringByteLen

  SafeArrayGetLBound

  SafeArrayGetElement

  VariantInit

  SafeArrayCreateVector

  SysAllocStringLen

  SysFreeString

  SafeArrayCreate

  SysAllocString

  SysStringLen

  SafeArrayDestroy

  Exports

  Exports

  CreateDownlSelWtIDMButton

  CreateIDMButton

  CreateIDMButton2

  CreateIDMButton3

  GetVersionInfo

  SetIDMButtonValue3

  __acrt_iob_func

  _fstat64i32

  _stat64i32

  _wstat64i32

  Sections

  .text

  Size: 47KB - Virtual size: 46KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 18KB - Virtual size: 17KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 158KB - Virtual size: 157KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 156B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmcchandler7.dll

  .dll windows x86

  1d300db3e2591ff8fc38f7079d57a478

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  fd:ef:b9:94:84:67:f7:6d:d2:e7:6f:50:2e:58:22:f5:26:49:7a:71:42:d9:f0:5b:69:42:c9:2c:b1:47:7d:b0

  Signer

  Actual PE Digest

  fd:ef:b9:94:84:67:f7:6d:d2:e7:6f:50:2e:58:22:f5:26:49:7a:71:42:d9:f0:5b:69:42:c9:2c:b1:47:7d:b0

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  21-01-2020 01:39

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  26:ac:42:5e:2f:c7:19:ce:1e:3b:00:3c:0b:2a:fe:a9:dc:f0:3b:68

  Signer

  Actual PE Digest

  26:ac:42:5e:2f:c7:19:ce:1e:3b:00:3c:0b:2a:fe:a9:dc:f0:3b:68

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  21-01-2020 01:39

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  wininet

  InternetCombineUrlA

  msvcrt

  wcscspn

  iswspace

  _i64toa

  _i64tow

  _wtoi64

  strncmp

  sprintf

  isdigit

  memchr

  _itoa

  atoi

  _strnicmp

  isalpha

  isalnum

  isspace

  strncpy

  strpbrk

  wcsncpy

  iswdigit

  wcsncmp

  _wcsicmp

  _snprintf

  _wsplitpath

  _wfopen

  fgets

  sscanf

  fclose

  _wcsnicmp

  wcstoul

  _mbsstr

  wcspbrk

  strstr

  strrchr

  memset

  swscanf

  memmove

  _stricmp

  _CxxThrowException

  wcsstr

  _snwprintf

  ??1type_info@@UAE@XZ

  _unlock

  __dllonexit

  _lock

  _onexit

  ?terminate@@YAXXZ

  _XcptFilter

  _initterm

  _amsg_exit

  wcsrchr

  ??2@YAPAXI@Z

  ??3@YAXPAX@Z

  _memicmp

  memcpy

  malloc

  free

  strchr

  wcschr

  _wcslwr

  _strupr

  __CxxFrameHandler

  _strlwr

  version

  GetFileVersionInfoSizeW

  GetFileVersionInfoW

  VerQueryValueA

  kernel32

  GetProcAddress

  GetStringTypeW

  LoadLibraryW

  GetSystemTimeAsFileTime

  GetTickCount

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  RtlUnwind

  GetFileAttributesW

  CreateFileW

  CreateFileMappingA

  MapViewOfFile

  UnmapViewOfFile

  CreateEventA

  ResetEvent

  GetCurrentThreadId

  ReadFile

  SetEnvironmentVariableA

  OutputDebugStringA

  OutputDebugStringW

  CreateMutexA

  CreateFileA

  GetFileSize

  GetCurrentProcess

  GetFileAttributesA

  GetWindowsDirectoryA

  FreeLibrary

  GlobalAlloc

  GlobalLock

  GlobalUnlock

  GlobalFree

  GetSystemDirectoryA

  CreateThread

  GetLastError

  GetCurrentProcessId

  GetLocaleInfoA

  WaitForSingleObject

  ReleaseMutex

  LoadLibraryA

  GetVersionExA

  FindFirstFileW

  FindNextFileW

  FindClose

  MulDiv

  lstrlenA

  MultiByteToWideChar

  WideCharToMultiByte

  CloseHandle

  GetModuleHandleA

  GetModuleFileNameW

  GetModuleHandleW

  GetVersion

  user32

  LoadCursorA

  ShowWindow

  ReleaseDC

  GetDC

  IntersectRect

  GetCursorPos

  GetClassNameA

  GetParent

  IsWindow

  GetKeyboardState

  GetKeyState

  MessageBoxW

  MessageBoxA

  LoadIconA

  PostMessageA

  RegisterClassA

  DefWindowProcA

  CreateWindowExA

  GetMessageA

  TranslateMessage

  DispatchMessageA

  ScreenToClient

  PtInRect

  SendMessageA

  GetClientRect

  GetSystemMetrics

  gdi32

  GetStockObject

  TranslateCharsetInfo

  GetDeviceCaps

  advapi32

  LookupPrivilegeValueA

  RegDeleteKeyA

  RegLoadKeyA

  RegRestoreKeyA

  RegQueryValueExW

  RegQueryValueExA

  RegCloseKey

  RegEnumKeyA

  RegQueryInfoKeyA

  RegOpenKeyExW

  RegNotifyChangeKeyValue

  RegSetValueExA

  RegCreateKeyExA

  OpenProcessToken

  GetUserNameA

  AdjustTokenPrivileges

  RegOpenKeyExA

  shell32

  ShellExecuteA

  ole32

  CoTaskMemFree

  CoInitialize

  CoUninitialize

  CoCreateInstance

  oleaut32

  SysAllocString

  SysFreeString

  SysStringLen

  SysAllocStringLen

  SafeArrayPutElement

  SafeArrayDestroy

  SafeArrayCreate

  VariantInit

  Exports

  Exports

  IDMMzCC_DownloadAllWithIDM

  IDMMzCC_DownloadLast10FLVwithIDM

  IDMMzCC_DownloadLastFLVwithIDM

  IDMMzCC_DownloadLinkWithIDM

  IDMMzCC_GetListenerState

  IDMMzCC_InitCC

  IDMMzCC_Observe

  IDMMzCC_OnGetSelectedTabID

  IDMMzCC_OnME

  IDMMzCC_OnTabSelect

  IDMMzCC_OnUnload

  IDMMzCC_ShouldLoad

  IDMMzCC_ShouldLoad2

  IDMMzCC_ShouldLoad_old1

  Sections

  .text

  Size: 297KB - Virtual size: 296KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 55KB - Virtual size: 54KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 3KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 22KB - Virtual size: 22KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmcchandler7_64.dll

  .dll windows x64

  7ac0eda9d6d9ff6c6cff5e90f8c35ca2

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  68:aa:68:e5:f1:1f:a3:c8:73:7f:5b:c4:09:b9:3f:05:0a:96:32:4b:ca:14:24:29:b8:27:11:58:09:0c:14:c3

  Signer

  Actual PE Digest

  68:aa:68:e5:f1:1f:a3:c8:73:7f:5b:c4:09:b9:3f:05:0a:96:32:4b:ca:14:24:29:b8:27:11:58:09:0c:14:c3

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  21-01-2020 01:39

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  13:6d:e7:00:6e:c8:8c:4b:3d:70:58:c0:4f:a1:2c:1a:f6:61:a7:fe

  Signer

  Actual PE Digest

  13:6d:e7:00:6e:c8:8c:4b:3d:70:58:c0:4f:a1:2c:1a:f6:61:a7:fe

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  21-01-2020 01:39

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  wininet

  InternetCombineUrlA

  version

  GetFileVersionInfoSizeW

  VerQueryValueA

  GetFileVersionInfoW

  kernel32

  GetLocaleInfoA

  GetStringTypeW

  GetCurrentProcessId

  GetLastError

  CreateThread

  LoadLibraryA

  GetSystemDirectoryA

  GlobalFree

  GlobalUnlock

  GlobalLock

  GlobalAlloc

  FreeLibrary

  GetWindowsDirectoryA

  GetFileAttributesA

  GetCurrentProcess

  GetFileSize

  CreateFileA

  CreateMutexA

  OutputDebugStringW

  OutputDebugStringA

  SetEnvironmentVariableA

  ReadFile

  GetCurrentThreadId

  ResetEvent

  CreateEventA

  UnmapViewOfFile

  MapViewOfFile

  CreateFileMappingA

  WaitForSingleObject

  FindNextFileW

  WriteConsoleA

  FlushFileBuffers

  SetStdHandle

  HeapReAlloc

  GetConsoleMode

  GetConsoleCP

  SetFilePointer

  GetStringTypeA

  InitializeCriticalSectionAndSpinCount

  GetSystemTimeAsFileTime

  GetTickCount

  QueryPerformanceCounter

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetEnvironmentStrings

  FreeEnvironmentStringsA

  LCMapStringW

  LCMapStringA

  ReleaseMutex

  GetVersionExA

  CreateFileW

  FindFirstFileW

  FindClose

  MulDiv

  lstrlenA

  MultiByteToWideChar

  WideCharToMultiByte

  CloseHandle

  GetModuleHandleW

  GetModuleHandleA

  GetModuleFileNameW

  LoadLibraryW

  GetProcAddress

  GetConsoleOutputCP

  WriteConsoleW

  SetEndOfFile

  GetProcessHeap

  GetFileAttributesW

  DeleteCriticalSection

  GetStartupInfoA

  GetFileType

  SetHandleCount

  LeaveCriticalSection

  EnterCriticalSection

  HeapSize

  RtlCaptureContext

  RtlVirtualUnwind

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  FlsAlloc

  SetLastError

  HeapFree

  HeapAlloc

  RtlLookupFunctionEntry

  RtlUnwindEx

  RaiseException

  RtlPcToFileHeader

  FlsSetValue

  GetCommandLineA

  HeapSetInformation

  HeapCreate

  HeapDestroy

  Sleep

  ExitProcess

  WriteFile

  GetStdHandle

  GetModuleFileNameA

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  EncodePointer

  DecodePointer

  FlsGetValue

  FlsFree

  user32

  GetDC

  IntersectRect

  ReleaseDC

  ShowWindow

  PostMessageA

  GetCursorPos

  GetClassNameA

  GetParent

  IsWindow

  GetKeyboardState

  GetKeyState

  MessageBoxW

  MessageBoxA

  LoadIconA

  LoadCursorA

  RegisterClassA

  DefWindowProcA

  CreateWindowExA

  GetMessageA

  TranslateMessage

  DispatchMessageA

  ScreenToClient

  PtInRect

  SendMessageA

  GetClientRect

  GetSystemMetrics

  gdi32

  TranslateCharsetInfo

  GetDeviceCaps

  GetStockObject

  advapi32

  OpenProcessToken

  RegOpenKeyExW

  RegNotifyChangeKeyValue

  RegSetValueExA

  RegCreateKeyExA

  LookupPrivilegeValueA

  AdjustTokenPrivileges

  GetUserNameA

  RegRestoreKeyA

  RegLoadKeyA

  RegDeleteKeyA

  RegOpenKeyExA

  RegQueryInfoKeyA

  RegEnumKeyA

  RegCloseKey

  RegQueryValueExA

  RegQueryValueExW

  shell32

  ShellExecuteA

  ole32

  CoCreateInstance

  CoTaskMemFree

  CoInitialize

  CoUninitialize

  oleaut32

  VariantInit

  SafeArrayCreate

  SafeArrayDestroy

  SafeArrayPutElement

  SysAllocStringLen

  SysStringLen

  SysFreeString

  SysAllocString

  Exports

  Exports

  IDMMzCC_DownloadAllWithIDM

  IDMMzCC_DownloadLast10FLVwithIDM

  IDMMzCC_DownloadLastFLVwithIDM

  IDMMzCC_DownloadLinkWithIDM

  IDMMzCC_GetListenerState

  IDMMzCC_InitCC

  IDMMzCC_Observe

  IDMMzCC_OnGetSelectedTabID

  IDMMzCC_OnME

  IDMMzCC_OnTabSelect

  IDMMzCC_OnUnload

  IDMMzCC_ShouldLoad

  IDMMzCC_ShouldLoad2

  IDMMzCC_ShouldLoad_old1

  Sections

  .text

  Size: 531KB - Virtual size: 530KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 129KB - Virtual size: 129KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 9KB - Virtual size: 24KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 44KB - Virtual size: 44KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmfc.dat
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmfsa.dll

  .dll regsvr32 windows x86

  6dd8e34e93a2e5e32c852e32b49f970d

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  ac:7c:d2:61:5c:3c:d3:a8:3f:8b:b4:be:56:ca:7c:d0:00:79:4f:de:c6:10:fc:4a:0c:7a:bc:1c:9d:1c:7a:b7

  Signer

  Actual PE Digest

  ac:7c:d2:61:5c:3c:d3:a8:3f:8b:b4:be:56:ca:7c:d0:00:79:4f:de:c6:10:fc:4a:0c:7a:bc:1c:9d:1c:7a:b7

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  15-11-2019 12:56

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  cb:2b:0a:4e:af:2a:dc:33:97:cb:67:9d:8c:ea:2c:76:3e:77:d6:4b

  Signer

  Actual PE Digest

  cb:2b:0a:4e:af:2a:dc:33:97:cb:67:9d:8c:ea:2c:76:3e:77:d6:4b

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  15-11-2019 12:56

  Valid: false

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetSystemTime

  FlushFileBuffers

  UnmapViewOfFile

  MapViewOfFile

  CreateFileMappingA

  GetFileSize

  FreeLibrary

  CreateFileW

  SetFileAttributesW

  GetProcAddress

  LoadLibraryA

  GetModuleHandleA

  DisableThreadLibraryCalls

  InitializeCriticalSection

  DeleteCriticalSection

  LeaveCriticalSection

  InterlockedIncrement

  SystemTimeToFileTime

  InterlockedDecrement

  lstrlenW

  MultiByteToWideChar

  lstrlenA

  GetShortPathNameA

  SizeofResource

  LoadResource

  FindResourceA

  LoadLibraryExA

  lstrcmpiA

  lstrcpynA

  IsDBCSLeadByte

  HeapDestroy

  lstrcpyA

  lstrcatA

  SetFileTime

  WideCharToMultiByte

  GetFileAttributesW

  CopyFileW

  DeleteFileW

  CreateDirectoryW

  MoveFileW

  GetModuleFileNameA

  GetVersionExA

  GetCurrentProcess

  GetLastError

  LocalAlloc

  LocalFree

  EnterCriticalSection

  CloseHandle

  GetStringTypeW

  GetStringTypeA

  GetOEMCP

  GetACP

  GetCPInfo

  WriteFile

  GetEnvironmentStringsW

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  FreeEnvironmentStringsA

  GetStartupInfoA

  GetFileType

  GetStdHandle

  SetHandleCount

  TlsGetValue

  SetLastError

  TlsFree

  TlsAlloc

  TlsSetValue

  GetCurrentThreadId

  TerminateProcess

  RtlUnwind

  HeapFree

  HeapAlloc

  HeapReAlloc

  GetCommandLineA

  GetVersion

  LCMapStringA

  LCMapStringW

  ExitProcess

  GetEnvironmentVariableA

  HeapCreate

  VirtualFree

  VirtualAlloc

  user32

  CharNextA

  advapi32

  RegQueryInfoKeyA

  RegEnumKeyExA

  RegDeleteValueA

  RegDeleteKeyA

  RegCreateKeyExA

  RegSetValueExA

  OpenProcessToken

  GetTokenInformation

  GetSidSubAuthorityCount

  GetSidSubAuthority

  RegOpenKeyExA

  RegQueryValueExA

  RegCloseKey

  RegEnumValueA

  ole32

  CoTaskMemRealloc

  CoInitialize

  CoUninitialize

  CoCreateInstance

  CoTaskMemFree

  CoTaskMemAlloc

  oleaut32

  RegisterTypeLi

  BSTR_UserFree

  BSTR_UserMarshal

  BSTR_UserSize

  SysFreeString

  VarUI4FromStr

  SysAllocString

  LoadTypeLi

  BSTR_UserUnmarshal

  LoadRegTypeLi

  SysStringLen

  rpcrt4

  NdrStubForwardingFunction

  NdrStubCall2

  IUnknown_Release_Proxy

  IUnknown_AddRef_Proxy

  IUnknown_QueryInterface_Proxy

  NdrOleFree

  NdrOleAllocate

  NdrDllGetClassObject

  NdrDllCanUnloadNow

  NdrCStdStubBuffer2_Release

  NdrDllRegisterProxy

  NdrDllUnregisterProxy

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 32KB - Virtual size: 30KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .orpc

  Size: 4KB - Virtual size: 152B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 8KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 16KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 8KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 8KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmftype.dll

  .dll windows x86

  37434fe31c525527aa4fd9f7c992e050

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

  Certificate

  Issuer

  OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

  Not Before

  21-05-2009 00:00

  Not After

  20-05-2019 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  61:0c:12:06:00:00:00:00:00:1b

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  23-05-2006 17:01

  Not After

  23-05-2016 17:11

  Subject

  OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  46:60:fc:32:bd:52:1d:77:f2:11:c1:33:6a:a9:8b:9e

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

  Not Before

  02-06-2010 00:00

  Not After

  01-06-2013 23:59

  Subject

  CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Secure Application Development,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  7a:a2:2b:0f:0b:ed:c5:8d:27:91:b2:04:76:91:cd:38:08:fb:85:e2

  Signer

  Actual PE Digest

  7a:a2:2b:0f:0b:ed:c5:8d:27:91:b2:04:76:91:cd:38:08:fb:85:e2

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Secure Application Development,O=Tonec Inc.,L=New York,ST=New York,C=US

  21-03-2013 15:05

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  toupper

  isspace

  ctime

  gmtime

  asctime

  _strnicmp

  strncmp

  memcpy

  ?terminate@@YAXXZ

  ??1type_info@@UAE@XZ

  isupper

  _initterm

  _amsg_exit

  _adjust_fdiv

  islower

  realloc

  _snprintf

  strcspn

  _stricmp

  tolower

  malloc

  strncpy

  ??2@YAPAXI@Z

  ??3@YAXPAX@Z

  fclose

  fseek

  fread

  fopen

  free

  strchr

  _vsnprintf

  _XcptFilter

  __CxxFrameHandler

  _CxxThrowException

  kernel32

  GetCurrentProcessId

  GetCurrentThreadId

  GetTickCount

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  RtlUnwind

  MultiByteToWideChar

  WideCharToMultiByte

  InitializeCriticalSection

  GetModuleFileNameA

  LeaveCriticalSection

  EnterCriticalSection

  GetVersion

  GetSystemTimeAsFileTime

  advapi32

  RegQueryValueExA

  RegOpenKeyExA

  RegCloseKey

  Exports

  Exports

  IDMExtensionForMimeType

  IDMFileType

  Sections

  .text

  Size: 23KB - Virtual size: 23KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmindex.dll

  .dll windows x86

  1ed5468e84d27b94a9ff70787d506d89

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-11-2006 00:00

  Not After

  16-07-2036 23:59

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  03:4f:32:8f:3e:ff:4f:b9:8f:53:43:81:17:88:f7:8a

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  21-05-2013 00:00

  Not After

  19-06-2016 23:59

  Subject

  CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  Signer

  Actual PE Digest

  Digest Algorithm

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  _amsg_exit

  _initterm

  _XcptFilter

  realloc

  malloc

  memmove

  _beginthreadex

  strncmp

  memset

  memcpy

  _endthreadex

  _msize

  free

  _localtime64_s

  kernel32

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  InterlockedExchange

  RtlUnwind

  GetCurrentThreadId

  TryEnterCriticalSection

  InitializeCriticalSection

  LeaveCriticalSection

  EnterCriticalSection

  DeleteCriticalSection

  AreFileApisANSI

  CloseHandle

  CreateFileA

  CreateFileW

  CreateFileMappingA

  CreateFileMappingW

  CreateMutexW

  DeleteFileA

  DeleteFileW

  FlushFileBuffers

  FormatMessageA

  FormatMessageW

  FreeLibrary

  GetCurrentProcessId

  GetDiskFreeSpaceA

  GetDiskFreeSpaceW

  GetFileAttributesA

  GetFileAttributesW

  GetFileAttributesExW

  GetFileSize

  GetFullPathNameA

  GetFullPathNameW

  GetLastError

  GetSystemTime

  GetSystemTimeAsFileTime

  GetTempPathA

  GetTempPathW

  GetTickCount

  GetVersionExA

  GetVersionExW

  HeapCreate

  HeapDestroy

  HeapReAlloc

  HeapSize

  HeapValidate

  HeapCompact

  LoadLibraryA

  LoadLibraryW

  LocalFree

  LockFile

  LockFileEx

  MapViewOfFile

  MultiByteToWideChar

  QueryPerformanceCounter

  ReadFile

  SetEndOfFile

  SetFilePointer

  Sleep

  SystemTimeToFileTime

  UnlockFile

  UnlockFileEx

  HeapAlloc

  HeapFree

  GetProcessHeap

  GetProcAddress

  GetSystemInfo

  GetVersion

  FlushViewOfFile

  InterlockedCompareExchange

  OutputDebugStringW

  OutputDebugStringA

  WaitForSingleObjectEx

  WaitForSingleObject

  WriteFile

  WideCharToMultiByte

  UnmapViewOfFile

  Exports

  Exports

  sqlite3_aggregate_context

  sqlite3_aggregate_count

  sqlite3_auto_extension

  sqlite3_backup_finish

  sqlite3_backup_init

  sqlite3_backup_pagecount

  sqlite3_backup_remaining

  sqlite3_backup_step

  sqlite3_bind_blob

  sqlite3_bind_double

  sqlite3_bind_int

  sqlite3_bind_int64

  sqlite3_bind_null

  sqlite3_bind_parameter_count

  sqlite3_bind_parameter_index

  sqlite3_bind_parameter_name

  sqlite3_bind_text

  sqlite3_bind_text16

  sqlite3_bind_value

  sqlite3_bind_zeroblob

  sqlite3_blob_bytes

  sqlite3_blob_close

  sqlite3_blob_open

  sqlite3_blob_read

  sqlite3_blob_reopen

  sqlite3_blob_write

  sqlite3_busy_handler

  sqlite3_busy_timeout

  sqlite3_changes

  sqlite3_clear_bindings

  sqlite3_close

  sqlite3_close_v2

  sqlite3_collation_needed

  sqlite3_collation_needed16

  sqlite3_column_blob

  sqlite3_column_bytes

  sqlite3_column_bytes16

  sqlite3_column_count

  sqlite3_column_decltype

  sqlite3_column_decltype16

  sqlite3_column_double

  sqlite3_column_int

  sqlite3_column_int64

  sqlite3_column_name

  sqlite3_column_name16

  sqlite3_column_text

  sqlite3_column_text16

  sqlite3_column_type

  sqlite3_column_value

  sqlite3_commit_hook

  sqlite3_compileoption_get

  sqlite3_compileoption_used

  sqlite3_complete

  sqlite3_complete16

  sqlite3_config

  sqlite3_context_db_handle

  sqlite3_create_collation

  sqlite3_create_collation16

  sqlite3_create_collation_v2

  sqlite3_create_function

  sqlite3_create_function16

  sqlite3_create_function_v2

  sqlite3_create_module

  sqlite3_create_module_v2

  sqlite3_data_count

  sqlite3_db_config

  sqlite3_db_filename

  sqlite3_db_handle

  sqlite3_db_mutex

  sqlite3_db_readonly

  sqlite3_db_release_memory

  sqlite3_db_status

  sqlite3_declare_vtab

  sqlite3_enable_load_extension

  sqlite3_enable_shared_cache

  sqlite3_errcode

  sqlite3_errmsg

  sqlite3_errmsg16

  sqlite3_errstr

  sqlite3_exec

  sqlite3_expired

  sqlite3_extended_errcode

  sqlite3_extended_result_codes

  sqlite3_file_control

  sqlite3_finalize

  sqlite3_free

  sqlite3_free_table

  sqlite3_get_autocommit

  sqlite3_get_auxdata

  sqlite3_get_table

  sqlite3_global_recover

  sqlite3_initialize

  sqlite3_interrupt

  sqlite3_last_insert_rowid

  sqlite3_libversion

  sqlite3_libversion_number

  sqlite3_limit

  sqlite3_load_extension

  sqlite3_log

  sqlite3_malloc

  sqlite3_memory_alarm

  sqlite3_memory_highwater

  sqlite3_memory_used

  sqlite3_mprintf

  sqlite3_mutex_alloc

  sqlite3_mutex_enter

  sqlite3_mutex_free

  sqlite3_mutex_leave

  sqlite3_mutex_try

  sqlite3_next_stmt

  sqlite3_open

  sqlite3_open16

  sqlite3_open_v2

  sqlite3_os_end

  sqlite3_os_init

  sqlite3_overload_function

  sqlite3_prepare

  sqlite3_prepare16

  sqlite3_prepare16_v2

  sqlite3_prepare_v2

  sqlite3_profile

  sqlite3_progress_handler

  sqlite3_randomness

  sqlite3_realloc

  sqlite3_release_memory

  sqlite3_reset

  sqlite3_reset_auto_extension

  sqlite3_result_blob

  sqlite3_result_double

  sqlite3_result_error

  sqlite3_result_error16

  sqlite3_result_error_code

  sqlite3_result_error_nomem

  sqlite3_result_error_toobig

  sqlite3_result_int

  sqlite3_result_int64

  sqlite3_result_null

  sqlite3_result_text

  sqlite3_result_text16

  sqlite3_result_text16be

  sqlite3_result_text16le

  sqlite3_result_value

  sqlite3_result_zeroblob

  sqlite3_rollback_hook

  sqlite3_set_authorizer

  sqlite3_set_auxdata

  sqlite3_shutdown

  sqlite3_sleep

  sqlite3_snprintf

  sqlite3_soft_heap_limit

  sqlite3_soft_heap_limit64

  sqlite3_sourceid

  sqlite3_sql

  sqlite3_status

  sqlite3_step

  sqlite3_stmt_busy

  sqlite3_stmt_readonly

  sqlite3_stmt_status

  sqlite3_strglob

  sqlite3_stricmp

  sqlite3_strnicmp

  sqlite3_test_control

  sqlite3_thread_cleanup

  sqlite3_threadsafe

  sqlite3_total_changes

  sqlite3_trace

  sqlite3_transfer_bindings

  sqlite3_update_hook

  sqlite3_uri_boolean

  sqlite3_uri_int64

  sqlite3_uri_parameter

  sqlite3_user_data

  sqlite3_value_blob

  sqlite3_value_bytes

  sqlite3_value_bytes16

  sqlite3_value_double

  sqlite3_value_int

  sqlite3_value_int64

  sqlite3_value_numeric_type

  sqlite3_value_text

  sqlite3_value_text16

  sqlite3_value_text16be

  sqlite3_value_text16le

  sqlite3_value_type

  sqlite3_vfs_find

  sqlite3_vfs_register

  sqlite3_vfs_unregister

  sqlite3_vmprintf

  sqlite3_vsnprintf

  sqlite3_vtab_config

  sqlite3_vtab_on_conflict

  sqlite3_wal_autocheckpoint

  sqlite3_wal_checkpoint

  sqlite3_wal_checkpoint_v2

  sqlite3_wal_hook

  sqlite3_win32_mbcs_to_utf8

  sqlite3_win32_set_directory

  sqlite3_win32_sleep

  sqlite3_win32_utf8_to_mbcs

  sqlite3_win32_write_debug

  Sections

  .text

  Size: 358KB - Virtual size: 357KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 44KB - Virtual size: 43KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 5KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmmkb.dll

  .dll windows x86

  ecb2a17bae899c60da67ae714f804805

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  ff:5e:5c:0d:cc:be:43:8e:21:d5:de:89:5e:55:3a:b4:f0:be:49:7a:f1:22:ab:9d:f4:ac:49:91:d3:e8:e8:68

  Signer

  Actual PE Digest

  ff:5e:5c:0d:cc:be:43:8e:21:d5:de:89:5e:55:3a:b4:f0:be:49:7a:f1:22:ab:9d:f4:ac:49:91:d3:e8:e8:68

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  13-03-2020 22:01

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  de:a6:12:2b:ce:e7:97:fa:99:23:b7:63:fe:31:cb:8a:80:8f:ce:35

  Signer

  Actual PE Digest

  de:a6:12:2b:ce:e7:97:fa:99:23:b7:63:fe:31:cb:8a:80:8f:ce:35

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  13-03-2020 22:01

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  _amsg_exit

  _initterm

  _XcptFilter

  free

  memset

  _wsplitpath

  _wcsicmp

  _snprintf

  strncpy

  atoi

  _vswprintf

  _time64

  wcsrchr

  strchr

  wcschr

  malloc

  __CxxFrameHandler

  kernel32

  LocalAlloc

  RaiseException

  GetLastError

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetCurrentThreadId

  GetTickCount

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  RtlUnwind

  DisableThreadLibraryCalls

  GetModuleFileNameW

  GetVersionExA

  GetModuleHandleA

  LoadLibraryA

  FreeLibrary

  GetSystemDirectoryW

  LoadLibraryW

  GlobalAlloc

  GlobalLock

  GlobalUnlock

  GlobalFree

  GetProcAddress

  user32

  UnhookWindowsHookEx

  SetWindowsHookExA

  CallNextHookEx

  GetKeyState

  advapi32

  RegOpenKeyExA

  RegCloseKey

  RegQueryValueExA

  RegOpenKeyExW

  RegQueryValueExW

  ole32

  CoCreateInstance

  CoUninitialize

  CoInitialize

  oleaut32

  SysFreeString

  Exports

  Exports

  GetAltState

  GetCtrlState

  InstallHook

  InstallMouseHook

  NeedForce

  NeedPrevent

  RemoveHook

  RemoveMouseHook

  Sections

  .text

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmmzcc.xpi

  .zip .ps1
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmmzcc2.xpi

  .zip
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmmzcc3.xpi

  .zip
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmmzcc7.dll

  .dll windows x86

  c64e342b89227a7d4cd3463ca8e1ebee

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-11-2006 00:00

  Not After

  16-07-2036 23:59

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  03:4f:32:8f:3e:ff:4f:b9:8f:53:43:81:17:88:f7:8a

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  21-05-2013 00:00

  Not After

  19-06-2016 23:59

  Subject

  CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  Signer

  Actual PE Digest

  Digest Algorithm

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  _initterm

  _amsg_exit

  _XcptFilter

  free

  malloc

  ??2@YAPAXI@Z

  ??3@YAXPAX@Z

  _wcsicmp

  _snwprintf

  _snprintf

  strncpy

  atoi

  wcsrchr

  strchr

  __CxxFrameHandler

  version

  GetFileVersionInfoW

  VerQueryValueA

  GetFileVersionInfoSizeW

  kernel32

  LoadLibraryW

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetCurrentThreadId

  GetTickCount

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  RtlUnwind

  GetModuleHandleA

  GetModuleFileNameW

  GlobalAlloc

  GlobalLock

  GlobalUnlock

  GlobalFree

  GetProcAddress

  user32

  MessageBoxA

  advapi32

  RegQueryValueExW

  RegCloseKey

  RegOpenKeyExA

  Exports

  Exports

  GetListenerState

  InitCC

  NSModule

  OnStartup

  Sections

  .text

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmmzcc7_64.dll

  .dll windows x64

  03099183afcecf68a376fb309c7bc95d

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  be:b1:1a:a9:0d:1e:e9:8e:f3:ee:98:65:e1:02:78:df:60:e9:48:39:a6:11:83:53:8e:12:2a:43:7c:74:af:80

  Signer

  Actual PE Digest

  be:b1:1a:a9:0d:1e:e9:8e:f3:ee:98:65:e1:02:78:df:60:e9:48:39:a6:11:83:53:8e:12:2a:43:7c:74:af:80

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  10-11-2019 04:13

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  fd:13:01:27:83:e4:92:62:37:13:f1:50:1a:30:5b:20:47:94:c2:19

  Signer

  Actual PE Digest

  fd:13:01:27:83:e4:92:62:37:13:f1:50:1a:30:5b:20:47:94:c2:19

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  10-11-2019 04:13

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  version

  GetFileVersionInfoSizeW

  GetFileVersionInfoW

  VerQueryValueA

  kernel32

  GlobalFree

  GlobalUnlock

  GlobalLock

  GlobalAlloc

  GetProcAddress

  FlushFileBuffers

  GetModuleFileNameW

  GetModuleHandleA

  CloseHandle

  CreateFileA

  LoadLibraryW

  GetStdHandle

  RtlLookupFunctionEntry

  RtlUnwindEx

  GetCurrentThreadId

  FlsSetValue

  GetCommandLineA

  EncodePointer

  DecodePointer

  FlsGetValue

  FlsFree

  SetLastError

  GetLastError

  FlsAlloc

  RaiseException

  RtlPcToFileHeader

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  RtlVirtualUnwind

  RtlCaptureContext

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  HeapFree

  HeapAlloc

  Sleep

  GetModuleHandleW

  ExitProcess

  SetHandleCount

  GetFileType

  GetStartupInfoA

  DeleteCriticalSection

  GetModuleFileNameA

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  WideCharToMultiByte

  GetEnvironmentStringsW

  HeapSetInformation

  HeapCreate

  HeapDestroy

  QueryPerformanceCounter

  GetTickCount

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  LeaveCriticalSection

  EnterCriticalSection

  SetFilePointer

  WriteFile

  GetConsoleCP

  GetConsoleMode

  LCMapStringA

  MultiByteToWideChar

  LCMapStringW

  GetStringTypeA

  GetStringTypeW

  GetLocaleInfoA

  HeapSize

  HeapReAlloc

  LoadLibraryA

  InitializeCriticalSectionAndSpinCount

  SetStdHandle

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  user32

  MessageBoxA

  advapi32

  RegQueryValueExW

  RegCloseKey

  RegOpenKeyExA

  Exports

  Exports

  GetListenerState

  InitCC

  InitObs

  NSModule

  OnStartup

  Sections

  .text

  Size: 54KB - Virtual size: 53KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 21KB - Virtual size: 21KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 6KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmtdi.cat
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmtdi.inf
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmtdi32.sys

  .exe windows x86

  3f4b3bf14451d8b5595ce146faeda6eb

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  78:28:c7:31:58:08:bc:87:17:71:0e:13:fa:3c:0b:24

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  18-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  61:19:93:e4:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  22-02-2011 19:25

  Not After

  22-02-2021 19:35

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  14:b9:55:fb:88:8e:2d:d6:c8:31:92:d7:e7:88:28:62

  Certificate

  Issuer

  CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Not Before

  16-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  10-12-2013 00:00

  Not After

  09-12-2023 23:59

  Subject

  CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  61:19:93:e4:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  22-02-2011 19:25

  Not After

  22-02-2021 19:35

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

  Certificate

  Issuer

  CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  12-01-2016 00:00

  Not After

  11-01-2031 23:59

  Subject

  CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

  Certificate

  Issuer

  CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Not Before

  23-12-2017 00:00

  Not After

  22-03-2029 23:59

  Subject

  CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  d4:10:0e:c4:d5:79:a8:8e:b2:33:3a:14:f4:58:37:d4:56:e7:af:b8:71:eb:cc:a5:f7:b4:ad:1f:dd:7e:32:9f

  Signer

  Actual PE Digest

  d4:10:0e:c4:d5:79:a8:8e:b2:33:3a:14:f4:58:37:d4:56:e7:af:b8:71:eb:cc:a5:f7:b4:ad:1f:dd:7e:32:9f

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  19-12-2018 14:52

  Valid: false

  63:e1:e8:5d:bb:ec:08:00:56:a0:20:db:a9:ac:21:c3:d8:d4:67:38

  Signer

  Actual PE Digest

  63:e1:e8:5d:bb:ec:08:00:56:a0:20:db:a9:ac:21:c3:d8:d4:67:38

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  19-12-2018 14:52

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  ntoskrnl.exe

  ZwQueryValueKey

  ZwOpenKey

  IoDeleteDevice

  ObfDereferenceObject

  ObfReferenceObject

  IoCreateDriver

  RtlAppendUnicodeToString

  RtlCopyUnicodeString

  IoDetachDevice

  IoReleaseRemoveLockAndWaitEx

  KeDelayExecutionThread

  ZwYieldExecution

  IoDeleteSymbolicLink

  PsSetCreateProcessNotifyRoutine

  PsSetLoadImageNotifyRoutine

  IoCreateSymbolicLink

  PsGetVersion

  MmGetSystemRoutineAddress

  InitSafeBootMode

  ExAllocatePoolWithTag

  InterlockedIncrement

  InterlockedDecrement

  ZwQuerySystemInformation

  IofCompleteRequest

  KeLeaveCriticalRegion

  KeUnstackDetachProcess

  KeStackAttachProcess

  KeEnterCriticalRegion

  _except_handler3

  PsLookupProcessByProcessId

  IoGetRequestorProcessId

  memset

  KeRestoreFloatingPointState

  KeSaveFloatingPointState

  IoQueueWorkItem

  IoAllocateWorkItem

  ZwDeleteValueKey

  _strnicmp

  ZwWriteFile

  memmove

  ZwReadFile

  ZwQueryInformationFile

  ZwCreateFile

  _purecall

  IoFreeMdl

  InterlockedCompareExchange

  MmBuildMdlForNonPagedPool

  IoAllocateMdl

  memcpy

  IoFreeWorkItem

  KeResetEvent

  KeSetEvent

  ObReferenceObjectByHandle

  ExEventObjectType

  ZwClose

  _strlwr

  _wcslwr

  strspn

  towlower

  InterlockedExchange

  IofCallDriver

  InterlockedExchangeAdd

  KeGetCurrentThread

  IoFreeIrp

  IoAllocateIrp

  IoCancelIrp

  KeWaitForSingleObject

  IoBuildDeviceIoControlRequest

  KeInitializeEvent

  KeClearEvent

  IoReleaseRemoveLockEx

  IoGetRelatedDeviceObject

  RtlCompareMemory

  wcschr

  wcsspn

  tolower

  _wcsnicmp

  strncmp

  _stricmp

  wcsncmp

  _wcsicmp

  strstr

  wcsstr

  strchr

  wcscspn

  strncpy

  _allmul

  IoCreateDevice

  RtlInitUnicodeString

  IoAttachDevice

  IoInitializeRemoveLockEx

  ZwSetSecurityObject

  ObOpenObjectByPointer

  IoDeviceObjectType

  RtlGetDaclSecurityDescriptor

  RtlGetSaclSecurityDescriptor

  RtlGetGroupSecurityDescriptor

  RtlGetOwnerSecurityDescriptor

  _snwprintf

  RtlLengthSecurityDescriptor

  SeCaptureSecurityDescriptor

  SeExports

  IoIsWdmVersionAvailable

  RtlAddAccessAllowedAce

  RtlLengthSid

  RtlAbsoluteToSelfRelativeSD

  RtlSetDaclSecurityDescriptor

  RtlCreateSecurityDescriptor

  ZwCreateKey

  ZwSetValueKey

  RtlFreeUnicodeString

  IoAcquireRemoveLockEx

  KeInitializeSpinLock

  KeQuerySystemTime

  ExFreePoolWithTag

  KeBugCheckEx

  hal

  KfReleaseSpinLock

  KeGetCurrentIrql

  KfAcquireSpinLock

  tdi.sys

  TdiCopyMdlToBuffer

  TdiCopyBufferToMdl

  TdiMapUserRequest

  Sections

  .text

  Size: 99KB - Virtual size: 99KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  PAGE

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  INIT

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 912B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmtdi64.sys

  .exe windows x64

  cf8c00ceafea78b3d6615d4325255b36

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  78:28:c7:31:58:08:bc:87:17:71:0e:13:fa:3c:0b:24

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  18-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  61:19:93:e4:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  22-02-2011 19:25

  Not After

  22-02-2021 19:35

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  14:b9:55:fb:88:8e:2d:d6:c8:31:92:d7:e7:88:28:62

  Certificate

  Issuer

  CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Not Before

  16-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  10-12-2013 00:00

  Not After

  09-12-2023 23:59

  Subject

  CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  61:19:93:e4:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  22-02-2011 19:25

  Not After

  22-02-2021 19:35

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

  Certificate

  Issuer

  CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  12-01-2016 00:00

  Not After

  11-01-2031 23:59

  Subject

  CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

  Certificate

  Issuer

  CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Not Before

  23-12-2017 00:00

  Not After

  22-03-2029 23:59

  Subject

  CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  c6:91:35:9c:66:c7:5b:b1:0c:19:90:20:7b:2f:bd:93:9a:0f:37:f5:e8:84:6c:69:fd:f4:06:18:ff:e7:7a:45

  Signer

  Actual PE Digest

  c6:91:35:9c:66:c7:5b:b1:0c:19:90:20:7b:2f:bd:93:9a:0f:37:f5:e8:84:6c:69:fd:f4:06:18:ff:e7:7a:45

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  19-12-2018 14:52

  Valid: false

  ad:fd:7f:31:9d:d1:4e:2f:7b:a0:27:75:9e:ff:dc:dc:95:c1:3b:7a

  Signer

  Actual PE Digest

  ad:fd:7f:31:9d:d1:4e:2f:7b:a0:27:75:9e:ff:dc:dc:95:c1:3b:7a

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  19-12-2018 14:52

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  ntoskrnl.exe

  KeReleaseInStackQueuedSpinLock

  ZwYieldExecution

  RtlInitUnicodeString

  IoDeleteDevice

  MmGetSystemRoutineAddress

  RtlAppendUnicodeToString

  RtlGetVersion

  KeAcquireInStackQueuedSpinLock

  IoDetachDevice

  PsSetCreateProcessNotifyRoutine

  KeDelayExecutionThread

  ZwQueryValueKey

  InitSafeBootMode

  ZwClose

  IoReleaseRemoveLockAndWaitEx

  PsRemoveLoadImageNotifyRoutine

  IoAttachDevice

  ObfReferenceObject

  IoCreateSymbolicLink

  RtlCopyUnicodeString

  ObfDereferenceObject

  IoCreateDriver

  IoInitializeRemoveLockEx

  IoCreateDevice

  ZwOpenKey

  ExAllocatePoolWithTag

  ZwQuerySystemInformation

  PsGetProcessPeb

  KeLeaveCriticalRegion

  PsLookupProcessByProcessId

  KeUnstackDetachProcess

  KeEnterCriticalRegion

  IofCompleteRequest

  IoGetRequestorProcessId

  KeStackAttachProcess

  _strnicmp

  ZwReadFile

  ZwDeleteValueKey

  ZwCreateFile

  IoAllocateWorkItem

  IoQueueWorkItem

  ZwQueryInformationFile

  ZwWriteFile

  MmBuildMdlForNonPagedPool

  IoFreeMdl

  _purecall

  IoAllocateMdl

  KeResetEvent

  KeSetEvent

  IoFreeWorkItem

  PsSetLoadImageNotifyRoutine

  ObReferenceObjectByHandle

  _strlwr

  _wcslwr

  strspn

  towlower

  IofCallDriver

  KeClearEvent

  IoBuildDeviceIoControlRequest

  IoGetRelatedDeviceObject

  KeInitializeEvent

  IoReleaseRemoveLockEx

  IoCancelIrp

  KeWaitForSingleObject

  IoFreeIrp

  IoAllocateIrp

  RtlCompareMemory

  wcschr

  _stricmp

  _wcsicmp

  strncmp

  _wcsnicmp

  strstr

  strchr

  tolower

  strncpy

  wcsstr

  wcsspn

  wcscspn

  wcsncmp

  ObOpenObjectByPointer

  ZwSetSecurityObject

  IoDeviceObjectType

  _snwprintf

  RtlLengthSecurityDescriptor

  SeCaptureSecurityDescriptor

  RtlCreateSecurityDescriptor

  RtlSetDaclSecurityDescriptor

  RtlAbsoluteToSelfRelativeSD

  IoIsWdmVersionAvailable

  SeExports

  RtlLengthSid

  RtlAddAccessAllowedAce

  RtlGetSaclSecurityDescriptor

  RtlGetDaclSecurityDescriptor

  RtlGetGroupSecurityDescriptor

  RtlGetOwnerSecurityDescriptor

  ZwCreateKey

  ZwSetValueKey

  RtlFreeUnicodeString

  ExFreePoolWithTag

  IoDeleteSymbolicLink

  ExEventObjectType

  IoAcquireRemoveLockEx

  KeBugCheckEx

  __C_specific_handler

  tdi.sys

  TdiCopyMdlToBuffer

  TdiCopyBufferToMdl

  TdiMapUserRequest

  Sections

  .text

  Size: 163KB - Virtual size: 163KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 20KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  PAGE

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  INIT

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 912B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmvconv.dll

  .dll windows x86

  9ccb9d855512890e4c12a487afeaf0aa

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  78:28:c7:31:58:08:bc:87:17:71:0e:13:fa:3c:0b:24

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  18-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  14:b9:55:fb:88:8e:2d:d6:c8:31:92:d7:e7:88:28:62

  Certificate

  Issuer

  CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Not Before

  16-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  10-12-2013 00:00

  Not After

  09-12-2023 23:59

  Subject

  CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

  Certificate

  Issuer

  CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  12-01-2016 00:00

  Not After

  11-01-2031 23:59

  Subject

  CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6

  Certificate

  Issuer

  CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Not Before

  02-01-2017 00:00

  Not After

  01-04-2028 23:59

  Subject

  CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  e7:56:ff:3d:15:13:56:f9:77:50:2f:55:77:73:7f:5e:ce:ca:30:fb:98:fd:33:e4:ee:d3:62:a5:2b:b8:8c:e7

  Signer

  Actual PE Digest

  e7:56:ff:3d:15:13:56:f9:77:50:2f:55:77:73:7f:5e:ce:ca:30:fb:98:fd:33:e4:ee:d3:62:a5:2b:b8:8c:e7

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  29-03-2019 15:34

  Valid: false

  40:9f:45:93:42:e5:7f:a3:ed:94:28:a4:2f:4a:80:4f:8d:b1:c9:27

  Signer

  Actual PE Digest

  40:9f:45:93:42:e5:7f:a3:ed:94:28:a4:2f:4a:80:4f:8d:b1:c9:27

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  29-03-2019 15:34

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  SetFilePointer

  ReadFile

  GetLastError

  WriteFile

  CreateFileW

  CloseHandle

  WideCharToMultiByte

  InterlockedIncrement

  InterlockedDecrement

  InterlockedExchange

  MultiByteToWideChar

  Sleep

  InitializeCriticalSection

  DeleteCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  HeapFree

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  GetCurrentThreadId

  GetCommandLineA

  GetCPInfo

  RtlUnwind

  RaiseException

  LCMapStringA

  LCMapStringW

  HeapAlloc

  HeapCreate

  HeapDestroy

  VirtualFree

  VirtualAlloc

  HeapReAlloc

  GetModuleHandleW

  GetProcAddress

  TlsGetValue

  TlsAlloc

  TlsSetValue

  TlsFree

  SetLastError

  GetStdHandle

  GetModuleFileNameA

  HeapSize

  ExitProcess

  SetHandleCount

  GetFileType

  GetStartupInfoA

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  QueryPerformanceCounter

  GetTickCount

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  GetStringTypeA

  GetStringTypeW

  GetACP

  GetOEMCP

  IsValidCodePage

  GetUserDefaultLCID

  GetLocaleInfoA

  EnumSystemLocalesA

  IsValidLocale

  GetConsoleCP

  GetConsoleMode

  InitializeCriticalSectionAndSpinCount

  LoadLibraryA

  GetLocaleInfoW

  SetStdHandle

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  FlushFileBuffers

  CreateFileA

  GetModuleHandleA

  Exports

  Exports

  ConvertFlvToMp4

  ConvertTsToMp4

  IsFormatSupported

  IsFormatSupported2

  MuxMKVAndMKVToMKV

  MuxMP4AndMKVToMKV

  Sections

  .text

  Size: 418KB - Virtual size: 417KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 56KB - Virtual size: 55KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 8KB - Virtual size: 16KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 23KB - Virtual size: 23KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmvs.dll

  .dll windows x86

  e07e00e45407ff0dd6abc9eaa981fa7b

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  13:e3:38:fb:fc:6c:b7:eb:80:4a:b3:a6:31:5d:01:ef:c6:10:a7:0e:6c:f9:da:fc:56:b8:2c:2f:19:5c:92:97

  Signer

  Actual PE Digest

  13:e3:38:fb:fc:6c:b7:eb:80:4a:b3:a6:31:5d:01:ef:c6:10:a7:0e:6c:f9:da:fc:56:b8:2c:2f:19:5c:92:97

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  26-08-2019 19:59

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  72:2f:93:08:50:25:26:ec:cc:14:58:1c:2c:5f:69:8b:12:b0:9d:7b

  Signer

  Actual PE Digest

  72:2f:93:08:50:25:26:ec:cc:14:58:1c:2c:5f:69:8b:12:b0:9d:7b

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  26-08-2019 19:59

  Valid: false

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  _initterm

  malloc

  _adjust_fdiv

  free

  Exports

  Exports

  GetBaseBuild

  GetChrExtV

  GetFullVersion

  GetLKFFAV

  GetMzCCExtV

  GetMzCCV

  GetVBuild

  GetVDate

  GetVersion1

  GetVersion2

  Sections

  .text

  Size: 4KB - Virtual size: 510B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 4KB - Virtual size: 407B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 108B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 106B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmwfp.cat
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmwfp.inf
• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmwfp32.sys

  .exe windows x86

  e2943a873b21620c1a031fbcf5a5d463

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  78:28:c7:31:58:08:bc:87:17:71:0e:13:fa:3c:0b:24

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  18-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  61:19:93:e4:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  22-02-2011 19:25

  Not After

  22-02-2021 19:35

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  33:00:00:00:25:3a:27:38:69:0a:34:51:c1:00:00:00:00:00:25

  Certificate

  Issuer

  CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-09-2018 21:30

  Not After

  06-09-2019 21:30

  Subject

  CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-10-2014 20:31

  Not After

  15-10-2029 20:41

  Subject

  CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8e:f4:16:0c:da:89:a2:7c:1b:1e:2b:3a:82:4f:e9:8c:c3:34:fd:de:bd:fb:05:b5:b0:b3:64:1e:41:60:81:3e

  Signer

  Actual PE Digest

  8e:f4:16:0c:da:89:a2:7c:1b:1e:2b:3a:82:4f:e9:8c:c3:34:fd:de:bd:fb:05:b5:b0:b3:64:1e:41:60:81:3e

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  12-10-2022 19:53

  Valid: false

  bf:ac:8a:93:fa:c2:0a:dc:ec:45:61:44:34:26:f6:60:8f:2e:f2:d0

  Signer

  Actual PE Digest

  bf:ac:8a:93:fa:c2:0a:dc:ec:45:61:44:34:26:f6:60:8f:2e:f2:d0

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  19-12-2018 14:52

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  ntoskrnl.exe

  IoFreeMdl

  InterlockedCompareExchange

  MmBuildMdlForNonPagedPool

  IoAllocateMdl

  memcpy

  IoFreeWorkItem

  KeResetEvent

  KeSetEvent

  ObfReferenceObject

  ObReferenceObjectByHandle

  ExEventObjectType

  KeQuerySystemTime

  _strlwr

  _wcslwr

  strspn

  towlower

  KeDelayExecutionThread

  IoFreeIrp

  KeWaitForSingleObject

  KeInitializeEvent

  IoAllocateIrp

  IoReuseIrp

  wcschr

  wcsspn

  tolower

  _wcsnicmp

  strncmp

  wcsncmp

  RtlGetVersion

  strstr

  wcsstr

  strchr

  wcscspn

  _purecall

  _allmul

  IoCreateSymbolicLink

  PsSetLoadImageNotifyRoutine

  PsRemoveLoadImageNotifyRoutine

  PsSetCreateProcessNotifyRoutine

  IoDeleteSymbolicLink

  IoDeleteDevice

  ZwOpenKey

  RtlInitUnicodeString

  ZwQueryValueKey

  ZwClose

  ObOpenObjectByPointer

  IoDeviceObjectType

  IoCreateDevice

  ZwSetSecurityObject

  RtlGetOwnerSecurityDescriptor

  RtlGetDaclSecurityDescriptor

  RtlGetGroupSecurityDescriptor

  RtlGetSaclSecurityDescriptor

  SeCaptureSecurityDescriptor

  RtlLengthSecurityDescriptor

  _snwprintf

  RtlCreateSecurityDescriptor

  RtlLengthSid

  SeExports

  IoIsWdmVersionAvailable

  RtlAbsoluteToSelfRelativeSD

  RtlAddAccessAllowedAce

  RtlSetDaclSecurityDescriptor

  RtlFreeUnicodeString

  ZwSetValueKey

  ZwCreateKey

  ZwCreateFile

  ZwQueryInformationFile

  ZwReadFile

  memmove

  ZwWriteFile

  _strnicmp

  ZwDeleteValueKey

  IoAllocateWorkItem

  IoQueueWorkItem

  KeSaveFloatingPointState

  KeRestoreFloatingPointState

  IoGetRequestorProcessId

  PsLookupProcessByProcessId

  ObfDereferenceObject

  _except_handler3

  PsGetProcessPeb

  KeEnterCriticalRegion

  KeStackAttachProcess

  KeUnstackDetachProcess

  KeLeaveCriticalRegion

  IofCompleteRequest

  ZwQuerySystemInformation

  InterlockedDecrement

  InterlockedIncrement

  _stricmp

  ExAllocatePoolWithTag

  InitSafeBootMode

  strncpy

  MmGetSystemRoutineAddress

  memset

  KeInitializeSpinLock

  PsGetVersion

  _wcsicmp

  ExFreePoolWithTag

  ExAllocatePoolWithQuotaTag

  RtlImageDirectoryEntryToData

  RtlUnwind

  KeBugCheckEx

  hal

  KeReleaseInStackQueuedSpinLock

  KeGetCurrentIrql

  KeAcquireInStackQueuedSpinLock

  ndis.sys

  NdisGetDataBuffer

  NdisAllocateGenericObject

  NdisAllocateNetBufferListPool

  NdisFreeNetBufferListPool

  NdisFreeGenericObject

  fwpkclnt.sys

  FwpsAllocateCloneNetBufferList0

  FwpsInjectTransportSendAsync0

  FwpmFilterCreateEnumHandle0

  FwpmFilterEnum0

  FwpmFilterDeleteByKey0

  FwpmFreeMemory0

  FwpmFilterDestroyEnumHandle0

  FwpmCalloutAdd0

  FwpmFilterAdd0

  FwpsCalloutUnregisterById0

  FwpsCalloutRegister0

  FwpsFreeCloneNetBufferList0

  FwpsAllocateNetBufferAndNetBufferList0

  FwpsCopyStreamDataToBuffer0

  FwpsStreamInjectAsync0

  FwpsFlowRemoveContext0

  FwpsFlowAssociateContext0

  FwpsFreeNetBufferList0

  FwpsInjectionHandleCreate0

  FwpsInjectionHandleDestroy0

  FwpmEngineOpen0

  FwpmTransactionBegin0

  FwpmProviderAdd0

  FwpmSubLayerAdd0

  FwpmTransactionCommit0

  FwpmTransactionAbort0

  FwpmEngineClose0

  FwpsQueryPacketInjectionState0

  netio.sys

  WskReleaseProviderNPI

  WskCaptureProviderNPI

  WskDeregister

  WskRegister

  Sections

  .text

  Size: 94KB - Virtual size: 94KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  PAGE

  Size: 6KB - Virtual size: 6KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  INIT

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 912B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/idmwfp64.sys

  .exe windows x64

  b73b7280d2bc34c808de9d56d8043512

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  78:28:c7:31:58:08:bc:87:17:71:0e:13:fa:3c:0b:24

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  18-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  61:19:93:e4:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  22-02-2011 19:25

  Not After

  22-02-2021 19:35

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  33:00:00:00:25:3a:27:38:69:0a:34:51:c1:00:00:00:00:00:25

  Certificate

  Issuer

  CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-09-2018 21:30

  Not After

  06-09-2019 21:30

  Subject

  CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-10-2014 20:31

  Not After

  15-10-2029 20:41

  Subject

  CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  12:b7:ce:1d:9f:05:e3:8d:a3:64:83:4b:9f:fc:9c:e4:4b:60:04:10:3d:6a:6b:b2:8a:01:1e:c9:0a:ab:ab:f5

  Signer

  Actual PE Digest

  12:b7:ce:1d:9f:05:e3:8d:a3:64:83:4b:9f:fc:9c:e4:4b:60:04:10:3d:6a:6b:b2:8a:01:1e:c9:0a:ab:ab:f5

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  12-10-2022 19:53

  Valid: false

  31:05:28:7d:10:c2:47:a3:cc:75:c9:2b:88:64:06:39:c4:52:d4:d0

  Signer

  Actual PE Digest

  31:05:28:7d:10:c2:47:a3:cc:75:c9:2b:88:64:06:39:c4:52:d4:d0

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  19-12-2018 14:52

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  ntoskrnl.exe

  IoAllocateMdl

  KeResetEvent

  KeSetEvent

  IoFreeWorkItem

  ExEventObjectType

  ObReferenceObjectByHandle

  ObfReferenceObject

  _strlwr

  _wcslwr

  strspn

  towlower

  IoReuseIrp

  KeInitializeEvent

  KeDelayExecutionThread

  KeWaitForSingleObject

  IoFreeIrp

  IoAllocateIrp

  wcschr

  _wcsicmp

  strncmp

  _wcsnicmp

  strstr

  strchr

  tolower

  ZwQueryValueKey

  wcsstr

  wcsspn

  _purecall

  wcsncmp

  PsSetCreateProcessNotifyRoutine

  KeAcquireInStackQueuedSpinLock

  RtlGetVersion

  MmGetSystemRoutineAddress

  IoDeleteDevice

  RtlInitUnicodeString

  ObOpenObjectByPointer

  IoDeviceObjectType

  IoCreateDevice

  ZwSetSecurityObject

  RtlGetOwnerSecurityDescriptor

  RtlGetDaclSecurityDescriptor

  RtlGetGroupSecurityDescriptor

  RtlGetSaclSecurityDescriptor

  SeCaptureSecurityDescriptor

  RtlLengthSecurityDescriptor

  _snwprintf

  RtlCreateSecurityDescriptor

  RtlLengthSid

  SeExports

  IoIsWdmVersionAvailable

  RtlAbsoluteToSelfRelativeSD

  RtlAddAccessAllowedAce

  RtlSetDaclSecurityDescriptor

  RtlFreeUnicodeString

  ZwSetValueKey

  ZwCreateKey

  IoFreeMdl

  MmBuildMdlForNonPagedPool

  ZwWriteFile

  ZwQueryInformationFile

  IoQueueWorkItem

  IoAllocateWorkItem

  ZwCreateFile

  ZwDeleteValueKey

  ZwReadFile

  _strnicmp

  KeStackAttachProcess

  ObfDereferenceObject

  IoGetRequestorProcessId

  IofCompleteRequest

  KeEnterCriticalRegion

  KeUnstackDetachProcess

  PsLookupProcessByProcessId

  KeLeaveCriticalRegion

  PsGetProcessPeb

  ZwQuerySystemInformation

  ExAllocatePoolWithTag

  _stricmp

  ZwOpenKey

  IoCreateSymbolicLink

  PsGetVersion

  PsRemoveLoadImageNotifyRoutine

  ZwClose

  wcscspn

  InitSafeBootMode

  KeReleaseInStackQueuedSpinLock

  PsSetLoadImageNotifyRoutine

  ExFreePoolWithTag

  strncpy

  IoDeleteSymbolicLink

  ExAllocatePoolWithQuotaTag

  RtlImageDirectoryEntryToData

  __C_specific_handler

  KeBugCheckEx

  ndis.sys

  NdisGetDataBuffer

  NdisFreeGenericObject

  NdisAllocateNetBufferListPool

  NdisAllocateGenericObject

  NdisFreeNetBufferListPool

  fwpkclnt.sys

  FwpsCalloutUnregisterById0

  FwpsFreeCloneNetBufferList0

  FwpsQueryPacketInjectionState0

  FwpmCalloutAdd0

  FwpmFilterDeleteByKey0

  FwpsAllocateCloneNetBufferList0

  FwpmFilterEnum0

  FwpsCalloutRegister0

  FwpmFilterDestroyEnumHandle0

  FwpmFilterAdd0

  FwpsInjectTransportSendAsync0

  FwpmFreeMemory0

  FwpsAllocateNetBufferAndNetBufferList0

  FwpsCopyStreamDataToBuffer0

  FwpsStreamInjectAsync0

  FwpsFlowAssociateContext0

  FwpsFlowRemoveContext0

  FwpsFreeNetBufferList0

  FwpmSubLayerAdd0

  FwpsInjectionHandleDestroy0

  FwpsInjectionHandleCreate0

  FwpmTransactionCommit0

  FwpmProviderAdd0

  FwpmTransactionAbort0

  FwpmEngineOpen0

  FwpmTransactionBegin0

  FwpmEngineClose0

  FwpmFilterCreateEnumHandle0

  netio.sys

  WskCaptureProviderNPI

  WskDeregister

  WskRegister

  WskReleaseProviderNPI

  Sections

  .text

  Size: 152KB - Virtual size: 152KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 19KB - Virtual size: 18KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  PAGE

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  INIT

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 912B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/libcrypto.dll

  .dll windows x86

  199b6fab16e0400a4b8a5fb07ed8d3f5

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  03:8b:d2:70:75:52:6a:89:ef:95:89:82:c4:bc:cc:48:e3:57:77:9d:72:92:92:82:8b:c3:46:42:7b:26:34:96

  Signer

  Actual PE Digest

  03:8b:d2:70:75:52:6a:89:ef:95:89:82:c4:bc:cc:48:e3:57:77:9d:72:92:92:82:8b:c3:46:42:7b:26:34:96

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  01-05-2020 10:01

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  c8:2e:5c:49:1d:c2:8e:32:66:f9:47:b3:90:8f:4b:8c:ed:97:db:8f

  Signer

  Actual PE Digest

  c8:2e:5c:49:1d:c2:8e:32:66:f9:47:b3:90:8f:4b:8c:ed:97:db:8f

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  01-05-2020 10:01

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  ws2_32

  recvfrom

  send

  recv

  shutdown

  socket

  setsockopt

  listen

  connect

  closesocket

  bind

  accept

  sendto

  WSAStartup

  getsockopt

  getsockname

  ioctlsocket

  WSAGetLastError

  WSASetLastError

  getservbyname

  getservbyport

  gethostbyname

  gethostbyaddr

  ntohs

  inet_ntoa

  inet_addr

  htons

  WSACleanup

  htonl

  advapi32

  CryptReleaseContext

  CryptAcquireContextW

  ReportEventW

  RegisterEventSourceW

  DeregisterEventSource

  CryptGenRandom

  user32

  GetUserObjectInformationW

  GetProcessWindowStation

  MessageBoxW

  msvcrt

  _stat

  _iob

  _unlock

  __dllonexit

  _lock

  _onexit

  _XcptFilter

  _initterm

  _amsg_exit

  _wstat

  _fstat

  _snwprintf

  sscanf

  _chmod

  setbuf

  clearerr

  strspn

  strcspn

  memchr

  gmtime

  strerror

  fopen

  _wfopen

  realloc

  strcmp

  getenv

  strtol

  strstr

  atoi

  raise

  wcsstr

  _vsnprintf

  _vsnwprintf

  _exit

  isspace

  _strdup

  malloc

  _stricmp

  _setmode

  _errno

  ftell

  fseek

  fread

  _fileno

  fgets

  fflush

  ferror

  feof

  fclose

  perror

  memmove

  sprintf

  free

  calloc

  strncpy

  strchr

  qsort

  strrchr

  _strnicmp

  time

  strncmp

  strtoul

  fwrite

  memset

  memcpy

  kernel32

  LoadLibraryA

  FormatMessageW

  GetSystemTime

  SystemTimeToFileTime

  GetLastError

  SetLastError

  GetStdHandle

  GetEnvironmentVariableW

  GetFileType

  WriteFile

  FreeLibrary

  CloseHandle

  LoadLibraryW

  FindClose

  FindFirstFileW

  FindNextFileW

  WideCharToMultiByte

  QueryPerformanceCounter

  GetCurrentProcessId

  GetCurrentThreadId

  GetSystemTimeAsFileTime

  GetTickCount

  GetSystemDirectoryA

  CreateFiber

  DeleteFiber

  SwitchToFiber

  GetProcAddress

  MultiByteToWideChar

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  RtlUnwind

  GetVersion

  GetModuleHandleW

  TerminateProcess

  GetCurrentProcess

  TlsFree

  TlsSetValue

  TlsGetValue

  TlsAlloc

  Exports

  Exports

  ACCESS_DESCRIPTION_free

  ACCESS_DESCRIPTION_it

  ACCESS_DESCRIPTION_new

  ADMISSIONS_free

  ADMISSIONS_get0_admissionAuthority

  ADMISSIONS_get0_namingAuthority

  ADMISSIONS_get0_professionInfos

  ADMISSIONS_it

  ADMISSIONS_new

  ADMISSIONS_set0_admissionAuthority

  ADMISSIONS_set0_namingAuthority

  ADMISSIONS_set0_professionInfos

  ADMISSION_SYNTAX_free

  ADMISSION_SYNTAX_get0_admissionAuthority

  ADMISSION_SYNTAX_get0_contentsOfAdmissions

  ADMISSION_SYNTAX_it

  ADMISSION_SYNTAX_new

  ADMISSION_SYNTAX_set0_admissionAuthority

  ADMISSION_SYNTAX_set0_contentsOfAdmissions

  AES_bi_ige_encrypt

  AES_cbc_encrypt

  AES_cfb128_encrypt

  AES_cfb1_encrypt

  AES_cfb8_encrypt

  AES_decrypt

  AES_ecb_encrypt

  AES_encrypt

  AES_ige_encrypt

  AES_ofb128_encrypt

  AES_options

  AES_set_decrypt_key

  AES_set_encrypt_key

  AES_unwrap_key

  AES_wrap_key

  ASIdOrRange_free

  ASIdOrRange_it

  ASIdOrRange_new

  ASIdentifierChoice_free

  ASIdentifierChoice_it

  ASIdentifierChoice_new

  ASIdentifiers_free

  ASIdentifiers_it

  ASIdentifiers_new

  ASN1_ANY_it

  ASN1_BIT_STRING_check

  ASN1_BIT_STRING_free

  ASN1_BIT_STRING_get_bit

  ASN1_BIT_STRING_it

  ASN1_BIT_STRING_name_print

  ASN1_BIT_STRING_new

  ASN1_BIT_STRING_num_asc

  ASN1_BIT_STRING_set

  ASN1_BIT_STRING_set_asc

  ASN1_BIT_STRING_set_bit

  ASN1_BMPSTRING_free

  ASN1_BMPSTRING_it

  ASN1_BMPSTRING_new

  ASN1_BOOLEAN_it

  ASN1_ENUMERATED_free

  ASN1_ENUMERATED_get

  ASN1_ENUMERATED_get_int64

  ASN1_ENUMERATED_it

  ASN1_ENUMERATED_new

  ASN1_ENUMERATED_set

  ASN1_ENUMERATED_set_int64

  ASN1_ENUMERATED_to_BN

  ASN1_FBOOLEAN_it

  ASN1_GENERALIZEDTIME_adj

  ASN1_GENERALIZEDTIME_check

  ASN1_GENERALIZEDTIME_free

  ASN1_GENERALIZEDTIME_it

  ASN1_GENERALIZEDTIME_new

  ASN1_GENERALIZEDTIME_print

  ASN1_GENERALIZEDTIME_set

  ASN1_GENERALIZEDTIME_set_string

  ASN1_GENERALSTRING_free

  ASN1_GENERALSTRING_it

  ASN1_GENERALSTRING_new

  ASN1_IA5STRING_free

  ASN1_IA5STRING_it

  ASN1_IA5STRING_new

  ASN1_INTEGER_cmp

  ASN1_INTEGER_dup

  ASN1_INTEGER_free

  ASN1_INTEGER_get

  ASN1_INTEGER_get_int64

  ASN1_INTEGER_get_uint64

  ASN1_INTEGER_it

  ASN1_INTEGER_new

  ASN1_INTEGER_set

  ASN1_INTEGER_set_int64

  ASN1_INTEGER_set_uint64

  ASN1_INTEGER_to_BN

  ASN1_ITEM_get

  ASN1_ITEM_lookup

  ASN1_NULL_free

  ASN1_NULL_it

  ASN1_NULL_new

  ASN1_OBJECT_create

  ASN1_OBJECT_free

  ASN1_OBJECT_it

  ASN1_OBJECT_new

  ASN1_OCTET_STRING_NDEF_it

  ASN1_OCTET_STRING_cmp

  ASN1_OCTET_STRING_dup

  ASN1_OCTET_STRING_free

  ASN1_OCTET_STRING_it

  ASN1_OCTET_STRING_new

  ASN1_OCTET_STRING_set

  ASN1_PCTX_free

  ASN1_PCTX_get_cert_flags

  ASN1_PCTX_get_flags

  ASN1_PCTX_get_nm_flags

  ASN1_PCTX_get_oid_flags

  ASN1_PCTX_get_str_flags

  ASN1_PCTX_new

  ASN1_PCTX_set_cert_flags

  ASN1_PCTX_set_flags

  ASN1_PCTX_set_nm_flags

  ASN1_PCTX_set_oid_flags

  ASN1_PCTX_set_str_flags

  ASN1_PRINTABLESTRING_free

  ASN1_PRINTABLESTRING_it

  ASN1_PRINTABLESTRING_new

  ASN1_PRINTABLE_free

  ASN1_PRINTABLE_it

  ASN1_PRINTABLE_new

  ASN1_PRINTABLE_type

  ASN1_SCTX_free

  ASN1_SCTX_get_app_data

  ASN1_SCTX_get_flags

  ASN1_SCTX_get_item

  ASN1_SCTX_get_template

  ASN1_SCTX_new

  ASN1_SCTX_set_app_data

  ASN1_SEQUENCE_ANY_it

  ASN1_SEQUENCE_it

  ASN1_SET_ANY_it

  ASN1_STRING_TABLE_add

  ASN1_STRING_TABLE_cleanup

  ASN1_STRING_TABLE_get

  ASN1_STRING_clear_free

  ASN1_STRING_cmp

  ASN1_STRING_copy

  ASN1_STRING_data

  ASN1_STRING_dup

  ASN1_STRING_free

  ASN1_STRING_get0_data

  ASN1_STRING_get_default_mask

  ASN1_STRING_length

  ASN1_STRING_length_set

  ASN1_STRING_new

  ASN1_STRING_print

  ASN1_STRING_print_ex

  ASN1_STRING_print_ex_fp

  ASN1_STRING_set

  ASN1_STRING_set0

  ASN1_STRING_set_by_NID

  ASN1_STRING_set_default_mask

  ASN1_STRING_set_default_mask_asc

  ASN1_STRING_to_UTF8

  ASN1_STRING_type

  ASN1_STRING_type_new

  ASN1_T61STRING_free

  ASN1_T61STRING_it

  ASN1_T61STRING_new

  ASN1_TBOOLEAN_it

  ASN1_TIME_adj

  ASN1_TIME_check

  ASN1_TIME_cmp_time_t

  ASN1_TIME_compare

  ASN1_TIME_diff

  ASN1_TIME_free

  ASN1_TIME_it

  ASN1_TIME_new

  ASN1_TIME_normalize

  ASN1_TIME_print

  ASN1_TIME_set

  ASN1_TIME_set_string

  ASN1_TIME_set_string_X509

  ASN1_TIME_to_generalizedtime

  ASN1_TIME_to_tm

  ASN1_TYPE_cmp

  ASN1_TYPE_free

  ASN1_TYPE_get

  ASN1_TYPE_get_int_octetstring

  ASN1_TYPE_get_octetstring

  ASN1_TYPE_new

  ASN1_TYPE_pack_sequence

  ASN1_TYPE_set

  ASN1_TYPE_set1

  ASN1_TYPE_set_int_octetstring

  ASN1_TYPE_set_octetstring

  ASN1_TYPE_unpack_sequence

  ASN1_UNIVERSALSTRING_free

  ASN1_UNIVERSALSTRING_it

  ASN1_UNIVERSALSTRING_new

  ASN1_UNIVERSALSTRING_to_string

  ASN1_UTCTIME_adj

  ASN1_UTCTIME_check

  ASN1_UTCTIME_cmp_time_t

  ASN1_UTCTIME_free

  ASN1_UTCTIME_it

  ASN1_UTCTIME_new

  ASN1_UTCTIME_print

  ASN1_UTCTIME_set

  ASN1_UTCTIME_set_string

  ASN1_UTF8STRING_free

  ASN1_UTF8STRING_it

  ASN1_UTF8STRING_new

  ASN1_VISIBLESTRING_free

  ASN1_VISIBLESTRING_it

  ASN1_VISIBLESTRING_new

  ASN1_add_oid_module

  ASN1_add_stable_module

  ASN1_bn_print

  ASN1_buf_print

  ASN1_check_infinite_end

  ASN1_const_check_infinite_end

  ASN1_d2i_bio

  ASN1_d2i_fp

  ASN1_digest

  ASN1_dup

  ASN1_generate_nconf

  ASN1_generate_v3

  ASN1_get_object

  ASN1_i2d_bio

  ASN1_i2d_fp

  ASN1_item_d2i

  ASN1_item_d2i_bio

  ASN1_item_d2i_fp

  ASN1_item_digest

  ASN1_item_dup

  ASN1_item_ex_d2i

  ASN1_item_ex_free

  ASN1_item_ex_i2d

  ASN1_item_ex_new

  ASN1_item_free

  ASN1_item_i2d

  ASN1_item_i2d_bio

  ASN1_item_i2d_fp

  ASN1_item_ndef_i2d

  ASN1_item_new

  ASN1_item_pack

  ASN1_item_print

  ASN1_item_sign

  ASN1_item_sign_ctx

  ASN1_item_unpack

  ASN1_item_verify

  ASN1_mbstring_copy

  ASN1_mbstring_ncopy

  ASN1_object_size

  ASN1_parse

  ASN1_parse_dump

  ASN1_put_eoc

  ASN1_put_object

  ASN1_sign

  ASN1_str2mask

  ASN1_tag2bit

  ASN1_tag2str

  ASN1_verify

  ASRange_free

  ASRange_it

  ASRange_new

  ASYNC_WAIT_CTX_clear_fd

  ASYNC_WAIT_CTX_free

  ASYNC_WAIT_CTX_get_all_fds

  ASYNC_WAIT_CTX_get_changed_fds

  ASYNC_WAIT_CTX_get_fd

  ASYNC_WAIT_CTX_new

  ASYNC_WAIT_CTX_set_wait_fd

  ASYNC_block_pause

  ASYNC_cleanup_thread

  ASYNC_get_current_job

  ASYNC_get_wait_ctx

  ASYNC_init_thread

  ASYNC_is_capable

  ASYNC_pause_job

  ASYNC_start_job

  ASYNC_unblock_pause

  AUTHORITY_INFO_ACCESS_free

  AUTHORITY_INFO_ACCESS_it

  AUTHORITY_INFO_ACCESS_new

  AUTHORITY_KEYID_free

  AUTHORITY_KEYID_it

  AUTHORITY_KEYID_new

  BASIC_CONSTRAINTS_free

  BASIC_CONSTRAINTS_it

  BASIC_CONSTRAINTS_new

  BF_cbc_encrypt

  BF_cfb64_encrypt

  BF_decrypt

  BF_ecb_encrypt

  BF_encrypt

  BF_ofb64_encrypt

  BF_options

  BF_set_key

  BIGNUM_it

  BIO_ADDRINFO_address

  BIO_ADDRINFO_family

  BIO_ADDRINFO_free

  BIO_ADDRINFO_next

  BIO_ADDRINFO_protocol

  BIO_ADDRINFO_socktype

  BIO_ADDR_clear

  BIO_ADDR_family

  BIO_ADDR_free

  BIO_ADDR_hostname_string

  BIO_ADDR_new

  BIO_ADDR_path_string

  BIO_ADDR_rawaddress

  BIO_ADDR_rawmake

  BIO_ADDR_rawport

  BIO_ADDR_service_string

  BIO_accept

  BIO_accept_ex

  BIO_asn1_get_prefix

  BIO_asn1_get_suffix

  BIO_asn1_set_prefix

  BIO_asn1_set_suffix

  BIO_bind

  BIO_callback_ctrl

  BIO_clear_flags

  BIO_closesocket

  BIO_connect

  BIO_copy_next_retry

  BIO_ctrl

  BIO_ctrl_get_read_request

  BIO_ctrl_get_write_guarantee

  BIO_ctrl_pending

  BIO_ctrl_reset_read_request

  BIO_ctrl_wpending

  BIO_debug_callback

  BIO_dgram_non_fatal_error

  BIO_dump

  BIO_dump_cb

  BIO_dump_fp

  BIO_dump_indent

  BIO_dump_indent_cb

  BIO_dump_indent_fp

  BIO_dup_chain

  BIO_f_asn1

  BIO_f_base64

  BIO_f_buffer

  BIO_f_cipher

  BIO_f_linebuffer

  BIO_f_md

  BIO_f_nbio_test

  BIO_f_null

  BIO_f_reliable

  BIO_fd_non_fatal_error

  BIO_fd_should_retry

  BIO_find_type

  BIO_free

  BIO_free_all

  BIO_get_accept_socket

  BIO_get_callback

  BIO_get_callback_arg

  BIO_get_callback_ex

  BIO_get_data

  BIO_get_ex_data

  BIO_get_host_ip

  BIO_get_init

  BIO_get_new_index

  BIO_get_port

  BIO_get_retry_BIO

  BIO_get_retry_reason

  BIO_get_shutdown

  BIO_gethostbyname

  BIO_gets

  BIO_hex_string

  BIO_indent

  BIO_int_ctrl

  BIO_listen

  BIO_lookup

  BIO_lookup_ex

  BIO_meth_free

  BIO_meth_get_callback_ctrl

  BIO_meth_get_create

  BIO_meth_get_ctrl

  BIO_meth_get_destroy

  BIO_meth_get_gets

  BIO_meth_get_puts

  BIO_meth_get_read

  BIO_meth_get_read_ex

  BIO_meth_get_write

  BIO_meth_get_write_ex

  BIO_meth_new

  BIO_meth_set_callback_ctrl

  BIO_meth_set_create

  BIO_meth_set_ctrl

  BIO_meth_set_destroy

  BIO_meth_set_gets

  BIO_meth_set_puts

  BIO_meth_set_read

  BIO_meth_set_read_ex

  BIO_meth_set_write

  BIO_meth_set_write_ex

  BIO_method_name

  BIO_method_type

  BIO_new

  BIO_new_CMS

  BIO_new_NDEF

  BIO_new_PKCS7

  BIO_new_accept

  BIO_new_bio_pair

  BIO_new_connect

  BIO_new_dgram

  BIO_new_fd

  BIO_new_file

  BIO_new_fp

  BIO_new_mem_buf

  BIO_new_socket

  BIO_next

  BIO_nread

  BIO_nread0

  BIO_number_read

  BIO_number_written

  BIO_nwrite

  BIO_nwrite0

  BIO_parse_hostserv

  BIO_pop

  BIO_printf

  BIO_ptr_ctrl

  BIO_push

  BIO_puts

  BIO_read

  BIO_read_ex

  BIO_s_accept

  BIO_s_bio

  BIO_s_connect

  BIO_s_datagram

  BIO_s_fd

  BIO_s_file

  BIO_s_log

  BIO_s_mem

  BIO_s_null

  BIO_s_secmem

  BIO_s_socket

  BIO_set_callback

  BIO_set_callback_arg

  BIO_set_callback_ex

  BIO_set_cipher

  BIO_set_data

  BIO_set_ex_data

  BIO_set_flags

  BIO_set_init

  BIO_set_next

  BIO_set_retry_reason

  BIO_set_shutdown

  BIO_set_tcp_ndelay

  BIO_snprintf

  BIO_sock_error

  BIO_sock_info

  BIO_sock_init

  BIO_sock_non_fatal_error

  BIO_sock_should_retry

  BIO_socket

  BIO_socket_ioctl

  BIO_socket_nbio

  BIO_test_flags

  BIO_up_ref

  BIO_vfree

  BIO_vprintf

  BIO_vsnprintf

  BIO_write

  BIO_write_ex

  BN_BLINDING_convert

  BN_BLINDING_convert_ex

  BN_BLINDING_create_param

  BN_BLINDING_free

  BN_BLINDING_get_flags

  BN_BLINDING_invert

  BN_BLINDING_invert_ex

  BN_BLINDING_is_current_thread

  BN_BLINDING_lock

  BN_BLINDING_new

  BN_BLINDING_set_current_thread

  BN_BLINDING_set_flags

  BN_BLINDING_unlock

  BN_BLINDING_update

  BN_CTX_end

  BN_CTX_free

  BN_CTX_get

  BN_CTX_new

  BN_CTX_secure_new

  BN_CTX_start

  BN_GENCB_call

  BN_GENCB_free

  BN_GENCB_get_arg

  BN_GENCB_new

  BN_GENCB_set

  BN_GENCB_set_old

  BN_GF2m_add

  BN_GF2m_arr2poly

  BN_GF2m_mod

  BN_GF2m_mod_arr

  BN_GF2m_mod_div

  BN_GF2m_mod_div_arr

  BN_GF2m_mod_exp

  Sections

  .text

  Size: 1.2MB - Virtual size: 1.2MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 470KB - Virtual size: 469KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 5KB - Virtual size: 18KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 960B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 48KB - Virtual size: 47KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/libssl.dll

  .dll windows x86

  5403574a05cdc348d4a9b7d69c04b61d

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  aa:a2:51:92:bf:61:21:eb:f5:af:56:c2:18:0a:99:66:21:a7:3d:cf:7a:0f:8d:05:2b:35:ee:79:48:2d:73:57

  Signer

  Actual PE Digest

  aa:a2:51:92:bf:61:21:eb:f5:af:56:c2:18:0a:99:66:21:a7:3d:cf:7a:0f:8d:05:2b:35:ee:79:48:2d:73:57

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  01-05-2020 10:01

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  63:7f:69:7d:16:e0:ee:8b:67:74:e8:c8:25:62:d0:3f:ce:5e:45:4a

  Signer

  Actual PE Digest

  63:7f:69:7d:16:e0:ee:8b:67:74:e8:c8:25:62:d0:3f:ce:5e:45:4a

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  01-05-2020 10:01

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  libcrypto

  ERR_clear_error

  OPENSSL_sk_new_null

  OPENSSL_sk_free

  OPENSSL_sk_find

  OPENSSL_sk_push

  BUF_MEM_grow

  CRYPTO_malloc

  BIO_snprintf

  ERR_add_error_data

  EVP_MD_size

  EVP_MD_CTX_md

  EVP_CIPHER_flags

  EVP_CIPHER_CTX_cipher

  EVP_CIPHER_CTX_iv_length

  CRYPTO_memcmp

  COMP_compress_block

  COMP_expand_block

  EVP_CIPHER_block_size

  EVP_CIPHER_iv_length

  EVP_CIPHER_CTX_block_size

  EVP_Cipher

  EVP_MD_CTX_new

  EVP_MD_CTX_free

  EVP_MD_CTX_copy_ex

  EVP_DigestUpdate

  EVP_DigestFinal_ex

  EVP_MD_CTX_copy

  EVP_DigestSignFinal

  EVP_CIPHER_CTX_ctrl

  RAND_bytes

  EVP_CipherInit_ex

  EVP_CipherUpdate

  EVP_CipherFinal_ex

  EVP_MD_type

  EVP_DigestInit_ex

  EVP_DigestFinal

  SHA1_Init

  SHA1_Transform

  SHA224_Init

  SHA256_Init

  SHA256_Transform

  SHA384_Init

  SHA512_Init

  SHA512_Transform

  MD5_Init

  MD5_Transform

  CRYPTO_clear_free

  OPENSSL_cleanse

  COMP_CTX_new

  COMP_CTX_free

  BIO_s_mem

  EVP_CIPHER_key_length

  EVP_MD_CTX_ctrl

  EVP_MD_CTX_set_flags

  EVP_CIPHER_CTX_new

  EVP_CIPHER_CTX_reset

  EVP_md5

  EVP_sha1

  OPENSSL_sk_num

  OPENSSL_sk_value

  OPENSSL_sk_new_reserve

  OPENSSL_sk_pop_free

  CRYPTO_memdup

  CRYPTO_strdup

  EVP_sha256

  EVP_PKEY_security_bits

  EVP_PKEY_set_type

  EVP_PKEY_set1_DH

  EVP_PKEY_new

  EVP_PKEY_up_ref

  EVP_PKEY_free

  EVP_PKEY_CTX_new

  EVP_PKEY_CTX_new_id

  EVP_PKEY_CTX_free

  EVP_PKEY_CTX_ctrl

  EVP_PKEY_derive_init

  EVP_PKEY_derive_set_peer

  EVP_PKEY_derive

  EVP_PKEY_paramgen_init

  EVP_PKEY_paramgen

  EVP_PKEY_keygen_init

  EVP_PKEY_keygen

  EC_GROUP_get_curve_name

  EC_KEY_get0_group

  X509_NAME_free

  X509_free

  X509_it

  ASN1_OCTET_STRING_it

  INT32_it

  ZINT32_it

  UINT32_it

  ZUINT32_it

  ZINT64_it

  ZUINT64_it

  CRYPTO_strndup

  ASN1_item_free

  ASN1_item_d2i

  ASN1_item_i2d

  OPENSSL_DIR_read

  OPENSSL_DIR_end

  OPENSSL_sk_shift

  OPENSSL_sk_pop

  OPENSSL_sk_set_cmp_func

  CRYPTO_THREAD_lock_new

  CRYPTO_THREAD_lock_free

  CRYPTO_get_ex_new_index

  CRYPTO_THREAD_run_once

  BIO_s_file

  EVP_PKEY_id

  OPENSSL_LH_new

  OPENSSL_LH_free

  OPENSSL_LH_insert

  OPENSSL_LH_retrieve

  X509_STORE_new

  X509_STORE_free

  X509_STORE_up_ref

  X509_STORE_CTX_new

  X509_STORE_CTX_free

  X509_STORE_CTX_init

  X509_STORE_CTX_set_verify_cb

  X509_STORE_add_cert

  X509_STORE_CTX_set_ex_data

  X509_STORE_CTX_get_error

  X509_STORE_CTX_get0_chain

  X509_STORE_CTX_get1_chain

  X509_STORE_CTX_set_flags

  X509_STORE_CTX_get0_param

  X509_STORE_CTX_set_default

  X509_STORE_CTX_set0_dane

  X509_VERIFY_PARAM_set1

  X509_VERIFY_PARAM_set_auth_level

  X509_VERIFY_PARAM_move_peername

  X509_verify_cert_error_string

  X509_NAME_dup

  i2d_X509_NAME

  X509_get_subject_name

  X509_up_ref

  X509_chain_up_ref

  X509_cmp

  X509_NAME_hash

  X509_verify_cert

  PEM_read_bio_X509

  X509_get_extension_flags

  OPENSSL_sk_new

  OPENSSL_sk_insert

  OPENSSL_sk_delete

  OPENSSL_sk_dup

  OPENSSL_sk_sort

  CRYPTO_mem_ctrl

  OBJ_nid2sn

  COMP_get_type

  COMP_get_name

  COMP_zlib

  EVP_enc_null

  EVP_get_cipherbyname

  EVP_get_digestbyname

  EVP_PKEY_asn1_find_str

  EVP_PKEY_asn1_get0_info

  ENGINE_finish

  CONF_parse_list

  DH_free

  OBJ_sn2nid

  EC_curve_nist2nid

  EC_KEY_new_by_curve_name

  EC_KEY_free

  X509_STORE_load_locations

  PEM_read_bio_DHparams

  ERR_func_error_string

  ERR_load_strings_const

  OPENSSL_init_crypto

  OPENSSL_atexit

  err_free_strings_int

  OBJ_NAME_add

  EVP_md5_sha1

  EVP_sha224

  EVP_sha384

  EVP_sha512

  EVP_des_cbc

  EVP_des_ede3_cbc

  EVP_rc4

  EVP_rc4_hmac_md5

  EVP_idea_cbc

  EVP_rc2_cbc

  EVP_rc2_40_cbc

  EVP_aes_128_cbc

  EVP_aes_128_ccm

  EVP_aes_128_gcm

  EVP_aes_192_cbc

  EVP_aes_256_cbc

  EVP_aes_256_ccm

  EVP_aes_256_gcm

  EVP_aes_128_cbc_hmac_sha1

  EVP_aes_256_cbc_hmac_sha1

  EVP_aes_128_cbc_hmac_sha256

  EVP_aes_256_cbc_hmac_sha256

  EVP_aria_128_gcm

  EVP_aria_256_gcm

  EVP_camellia_128_cbc

  EVP_camellia_256_cbc

  EVP_chacha20_poly1305

  EVP_seed_cbc

  EVP_add_cipher

  BIO_ADDR_clear

  CRYPTO_THREAD_read_lock

  CRYPTO_THREAD_write_lock

  CRYPTO_THREAD_unlock

  CRYPTO_new_ex_data

  CRYPTO_dup_ex_data

  CRYPTO_free_ex_data

  CRYPTO_set_ex_data

  CRYPTO_get_ex_data

  CRYPTO_realloc

  CRYPTO_secure_zalloc

  CRYPTO_secure_free

  BUF_MEM_free

  COMP_CTX_get_method

  BIO_int_ctrl

  BIO_pop

  BIO_free_all

  BIO_s_socket

  OPENSSL_LH_num_items

  ERR_peek_error

  OBJ_bsearch_

  EVP_CIPHER_CTX_free

  X509_STORE_add_lookup

  X509_LOOKUP_hash_dir

  X509_LOOKUP_file

  X509_LOOKUP_ctrl

  X509_STORE_set_default_paths

  X509_VERIFY_PARAM_new

  X509_VERIFY_PARAM_free

  X509_VERIFY_PARAM_inherit

  X509_VERIFY_PARAM_set_purpose

  X509_VERIFY_PARAM_set_trust

  X509_VERIFY_PARAM_set_depth

  X509_VERIFY_PARAM_set1_host

  X509_VERIFY_PARAM_add1_host

  X509_VERIFY_PARAM_set_hostflags

  X509_VERIFY_PARAM_get0_peername

  X509_VERIFY_PARAM_get_depth

  d2i_PUBKEY

  X509_EXTENSION_free

  d2i_X509

  X509_get0_pubkey

  X509_check_private_key

  X509_get_ext_d2i

  ASYNC_WAIT_CTX_new

  ASYNC_WAIT_CTX_free

  ASYNC_WAIT_CTX_get_all_fds

  ASYNC_WAIT_CTX_get_changed_fds

  ASYNC_start_job

  ASYNC_get_current_job

  CT_POLICY_EVAL_CTX_new

  CT_POLICY_EVAL_CTX_free

  CT_POLICY_EVAL_CTX_set1_cert

  CT_POLICY_EVAL_CTX_set1_issuer

  CT_POLICY_EVAL_CTX_set_shared_CTLOG_STORE

  CT_POLICY_EVAL_CTX_set_time

  SCT_LIST_free

  SCT_set_source

  SCT_get_validation_status

  SCT_LIST_validate

  o2i_SCT_LIST

  CTLOG_STORE_new

  CTLOG_STORE_free

  CTLOG_STORE_load_file

  CTLOG_STORE_load_default_file

  X509_get_key_usage

  RAND_priv_bytes

  OCSP_response_get1_basic

  OCSP_resp_count

  OCSP_resp_get0

  OCSP_SINGLERESP_get1_ext_d2i

  OCSP_BASICRESP_free

  OCSP_RESPID_free

  OCSP_RESPONSE_free

  d2i_OCSP_RESPONSE

  conf_ssl_get

  conf_ssl_name_find

  conf_ssl_get_cmd

  RSA_free

  RSA_up_ref

  RSA_flags

  d2i_RSAPrivateKey

  ERR_peek_last_error

  EVP_PKEY_assign

  EVP_PKEY_get0_RSA

  EVP_PKEY_get0_EC_KEY

  d2i_PrivateKey

  EVP_PKEY_copy_parameters

  EVP_PKEY_missing_parameters

  EVP_PKEY_cmp

  EC_KEY_can_sign

  d2i_X509_bio

  d2i_RSAPrivateKey_bio

  d2i_PrivateKey_bio

  X509_get_pubkey

  PEM_read_bio

  PEM_read_bio_X509_AUX

  PEM_read_bio_RSAPrivateKey

  PEM_read_bio_PrivateKey

  OPENSSL_LH_delete

  OPENSSL_LH_doall_arg

  OPENSSL_LH_get_down_load

  OPENSSL_LH_set_down_load

  PEM_ASN1_read_bio

  PEM_ASN1_write_bio

  PEM_ASN1_read

  PEM_ASN1_write

  ENGINE_get_ssl_client_cert_function

  ENGINE_init

  BIO_puts

  BIO_dump_indent

  BIO_printf

  EVP_DigestSignInit

  EVP_PKEY_new_raw_private_key

  EVP_PKEY_set1_tls_encodedpoint

  EVP_PKEY_get1_tls_encodedpoint

  i2d_X509_EXTENSIONS

  i2d_OCSP_RESPID

  EVP_DigestSign

  d2i_X509_EXTENSIONS

  d2i_OCSP_RESPID

  BUF_MEM_new

  BUF_MEM_grow_clean

  BN_is_zero

  BN_num_bits

  BN_bin2bn

  BN_bn2bin

  BN_free

  RSA_pkey_ctx_ctrl

  DH_new

  DH_security_bits

  DH_check_params

  DH_set0_pqg

  DH_get0_key

  DH_set0_key

  EVP_Digest

  EVP_DigestInit

  EVP_DigestVerify

  EVP_DigestVerifyInit

  EVP_PKEY_size

  EVP_PKEY_get0_DH

  EVP_PKEY_encrypt_init

  EVP_PKEY_encrypt

  ENGINE_load_ssl_client_cert

  BUF_reverse

  EVP_DigestVerifyFinal

  d2i_X509_NAME

  i2d_X509

  X509_NAME_cmp

  ASN1_ANY_it

  BN_ucmp

  ASN1_TYPE_get

  RSA_size

  RSA_private_decrypt

  DH_get0_pqg

  EVP_EncryptInit_ex

  EVP_EncryptUpdate

  EVP_EncryptFinal

  EVP_PKEY_decrypt_init

  EVP_PKEY_decrypt

  HMAC_CTX_new

  HMAC_CTX_free

  HMAC_Init_ex

  HMAC_Update

  HMAC_Final

  EVP_PKEY_new_mac_key

  BN_new

  BN_set_word

  BN_get_rfc3526_prime_3072

  BN_get_rfc3526_prime_8192

  OBJ_ln2nid

  EVP_DecryptInit_ex

  EVP_DecryptUpdate

  EVP_DecryptFinal

  EVP_PKEY_get0

  EVP_PKEY_get_default_digest_nid

  HMAC_size

  EC_GROUP_method_of

  EC_METHOD_get_field_type

  EC_KEY_get_conv_form

  DH_get_1024_160

  DH_get_2048_224

  X509_get_signature_info

  X509_get_signature_nid

  X509_get_issuer_name

  X509_chain_check_suiteb

  ERR_set_mark

  ERR_pop_to_mark

  BN_clear_free

  BN_copy

  BN_dup

  SRP_create_verifier_BN

  SRP_check_known_gN_param

  SRP_get_default_gN

  SRP_Calc_server_key

  SRP_Calc_B

  SRP_Verify_A_mod_N

  SRP_Calc_u

  SRP_Calc_x

  SRP_Calc_A

  SRP_Calc_client_key

  SRP_Verify_B_mod_N

  BIO_ADDR_free

  BIO_ADDR_new

  BIO_read

  BIO_test_flags

  ERR_put_error

  BIO_copy_next_retry

  BIO_f_buffer

  BIO_s_connect

  BIO_set_retry_reason

  BIO_get_retry_reason

  BIO_set_next

  BIO_next

  BIO_find_type

  BIO_push

  BIO_callback_ctrl

  BIO_ctrl

  BIO_write

  BIO_up_ref

  BIO_get_shutdown

  BIO_set_shutdown

  BIO_get_init

  BIO_set_init

  BIO_get_data

  BIO_set_data

  BIO_free

  BIO_new

  BIO_method_type

  BIO_clear_flags

  BIO_set_flags

  CRYPTO_free

  EVP_add_digest

  CRYPTO_zalloc

  msvcrt

  _iob

  malloc

  free

  _XcptFilter

  _initterm

  _amsg_exit

  _wstat

  _stat

  _fstat

  memchr

  sprintf

  _strnicmp

  _stricmp

  atoi

  _errno

  qsort

  memmove

  strncmp

  strchr

  memset

  memcpy

  time

  kernel32

  SetLastError

  GetSystemTime

  SystemTimeToFileTime

  GetLastError

  RtlUnwind

  InterlockedExchange

  Sleep

  InterlockedCompareExchange

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  QueryPerformanceCounter

  GetTickCount

  GetCurrentThreadId

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  Exports

  Exports

  BIO_f_ssl

  BIO_new_buffer_ssl_connect

  BIO_new_ssl

  BIO_new_ssl_connect

  BIO_ssl_copy_session_id

  BIO_ssl_shutdown

  DTLS_client_method

  DTLS_get_data_mtu

  DTLS_method

  DTLS_server_method

  DTLS_set_timer_cb

  DTLSv1_2_client_method

  DTLSv1_2_method

  DTLSv1_2_server_method

  DTLSv1_client_method

  DTLSv1_listen

  DTLSv1_method

  DTLSv1_server_method

  ERR_load_SSL_strings

  OPENSSL_cipher_name

  OPENSSL_init_ssl

  PEM_read_SSL_SESSION

  PEM_read_bio_SSL_SESSION

  PEM_write_SSL_SESSION

  PEM_write_bio_SSL_SESSION

  SRP_Calc_A_param

  SSL_CIPHER_description

  SSL_CIPHER_find

  SSL_CIPHER_get_auth_nid

  SSL_CIPHER_get_bits

  SSL_CIPHER_get_cipher_nid

  SSL_CIPHER_get_digest_nid

  SSL_CIPHER_get_handshake_digest

  SSL_CIPHER_get_id

  SSL_CIPHER_get_kx_nid

  SSL_CIPHER_get_name

  SSL_CIPHER_get_protocol_id

  SSL_CIPHER_get_version

  SSL_CIPHER_is_aead

  SSL_CIPHER_standard_name

  SSL_COMP_add_compression_method

  SSL_COMP_get0_name

  SSL_COMP_get_compression_methods

  SSL_COMP_get_id

  SSL_COMP_get_name

  SSL_COMP_set0_compression_methods

  SSL_CONF_CTX_clear_flags

  SSL_CONF_CTX_finish

  SSL_CONF_CTX_free

  SSL_CONF_CTX_new

  SSL_CONF_CTX_set1_prefix

  SSL_CONF_CTX_set_flags

  SSL_CONF_CTX_set_ssl

  SSL_CONF_CTX_set_ssl_ctx

  SSL_CONF_cmd

  SSL_CONF_cmd_argv

  SSL_CONF_cmd_value_type

  SSL_CTX_SRP_CTX_free

  SSL_CTX_SRP_CTX_init

  SSL_CTX_add1_to_CA_list

  SSL_CTX_add_client_CA

  SSL_CTX_add_client_custom_ext

  SSL_CTX_add_custom_ext

  SSL_CTX_add_server_custom_ext

  SSL_CTX_add_session

  SSL_CTX_callback_ctrl

  SSL_CTX_check_private_key

  SSL_CTX_clear_options

  SSL_CTX_config

  SSL_CTX_ct_is_enabled

  SSL_CTX_ctrl

  SSL_CTX_dane_clear_flags

  SSL_CTX_dane_enable

  SSL_CTX_dane_mtype_set

  SSL_CTX_dane_set_flags

  SSL_CTX_enable_ct

  SSL_CTX_flush_sessions

  SSL_CTX_free

  SSL_CTX_get0_CA_list

  SSL_CTX_get0_certificate

  SSL_CTX_get0_ctlog_store

  SSL_CTX_get0_param

  SSL_CTX_get0_privatekey

  SSL_CTX_get0_security_ex_data

  SSL_CTX_get_cert_store

  SSL_CTX_get_ciphers

  SSL_CTX_get_client_CA_list

  SSL_CTX_get_client_cert_cb

  SSL_CTX_get_default_passwd_cb

  SSL_CTX_get_default_passwd_cb_userdata

  SSL_CTX_get_ex_data

  SSL_CTX_get_info_callback

  SSL_CTX_get_keylog_callback

  SSL_CTX_get_max_early_data

  SSL_CTX_get_num_tickets

  SSL_CTX_get_options

  SSL_CTX_get_quiet_shutdown

  SSL_CTX_get_record_padding_callback_arg

  SSL_CTX_get_recv_max_early_data

  SSL_CTX_get_security_callback

  SSL_CTX_get_security_level

  SSL_CTX_get_ssl_method

  SSL_CTX_get_timeout

  SSL_CTX_get_verify_callback

  SSL_CTX_get_verify_depth

  SSL_CTX_get_verify_mode

  SSL_CTX_has_client_custom_ext

  SSL_CTX_load_verify_locations

  SSL_CTX_new

  SSL_CTX_remove_session

  SSL_CTX_sess_get_get_cb

  SSL_CTX_sess_get_new_cb

  SSL_CTX_sess_get_remove_cb

  SSL_CTX_sess_set_get_cb

  SSL_CTX_sess_set_new_cb

  SSL_CTX_sess_set_remove_cb

  SSL_CTX_sessions

  SSL_CTX_set0_CA_list

  SSL_CTX_set0_ctlog_store

  SSL_CTX_set0_security_ex_data

  SSL_CTX_set1_cert_store

  SSL_CTX_set1_param

  SSL_CTX_set_allow_early_data_cb

  SSL_CTX_set_alpn_protos

  SSL_CTX_set_alpn_select_cb

  SSL_CTX_set_block_padding

  SSL_CTX_set_cert_cb

  SSL_CTX_set_cert_store

  SSL_CTX_set_cert_verify_callback

  SSL_CTX_set_cipher_list

  SSL_CTX_set_ciphersuites

  SSL_CTX_set_client_CA_list

  SSL_CTX_set_client_cert_cb

  SSL_CTX_set_client_cert_engine

  SSL_CTX_set_client_hello_cb

  SSL_CTX_set_cookie_generate_cb

  SSL_CTX_set_cookie_verify_cb

  SSL_CTX_set_ct_validation_callback

  SSL_CTX_set_ctlog_list_file

  SSL_CTX_set_default_ctlog_list_file

  SSL_CTX_set_default_passwd_cb

  SSL_CTX_set_default_passwd_cb_userdata

  SSL_CTX_set_default_read_buffer_len

  SSL_CTX_set_default_verify_dir

  SSL_CTX_set_default_verify_file

  SSL_CTX_set_default_verify_paths

  SSL_CTX_set_ex_data

  SSL_CTX_set_generate_session_id

  SSL_CTX_set_info_callback

  SSL_CTX_set_keylog_callback

  SSL_CTX_set_max_early_data

  SSL_CTX_set_msg_callback

  SSL_CTX_set_next_proto_select_cb

  SSL_CTX_set_next_protos_advertised_cb

  SSL_CTX_set_not_resumable_session_callback

  SSL_CTX_set_num_tickets

  SSL_CTX_set_options

  SSL_CTX_set_post_handshake_auth

  SSL_CTX_set_psk_client_callback

  SSL_CTX_set_psk_find_session_callback

  SSL_CTX_set_psk_server_callback

  SSL_CTX_set_psk_use_session_callback

  SSL_CTX_set_purpose

  SSL_CTX_set_quiet_shutdown

  SSL_CTX_set_record_padding_callback

  SSL_CTX_set_record_padding_callback_arg

  SSL_CTX_set_recv_max_early_data

  SSL_CTX_set_security_callback

  SSL_CTX_set_security_level

  SSL_CTX_set_session_id_context

  SSL_CTX_set_session_ticket_cb

  SSL_CTX_set_srp_cb_arg

  SSL_CTX_set_srp_client_pwd_callback

  SSL_CTX_set_srp_password

  SSL_CTX_set_srp_strength

  SSL_CTX_set_srp_username

  SSL_CTX_set_srp_username_callback

  SSL_CTX_set_srp_verify_param_callback

  SSL_CTX_set_ssl_version

  SSL_CTX_set_stateless_cookie_generate_cb

  SSL_CTX_set_stateless_cookie_verify_cb

  SSL_CTX_set_timeout

  SSL_CTX_set_tlsext_max_fragment_length

  SSL_CTX_set_tlsext_use_srtp

  SSL_CTX_set_tmp_dh_callback

  SSL_CTX_set_trust

  SSL_CTX_set_verify

  SSL_CTX_set_verify_depth

  SSL_CTX_up_ref

  SSL_CTX_use_PrivateKey

  SSL_CTX_use_PrivateKey_ASN1

  SSL_CTX_use_PrivateKey_file

  SSL_CTX_use_RSAPrivateKey

  SSL_CTX_use_RSAPrivateKey_ASN1

  SSL_CTX_use_RSAPrivateKey_file

  SSL_CTX_use_cert_and_key

  SSL_CTX_use_certificate

  SSL_CTX_use_certificate_ASN1

  SSL_CTX_use_certificate_chain_file

  SSL_CTX_use_certificate_file

  SSL_CTX_use_psk_identity_hint

  SSL_CTX_use_serverinfo

  SSL_CTX_use_serverinfo_ex

  SSL_CTX_use_serverinfo_file

  SSL_SESSION_dup

  SSL_SESSION_free

  SSL_SESSION_get0_alpn_selected

  SSL_SESSION_get0_cipher

  SSL_SESSION_get0_hostname

  SSL_SESSION_get0_id_context

  SSL_SESSION_get0_peer

  SSL_SESSION_get0_ticket

  SSL_SESSION_get0_ticket_appdata

  SSL_SESSION_get_compress_id

  SSL_SESSION_get_ex_data

  SSL_SESSION_get_id

  SSL_SESSION_get_master_key

  SSL_SESSION_get_max_early_data

  SSL_SESSION_get_max_fragment_length

  SSL_SESSION_get_protocol_version

  SSL_SESSION_get_ticket_lifetime_hint

  SSL_SESSION_get_time

  SSL_SESSION_get_timeout

  SSL_SESSION_has_ticket

  SSL_SESSION_is_resumable

  SSL_SESSION_new

  SSL_SESSION_print

  SSL_SESSION_print_fp

  SSL_SESSION_print_keylog

  SSL_SESSION_set1_alpn_selected

  SSL_SESSION_set1_hostname

  SSL_SESSION_set1_id

  SSL_SESSION_set1_id_context

  SSL_SESSION_set1_master_key

  SSL_SESSION_set1_ticket_appdata

  SSL_SESSION_set_cipher

  SSL_SESSION_set_ex_data

  SSL_SESSION_set_max_early_data

  SSL_SESSION_set_protocol_version

  SSL_SESSION_set_time

  SSL_SESSION_set_timeout

  SSL_SESSION_up_ref

  SSL_SRP_CTX_free

  SSL_SRP_CTX_init

  SSL_accept

  SSL_add1_host

  SSL_add1_to_CA_list

  SSL_add_client_CA

  SSL_add_dir_cert_subjects_to_stack

  SSL_add_file_cert_subjects_to_stack

  SSL_add_ssl_module

  SSL_alert_desc_string

  SSL_alert_desc_string_long

  SSL_alert_type_string

  SSL_alert_type_string_long

  SSL_alloc_buffers

  SSL_bytes_to_cipher_list

  SSL_callback_ctrl

  SSL_certs_clear

  SSL_check_chain

  SSL_check_private_key

  SSL_clear

  SSL_clear_options

  SSL_client_hello_get0_ciphers

  SSL_client_hello_get0_compression_methods

  SSL_client_hello_get0_ext

  SSL_client_hello_get0_legacy_version

  SSL_client_hello_get0_random

  SSL_client_hello_get0_session_id

  SSL_client_hello_get1_extensions_present

  SSL_client_hello_isv2

  SSL_client_version

  SSL_config

  SSL_connect

  SSL_copy_session_id

  SSL_ct_is_enabled

  SSL_ctrl

  SSL_dane_clear_flags

  SSL_dane_enable

  SSL_dane_set_flags

  SSL_dane_tlsa_add

  SSL_do_handshake

  SSL_dup

  SSL_dup_CA_list

  SSL_enable_ct

  SSL_export_keying_material

  SSL_export_keying_material_early

  SSL_extension_supported

  SSL_free

  SSL_free_buffers

  SSL_get0_CA_list

  SSL_get0_alpn_selected

  SSL_get0_dane

  SSL_get0_dane_authority

  SSL_get0_dane_tlsa

  SSL_get0_next_proto_negotiated

  SSL_get0_param

  SSL_get0_peer_CA_list

  SSL_get0_peer_scts

  SSL_get0_peername

  SSL_get0_security_ex_data

  SSL_get0_verified_chain

  SSL_get1_session

  SSL_get1_supported_ciphers

  SSL_get_SSL_CTX

  SSL_get_all_async_fds

  SSL_get_certificate

  SSL_get_changed_async_fds

  SSL_get_cipher_list

  SSL_get_ciphers

  SSL_get_client_CA_list

  SSL_get_client_ciphers

  SSL_get_client_random

  SSL_get_current_cipher

  SSL_get_current_compression

  SSL_get_current_expansion

  SSL_get_default_passwd_cb

  SSL_get_default_passwd_cb_userdata

  SSL_get_default_timeout

  SSL_get_early_data_status

  SSL_get_error

  SSL_get_ex_data

  SSL_get_ex_data_X509_STORE_CTX_idx

  SSL_get_fd

  SSL_get_finished

  SSL_get_info_callback

  SSL_get_key_update_type

  SSL_get_max_early_data

  SSL_get_num_tickets

  SSL_get_options

  SSL_get_peer_cert_chain

  SSL_get_peer_certificate

  SSL_get_peer_finished

  SSL_get_peer_signature_type_nid

  SSL_get_pending_cipher

  SSL_get_privatekey

  SSL_get_psk_identity

  SSL_get_psk_identity_hint

  SSL_get_quiet_shutdown

  SSL_get_rbio

  SSL_get_read_ahead

  SSL_get_record_padding_callback_arg

  SSL_get_recv_max_early_data

  SSL_get_rfd

  SSL_get_security_callback

  SSL_get_security_level

  SSL_get_selected_srtp_profile

  SSL_get_server_random

  SSL_get_servername

  SSL_get_servername_type

  SSL_get_session

  SSL_get_shared_ciphers

  SSL_get_shared_sigalgs

  SSL_get_shutdown

  SSL_get_sigalgs

  SSL_get_signature_type_nid

  SSL_get_srp_N

  SSL_get_srp_g

  SSL_get_srp_userinfo

  SSL_get_srp_username

  SSL_get_srtp_profiles

  SSL_get_ssl_method

  SSL_get_state

  SSL_get_verify_callback

  SSL_get_verify_depth

  SSL_get_verify_mode

  SSL_get_verify_result

  SSL_get_version

  SSL_get_wbio

  SSL_get_wfd

  SSL_has_matching_session_id

  SSL_has_pending

  SSL_in_before

  SSL_in_init

  SSL_is_dtls

  SSL_is_init_finished

  SSL_is_server

  SSL_key_update

  SSL_load_client_CA_file

  SSL_new

  SSL_peek

  SSL_peek_ex

  SSL_pending

  SSL_read

  SSL_read_early_data

  SSL_read_ex

  SSL_renegotiate

  SSL_renegotiate_abbreviated

  SSL_renegotiate_pending

  SSL_rstate_string

  SSL_rstate_string_long

  SSL_select_next_proto

  SSL_session_reused

  SSL_set0_CA_list

  SSL_set0_rbio

  SSL_set0_security_ex_data

  SSL_set0_wbio

  SSL_set1_host

  SSL_set1_param

  SSL_set_SSL_CTX

  SSL_set_accept_state

  SSL_set_allow_early_data_cb

  SSL_set_alpn_protos

  SSL_set_bio

  SSL_set_block_padding

  SSL_set_cert_cb

  SSL_set_cipher_list

  SSL_set_ciphersuites

  SSL_set_client_CA_list

  SSL_set_connect_state

  SSL_set_ct_validation_callback

  SSL_set_debug

  SSL_set_default_passwd_cb

  SSL_set_default_passwd_cb_userdata

  SSL_set_default_read_buffer_len

  SSL_set_ex_data

  SSL_set_fd

  SSL_set_generate_session_id

  SSL_set_hostflags

  SSL_set_info_callback

  SSL_set_max_early_data

  SSL_set_msg_callback

  SSL_set_not_resumable_session_callback

  SSL_set_num_tickets

  SSL_set_options

  SSL_set_post_handshake_auth

  SSL_set_psk_client_callback

  SSL_set_psk_find_session_callback

  SSL_set_psk_server_callback

  SSL_set_psk_use_session_callback

  SSL_set_purpose

  SSL_set_quiet_shutdown

  SSL_set_read_ahead

  SSL_set_record_padding_callback

  SSL_set_record_padding_callback_arg

  SSL_set_recv_max_early_data

  SSL_set_rfd

  SSL_set_security_callback

  SSL_set_security_level

  SSL_set_session

  SSL_set_session_id_context

  SSL_set_session_secret_cb

  SSL_set_session_ticket_ext

  SSL_set_session_ticket_ext_cb

  SSL_set_shutdown

  SSL_set_srp_server_param

  SSL_set_srp_server_param_pw

  SSL_set_ssl_method

  SSL_set_tlsext_max_fragment_length

  SSL_set_tlsext_use_srtp

  SSL_set_tmp_dh_callback

  SSL_set_trust

  SSL_set_verify

  SSL_set_verify_depth

  SSL_set_verify_result

  SSL_set_wfd

  SSL_shutdown

  SSL_srp_server_param_with_username

  SSL_state_string

  SSL_state_string_long

  SSL_stateless

  SSL_up_ref

  SSL_use_PrivateKey

  SSL_use_PrivateKey_ASN1

  SSL_use_PrivateKey_file

  SSL_use_RSAPrivateKey

  SSL_use_RSAPrivateKey_ASN1

  SSL_use_RSAPrivateKey_file

  SSL_use_cert_and_key

  SSL_use_certificate

  SSL_use_certificate_ASN1

  SSL_use_certificate_chain_file

  SSL_use_certificate_file

  SSL_use_psk_identity_hint

  SSL_verify_client_post_handshake

  SSL_version

  SSL_waiting_for_async

  SSL_want

  SSL_write

  SSL_write_early_data

  SSL_write_ex

  TLS_client_method

  TLS_method

  TLS_server_method

  TLSv1_1_client_method

  TLSv1_1_method

  TLSv1_1_server_method

  TLSv1_2_client_method

  TLSv1_2_method

  TLSv1_2_server_method

  TLSv1_client_method

  TLSv1_method

  TLSv1_server_method

  __acrt_iob_func

  _fstat32

  _stat32

  _wstat32

  d2i_SSL_SESSION

  i2d_SSL_SESSION

  Sections

  .text

  Size: 248KB - Virtual size: 248KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 84KB - Virtual size: 84KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 12KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 952B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 12KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ