Realtek Wireless 11AC Adapter Drivers[.]iso

Sharing

Copy URL

Twitter E-mail

General

Target

Realtek Wireless 11AC Adapter Drivers.iso
Size

187.1MB
MD5

01cc5bee09385625194ba8d657b32013
SHA1

da978f97f87bd1e2d0e0ee2325e425a965f75a37
SHA256

3fabf5502b325a48220ba112aa413de6a5fd3913a7c690ba3a44aa58a0aa7f70
SHA512

02586752b82e6316a52eb337db5ea4d71bac30b90aeed728d9dfbdc4c6937cd1df6850b18c61c63d55b7705ebb92bade14b4562e71231ee8f7580edeb96c25ee
SSDEEP

3145728:JwoOEn8/03orf/lddEq9MBxxi2o8rUNqewXyq0Rj3sh:WknIWId2qq+DjM

Score

3^/10

pdf link

Malware Config

Signatures

One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link

Files

Realtek Wireless 11AC Adapter Drivers.iso
.iso

Password: P3n4mM
Linux/RTL8811CU_WiFi_linux/RTL8811CU_8821CU_WiFi_linux_v5.2.5.3.zip
.zip

Password: P3n4mM
RTL8811CU_WiFi_linux/ReleaseNotes.pdf
.pdf

Password: P3n4mM
RTL8811CU_WiFi_linux/WiFi_Direct_User_Interface/Android.mk
RTL8811CU_WiFi_linux/WiFi_Direct_User_Interface/Start_Guide_P2P_User_Interface_Linux.pdf
.pdf

Password: P3n4mM
RTL8811CU_WiFi_linux/WiFi_Direct_User_Interface/install.sh
RTL8811CU_WiFi_linux/WiFi_Direct_User_Interface/p2p_api_test_linux.c
RTL8811CU_WiFi_linux/WiFi_Direct_User_Interface/p2p_test.h
RTL8811CU_WiFi_linux/WiFi_Direct_User_Interface/p2p_ui_test_linux.c
RTL8811CU_WiFi_linux/android_ref_codes_JB_4.2/Realtek_Wi-Fi_SDK_for_Android_JB_4.2.pdf
.pdf
Password: P3n4mM
- http://BoardConfig.mk
- http://Android.mk
- http://en-USAndroid.mk
RTL8811CU_WiFi_linux/android_ref_codes_JB_4.2/linux-3.0.42_STATION_INFO_ASSOC_REQ_IES.diff
RTL8811CU_WiFi_linux/android_ref_codes_JB_4.2/realtek_wifi_SDK_for_android_JB_4.2_20130208.tar.gz
.gz

Password: P3n4mM
realtek_wifi_SDK_for_android_JB_4.2_20130208.tar
.tar

Password: P3n4mM
realtek_wifi_SDK_for_android_JB_4.2_20130208/hardware/libhardware_legacy/wifi/Android.mk
realtek_wifi_SDK_for_android_JB_4.2_20130208/hardware/realtek/wlan/Android.mk
realtek_wifi_SDK_for_android_JB_4.2_20130208/hardware/realtek/wlan/config/Android.mk
realtek_wifi_SDK_for_android_JB_4.2_20130208/hardware/realtek/wlan/config/android_dhcpcd.conf
realtek_wifi_SDK_for_android_JB_4.2_20130208/hardware/realtek/wlan/libhardware_legacy/wifi/wifi_realtek.c
realtek_wifi_SDK_for_android_JB_4.2_20130208/hardware/realtek/wlan/wpa_supplicant_8_lib/Android.mk
realtek_wifi_SDK_for_android_JB_4.2_20130208/hardware/realtek/wlan/wpa_supplicant_8_lib/NOTICE
realtek_wifi_SDK_for_android_JB_4.2_20130208/hardware/realtek/wlan/wpa_supplicant_8_lib/driver_cmd_nl80211.c
realtek_wifi_SDK_for_android_JB_4.2_20130208/hardware/realtek/wlan/wpa_supplicant_8_lib/driver_cmd_wext.c
realtek_wifi_SDK_for_android_JB_4.2_20130208/hardware/realtek/wlan/wpa_supplicant_8_lib/driver_cmd_wext.h
realtek_wifi_SDK_for_android_JB_4.2_20130208/hardware/realtek/wlan/wpa_supplicant_8_lib/driver_nl80211.h
RTL8811CU_WiFi_linux/android_ref_codes_KK_4.4/Realtek_Wi-Fi_SDK_for_Android_KK_4.4.pdf
.pdf
Password: P3n4mM
- http://Android.mk
RTL8811CU_WiFi_linux/android_ref_codes_KK_4.4/linux-3.0.42_STATION_INFO_ASSOC_REQ_IES.diff
RTL8811CU_WiFi_linux/android_ref_codes_KK_4.4/realtek_wifi_SDK_for_android_KK_4.4_20140117.tar.gz
.gz

Password: P3n4mM
realtek_wifi_SDK_for_android_KK_4.4_20140117.tar
.tar
RTL8811CU_WiFi_linux/android_ref_codes_L_5.x/Realtek_Wi-Fi_SDK_for_Android_L_5.x.pdf
.pdf
RTL8811CU_WiFi_linux/android_ref_codes_L_5.x/linux-3.0.42_STATION_INFO_ASSOC_REQ_IES.diff
RTL8811CU_WiFi_linux/android_ref_codes_L_5.x/realtek_wifi_SDK_for_android_L_5.x_20150811.tgz
.gz
RTL8811CU_WiFi_linux/android_ref_codes_M_6.x/Realtek_Wi-Fi_SDK_for_Android_M_6.x.pdf
.pdf
RTL8811CU_WiFi_linux/android_ref_codes_M_6.x/linux-3.0.42_STATION_INFO_ASSOC_REQ_IES.diff
RTL8811CU_WiFi_linux/android_ref_codes_M_6.x/realtek_wifi_SDK_for_android_L_6.x_20151116.tgz
.gz
RTL8811CU_WiFi_linux/android_ref_codes_N_7.0/Realtek_Wi-Fi_SDK_for_Android_N_7.0.pdf
.pdf
RTL8811CU_WiFi_linux/android_ref_codes_N_7.0/linux-3.0.42_STATION_INFO_ASSOC_REQ_IES.diff
RTL8811CU_WiFi_linux/android_ref_codes_N_7.0/realtek_wifi_SDK_for_android_N_7.0_20161024.zip
.zip
RTL8811CU_WiFi_linux/btcoex/HowTo_debug_BT_coexistence.pdf
.pdf
RTL8811CU_WiFi_linux/btcoex/script/btcoex_lnx.sh
RTL8811CU_WiFi_linux/btcoex/script/btcoex_win.bat
.bat .vbs
RTL8811CU_WiFi_linux/document/Driver_Configuration_for_RF_Regulatory_Certification.pdf
.pdf
RTL8811CU_WiFi_linux/document/How to enable Realtek RSON function.docx
.docx office2007
RTL8811CU_WiFi_linux/document/HowTo_enable_and_verify_TDLS_function_in_Wi-Fi_driver.pdf
.pdf
RTL8811CU_WiFi_linux/document/HowTo_enable_driver_to_support_80211d.pdf
.pdf
RTL8811CU_WiFi_linux/document/HowTo_enable_driver_to_support_WIFI_certification_test.pdf
.pdf
RTL8811CU_WiFi_linux/document/HowTo_enable_the_power_saving_functionality.pdf
.pdf
RTL8811CU_WiFi_linux/document/HowTo_support_more_VidPids.pdf
.pdf
RTL8811CU_WiFi_linux/document/How_to_append_vendor_specific_ie_to_driver_management_frames.pdf
.pdf
RTL8811CU_WiFi_linux/document/How_to_set_driver_debug_log_level.pdf
.pdf
RTL8811CU_WiFi_linux/document/Miracast_for_Realtek_WiFi.pdf
.pdf
RTL8811CU_WiFi_linux/document/Quick_Start_Guide_for_Adaptivity_and_Carrier_Sensing_Test.pdf
.pdf
RTL8811CU_WiFi_linux/document/Quick_Start_Guide_for_Bridge.pdf
.pdf
RTL8811CU_WiFi_linux/document/Quick_Start_Guide_for_Driver_Compilation_and_Installation.pdf
.pdf
RTL8811CU_WiFi_linux/document/Quick_Start_Guide_for_SoftAP.pdf
.pdf
RTL8811CU_WiFi_linux/document/Quick_Start_Guide_for_Station_Mode.pdf
.pdf
RTL8811CU_WiFi_linux/document/Quick_Start_Guide_for_WOW.pdf
.pdf
RTL8811CU_WiFi_linux/document/RTK_P2P_WFD_Programming_guide.pdf
.pdf
RTL8811CU_WiFi_linux/document/Realtek_WiFi_concurrent_mode_Introduction.pdf
.pdf
RTL8811CU_WiFi_linux/document/SoftAP_Mode_features.pdf
.pdf
RTL8811CU_WiFi_linux/document/Wireless_tools_porting_guide.pdf
.pdf
RTL8811CU_WiFi_linux/document/linux_dhcp_server_notes.txt
.vbs
RTL8811CU_WiFi_linux/document/wpa_cli_with_wpa_supplicant.pdf
.pdf
RTL8811CU_WiFi_linux/driver/rtl8821CU_WiFi_linux_v5.2.5.3_24795.20171031_COEX20170310-1212.tar.gz
.gz
RTL8811CU_WiFi_linux/install.sh
.sh linux
RTL8811CU_WiFi_linux/readme.txt
RTL8811CU_WiFi_linux/wireless_tools/wireless_tools.30.rtl.tar.gz
.gz
RTL8811CU_WiFi_linux/wpa_supplicant_hostapd/p2p_hostapd.conf
RTL8811CU_WiFi_linux/wpa_supplicant_hostapd/rtl_hostapd_2G.conf
RTL8811CU_WiFi_linux/wpa_supplicant_hostapd/rtl_hostapd_5G.conf
RTL8811CU_WiFi_linux/wpa_supplicant_hostapd/wpa_0_8.conf
RTL8811CU_WiFi_linux/wpa_supplicant_hostapd/wpa_supplicant_8_L_5.x_rtw_r24600.20171025.tar.gz
.gz
RTL8811CU_WiFi_linux/wpa_supplicant_hostapd/wpa_supplicant_8_M_6.x_rtw_r24570.20171025.tar.gz
.gz
RTL8811CU_WiFi_linux/wpa_supplicant_hostapd/wpa_supplicant_8_N_7.x_rtw_r24577.20171025.tar.gz
.gz
RTL8811CU_WiFi_linux/wpa_supplicant_hostapd/wpa_supplicant_8_jb_4.2_rtw_r24643.20171025.tar.gz
.gz
RTL8811CU_WiFi_linux/wpa_supplicant_hostapd/wpa_supplicant_8_kk_4.4_rtw_r24640.20171025.tar.gz
.gz
RTL8811CU_WiFi_linux/wpa_supplicant_hostapd/wpa_supplicant_hostapd-0.8_rtw_r24647.20171025.tar.gz
.gz
Linux/RTL8812BU_WiFi_linux/8812BU Android porting guide/Quick_Start_Guide_for_Driver_Compilation_and_Installation.pdf
.pdf
Linux/RTL8812BU_WiFi_linux/8812BU Android porting guide/android_ref_codes_M_6.x.rar
.rar
Linux/RTL8812BU_WiFi_linux/RTL88x2BU_WiFi_linux_v5.2.4.4_25643.20171212_COEX20171012-5044.zip
.zip
MAC/.DS_Store
MAC/Install.pkg
.xar
MAC/Release_RTWlanU_MacOSX.txt
MAC/Uninstall.pkg
.xar
MAC/Utility_Release.txt
User Manual.pdf
.pdf
Windows/Autorun.inf
Windows/EAP/x64/EAP-FAST.msi
.msi
Windows/EAP/x64/EAP-LEAP.msi
.msi
Windows/EAP/x64/EAP-PEAP.msi
.msi
Windows/EAP/x86/EAP-FAST.msi
.msi
Windows/EAP/x86/EAP-LEAP.msi
.msi
Windows/EAP/x86/EAP-PEAP.msi
.msi
Windows/IHV/X64/Rtlihvs.dll
.dll windows x64

c23e822feac4ccc189a3fe07d78b6e98

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

13:22:2a:5d:cc:f7:16:df:5a:f9:c8:70:84:41:2d:d9
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

13-05-2013 00:00

Not After

11-07-2016 23:59

Subject

CN=Realtek Semiconductor Corp,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Realtek Semiconductor Corp,L=Hsinchu,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-02-2011 19:25

Not After

22-02-2021 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

33:66:94:66:95:bc:1c:ed:ab:83:ab:7d:a2:47:bb:23:db:d1:75:b1
Signer

Actual PE Digest

33:66:94:66:95:bc:1c:ed:ab:83:ab:7d:a2:47:bb:23:db:d1:75:b1

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Realtek Semiconductor Corp,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Realtek Semiconductor Corp,L=Hsinchu,ST=Taiwan,C=TW

12-08-2015 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

crypt32

CertEnumCertificatesInStore
CertFreeCertificateContext
CryptUnprotectData
CertCloseStore
CertGetCertificateContextProperty
CertOpenStore

oleaut32

SysFreeString
SysStringByteLen
VariantInit
SysAllocString
VariantClear

kernel32

FlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
WriteFile
RtlPcToFileHeader
GetCPInfo
GetACP
GetOEMCP
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetDriveTypeA
LCMapStringW
FreeLibrary
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
GetStringTypeW
GetCurrentThreadId
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileW
VirtualProtect
VirtualAlloc
SetThreadStackGuarantee
GetSystemInfo
VirtualQuery
HeapReAlloc
SetEndOfFile
GetProcessHeap
ReadFile
CompareStringW
SetEnvironmentVariableA
TerminateThread
GetLocalTime
ReleaseMutex
CreateThread
CloseHandle
DeleteCriticalSection
SetEvent
WaitForSingleObject
ResetEvent
LocalFree
WideCharToMultiByte
Sleep
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CreateEventA
FlsGetValue
SetLastError
GetPrivateProfileStringW
FlsFree
DecodePointer
EncodePointer
ExitProcess
GetModuleHandleW
GetProcAddress
RaiseException
GetFullPathNameW
GetCurrentDirectoryW
CreateDirectoryW
RtlLookupFunctionEntry
HeapFree
HeapAlloc
RtlUnwindEx
GetVersionExW
GetCommandLineA
FlsSetValue
MultiByteToWideChar
WTSGetActiveConsoleSessionId
LocalAlloc
GetLastError
FormatMessageW
GetModuleFileNameA
CreateMutexA
GetPrivateProfileIntW
DisableThreadLibraryCalls
OutputDebugStringA
CreateFileA
HeapSize
LoadLibraryW
GlobalMemoryStatus
GetVersion
GetModuleHandleA
GetSystemDefaultLocaleName
GetComputerNameW
GetUserDefaultLocaleName
GetComputerNameA
GetTickCount64
GetVersionExA
SetThreadPriority
GetSystemTime
LoadLibraryA

advapi32

RegEnumKeyA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegSetValueExA
FreeSid
ConvertSidToStringSidA
RegisterEventSourceW
ReportEventW
DeregisterEventSource
CryptReleaseContext
DuplicateToken
GetTokenInformation
RegDeleteValueA
RegGetValueA
CryptAcquireContextA
CryptGenRandom
RegCreateKeyExA
ImpersonateLoggedOnUser
RevertToSelf
GetUserNameA
LookupAccountNameA
RegCloseKey

ole32

CoCreateInstance
CoInitializeEx
CoTaskMemFree
CoUninitialize
CoTaskMemAlloc
CreateStreamOnHGlobal

ws2_32

WSACleanup
getaddrinfo
inet_addr
htons
ntohs
WSAStartup

rpcrt4

UuidCreate
RpcStringFreeA
UuidToStringA

user32

GetProcessWindowStation
GetDesktopWindow
MessageBoxW
GetUserObjectInformationW
GetSystemMetrics
MsgWaitForMultipleObjects

wtsapi32

WTSQueryUserToken
WTSEnumerateSessionsA
WTSFreeMemory
WTSQuerySessionInformationA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

wlanapi

WlanRegisterVirtualStationNotification
WlanScan
WlanFreeMemory
WlanGetNetworkBssList
WlanRegisterNotification
WlanOpenHandle
WlanCloseHandle
WlanReasonCodeToString
WlanDisconnect
WlanConnect
WlanGetProfile
WlanQueryInterface
WlanGetAvailableNetworkList
WlanGetProfileList
WlanSetSecuritySettings

xmllite

CreateXmlReader

iphlpapi

IcmpCloseHandle
IcmpSendEcho
GetIpNetTable2
IcmpCreateFile
IpReleaseAddress
IpRenewAddress
Icmp6SendEcho2
Icmp6CreateFile
FreeMibTable
GetUnicastIpAddressTable
GetAdaptersAddresses
GetAdaptersInfo
GetIpAddrTable
GetIfTable
CancelIPChangeNotify
GetInterfaceInfo
NotifyAddrChange

Exports

Exports

Dot11ExtIhvGetVersionInfo
Dot11ExtIhvInitService
Dot11ExtIhvInitVirtualStation

Sections

.text
Size: 966KB - Virtual size: 966KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/IHV/X86/Rtlihvs.dll
.dll windows x86

611f1f929b7fa547b62a979678e70858

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

13:22:2a:5d:cc:f7:16:df:5a:f9:c8:70:84:41:2d:d9
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

13-05-2013 00:00

Not After

11-07-2016 23:59

Subject

CN=Realtek Semiconductor Corp,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Realtek Semiconductor Corp,L=Hsinchu,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-02-2011 19:25

Not After

22-02-2021 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a8:28:78:31:2a:6f:d5:d9:86:4d:35:5e:c7:a6:5f:f0:cf:4a:78:3e
Signer

Actual PE Digest

a8:28:78:31:2a:6f:d5:d9:86:4d:35:5e:c7:a6:5f:f0:cf:4a:78:3e

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Realtek Semiconductor Corp,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Realtek Semiconductor Corp,L=Hsinchu,ST=Taiwan,C=TW

12-08-2015 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CertEnumCertificatesInStore
CertFreeCertificateContext
CertCloseStore
CertGetCertificateContextProperty
CertOpenStore
CryptUnprotectData

oleaut32

SysStringByteLen
VariantInit
VariantClear
SysAllocString
SysFreeString

kernel32

GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
VirtualAlloc
HeapReAlloc
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetDriveTypeA
LCMapStringA
LCMapStringW
FreeLibrary
InterlockedExchange
LoadLibraryExA
GetStringTypeA
InterlockedDecrement
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileW
VirtualProtect
GetSystemInfo
VirtualQuery
CreateFileA
SetEndOfFile
GetProcessHeap
ReadFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
TerminateThread
GetLocalTime
ReleaseMutex
CreateThread
CloseHandle
DeleteCriticalSection
SetEvent
WaitForSingleObject
ResetEvent
LocalFree
WideCharToMultiByte
Sleep
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CreateEventA
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
ExitProcess
GetModuleHandleA
GetProcAddress
RaiseException
GetFullPathNameW
GetCurrentDirectoryW
CreateDirectoryW
RtlUnwind
HeapFree
HeapAlloc
GetVersionExA
GetCommandLineA
MultiByteToWideChar
WTSGetActiveConsoleSessionId
LocalAlloc
GetLastError
FormatMessageW
GetModuleFileNameA
CreateMutexA
GetPrivateProfileIntW
GetStringTypeW
DisableThreadLibraryCalls
OutputDebugStringA
HeapSize
GlobalMemoryStatus
GetVersion
GetUserDefaultLocaleName
GetSystemDefaultLocaleName
GetComputerNameW
InterlockedCompareExchange
GetTickCount64
GetComputerNameA
SetThreadPriority
GetSystemTime
LoadLibraryA
GetPrivateProfileStringW

advapi32

RegCloseKey
RegOpenKeyExA
RegEnumKeyA
RegOpenKeyA
RegSetValueExA
FreeSid
ConvertSidToStringSidA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
CryptReleaseContext
GetTokenInformation
DuplicateToken
RegDeleteValueA
RegGetValueA
CryptAcquireContextA
CryptGenRandom
RegCreateKeyExA
ImpersonateLoggedOnUser
RevertToSelf
GetUserNameA
LookupAccountNameA
RegQueryValueExA

ole32

CoCreateInstance
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CreateStreamOnHGlobal

ws2_32

getaddrinfo
WSACleanup
inet_addr
htons
ntohs
WSAStartup

rpcrt4

UuidToStringA
UuidCreate
RpcStringFreeA

user32

GetProcessWindowStation
GetUserObjectInformationW
GetSystemMetrics
MsgWaitForMultipleObjects
GetDesktopWindow
MessageBoxA

wtsapi32

WTSEnumerateSessionsA
WTSQueryUserToken
WTSFreeMemory
WTSQuerySessionInformationA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

wlanapi

WlanRegisterVirtualStationNotification
WlanScan
WlanFreeMemory
WlanCloseHandle
WlanRegisterNotification
WlanOpenHandle
WlanDisconnect
WlanReasonCodeToString
WlanConnect
WlanGetProfile
WlanSetSecuritySettings
WlanQueryInterface
WlanGetAvailableNetworkList
WlanGetProfileList
WlanGetNetworkBssList

xmllite

CreateXmlReader

iphlpapi

Icmp6SendEcho2
Icmp6CreateFile
GetIpNetTable2
IcmpCreateFile
IpReleaseAddress
GetInterfaceInfo
IcmpSendEcho
IcmpCloseHandle
GetUnicastIpAddressTable
FreeMibTable
GetAdaptersAddresses
GetAdaptersInfo
NotifyAddrChange
CancelIPChangeNotify
GetIfTable
IpRenewAddress
GetIpAddrTable

Exports

Exports

Dot11ExtIhvGetVersionInfo
Dot11ExtIhvInitService
Dot11ExtIhvInitVirtualStation

Sections

.text
Size: 861KB - Virtual size: 860KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/Install.bat
Windows/RTWLANU_Driver/VistaX64/RtlExtUI.dll
.dll regsvr32 windows x64

2bf7f4adb8ae5e2b654042681a7120d7

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21-01-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-01-2017 00:00

Not After

18-01-2028 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:e8:60:cd:f0:68:52:17:8c:41:3d:a2:63:f8:2d:cb:2a:38:94:ec:f4:ce:9f:a3:00:cc:87:c5:90:9c:71
Signer

Actual PE Digest

0a:99:e8:60:cd:f0:68:52:17:8c:41:3d:a2:63:f8:2d:cb:2a:38:94:ec:f4:ce:9f:a3:00:cc:87:c5:90:9c:71

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

15-12-2022 13:51
Valid: false

7a:81:25:7b:f2:94:df:21:87:e3:6c:6a:92:66:67:0a:47:e3:9a:ec
Signer

Actual PE Digest

7a:81:25:7b:f2:94:df:21:87:e3:6c:6a:92:66:67:0a:47:e3:9a:ec

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:37
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

fflush
vsprintf_s
strcat_s
_fsopen
??3@YAXPEAX@Z
fclose
fputs
??_U@YAPEAX_K@Z
??_V@YAXPEAX@Z
wcschr
wcstoul
_wtoi
_wcsnicmp
_itow_s
??2@YAPEAX_K@Z
_vsnprintf_s
wcsncpy_s
_vsnwprintf
_purecall
free
malloc
_vsnprintf
strncmp
strcpy_s
_XcptFilter
_initterm
_amsg_exit
__C_specific_handler
__CxxFrameHandler3
memset
sprintf_s
swprintf_s
memcpy

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
StringFromCLSID

oleaut32

SysFreeString
VariantClear
VariantInit
SysAllocStringByteLen
SysAllocString

user32

IsDlgButtonChecked
CheckDlgButton
EndDialog
DialogBoxParamW
MessageBoxA
EnableWindow
GetDialogBaseUnits
GetPropW
SetWindowTextW
GetDlgItemTextA
MessageBoxW
UnhookWindowsHookEx
SetWindowsHookExW
GetDlgItem
ReleaseDC
GetDC
SetPropW
CallNextHookEx
GetParent
PostMessageW
RemovePropW
DestroyWindow
GetWindowTextW
GetWindowTextA
SetWindowTextA
SendMessageW

kernel32

QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
Sleep
CreateFileMappingW
GetLastError
FileTimeToSystemTime
GetDateFormatA
UnmapViewOfFile
MapViewOfFile
CreateFileA
VerifyVersionInfoW
MultiByteToWideChar
VerSetConditionMask
CloseHandle
GetLocalTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleFileNameW
LoadLibraryW
FreeLibrary
CreateMutexW
GetSystemTime
ReleaseMutex
OutputDebugStringA
GetCurrentThreadId
WaitForSingleObject

advapi32

RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegSetValueExW
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyA
RegQueryValueExA

comctl32

CreatePropertySheetPageW

crypt32

CertCreateCertificateContext
CertOpenSystemStoreA
CertCompareCertificateName
CertGetNameStringA
CertGetCertificateContextProperty
CertEnumCertificatesInStore
CertCloseStore
CertAddCertificateContextToStore
CertFreeCertificateContext

cryptui

CryptUIDlgViewContext

comdlg32

GetOpenFileNameA

gdi32

GetDeviceCaps

mfc42u

ord626
ord2846
ord1040
ord1812
ord4557

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 622B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/VistaX64/Rtlihvs.dll
.dll windows x64

f5ec49062f03d062e455c7bab9bf8aa8

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21-01-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-01-2017 00:00

Not After

18-01-2028 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

48:38:ae:21:e1:00:e5:66:c8:fd:08:5f:1c:1a:de:e6:56:ad:1c:f2:66:0c:f4:3e:fc:56:cc:da:42:7b:cf:3f
Signer

Actual PE Digest

48:38:ae:21:e1:00:e5:66:c8:fd:08:5f:1c:1a:de:e6:56:ad:1c:f2:66:0c:f4:3e:fc:56:cc:da:42:7b:cf:3f

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

15-12-2022 13:51
Valid: false

9b:db:37:92:fc:d7:bc:b5:93:d4:2d:5e:8c:02:18:e0:42:90:ec:67
Signer

Actual PE Digest

9b:db:37:92:fc:d7:bc:b5:93:d4:2d:5e:8c:02:18:e0:42:90:ec:67

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:37
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

crypt32

CertEnumCertificatesInStore
CryptUnprotectData
CertFreeCertificateContext
CertCloseStore
CertGetCertificateContextProperty
CertOpenStore

oleaut32

SysFreeString
SysStringByteLen
VariantInit
SysAllocString
VariantClear

kernel32

SetLastError
FlsGetValue
GetCurrentThreadId
FlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
RtlPcToFileHeader
GetCPInfo
GetACP
GetOEMCP
GetDriveTypeA
LCMapStringW
GetFileAttributesA
FreeLibrary
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
FlsFree
WriteConsoleW
SetFilePointer
CreateFileW
GetStringTypeW
VirtualProtect
VirtualAlloc
SetThreadStackGuarantee
GetSystemInfo
VirtualQuery
HeapReAlloc
GetExitCodeProcess
CreateProcessA
SetEndOfFile
GetProcessHeap
ReadFile
CompareStringW
SetEnvironmentVariableA
CloseHandle
GetLastError
ReleaseMutex
SetEvent
WaitForSingleObject
ResetEvent
LocalFree
Sleep
LeaveCriticalSection
EnterCriticalSection
GetTempPathW
GetLocalTime
WideCharToMultiByte
CreateMutexA
InitializeCriticalSection
CreateEventA
DecodePointer
EncodePointer
ExitProcess
CreateThread
GetModuleHandleW
GetProcAddress
RaiseException
GetFullPathNameW
GetCurrentDirectoryW
RtlLookupFunctionEntry
CreateDirectoryW
HeapAlloc
HeapFree
RtlUnwindEx
GetVersionExW
GetCommandLineA
FlsSetValue
VerSetConditionMask
VerifyVersionInfoA
MultiByteToWideChar
WTSGetActiveConsoleSessionId
LocalAlloc
FormatMessageW
GetModuleFileNameA
GetPrivateProfileIntW
GetPrivateProfileStringW
TerminateThread
DeleteCriticalSection
SetStdHandle
DisableThreadLibraryCalls
OutputDebugStringA
CreateFileA
HeapSize
LoadLibraryW
GlobalMemoryStatus
GetVersion
GetModuleHandleA
GetSystemDefaultLocaleName
GetComputerNameW
GetUserDefaultLocaleName
GetComputerNameA
GetTickCount64
GetVersionExA
SetThreadPriority
GetSystemTime
LoadLibraryA

advapi32

RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegSetValueExA
FreeSid
ConvertSidToStringSidA
RegisterEventSourceW
ReportEventW
DeregisterEventSource
CryptReleaseContext
DuplicateToken
GetTokenInformation
RegDeleteValueA
RegGetValueA
CryptAcquireContextA
CryptGenRandom
RegCreateKeyExA
ImpersonateLoggedOnUser
RevertToSelf
GetUserNameA
LookupAccountNameA
RegCloseKey

ole32

CreateStreamOnHGlobal
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoInitializeEx

ws2_32

getaddrinfo
WSACleanup
inet_addr
ntohs
WSAStartup
htons

rpcrt4

UuidToStringA
UuidCreate
RpcStringFreeA

user32

MessageBoxW
GetSystemMetrics
GetProcessWindowStation
GetUserObjectInformationW
MsgWaitForMultipleObjects
GetDesktopWindow

wtsapi32

WTSQueryUserToken
WTSFreeMemory
WTSQuerySessionInformationA
WTSEnumerateSessionsA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

wlanapi

WlanSetSecuritySettings
WlanGetProfile
WlanGetNetworkBssList
WlanFreeMemory
WlanScan
WlanOpenHandle
WlanCloseHandle
WlanQueryInterface
WlanReasonCodeToString
WlanDisconnect
WlanConnect
WlanGetAvailableNetworkList
WlanGetProfileList
WlanRegisterVirtualStationNotification
WlanRegisterNotification

xmllite

CreateXmlReader

iphlpapi

IcmpCloseHandle
IcmpSendEcho
GetIpNetTable2
IcmpCreateFile
IpReleaseAddress
IpRenewAddress
Icmp6SendEcho2
Icmp6CreateFile
FreeMibTable
GetUnicastIpAddressTable
GetAdaptersAddresses
GetAdaptersInfo
GetIpAddrTable
GetIfTable
CancelIPChangeNotify
GetInterfaceInfo
NotifyAddrChange

Exports

Exports

Dot11ExtIhvGetVersionInfo
Dot11ExtIhvInitService
Dot11ExtIhvInitVirtualStation

Sections

.text
Size: 981KB - Virtual size: 981KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/VistaX64/netrtwlanu.cat
Windows/RTWLANU_Driver/VistaX64/netrtwlanu_Vista.inf
Windows/RTWLANU_Driver/VistaX64/rtlCoInst.dat
Windows/RTWLANU_Driver/VistaX64/rtlCoInst.dll
.dll windows x64

49861fc8b24187bb146a41202e5ab2c3

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21-01-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-01-2017 00:00

Not After

18-01-2028 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

16:88:3f:3a:a8:77:b2:3c:c0:8b:a7:7b:0c:1b:97:40:e8:ad:f7:5d:9e:5a:99:9f:f8:8d:4e:20:ef:6e:2d:ba
Signer

Actual PE Digest

16:88:3f:3a:a8:77:b2:3c:c0:8b:a7:7b:0c:1b:97:40:e8:ad:f7:5d:9e:5a:99:9f:f8:8d:4e:20:ef:6e:2d:ba

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

15-12-2022 13:51
Valid: false

0a:37:73:40:21:86:22:e8:a7:9f:54:7f:61:6d:21:cc:a1:23:51:82
Signer

Actual PE Digest

0a:37:73:40:21:86:22:e8:a7:9f:54:7f:61:6d:21:cc:a1:23:51:82

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:37
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

free
_strnicmp
strncmp
fclose
malloc
sprintf
_initterm
memset
fopen
fgets
strtok

ntdll

RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiClassGuidsFromNameA
SetupDiOpenDevRegKey
SetupDiGetDeviceRegistryPropertyA
SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
SetupDiEnumDeviceInfo

kernel32

DisableThreadLibraryCalls
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLocaleInfoA
GetLastError
OutputDebugStringA
GetSystemDirectoryA

advapi32

RegOpenKeyA
RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegQueryValueExA

Exports

Exports

rtlCoInst

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/VistaX64/rtwlanu_Vista.sys
.exe windows x64

88fec4b01c88c1833919a3cddebcc5ac

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-03-2017 19:05

Not After

01-06-2018 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

dd:d6:ae:75:80:05:ea:76:87:83:e2:ba:4c:fc:4e:9b:61:75:1f:ba:3e:06:2b:b7:00:30:d3:4c:06:cc:63:94
Signer

Actual PE Digest

dd:d6:ae:75:80:05:ea:76:87:83:e2:ba:4c:fc:4e:9b:61:75:1f:ba:3e:06:2b:b7:00:30:d3:4c:06:cc:63:94

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-12-2022 13:51
Valid: false

da:1b:c0:cb:55:85:84:61:25:5f:30:7f:9f:3f:76:a7:7d:c0:91:3d
Signer

Actual PE Digest

da:1b:c0:cb:55:85:84:61:25:5f:30:7f:9f:3f:76:a7:7d:c0:91:3d

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:37
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

KeClearEvent
KeWaitForSingleObject
KeInitializeEvent
KeSetEvent
PoUnregisterPowerSettingCallback
PoRegisterPowerSettingCallback
RtlCopyUnicodeString
KeFlushQueuedDpcs
DbgPrint
KeBugCheckEx
RtlGUIDFromString
RtlInitUnicodeString
strncpy
_vsnprintf
RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlUnicodeStringToInteger
RtlFreeUnicodeString
IofCompleteRequest
IoCsqInsertIrp
IoCsqInitialize
IoCsqRemoveNextIrp
KeInitializeMutex
KeReleaseMutex
PsTerminateSystemThread
PsCreateSystemThread
ObReferenceObjectByHandle
ZwClose
ObfDereferenceObject
KeInitializeSemaphore
KeReleaseSemaphore
RtlInitString
ZwOpenKey
ZwQueryValueKey
RtlUnicodeStringToAnsiString
RtlFreeAnsiString
strchr
wcsstr
ZwEnumerateKey
ZwSetValueKey
KeReleaseSpinLock
KeAcquireSpinLockRaiseToDpc
MmMapLockedPagesSpecifyCache

hal

KeStallExecutionProcessor
KeQueryPerformanceCounter

ndis.sys

NdisMIndicateReceiveNetBufferLists
NdisAllocateNetBufferAndNetBufferList
NdisAllocateMdl
NdisFreeNetBufferList
NdisFreeMdl
NdisAllocateIoWorkItem
NdisMDeregisterMiniportDriver
NdisMRegisterMiniportDriver
NdisGetVersion
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisSetEvent
NdisQueueIoWorkItem
NdisMGetDeviceProperty
NdisFreeIoWorkItem
NdisRegisterDeviceEx
NdisDeregisterDeviceEx
NdisInitializeString
NdisMSetMiniportAttributes
NdisOpenFile
NdisMapFile
NdisUnmapFile
NdisCloseFile
NdisFreeMemory
NdisWriteConfiguration
NdisMRemoveMiniport
NdisWaitEvent
NdisResetEvent
NdisMSendNetBufferListsComplete
NdisInitializeEvent
NdisMIndicateStatusEx
NdisMSleep
NdisOpenConfigurationEx
NdisCloseConfiguration
NdisReadConfiguration
NdisReadNetworkAddress
NdisMOidRequestComplete
NdisAllocateTimerObject
NdisSetTimerObject
NdisCancelTimerObject
NdisFreeTimerObject
NdisAllocateMemoryWithTagPriority

wdfldr.sys

WdfVersionBind
WdfVersionUnbind

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 213KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.8MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 293KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/VistaX86/RtlExtUI.dll
.dll regsvr32 windows x86

f3b2dd92c703d59ebb05c6dc9bacf48e

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21-01-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-01-2017 00:00

Not After

18-01-2028 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

57:05:ea:67:a8:3e:38:65:d9:e0:d0:c5:b3:4c:d9:7d:a5:e8:10:ce:19:23:82:8a:d5:a7:99:60:bb:48:bb:52
Signer

Actual PE Digest

57:05:ea:67:a8:3e:38:65:d9:e0:d0:c5:b3:4c:d9:7d:a5:e8:10:ce:19:23:82:8a:d5:a7:99:60:bb:48:bb:52

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

15-12-2022 13:51
Valid: false

65:0b:34:b8:63:71:21:6e:65:53:d5:5a:db:88:4e:05:be:91:d8:e3
Signer

Actual PE Digest

65:0b:34:b8:63:71:21:6e:65:53:d5:5a:db:88:4e:05:be:91:d8:e3

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:38
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fputs
sprintf_s
vsprintf_s
strcat_s
fflush
_except_handler4_common
_amsg_exit
_initterm
_XcptFilter
strcpy_s
strncmp
memcpy
free
malloc
_vsnprintf
_purecall
wcsncpy_s
_vsnwprintf
_itow_s
_wtoi
swprintf_s
wcschr
wcstoul
_wcsnicmp
??_U@YAPAXI@Z
??_V@YAXPAX@Z
__CxxFrameHandler3
??2@YAPAXI@Z
??3@YAXPAX@Z
memset
_fsopen
fclose
_vsnprintf_s

ole32

CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CoCreateInstance

oleaut32

SysAllocString
SysAllocStringByteLen
VariantInit
VariantClear
SysFreeString

user32

SetWindowsHookExW
SetWindowTextW
MessageBoxA
DestroyWindow
UnhookWindowsHookEx
SetPropW
RemovePropW
GetPropW
CallNextHookEx
GetDlgItem
GetWindowTextW
GetDlgItemTextA
GetParent
PostMessageW
GetDC
GetDialogBaseUnits
ReleaseDC
EnableWindow
MessageBoxW
DialogBoxParamW
IsDlgButtonChecked
EndDialog
CheckDlgButton
SetWindowTextA
GetWindowTextA
SendMessageW

kernel32

TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
FileTimeToSystemTime
GetDateFormatA
GetCurrentProcess
SetUnhandledExceptionFilter
GetLastError
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
CreateFileA
UnhandledExceptionFilter
GetModuleFileNameW
LoadLibraryW
MapViewOfFile
CreateFileMappingW
GetProcAddress
FreeLibrary
DisableThreadLibraryCalls
CreateMutexW
GetLocalTime
CloseHandle
OutputDebugStringA
GetSystemTime
GetCurrentThreadId
WaitForSingleObject
ReleaseMutex

advapi32

RegOpenKeyExA
RegQueryValueExA
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegCloseKey
RegSetValueExW
RegSetValueExA
RegOpenKeyA
RegDeleteValueA
RegDeleteKeyA

comctl32

CreatePropertySheetPageW

ws2_32

send

crypt32

CertCloseStore
CertAddCertificateContextToStore
CertCompareCertificateName
CertOpenSystemStoreA
CertFreeCertificateContext
CertGetNameStringA
CertEnumCertificatesInStore
CertCreateCertificateContext
CertGetCertificateContextProperty

cryptui

CryptUIDlgViewContext

comdlg32

GetOpenFileNameA

gdi32

GetDeviceCaps

mfc42u

ord800
ord2810
ord540
ord1808
ord4229

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/VistaX86/Rtlihvs.dll
.dll windows x86

975c929b21f0312d5667ff910ec73e33

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21-01-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-01-2017 00:00

Not After

18-01-2028 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7f:32:44:1f:7a:1a:72:59:34:59:3c:96:81:0b:83:56:02:48:2f:a7:ec:49:17:31:f2:ae:98:f9:f3:84:f0:3c
Signer

Actual PE Digest

7f:32:44:1f:7a:1a:72:59:34:59:3c:96:81:0b:83:56:02:48:2f:a7:ec:49:17:31:f2:ae:98:f9:f3:84:f0:3c

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

15-12-2022 13:51
Valid: false

62:6c:68:12:86:e7:84:b2:00:57:44:04:ad:b2:8a:02:f1:1b:00:96
Signer

Actual PE Digest

62:6c:68:12:86:e7:84:b2:00:57:44:04:ad:b2:8a:02:f1:1b:00:96

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:38
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CertEnumCertificatesInStore
CertFreeCertificateContext
CertCloseStore
CertGetCertificateContextProperty
CryptUnprotectData
CertOpenStore

oleaut32

SysStringByteLen
VariantInit
VariantClear
SysFreeString
SysAllocString

kernel32

InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
VirtualAlloc
HeapReAlloc
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
GetDriveTypeA
LCMapStringA
LCMapStringW
GetFileAttributesA
FreeLibrary
InterlockedExchange
LoadLibraryExA
SetStdHandle
TlsFree
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
CreateFileW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
GetExitCodeProcess
CreateProcessA
CreateFileA
SetEndOfFile
GetProcessHeap
ReadFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
CloseHandle
GetLastError
ReleaseMutex
SetEvent
WaitForSingleObject
ResetEvent
LocalFree
Sleep
LeaveCriticalSection
EnterCriticalSection
GetTempPathW
GetLocalTime
WideCharToMultiByte
CreateMutexA
InitializeCriticalSection
CreateEventA
CreateThread
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
ExitProcess
GetModuleHandleA
GetProcAddress
RaiseException
GetFullPathNameW
GetCurrentDirectoryW
RtlUnwind
CreateDirectoryW
HeapAlloc
HeapFree
GetVersionExA
GetCommandLineA
VerSetConditionMask
VerifyVersionInfoA
MultiByteToWideChar
WTSGetActiveConsoleSessionId
LocalAlloc
FormatMessageW
GetModuleFileNameA
GetPrivateProfileIntW
GetPrivateProfileStringW
TerminateThread
DeleteCriticalSection
WriteConsoleA
DisableThreadLibraryCalls
OutputDebugStringA
HeapSize
GlobalMemoryStatus
GetVersion
GetUserDefaultLocaleName
GetSystemDefaultLocaleName
GetComputerNameW
InterlockedCompareExchange
GetTickCount64
GetComputerNameA
SetThreadPriority
GetSystemTime
LoadLibraryA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegOpenKeyA
RegSetValueExA
FreeSid
ConvertSidToStringSidA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
CryptReleaseContext
GetTokenInformation
DuplicateToken
RegDeleteValueA
RegGetValueA
CryptAcquireContextA
CryptGenRandom
RegCreateKeyExA
ImpersonateLoggedOnUser
RevertToSelf
GetUserNameA
LookupAccountNameA
RegCloseKey

ole32

CreateStreamOnHGlobal
CoCreateInstance
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize

ws2_32

getaddrinfo
WSACleanup
htons
inet_addr
ntohs
WSAStartup

rpcrt4

UuidCreate
RpcStringFreeA
UuidToStringA

user32

GetSystemMetrics
MessageBoxA
MsgWaitForMultipleObjects
GetUserObjectInformationW
GetProcessWindowStation
GetDesktopWindow

wtsapi32

WTSQuerySessionInformationA
WTSEnumerateSessionsA
WTSFreeMemory
WTSQueryUserToken

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

wlanapi

WlanScan
WlanFreeMemory
WlanRegisterVirtualStationNotification
WlanRegisterNotification
WlanOpenHandle
WlanCloseHandle
WlanGetNetworkBssList
WlanGetProfile
WlanQueryInterface
WlanReasonCodeToString
WlanConnect
WlanDisconnect
WlanGetAvailableNetworkList
WlanGetProfileList
WlanSetSecuritySettings

xmllite

CreateXmlReader

iphlpapi

Icmp6SendEcho2
Icmp6CreateFile
GetIpNetTable2
IcmpCreateFile
IpReleaseAddress
GetInterfaceInfo
IcmpSendEcho
IcmpCloseHandle
GetUnicastIpAddressTable
FreeMibTable
GetAdaptersAddresses
GetAdaptersInfo
NotifyAddrChange
CancelIPChangeNotify
GetIfTable
IpRenewAddress
GetIpAddrTable

Exports

Exports

Dot11ExtIhvGetVersionInfo
Dot11ExtIhvInitService
Dot11ExtIhvInitVirtualStation

Sections

.text
Size: 874KB - Virtual size: 873KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/VistaX86/netrtwlanu.cat
Windows/RTWLANU_Driver/VistaX86/netrtwlanu_Vista.inf
Windows/RTWLANU_Driver/VistaX86/rtlCoInst.dat
Windows/RTWLANU_Driver/VistaX86/rtlCoInst.dll
.dll windows x86

b56ee6cf404c5405eeff689c530d7c80

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21-01-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-01-2017 00:00

Not After

18-01-2028 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b4:8b:6b:ff:2b:cd:83:f9:21:7b:4d:c7:84:39:a2:8c:f9:17:d8:f4:2d:42:30:73:d4:fd:1f:3d:48:9d:c8:82
Signer

Actual PE Digest

b4:8b:6b:ff:2b:cd:83:f9:21:7b:4d:c7:84:39:a2:8c:f9:17:d8:f4:2d:42:30:73:d4:fd:1f:3d:48:9d:c8:82

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

15-12-2022 13:51
Valid: false

05:8a:47:dc:06:4a:06:bb:0a:1f:09:35:bb:17:53:3f:6f:bf:40:7a
Signer

Actual PE Digest

05:8a:47:dc:06:4a:06:bb:0a:1f:09:35:bb:17:53:3f:6f:bf:40:7a

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:38
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

malloc
_adjust_fdiv
_initterm
free
fopen
fgets
strtok
fclose
strncmp
_strnicmp
sprintf

setupapi

SetupDiOpenDevRegKey
SetupDiClassGuidsFromNameA
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiSetClassInstallParamsA
SetupDiGetDeviceRegistryPropertyA
SetupDiCallClassInstaller

kernel32

DisableThreadLibraryCalls
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLocaleInfoA
GetSystemDirectoryA
GetLastError
OutputDebugStringA

advapi32

RegOpenKeyA
RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegQueryValueExA

Exports

Exports

rtlCoInst

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 554B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/VistaX86/rtwlanu_Vista.sys
.exe windows x86

afcc28d46ad55d31d847850405f76898

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-03-2017 19:05

Not After

01-06-2018 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

83:dc:e0:c5:97:eb:33:50:5a:28:a3:a6:07:67:b9:8c:c0:75:9a:74:4e:3a:4b:20:56:54:37:72:c9:ad:c9:c5
Signer

Actual PE Digest

83:dc:e0:c5:97:eb:33:50:5a:28:a3:a6:07:67:b9:8c:c0:75:9a:74:4e:3a:4b:20:56:54:37:72:c9:ad:c9:c5

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-12-2022 13:51
Valid: false

2f:34:14:c2:07:3e:39:30:e6:6f:b4:67:54:88:a4:00:4b:e1:16:32
Signer

Actual PE Digest

2f:34:14:c2:07:3e:39:30:e6:6f:b4:67:54:88:a4:00:4b:e1:16:32

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:38
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeTickCount
KeWaitForSingleObject
KeClearEvent
RtlCopyUnicodeString
KeSetEvent
KeInitializeEvent
PoRegisterPowerSettingCallback
PoUnregisterPowerSettingCallback
_alldiv
KeFlushQueuedDpcs
KeBugCheckEx
DbgPrint
_aulldiv
KeQuerySystemTime
memcpy
RtlGUIDFromString
memset
strncpy
_allshl
_vsnprintf
_aullrem
_aullshr
RtlFreeUnicodeString
RtlUnicodeStringToInteger
RtlAnsiStringToUnicodeString
RtlInitAnsiString
KeInitializeMutex
KeReleaseMutex
PsTerminateSystemThread
ZwClose
KeSetPriorityThread
ObReferenceObjectByHandle
PsCreateSystemThread
ObfDereferenceObject
KeInitializeSemaphore
KeReleaseSemaphore
strchr
RtlFreeAnsiString
RtlUnicodeStringToAnsiString
ZwQueryValueKey
ZwOpenKey
RtlInitString
ZwEnumerateKey
wcsstr
ZwSetValueKey
IofCompleteRequest
IoCsqInsertIrp
IoCsqRemoveNextIrp
IoCsqInitialize
RtlInitUnicodeString
_allmul
MmMapLockedPagesSpecifyCache

hal

KeQueryPerformanceCounter
KeStallExecutionProcessor
KfRaiseIrql
KfLowerIrql
KeGetCurrentIrql
KfAcquireSpinLock
KfReleaseSpinLock

ndis.sys

NdisGetVersion
NdisMGetDeviceProperty
NdisMDeregisterMiniportDriver
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisFreeMdl
NdisMRegisterMiniportDriver
NdisQueueIoWorkItem
NdisAllocateIoWorkItem
NdisFreeIoWorkItem
NdisAllocateTimerObject
NdisSetEvent
NdisAllocateMemoryWithTagPriority
NdisMIndicateReceiveNetBufferLists
NdisAllocateNetBufferAndNetBufferList
NdisAllocateMdl
NdisMOidRequestComplete
NdisSetTimerObject
NdisFreeTimerObject
NdisFreeNetBufferList
NdisFreeMemory
NdisCloseFile
NdisUnmapFile
NdisMapFile
NdisOpenFile
NdisInitializeString
NdisWriteConfiguration
NdisResetEvent
NdisWaitEvent
NdisMSendNetBufferListsComplete
NdisMSetMiniportAttributes
NdisRegisterDeviceEx
NdisDeregisterDeviceEx
NdisMRemoveMiniport
NdisOpenConfigurationEx
NdisMSleep
NdisCloseConfiguration
NdisReadNetworkAddress
NdisReadConfiguration
NdisInitializeEvent
NdisMIndicateStatusEx
NdisCancelTimerObject

wdfldr.sys

WdfVersionBind
WdfVersionUnbind

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.3MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win10X64/RtlExtUI.dll
.dll regsvr32 windows x64

2bf7f4adb8ae5e2b654042681a7120d7

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-03-2017 19:05

Not After

01-06-2018 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:e8:60:cd:f0:68:52:17:8c:41:3d:a2:63:f8:2d:cb:2a:38:94:ec:f4:ce:9f:a3:00:cc:87:c5:90:9c:71
Signer

Actual PE Digest

0a:99:e8:60:cd:f0:68:52:17:8c:41:3d:a2:63:f8:2d:cb:2a:38:94:ec:f4:ce:9f:a3:00:cc:87:c5:90:9c:71

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-12-2022 13:51
Valid: false

7a:81:25:7b:f2:94:df:21:87:e3:6c:6a:92:66:67:0a:47:e3:9a:ec
Signer

Actual PE Digest

7a:81:25:7b:f2:94:df:21:87:e3:6c:6a:92:66:67:0a:47:e3:9a:ec

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:37
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

fflush
vsprintf_s
strcat_s
_fsopen
??3@YAXPEAX@Z
fclose
fputs
??_U@YAPEAX_K@Z
??_V@YAXPEAX@Z
wcschr
wcstoul
_wtoi
_wcsnicmp
_itow_s
??2@YAPEAX_K@Z
_vsnprintf_s
wcsncpy_s
_vsnwprintf
_purecall
free
malloc
_vsnprintf
strncmp
strcpy_s
_XcptFilter
_initterm
_amsg_exit
__C_specific_handler
__CxxFrameHandler3
memset
sprintf_s
swprintf_s
memcpy

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
StringFromCLSID

oleaut32

SysFreeString
VariantClear
VariantInit
SysAllocStringByteLen
SysAllocString

user32

IsDlgButtonChecked
CheckDlgButton
EndDialog
DialogBoxParamW
MessageBoxA
EnableWindow
GetDialogBaseUnits
GetPropW
SetWindowTextW
GetDlgItemTextA
MessageBoxW
UnhookWindowsHookEx
SetWindowsHookExW
GetDlgItem
ReleaseDC
GetDC
SetPropW
CallNextHookEx
GetParent
PostMessageW
RemovePropW
DestroyWindow
GetWindowTextW
GetWindowTextA
SetWindowTextA
SendMessageW

kernel32

QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
Sleep
CreateFileMappingW
GetLastError
FileTimeToSystemTime
GetDateFormatA
UnmapViewOfFile
MapViewOfFile
CreateFileA
VerifyVersionInfoW
MultiByteToWideChar
VerSetConditionMask
CloseHandle
GetLocalTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleFileNameW
LoadLibraryW
FreeLibrary
CreateMutexW
GetSystemTime
ReleaseMutex
OutputDebugStringA
GetCurrentThreadId
WaitForSingleObject

advapi32

RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegSetValueExW
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyA
RegQueryValueExA

comctl32

CreatePropertySheetPageW

crypt32

CertCreateCertificateContext
CertOpenSystemStoreA
CertCompareCertificateName
CertGetNameStringA
CertGetCertificateContextProperty
CertEnumCertificatesInStore
CertCloseStore
CertAddCertificateContextToStore
CertFreeCertificateContext

cryptui

CryptUIDlgViewContext

comdlg32

GetOpenFileNameA

gdi32

GetDeviceCaps

mfc42u

ord626
ord2846
ord1040
ord1812
ord4557

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 622B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win10X64/Rtlihvs.dll
.dll windows x64

f5ec49062f03d062e455c7bab9bf8aa8

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-03-2017 19:05

Not After

01-06-2018 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

48:38:ae:21:e1:00:e5:66:c8:fd:08:5f:1c:1a:de:e6:56:ad:1c:f2:66:0c:f4:3e:fc:56:cc:da:42:7b:cf:3f
Signer

Actual PE Digest

48:38:ae:21:e1:00:e5:66:c8:fd:08:5f:1c:1a:de:e6:56:ad:1c:f2:66:0c:f4:3e:fc:56:cc:da:42:7b:cf:3f

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-12-2022 13:51
Valid: false

9b:db:37:92:fc:d7:bc:b5:93:d4:2d:5e:8c:02:18:e0:42:90:ec:67
Signer

Actual PE Digest

9b:db:37:92:fc:d7:bc:b5:93:d4:2d:5e:8c:02:18:e0:42:90:ec:67

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:37
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

crypt32

CertEnumCertificatesInStore
CryptUnprotectData
CertFreeCertificateContext
CertCloseStore
CertGetCertificateContextProperty
CertOpenStore

oleaut32

SysFreeString
SysStringByteLen
VariantInit
SysAllocString
VariantClear

kernel32

SetLastError
FlsGetValue
GetCurrentThreadId
FlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
RtlPcToFileHeader
GetCPInfo
GetACP
GetOEMCP
GetDriveTypeA
LCMapStringW
GetFileAttributesA
FreeLibrary
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
FlsFree
WriteConsoleW
SetFilePointer
CreateFileW
GetStringTypeW
VirtualProtect
VirtualAlloc
SetThreadStackGuarantee
GetSystemInfo
VirtualQuery
HeapReAlloc
GetExitCodeProcess
CreateProcessA
SetEndOfFile
GetProcessHeap
ReadFile
CompareStringW
SetEnvironmentVariableA
CloseHandle
GetLastError
ReleaseMutex
SetEvent
WaitForSingleObject
ResetEvent
LocalFree
Sleep
LeaveCriticalSection
EnterCriticalSection
GetTempPathW
GetLocalTime
WideCharToMultiByte
CreateMutexA
InitializeCriticalSection
CreateEventA
DecodePointer
EncodePointer
ExitProcess
CreateThread
GetModuleHandleW
GetProcAddress
RaiseException
GetFullPathNameW
GetCurrentDirectoryW
RtlLookupFunctionEntry
CreateDirectoryW
HeapAlloc
HeapFree
RtlUnwindEx
GetVersionExW
GetCommandLineA
FlsSetValue
VerSetConditionMask
VerifyVersionInfoA
MultiByteToWideChar
WTSGetActiveConsoleSessionId
LocalAlloc
FormatMessageW
GetModuleFileNameA
GetPrivateProfileIntW
GetPrivateProfileStringW
TerminateThread
DeleteCriticalSection
SetStdHandle
DisableThreadLibraryCalls
OutputDebugStringA
CreateFileA
HeapSize
LoadLibraryW
GlobalMemoryStatus
GetVersion
GetModuleHandleA
GetSystemDefaultLocaleName
GetComputerNameW
GetUserDefaultLocaleName
GetComputerNameA
GetTickCount64
GetVersionExA
SetThreadPriority
GetSystemTime
LoadLibraryA

advapi32

RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegSetValueExA
FreeSid
ConvertSidToStringSidA
RegisterEventSourceW
ReportEventW
DeregisterEventSource
CryptReleaseContext
DuplicateToken
GetTokenInformation
RegDeleteValueA
RegGetValueA
CryptAcquireContextA
CryptGenRandom
RegCreateKeyExA
ImpersonateLoggedOnUser
RevertToSelf
GetUserNameA
LookupAccountNameA
RegCloseKey

ole32

CreateStreamOnHGlobal
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoInitializeEx

ws2_32

getaddrinfo
WSACleanup
inet_addr
ntohs
WSAStartup
htons

rpcrt4

UuidToStringA
UuidCreate
RpcStringFreeA

user32

MessageBoxW
GetSystemMetrics
GetProcessWindowStation
GetUserObjectInformationW
MsgWaitForMultipleObjects
GetDesktopWindow

wtsapi32

WTSQueryUserToken
WTSFreeMemory
WTSQuerySessionInformationA
WTSEnumerateSessionsA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

wlanapi

WlanSetSecuritySettings
WlanGetProfile
WlanGetNetworkBssList
WlanFreeMemory
WlanScan
WlanOpenHandle
WlanCloseHandle
WlanQueryInterface
WlanReasonCodeToString
WlanDisconnect
WlanConnect
WlanGetAvailableNetworkList
WlanGetProfileList
WlanRegisterVirtualStationNotification
WlanRegisterNotification

xmllite

CreateXmlReader

iphlpapi

IcmpCloseHandle
IcmpSendEcho
GetIpNetTable2
IcmpCreateFile
IpReleaseAddress
IpRenewAddress
Icmp6SendEcho2
Icmp6CreateFile
FreeMibTable
GetUnicastIpAddressTable
GetAdaptersAddresses
GetAdaptersInfo
GetIpAddrTable
GetIfTable
CancelIPChangeNotify
GetInterfaceInfo
NotifyAddrChange

Exports

Exports

Dot11ExtIhvGetVersionInfo
Dot11ExtIhvInitService
Dot11ExtIhvInitVirtualStation

Sections

.text
Size: 981KB - Virtual size: 981KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win10X64/netrtwlanu.cat
Windows/RTWLANU_Driver/Win10X64/netrtwlanu.inf
Windows/RTWLANU_Driver/Win10X64/rtlCoInst.dat
Windows/RTWLANU_Driver/Win10X64/rtlCoInst.dll
.dll windows x64

49861fc8b24187bb146a41202e5ab2c3

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-03-2017 19:05

Not After

01-06-2018 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

16:88:3f:3a:a8:77:b2:3c:c0:8b:a7:7b:0c:1b:97:40:e8:ad:f7:5d:9e:5a:99:9f:f8:8d:4e:20:ef:6e:2d:ba
Signer

Actual PE Digest

16:88:3f:3a:a8:77:b2:3c:c0:8b:a7:7b:0c:1b:97:40:e8:ad:f7:5d:9e:5a:99:9f:f8:8d:4e:20:ef:6e:2d:ba

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-12-2022 13:51
Valid: false

0a:37:73:40:21:86:22:e8:a7:9f:54:7f:61:6d:21:cc:a1:23:51:82
Signer

Actual PE Digest

0a:37:73:40:21:86:22:e8:a7:9f:54:7f:61:6d:21:cc:a1:23:51:82

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:37
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

free
_strnicmp
strncmp
fclose
malloc
sprintf
_initterm
memset
fopen
fgets
strtok

ntdll

RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiClassGuidsFromNameA
SetupDiOpenDevRegKey
SetupDiGetDeviceRegistryPropertyA
SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
SetupDiEnumDeviceInfo

kernel32

DisableThreadLibraryCalls
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLocaleInfoA
GetLastError
OutputDebugStringA
GetSystemDirectoryA

advapi32

RegOpenKeyA
RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegQueryValueExA

Exports

Exports

rtlCoInst

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win10X64/rtwlanu.sys
.exe windows x64

130dc41e08ca0162b0892574c070fe6a

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-03-2017 19:05

Not After

01-06-2018 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e5:c2:31:c4:1f:36:2f:c7:13:79:15:6a:98:08:8d:3e:b4:0d:bf:e8:bc:0a:e5:8d:61:8b:cf:2a:d7:69:e9:9a
Signer

Actual PE Digest

e5:c2:31:c4:1f:36:2f:c7:13:79:15:6a:98:08:8d:3e:b4:0d:bf:e8:bc:0a:e5:8d:61:8b:cf:2a:d7:69:e9:9a

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-12-2022 13:51
Valid: false

b7:e4:1d:84:74:7a:eb:7e:ef:78:40:22:2a:28:32:f6:aa:a6:cc:b1
Signer

Actual PE Digest

b7:e4:1d:84:74:7a:eb:7e:ef:78:40:22:2a:28:32:f6:aa:a6:cc:b1

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:38
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

ZwDeviceIoControlFile
ZwClose
ZwCreateFile
ExAllocatePoolWithTag
KeWaitForSingleObject
KeClearEvent
PoUnregisterPowerSettingCallback
PoRegisterPowerSettingCallback
EtwWriteTransfer
EtwSetInformation
EtwUnregister
EtwRegister
IoWMIRegistrationControl
IoReuseIrp
IoFreeIrp
IoCancelIrp
IofCallDriver
IoAllocateIrp
ExFreePoolWithTag
ExAllocatePool
KeSetEvent
RtlCompareMemory
RtlCopyUnicodeString
MmGetSystemRoutineAddress
KeInitializeEvent
KeFlushQueuedDpcs
KeBugCheckEx
KfRaiseIrql
KeLowerIrql
DbgPrint
RtlGUIDFromString
_vsnprintf
MmMapLockedPagesSpecifyCache
__chkstk
strncpy_s
strncpy
RtlUnicodeStringToInteger
RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlFreeUnicodeString
strcmp
strchr
wcsstr
RtlInitString
RtlUnicodeStringToAnsiString
RtlFreeAnsiString
KeInitializeMutex
KeReleaseMutex
KeInitializeSemaphore
KeReleaseSemaphore
KeSetPriorityThread
PsCreateSystemThread
PsTerminateSystemThread
ObReferenceObjectByHandle
ObfDereferenceObject
ZwOpenKey
ZwEnumerateKey
ZwQueryValueKey
ZwSetValueKey
IofCompleteRequest
IoCsqInitialize
IoCsqInsertIrp
IoCsqRemoveNextIrp
KeReleaseSpinLock
KeAcquireSpinLockRaiseToDpc
KeInitializeSpinLock
DbgPrintEx
RtlInitUnicodeString

hal

KeQueryPerformanceCounter
KeStallExecutionProcessor

ndis.sys

NdisMSendNetBufferListsComplete
NdisMRemoveMiniport
NdisAllocateMemoryWithTag
NdisMDeregisterWdiMiniportDriver
NdisMRegisterWdiMiniportDriver
NdisMIndicateReceiveNetBufferLists
NdisAllocateMdl
NdisAllocateNetBufferAndNetBufferList
NdisMIdleNotificationComplete
NdisMIdleNotificationConfirm
NdisMDeregisterMiniportDriver
NdisMGetDeviceProperty
NdisFreeMdl
NdisFreeNetBufferList
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisReadConfiguration
NdisMFreePort
NdisMAllocatePort
NdisMNetPnPEvent
NdisFreeIoWorkItem
NdisQueueIoWorkItem
NdisAllocateIoWorkItem
NdisFreeTimerObject
NdisCancelTimerObject
NdisSetTimerObject
NdisAllocateTimerObject
NdisAllocateMemoryWithTagPriority
NdisSetEvent
NdisGetVersion
NdisMSleep
NdisMIndicateStatusEx
NdisOpenConfigurationEx
NdisInitializeEvent
NdisCloseConfiguration
NdisSetOptionalHandlers
NdisMOidRequestComplete
NdisWriteConfiguration
NdisFreeMemory
NdisResetEvent
NdisWaitEvent
NdisOpenFile
NdisCloseFile
NdisMapFile
NdisUnmapFile
NdisWriteErrorLogEntry
NdisInitializeString
NdisRegisterDeviceEx
NdisDeregisterDeviceEx
NdisReadNetworkAddress

wdfldr.sys

WdfVersionUnbind
WdfVersionBindClass
WdfVersionUnbindClass
WdfVersionBind

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.8MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 279KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win10X86/RtlExtUI.dll
.dll regsvr32 windows x86

f3b2dd92c703d59ebb05c6dc9bacf48e

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-03-2017 19:05

Not After

01-06-2018 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

57:05:ea:67:a8:3e:38:65:d9:e0:d0:c5:b3:4c:d9:7d:a5:e8:10:ce:19:23:82:8a:d5:a7:99:60:bb:48:bb:52
Signer

Actual PE Digest

57:05:ea:67:a8:3e:38:65:d9:e0:d0:c5:b3:4c:d9:7d:a5:e8:10:ce:19:23:82:8a:d5:a7:99:60:bb:48:bb:52

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-12-2022 13:51
Valid: false

65:0b:34:b8:63:71:21:6e:65:53:d5:5a:db:88:4e:05:be:91:d8:e3
Signer

Actual PE Digest

65:0b:34:b8:63:71:21:6e:65:53:d5:5a:db:88:4e:05:be:91:d8:e3

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:38
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fputs
sprintf_s
vsprintf_s
strcat_s
fflush
_except_handler4_common
_amsg_exit
_initterm
_XcptFilter
strcpy_s
strncmp
memcpy
free
malloc
_vsnprintf
_purecall
wcsncpy_s
_vsnwprintf
_itow_s
_wtoi
swprintf_s
wcschr
wcstoul
_wcsnicmp
??_U@YAPAXI@Z
??_V@YAXPAX@Z
__CxxFrameHandler3
??2@YAPAXI@Z
??3@YAXPAX@Z
memset
_fsopen
fclose
_vsnprintf_s

ole32

CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CoCreateInstance

oleaut32

SysAllocString
SysAllocStringByteLen
VariantInit
VariantClear
SysFreeString

user32

SetWindowsHookExW
SetWindowTextW
MessageBoxA
DestroyWindow
UnhookWindowsHookEx
SetPropW
RemovePropW
GetPropW
CallNextHookEx
GetDlgItem
GetWindowTextW
GetDlgItemTextA
GetParent
PostMessageW
GetDC
GetDialogBaseUnits
ReleaseDC
EnableWindow
MessageBoxW
DialogBoxParamW
IsDlgButtonChecked
EndDialog
CheckDlgButton
SetWindowTextA
GetWindowTextA
SendMessageW

kernel32

TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
FileTimeToSystemTime
GetDateFormatA
GetCurrentProcess
SetUnhandledExceptionFilter
GetLastError
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
CreateFileA
UnhandledExceptionFilter
GetModuleFileNameW
LoadLibraryW
MapViewOfFile
CreateFileMappingW
GetProcAddress
FreeLibrary
DisableThreadLibraryCalls
CreateMutexW
GetLocalTime
CloseHandle
OutputDebugStringA
GetSystemTime
GetCurrentThreadId
WaitForSingleObject
ReleaseMutex

advapi32

RegOpenKeyExA
RegQueryValueExA
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegCloseKey
RegSetValueExW
RegSetValueExA
RegOpenKeyA
RegDeleteValueA
RegDeleteKeyA

comctl32

CreatePropertySheetPageW

ws2_32

send

crypt32

CertCloseStore
CertAddCertificateContextToStore
CertCompareCertificateName
CertOpenSystemStoreA
CertFreeCertificateContext
CertGetNameStringA
CertEnumCertificatesInStore
CertCreateCertificateContext
CertGetCertificateContextProperty

cryptui

CryptUIDlgViewContext

comdlg32

GetOpenFileNameA

gdi32

GetDeviceCaps

mfc42u

ord800
ord2810
ord540
ord1808
ord4229

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win10X86/Rtlihvs.dll
.dll windows x86

975c929b21f0312d5667ff910ec73e33

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-03-2017 19:05

Not After

01-06-2018 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7f:32:44:1f:7a:1a:72:59:34:59:3c:96:81:0b:83:56:02:48:2f:a7:ec:49:17:31:f2:ae:98:f9:f3:84:f0:3c
Signer

Actual PE Digest

7f:32:44:1f:7a:1a:72:59:34:59:3c:96:81:0b:83:56:02:48:2f:a7:ec:49:17:31:f2:ae:98:f9:f3:84:f0:3c

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-12-2022 13:51
Valid: false

62:6c:68:12:86:e7:84:b2:00:57:44:04:ad:b2:8a:02:f1:1b:00:96
Signer

Actual PE Digest

62:6c:68:12:86:e7:84:b2:00:57:44:04:ad:b2:8a:02:f1:1b:00:96

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:38
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CertEnumCertificatesInStore
CertFreeCertificateContext
CertCloseStore
CertGetCertificateContextProperty
CryptUnprotectData
CertOpenStore

oleaut32

SysStringByteLen
VariantInit
VariantClear
SysFreeString
SysAllocString

kernel32

InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
VirtualAlloc
HeapReAlloc
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
GetDriveTypeA
LCMapStringA
LCMapStringW
GetFileAttributesA
FreeLibrary
InterlockedExchange
LoadLibraryExA
SetStdHandle
TlsFree
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
CreateFileW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
GetExitCodeProcess
CreateProcessA
CreateFileA
SetEndOfFile
GetProcessHeap
ReadFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
CloseHandle
GetLastError
ReleaseMutex
SetEvent
WaitForSingleObject
ResetEvent
LocalFree
Sleep
LeaveCriticalSection
EnterCriticalSection
GetTempPathW
GetLocalTime
WideCharToMultiByte
CreateMutexA
InitializeCriticalSection
CreateEventA
CreateThread
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
ExitProcess
GetModuleHandleA
GetProcAddress
RaiseException
GetFullPathNameW
GetCurrentDirectoryW
RtlUnwind
CreateDirectoryW
HeapAlloc
HeapFree
GetVersionExA
GetCommandLineA
VerSetConditionMask
VerifyVersionInfoA
MultiByteToWideChar
WTSGetActiveConsoleSessionId
LocalAlloc
FormatMessageW
GetModuleFileNameA
GetPrivateProfileIntW
GetPrivateProfileStringW
TerminateThread
DeleteCriticalSection
WriteConsoleA
DisableThreadLibraryCalls
OutputDebugStringA
HeapSize
GlobalMemoryStatus
GetVersion
GetUserDefaultLocaleName
GetSystemDefaultLocaleName
GetComputerNameW
InterlockedCompareExchange
GetTickCount64
GetComputerNameA
SetThreadPriority
GetSystemTime
LoadLibraryA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegOpenKeyA
RegSetValueExA
FreeSid
ConvertSidToStringSidA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
CryptReleaseContext
GetTokenInformation
DuplicateToken
RegDeleteValueA
RegGetValueA
CryptAcquireContextA
CryptGenRandom
RegCreateKeyExA
ImpersonateLoggedOnUser
RevertToSelf
GetUserNameA
LookupAccountNameA
RegCloseKey

ole32

CreateStreamOnHGlobal
CoCreateInstance
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize

ws2_32

getaddrinfo
WSACleanup
htons
inet_addr
ntohs
WSAStartup

rpcrt4

UuidCreate
RpcStringFreeA
UuidToStringA

user32

GetSystemMetrics
MessageBoxA
MsgWaitForMultipleObjects
GetUserObjectInformationW
GetProcessWindowStation
GetDesktopWindow

wtsapi32

WTSQuerySessionInformationA
WTSEnumerateSessionsA
WTSFreeMemory
WTSQueryUserToken

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

wlanapi

WlanScan
WlanFreeMemory
WlanRegisterVirtualStationNotification
WlanRegisterNotification
WlanOpenHandle
WlanCloseHandle
WlanGetNetworkBssList
WlanGetProfile
WlanQueryInterface
WlanReasonCodeToString
WlanConnect
WlanDisconnect
WlanGetAvailableNetworkList
WlanGetProfileList
WlanSetSecuritySettings

xmllite

CreateXmlReader

iphlpapi

Icmp6SendEcho2
Icmp6CreateFile
GetIpNetTable2
IcmpCreateFile
IpReleaseAddress
GetInterfaceInfo
IcmpSendEcho
IcmpCloseHandle
GetUnicastIpAddressTable
FreeMibTable
GetAdaptersAddresses
GetAdaptersInfo
NotifyAddrChange
CancelIPChangeNotify
GetIfTable
IpRenewAddress
GetIpAddrTable

Exports

Exports

Dot11ExtIhvGetVersionInfo
Dot11ExtIhvInitService
Dot11ExtIhvInitVirtualStation

Sections

.text
Size: 874KB - Virtual size: 873KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win10X86/netrtwlanu.cat
Windows/RTWLANU_Driver/Win10X86/netrtwlanu.inf
Windows/RTWLANU_Driver/Win10X86/rtlCoInst.dat
Windows/RTWLANU_Driver/Win10X86/rtlCoInst.dll
.dll windows x86

b56ee6cf404c5405eeff689c530d7c80

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-03-2017 19:05

Not After

01-06-2018 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b4:8b:6b:ff:2b:cd:83:f9:21:7b:4d:c7:84:39:a2:8c:f9:17:d8:f4:2d:42:30:73:d4:fd:1f:3d:48:9d:c8:82
Signer

Actual PE Digest

b4:8b:6b:ff:2b:cd:83:f9:21:7b:4d:c7:84:39:a2:8c:f9:17:d8:f4:2d:42:30:73:d4:fd:1f:3d:48:9d:c8:82

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-12-2022 13:51
Valid: false

05:8a:47:dc:06:4a:06:bb:0a:1f:09:35:bb:17:53:3f:6f:bf:40:7a
Signer

Actual PE Digest

05:8a:47:dc:06:4a:06:bb:0a:1f:09:35:bb:17:53:3f:6f:bf:40:7a

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:38
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

malloc
_adjust_fdiv
_initterm
free
fopen
fgets
strtok
fclose
strncmp
_strnicmp
sprintf

setupapi

SetupDiOpenDevRegKey
SetupDiClassGuidsFromNameA
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiSetClassInstallParamsA
SetupDiGetDeviceRegistryPropertyA
SetupDiCallClassInstaller

kernel32

DisableThreadLibraryCalls
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLocaleInfoA
GetSystemDirectoryA
GetLastError
OutputDebugStringA

advapi32

RegOpenKeyA
RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegQueryValueExA

Exports

Exports

rtlCoInst

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 554B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win10X86/rtwlanu.sys
.exe windows x86

1477c47b6db273bd5aab389ac5f46664

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-03-2017 19:05

Not After

01-06-2018 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

10:1d:75:0c:99:d4:ec:c6:75:b6:3d:21:1e:35:44:f8:af:4b:02:43:e6:ab:d0:14:54:f4:c6:98:a7:5e:d8:5c
Signer

Actual PE Digest

10:1d:75:0c:99:d4:ec:c6:75:b6:3d:21:1e:35:44:f8:af:4b:02:43:e6:ab:d0:14:54:f4:c6:98:a7:5e:d8:5c

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-12-2022 13:51
Valid: false

ac:da:2e:13:26:1e:04:75:75:0d:4d:40:5c:47:b6:f9:34:bf:a1:63
Signer

Actual PE Digest

ac:da:2e:13:26:1e:04:75:75:0d:4d:40:5c:47:b6:f9:34:bf:a1:63

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:38
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ZwDeviceIoControlFile
ZwClose
ZwCreateFile
ExAllocatePoolWithTag
KeWaitForSingleObject
KeClearEvent
PoUnregisterPowerSettingCallback
PoRegisterPowerSettingCallback
EtwWriteTransfer
EtwSetInformation
EtwUnregister
EtwRegister
IoWMIRegistrationControl
IoReuseIrp
IoFreeIrp
IoCancelIrp
IofCallDriver
IoAllocateIrp
ExFreePoolWithTag
ExAllocatePool
KeSetEvent
RtlCompareMemory
RtlCopyUnicodeString
MmGetSystemRoutineAddress
KeInitializeEvent
memcmp
_alldiv
KeFlushQueuedDpcs
memcpy
_aulldiv
KeQuerySystemTime
KeBugCheckEx
DbgPrint
RtlGUIDFromString
memset
_vsnprintf
_aullrem
_aullshr
_allshl
strncpy_s
strncpy
RtlUnicodeStringToInteger
RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlFreeUnicodeString
strchr
wcsstr
RtlInitString
RtlUnicodeStringToAnsiString
RtlFreeAnsiString
KeInitializeMutex
KeReleaseMutex
KeInitializeSemaphore
KeReleaseSemaphore
KeSetPriorityThread
PsCreateSystemThread
PsTerminateSystemThread
ObReferenceObjectByHandle
ObfDereferenceObject
ZwOpenKey
ZwEnumerateKey
ZwQueryValueKey
ZwSetValueKey
IofCompleteRequest
IoCsqInitialize
IoCsqInsertIrp
IoCsqRemoveNextIrp
_alloca_probe
MmMapLockedPagesSpecifyCache
KeInitializeSpinLock
DbgPrintEx
RtlInitUnicodeString
_allmul

hal

KeQueryPerformanceCounter
KfRaiseIrql
KfLowerIrql
KfReleaseSpinLock
KfAcquireSpinLock
KeGetCurrentIrql
KeStallExecutionProcessor

ndis.sys

NdisMRegisterWdiMiniportDriver
NdisMIndicateReceiveNetBufferLists
NdisAllocateMdl
NdisAllocateNetBufferAndNetBufferList
NdisMIdleNotificationComplete
NdisMIdleNotificationConfirm
NdisMDeregisterMiniportDriver
NdisMGetDeviceProperty
NdisFreeMdl
NdisFreeNetBufferList
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisSetOptionalHandlers
NdisMFreePort
NdisMAllocatePort
NdisMNetPnPEvent
NdisMDeregisterWdiMiniportDriver
NdisQueueIoWorkItem
NdisAllocateIoWorkItem
NdisFreeTimerObject
NdisCancelTimerObject
NdisSetTimerObject
NdisAllocateTimerObject
NdisAllocateMemoryWithTagPriority
NdisSetEvent
NdisGetVersion
NdisMOidRequestComplete
NdisMSleep
NdisMIndicateStatusEx
NdisInitializeString
NdisInitializeEvent
NdisReadNetworkAddress
NdisCloseConfiguration
NdisReadConfiguration
NdisAllocateMemoryWithTag
NdisRegisterDeviceEx
NdisDeregisterDeviceEx
NdisMRemoveMiniport
NdisFreeIoWorkItem
NdisOpenConfigurationEx
NdisWriteConfiguration
NdisFreeMemory
NdisResetEvent
NdisWaitEvent
NdisOpenFile
NdisCloseFile
NdisMapFile
NdisUnmapFile
NdisWriteErrorLogEntry
NdisMSendNetBufferListsComplete

wdfldr.sys

WdfVersionUnbind
WdfVersionBindClass
WdfVersionUnbindClass
WdfVersionBind

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.2MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 410KB - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win7X64/RtlExtUI.dll
.dll regsvr32 windows x64

2bf7f4adb8ae5e2b654042681a7120d7

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21-01-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-01-2017 00:00

Not After

18-01-2028 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:e8:60:cd:f0:68:52:17:8c:41:3d:a2:63:f8:2d:cb:2a:38:94:ec:f4:ce:9f:a3:00:cc:87:c5:90:9c:71
Signer

Actual PE Digest

0a:99:e8:60:cd:f0:68:52:17:8c:41:3d:a2:63:f8:2d:cb:2a:38:94:ec:f4:ce:9f:a3:00:cc:87:c5:90:9c:71

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

15-12-2022 13:51
Valid: false

7a:81:25:7b:f2:94:df:21:87:e3:6c:6a:92:66:67:0a:47:e3:9a:ec
Signer

Actual PE Digest

7a:81:25:7b:f2:94:df:21:87:e3:6c:6a:92:66:67:0a:47:e3:9a:ec

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:37
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

fflush
vsprintf_s
strcat_s
_fsopen
??3@YAXPEAX@Z
fclose
fputs
??_U@YAPEAX_K@Z
??_V@YAXPEAX@Z
wcschr
wcstoul
_wtoi
_wcsnicmp
_itow_s
??2@YAPEAX_K@Z
_vsnprintf_s
wcsncpy_s
_vsnwprintf
_purecall
free
malloc
_vsnprintf
strncmp
strcpy_s
_XcptFilter
_initterm
_amsg_exit
__C_specific_handler
__CxxFrameHandler3
memset
sprintf_s
swprintf_s
memcpy

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
StringFromCLSID

oleaut32

SysFreeString
VariantClear
VariantInit
SysAllocStringByteLen
SysAllocString

user32

IsDlgButtonChecked
CheckDlgButton
EndDialog
DialogBoxParamW
MessageBoxA
EnableWindow
GetDialogBaseUnits
GetPropW
SetWindowTextW
GetDlgItemTextA
MessageBoxW
UnhookWindowsHookEx
SetWindowsHookExW
GetDlgItem
ReleaseDC
GetDC
SetPropW
CallNextHookEx
GetParent
PostMessageW
RemovePropW
DestroyWindow
GetWindowTextW
GetWindowTextA
SetWindowTextA
SendMessageW

kernel32

QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
Sleep
CreateFileMappingW
GetLastError
FileTimeToSystemTime
GetDateFormatA
UnmapViewOfFile
MapViewOfFile
CreateFileA
VerifyVersionInfoW
MultiByteToWideChar
VerSetConditionMask
CloseHandle
GetLocalTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleFileNameW
LoadLibraryW
FreeLibrary
CreateMutexW
GetSystemTime
ReleaseMutex
OutputDebugStringA
GetCurrentThreadId
WaitForSingleObject

advapi32

RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegSetValueExW
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyA
RegQueryValueExA

comctl32

CreatePropertySheetPageW

crypt32

CertCreateCertificateContext
CertOpenSystemStoreA
CertCompareCertificateName
CertGetNameStringA
CertGetCertificateContextProperty
CertEnumCertificatesInStore
CertCloseStore
CertAddCertificateContextToStore
CertFreeCertificateContext

cryptui

CryptUIDlgViewContext

comdlg32

GetOpenFileNameA

gdi32

GetDeviceCaps

mfc42u

ord626
ord2846
ord1040
ord1812
ord4557

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 622B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win7X64/Rtlihvs.dll
.dll windows x64

f5ec49062f03d062e455c7bab9bf8aa8

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21-01-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-01-2017 00:00

Not After

18-01-2028 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

48:38:ae:21:e1:00:e5:66:c8:fd:08:5f:1c:1a:de:e6:56:ad:1c:f2:66:0c:f4:3e:fc:56:cc:da:42:7b:cf:3f
Signer

Actual PE Digest

48:38:ae:21:e1:00:e5:66:c8:fd:08:5f:1c:1a:de:e6:56:ad:1c:f2:66:0c:f4:3e:fc:56:cc:da:42:7b:cf:3f

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

15-12-2022 13:51
Valid: false

9b:db:37:92:fc:d7:bc:b5:93:d4:2d:5e:8c:02:18:e0:42:90:ec:67
Signer

Actual PE Digest

9b:db:37:92:fc:d7:bc:b5:93:d4:2d:5e:8c:02:18:e0:42:90:ec:67

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:37
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

crypt32

CertEnumCertificatesInStore
CryptUnprotectData
CertFreeCertificateContext
CertCloseStore
CertGetCertificateContextProperty
CertOpenStore

oleaut32

SysFreeString
SysStringByteLen
VariantInit
SysAllocString
VariantClear

kernel32

SetLastError
FlsGetValue
GetCurrentThreadId
FlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
RtlPcToFileHeader
GetCPInfo
GetACP
GetOEMCP
GetDriveTypeA
LCMapStringW
GetFileAttributesA
FreeLibrary
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
FlsFree
WriteConsoleW
SetFilePointer
CreateFileW
GetStringTypeW
VirtualProtect
VirtualAlloc
SetThreadStackGuarantee
GetSystemInfo
VirtualQuery
HeapReAlloc
GetExitCodeProcess
CreateProcessA
SetEndOfFile
GetProcessHeap
ReadFile
CompareStringW
SetEnvironmentVariableA
CloseHandle
GetLastError
ReleaseMutex
SetEvent
WaitForSingleObject
ResetEvent
LocalFree
Sleep
LeaveCriticalSection
EnterCriticalSection
GetTempPathW
GetLocalTime
WideCharToMultiByte
CreateMutexA
InitializeCriticalSection
CreateEventA
DecodePointer
EncodePointer
ExitProcess
CreateThread
GetModuleHandleW
GetProcAddress
RaiseException
GetFullPathNameW
GetCurrentDirectoryW
RtlLookupFunctionEntry
CreateDirectoryW
HeapAlloc
HeapFree
RtlUnwindEx
GetVersionExW
GetCommandLineA
FlsSetValue
VerSetConditionMask
VerifyVersionInfoA
MultiByteToWideChar
WTSGetActiveConsoleSessionId
LocalAlloc
FormatMessageW
GetModuleFileNameA
GetPrivateProfileIntW
GetPrivateProfileStringW
TerminateThread
DeleteCriticalSection
SetStdHandle
DisableThreadLibraryCalls
OutputDebugStringA
CreateFileA
HeapSize
LoadLibraryW
GlobalMemoryStatus
GetVersion
GetModuleHandleA
GetSystemDefaultLocaleName
GetComputerNameW
GetUserDefaultLocaleName
GetComputerNameA
GetTickCount64
GetVersionExA
SetThreadPriority
GetSystemTime
LoadLibraryA

advapi32

RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegSetValueExA
FreeSid
ConvertSidToStringSidA
RegisterEventSourceW
ReportEventW
DeregisterEventSource
CryptReleaseContext
DuplicateToken
GetTokenInformation
RegDeleteValueA
RegGetValueA
CryptAcquireContextA
CryptGenRandom
RegCreateKeyExA
ImpersonateLoggedOnUser
RevertToSelf
GetUserNameA
LookupAccountNameA
RegCloseKey

ole32

CreateStreamOnHGlobal
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoInitializeEx

ws2_32

getaddrinfo
WSACleanup
inet_addr
ntohs
WSAStartup
htons

rpcrt4

UuidToStringA
UuidCreate
RpcStringFreeA

user32

MessageBoxW
GetSystemMetrics
GetProcessWindowStation
GetUserObjectInformationW
MsgWaitForMultipleObjects
GetDesktopWindow

wtsapi32

WTSQueryUserToken
WTSFreeMemory
WTSQuerySessionInformationA
WTSEnumerateSessionsA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

wlanapi

WlanSetSecuritySettings
WlanGetProfile
WlanGetNetworkBssList
WlanFreeMemory
WlanScan
WlanOpenHandle
WlanCloseHandle
WlanQueryInterface
WlanReasonCodeToString
WlanDisconnect
WlanConnect
WlanGetAvailableNetworkList
WlanGetProfileList
WlanRegisterVirtualStationNotification
WlanRegisterNotification

xmllite

CreateXmlReader

iphlpapi

IcmpCloseHandle
IcmpSendEcho
GetIpNetTable2
IcmpCreateFile
IpReleaseAddress
IpRenewAddress
Icmp6SendEcho2
Icmp6CreateFile
FreeMibTable
GetUnicastIpAddressTable
GetAdaptersAddresses
GetAdaptersInfo
GetIpAddrTable
GetIfTable
CancelIPChangeNotify
GetInterfaceInfo
NotifyAddrChange

Exports

Exports

Dot11ExtIhvGetVersionInfo
Dot11ExtIhvInitService
Dot11ExtIhvInitVirtualStation

Sections

.text
Size: 981KB - Virtual size: 981KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win7X64/netrtwlanu.cat
Windows/RTWLANU_Driver/Win7X64/netrtwlanu.inf
Windows/RTWLANU_Driver/Win7X64/rtlCoInst.dat
Windows/RTWLANU_Driver/Win7X64/rtlCoInst.dll
.dll windows x64

49861fc8b24187bb146a41202e5ab2c3

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21-01-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-01-2017 00:00

Not After

18-01-2028 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

16:88:3f:3a:a8:77:b2:3c:c0:8b:a7:7b:0c:1b:97:40:e8:ad:f7:5d:9e:5a:99:9f:f8:8d:4e:20:ef:6e:2d:ba
Signer

Actual PE Digest

16:88:3f:3a:a8:77:b2:3c:c0:8b:a7:7b:0c:1b:97:40:e8:ad:f7:5d:9e:5a:99:9f:f8:8d:4e:20:ef:6e:2d:ba

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

15-12-2022 13:51
Valid: false

0a:37:73:40:21:86:22:e8:a7:9f:54:7f:61:6d:21:cc:a1:23:51:82
Signer

Actual PE Digest

0a:37:73:40:21:86:22:e8:a7:9f:54:7f:61:6d:21:cc:a1:23:51:82

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:37
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

free
_strnicmp
strncmp
fclose
malloc
sprintf
_initterm
memset
fopen
fgets
strtok

ntdll

RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiClassGuidsFromNameA
SetupDiOpenDevRegKey
SetupDiGetDeviceRegistryPropertyA
SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
SetupDiEnumDeviceInfo

kernel32

DisableThreadLibraryCalls
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLocaleInfoA
GetLastError
OutputDebugStringA
GetSystemDirectoryA

advapi32

RegOpenKeyA
RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegQueryValueExA

Exports

Exports

rtlCoInst

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win7X64/rtwlanu.sys
.exe windows x64

a24ff19d21a614a17722f551473be786

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-03-2017 19:05

Not After

01-06-2018 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c9:b4:dd:bf:c9:fa:a7:28:da:cb:b0:9c:2b:fc:70:0b:e0:4f:71:ca:b9:3e:77:16:88:35:d5:82:86:54:9d:6b
Signer

Actual PE Digest

c9:b4:dd:bf:c9:fa:a7:28:da:cb:b0:9c:2b:fc:70:0b:e0:4f:71:ca:b9:3e:77:16:88:35:d5:82:86:54:9d:6b

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-12-2022 13:51
Valid: false

68:2b:92:60:10:30:30:80:6c:94:b5:66:e6:ff:53:3a:de:21:55:a8
Signer

Actual PE Digest

68:2b:92:60:10:30:30:80:6c:94:b5:66:e6:ff:53:3a:de:21:55:a8

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:39
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

KeClearEvent
KeWaitForSingleObject
KeSetEvent
PoUnregisterPowerSettingCallback
PoRegisterPowerSettingCallback
RtlCopyUnicodeString
IofCompleteRequest
IoWMIRegistrationControl
RtlCompareMemory
MmGetSystemRoutineAddress
ExFreePoolWithTag
IoWMIWriteEvent
ExAllocatePoolWithTag
ZwClose
ZwDeviceIoControlFile
ZwCreateFile
KeInitializeEvent
KeFlushQueuedDpcs
KeBugCheckEx
DbgPrint
strncpy
_vsnprintf
RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlUnicodeStringToInteger
RtlFreeUnicodeString
KeInitializeMutex
KeReleaseMutex
PsTerminateSystemThread
PsCreateSystemThread
ObReferenceObjectByHandle
ObfDereferenceObject
KeInitializeSemaphore
KeReleaseSemaphore
RtlInitString
ZwOpenKey
ZwQueryValueKey
RtlUnicodeStringToAnsiString
RtlFreeAnsiString
strchr
wcsstr
ZwEnumerateKey
ZwSetValueKey
IoCsqInsertIrp
IoCsqInitialize
IoCsqRemoveNextIrp
RtlGUIDFromString
KeReleaseSpinLock
KeAcquireSpinLockRaiseToDpc
MmMapLockedPagesSpecifyCache
RtlInitUnicodeString

hal

KeQueryPerformanceCounter
KeStallExecutionProcessor

ndis.sys

NdisMIndicateStatusEx
NdisInitializeEvent
NdisMIndicateReceiveNetBufferLists
NdisAllocateNetBufferAndNetBufferList
NdisAllocateMdl
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisFreeNetBufferList
NdisFreeMdl
NdisMDeregisterMiniportDriver
NdisMGetDeviceProperty
NdisMOidRequestComplete
NdisGetVersion
NdisMFreePort
NdisMNetPnPEvent
NdisMAllocatePort
NdisAllocateMemoryWithTagPriority
NdisQueueIoWorkItem
NdisFreeIoWorkItem
NdisAllocateIoWorkItem
NdisFreeTimerObject
NdisCancelTimerObject
NdisSetEvent
NdisAllocateTimerObject
NdisMRegisterMiniportDriver
NdisInitializeString
NdisOpenFile
NdisMapFile
NdisUnmapFile
NdisCloseFile
NdisFreeMemory
NdisWriteConfiguration
NdisWaitEvent
NdisResetEvent
NdisMSendNetBufferListsComplete
NdisMSetMiniportAttributes
NdisMRemoveMiniport
NdisRegisterDeviceEx
NdisDeregisterDeviceEx
NdisMSleep
NdisOpenConfigurationEx
NdisCloseConfiguration
NdisReadConfiguration
NdisReadNetworkAddress
NdisSetTimerObject

wdfldr.sys

WdfVersionBindClass
WdfVersionUnbindClass
WdfVersionBind
WdfVersionUnbind

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.8MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 295KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win7X86/RtlExtUI.dll
.dll regsvr32 windows x86

f3b2dd92c703d59ebb05c6dc9bacf48e

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21-01-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-01-2017 00:00

Not After

18-01-2028 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

57:05:ea:67:a8:3e:38:65:d9:e0:d0:c5:b3:4c:d9:7d:a5:e8:10:ce:19:23:82:8a:d5:a7:99:60:bb:48:bb:52
Signer

Actual PE Digest

57:05:ea:67:a8:3e:38:65:d9:e0:d0:c5:b3:4c:d9:7d:a5:e8:10:ce:19:23:82:8a:d5:a7:99:60:bb:48:bb:52

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

15-12-2022 13:51
Valid: false

65:0b:34:b8:63:71:21:6e:65:53:d5:5a:db:88:4e:05:be:91:d8:e3
Signer

Actual PE Digest

65:0b:34:b8:63:71:21:6e:65:53:d5:5a:db:88:4e:05:be:91:d8:e3

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:38
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fputs
sprintf_s
vsprintf_s
strcat_s
fflush
_except_handler4_common
_amsg_exit
_initterm
_XcptFilter
strcpy_s
strncmp
memcpy
free
malloc
_vsnprintf
_purecall
wcsncpy_s
_vsnwprintf
_itow_s
_wtoi
swprintf_s
wcschr
wcstoul
_wcsnicmp
??_U@YAPAXI@Z
??_V@YAXPAX@Z
__CxxFrameHandler3
??2@YAPAXI@Z
??3@YAXPAX@Z
memset
_fsopen
fclose
_vsnprintf_s

ole32

CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CoCreateInstance

oleaut32

SysAllocString
SysAllocStringByteLen
VariantInit
VariantClear
SysFreeString

user32

SetWindowsHookExW
SetWindowTextW
MessageBoxA
DestroyWindow
UnhookWindowsHookEx
SetPropW
RemovePropW
GetPropW
CallNextHookEx
GetDlgItem
GetWindowTextW
GetDlgItemTextA
GetParent
PostMessageW
GetDC
GetDialogBaseUnits
ReleaseDC
EnableWindow
MessageBoxW
DialogBoxParamW
IsDlgButtonChecked
EndDialog
CheckDlgButton
SetWindowTextA
GetWindowTextA
SendMessageW

kernel32

TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
FileTimeToSystemTime
GetDateFormatA
GetCurrentProcess
SetUnhandledExceptionFilter
GetLastError
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
CreateFileA
UnhandledExceptionFilter
GetModuleFileNameW
LoadLibraryW
MapViewOfFile
CreateFileMappingW
GetProcAddress
FreeLibrary
DisableThreadLibraryCalls
CreateMutexW
GetLocalTime
CloseHandle
OutputDebugStringA
GetSystemTime
GetCurrentThreadId
WaitForSingleObject
ReleaseMutex

advapi32

RegOpenKeyExA
RegQueryValueExA
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegCloseKey
RegSetValueExW
RegSetValueExA
RegOpenKeyA
RegDeleteValueA
RegDeleteKeyA

comctl32

CreatePropertySheetPageW

ws2_32

send

crypt32

CertCloseStore
CertAddCertificateContextToStore
CertCompareCertificateName
CertOpenSystemStoreA
CertFreeCertificateContext
CertGetNameStringA
CertEnumCertificatesInStore
CertCreateCertificateContext
CertGetCertificateContextProperty

cryptui

CryptUIDlgViewContext

comdlg32

GetOpenFileNameA

gdi32

GetDeviceCaps

mfc42u

ord800
ord2810
ord540
ord1808
ord4229

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win7X86/Rtlihvs.dll
.dll windows x86

975c929b21f0312d5667ff910ec73e33

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21-01-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-01-2017 00:00

Not After

18-01-2028 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7f:32:44:1f:7a:1a:72:59:34:59:3c:96:81:0b:83:56:02:48:2f:a7:ec:49:17:31:f2:ae:98:f9:f3:84:f0:3c
Signer

Actual PE Digest

7f:32:44:1f:7a:1a:72:59:34:59:3c:96:81:0b:83:56:02:48:2f:a7:ec:49:17:31:f2:ae:98:f9:f3:84:f0:3c

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

15-12-2022 13:51
Valid: false

62:6c:68:12:86:e7:84:b2:00:57:44:04:ad:b2:8a:02:f1:1b:00:96
Signer

Actual PE Digest

62:6c:68:12:86:e7:84:b2:00:57:44:04:ad:b2:8a:02:f1:1b:00:96

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:38
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CertEnumCertificatesInStore
CertFreeCertificateContext
CertCloseStore
CertGetCertificateContextProperty
CryptUnprotectData
CertOpenStore

oleaut32

SysStringByteLen
VariantInit
VariantClear
SysFreeString
SysAllocString

kernel32

InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
VirtualAlloc
HeapReAlloc
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
GetDriveTypeA
LCMapStringA
LCMapStringW
GetFileAttributesA
FreeLibrary
InterlockedExchange
LoadLibraryExA
SetStdHandle
TlsFree
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
CreateFileW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
GetExitCodeProcess
CreateProcessA
CreateFileA
SetEndOfFile
GetProcessHeap
ReadFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
CloseHandle
GetLastError
ReleaseMutex
SetEvent
WaitForSingleObject
ResetEvent
LocalFree
Sleep
LeaveCriticalSection
EnterCriticalSection
GetTempPathW
GetLocalTime
WideCharToMultiByte
CreateMutexA
InitializeCriticalSection
CreateEventA
CreateThread
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
ExitProcess
GetModuleHandleA
GetProcAddress
RaiseException
GetFullPathNameW
GetCurrentDirectoryW
RtlUnwind
CreateDirectoryW
HeapAlloc
HeapFree
GetVersionExA
GetCommandLineA
VerSetConditionMask
VerifyVersionInfoA
MultiByteToWideChar
WTSGetActiveConsoleSessionId
LocalAlloc
FormatMessageW
GetModuleFileNameA
GetPrivateProfileIntW
GetPrivateProfileStringW
TerminateThread
DeleteCriticalSection
WriteConsoleA
DisableThreadLibraryCalls
OutputDebugStringA
HeapSize
GlobalMemoryStatus
GetVersion
GetUserDefaultLocaleName
GetSystemDefaultLocaleName
GetComputerNameW
InterlockedCompareExchange
GetTickCount64
GetComputerNameA
SetThreadPriority
GetSystemTime
LoadLibraryA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegOpenKeyA
RegSetValueExA
FreeSid
ConvertSidToStringSidA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
CryptReleaseContext
GetTokenInformation
DuplicateToken
RegDeleteValueA
RegGetValueA
CryptAcquireContextA
CryptGenRandom
RegCreateKeyExA
ImpersonateLoggedOnUser
RevertToSelf
GetUserNameA
LookupAccountNameA
RegCloseKey

ole32

CreateStreamOnHGlobal
CoCreateInstance
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize

ws2_32

getaddrinfo
WSACleanup
htons
inet_addr
ntohs
WSAStartup

rpcrt4

UuidCreate
RpcStringFreeA
UuidToStringA

user32

GetSystemMetrics
MessageBoxA
MsgWaitForMultipleObjects
GetUserObjectInformationW
GetProcessWindowStation
GetDesktopWindow

wtsapi32

WTSQuerySessionInformationA
WTSEnumerateSessionsA
WTSFreeMemory
WTSQueryUserToken

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

wlanapi

WlanScan
WlanFreeMemory
WlanRegisterVirtualStationNotification
WlanRegisterNotification
WlanOpenHandle
WlanCloseHandle
WlanGetNetworkBssList
WlanGetProfile
WlanQueryInterface
WlanReasonCodeToString
WlanConnect
WlanDisconnect
WlanGetAvailableNetworkList
WlanGetProfileList
WlanSetSecuritySettings

xmllite

CreateXmlReader

iphlpapi

Icmp6SendEcho2
Icmp6CreateFile
GetIpNetTable2
IcmpCreateFile
IpReleaseAddress
GetInterfaceInfo
IcmpSendEcho
IcmpCloseHandle
GetUnicastIpAddressTable
FreeMibTable
GetAdaptersAddresses
GetAdaptersInfo
NotifyAddrChange
CancelIPChangeNotify
GetIfTable
IpRenewAddress
GetIpAddrTable

Exports

Exports

Dot11ExtIhvGetVersionInfo
Dot11ExtIhvInitService
Dot11ExtIhvInitVirtualStation

Sections

.text
Size: 874KB - Virtual size: 873KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win7X86/netrtwlanu.cat
Windows/RTWLANU_Driver/Win7X86/netrtwlanu.inf
Windows/RTWLANU_Driver/Win7X86/rtlCoInst.dat
Windows/RTWLANU_Driver/Win7X86/rtlCoInst.dll
.dll windows x86

b56ee6cf404c5405eeff689c530d7c80

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21-01-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-01-2017 00:00

Not After

18-01-2028 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b4:8b:6b:ff:2b:cd:83:f9:21:7b:4d:c7:84:39:a2:8c:f9:17:d8:f4:2d:42:30:73:d4:fd:1f:3d:48:9d:c8:82
Signer

Actual PE Digest

b4:8b:6b:ff:2b:cd:83:f9:21:7b:4d:c7:84:39:a2:8c:f9:17:d8:f4:2d:42:30:73:d4:fd:1f:3d:48:9d:c8:82

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

15-12-2022 13:51
Valid: false

05:8a:47:dc:06:4a:06:bb:0a:1f:09:35:bb:17:53:3f:6f:bf:40:7a
Signer

Actual PE Digest

05:8a:47:dc:06:4a:06:bb:0a:1f:09:35:bb:17:53:3f:6f:bf:40:7a

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:38
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

malloc
_adjust_fdiv
_initterm
free
fopen
fgets
strtok
fclose
strncmp
_strnicmp
sprintf

setupapi

SetupDiOpenDevRegKey
SetupDiClassGuidsFromNameA
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiSetClassInstallParamsA
SetupDiGetDeviceRegistryPropertyA
SetupDiCallClassInstaller

kernel32

DisableThreadLibraryCalls
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLocaleInfoA
GetSystemDirectoryA
GetLastError
OutputDebugStringA

advapi32

RegOpenKeyA
RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegQueryValueExA

Exports

Exports

rtlCoInst

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 554B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win7X86/rtwlanu.sys
.exe windows x86

5cd316af5600416eb7c5311748c8ad1c

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-03-2017 19:05

Not After

01-06-2018 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:f4:e8:b4:6f:02:23:e4:83:87:d6:bd:c7:9c:d4:0b:9a:b5:56:eb:eb:9d:d4:01:04:2e:3d:f7:29:59:88:77
Signer

Actual PE Digest

0d:f4:e8:b4:6f:02:23:e4:83:87:d6:bd:c7:9c:d4:0b:9a:b5:56:eb:eb:9d:d4:01:04:2e:3d:f7:29:59:88:77

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-12-2022 13:51
Valid: false

85:0f:0e:da:d5:1c:99:d3:89:e3:2b:45:25:b9:8d:fe:3e:a8:1a:1e
Signer

Actual PE Digest

85:0f:0e:da:d5:1c:99:d3:89:e3:2b:45:25:b9:8d:fe:3e:a8:1a:1e

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:39
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeTickCount
KeWaitForSingleObject
KeClearEvent
RtlCopyUnicodeString
KeSetEvent
PoRegisterPowerSettingCallback
PoUnregisterPowerSettingCallback
IofCompleteRequest
IoWMIRegistrationControl
RtlCompareMemory
MmGetSystemRoutineAddress
ExAllocatePoolWithTag
IoWMIWriteEvent
ExFreePoolWithTag
ZwCreateFile
ZwDeviceIoControlFile
ZwClose
KeInitializeEvent
_alldiv
KeFlushQueuedDpcs
KeBugCheckEx
DbgPrint
_aulldiv
KeQuerySystemTime
memcpy
strncpy
_aullshr
_allshl
_vsnprintf
_aullrem
RtlFreeUnicodeString
RtlUnicodeStringToInteger
RtlAnsiStringToUnicodeString
RtlInitAnsiString
KeInitializeMutex
KeReleaseMutex
PsTerminateSystemThread
KeSetPriorityThread
ObReferenceObjectByHandle
PsCreateSystemThread
ObfDereferenceObject
KeInitializeSemaphore
KeReleaseSemaphore
strchr
RtlFreeAnsiString
RtlUnicodeStringToAnsiString
ZwQueryValueKey
ZwOpenKey
RtlInitString
ZwEnumerateKey
wcsstr
ZwSetValueKey
IoCsqInsertIrp
IoCsqRemoveNextIrp
IoCsqInitialize
RtlGUIDFromString
memset
RtlInitUnicodeString
_allmul
MmMapLockedPagesSpecifyCache

hal

KeStallExecutionProcessor
KfRaiseIrql
KfLowerIrql
KeGetCurrentIrql
KfAcquireSpinLock
KfReleaseSpinLock
KeQueryPerformanceCounter

ndis.sys

NdisMIndicateReceiveNetBufferLists
NdisMRegisterMiniportDriver
NdisGetVersion
NdisMGetDeviceProperty
NdisMDeregisterMiniportDriver
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisFreeMdl
NdisFreeNetBufferList
NdisMFreePort
NdisMNetPnPEvent
NdisAllocateNetBufferAndNetBufferList
NdisQueueIoWorkItem
NdisAllocateIoWorkItem
NdisFreeIoWorkItem
NdisAllocateTimerObject
NdisSetEvent
NdisAllocateMemoryWithTagPriority
NdisFreeTimerObject
NdisCancelTimerObject
NdisSetTimerObject
NdisMOidRequestComplete
NdisReadConfiguration
NdisInitializeEvent
NdisAllocateMdl
NdisOpenConfigurationEx
NdisMSleep
NdisCloseConfiguration
NdisReadNetworkAddress
NdisMAllocatePort
NdisMIndicateStatusEx
NdisFreeMemory
NdisCloseFile
NdisUnmapFile
NdisMapFile
NdisOpenFile
NdisInitializeString
NdisWriteConfiguration
NdisResetEvent
NdisWaitEvent
NdisMSendNetBufferListsComplete
NdisMSetMiniportAttributes
NdisRegisterDeviceEx
NdisDeregisterDeviceEx
NdisMRemoveMiniport

wdfldr.sys

WdfVersionBind
WdfVersionBindClass
WdfVersionUnbindClass
WdfVersionUnbind

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 189KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.3MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 411KB - Virtual size: 410KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win81X64/RtlExtUI.dll
.dll regsvr32 windows x64

2bf7f4adb8ae5e2b654042681a7120d7

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-03-2017 19:05

Not After

01-06-2018 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:e8:60:cd:f0:68:52:17:8c:41:3d:a2:63:f8:2d:cb:2a:38:94:ec:f4:ce:9f:a3:00:cc:87:c5:90:9c:71
Signer

Actual PE Digest

0a:99:e8:60:cd:f0:68:52:17:8c:41:3d:a2:63:f8:2d:cb:2a:38:94:ec:f4:ce:9f:a3:00:cc:87:c5:90:9c:71

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-12-2022 13:51
Valid: false

7a:81:25:7b:f2:94:df:21:87:e3:6c:6a:92:66:67:0a:47:e3:9a:ec
Signer

Actual PE Digest

7a:81:25:7b:f2:94:df:21:87:e3:6c:6a:92:66:67:0a:47:e3:9a:ec

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:37
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

fflush
vsprintf_s
strcat_s
_fsopen
??3@YAXPEAX@Z
fclose
fputs
??_U@YAPEAX_K@Z
??_V@YAXPEAX@Z
wcschr
wcstoul
_wtoi
_wcsnicmp
_itow_s
??2@YAPEAX_K@Z
_vsnprintf_s
wcsncpy_s
_vsnwprintf
_purecall
free
malloc
_vsnprintf
strncmp
strcpy_s
_XcptFilter
_initterm
_amsg_exit
__C_specific_handler
__CxxFrameHandler3
memset
sprintf_s
swprintf_s
memcpy

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
StringFromCLSID

oleaut32

SysFreeString
VariantClear
VariantInit
SysAllocStringByteLen
SysAllocString

user32

IsDlgButtonChecked
CheckDlgButton
EndDialog
DialogBoxParamW
MessageBoxA
EnableWindow
GetDialogBaseUnits
GetPropW
SetWindowTextW
GetDlgItemTextA
MessageBoxW
UnhookWindowsHookEx
SetWindowsHookExW
GetDlgItem
ReleaseDC
GetDC
SetPropW
CallNextHookEx
GetParent
PostMessageW
RemovePropW
DestroyWindow
GetWindowTextW
GetWindowTextA
SetWindowTextA
SendMessageW

kernel32

QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
Sleep
CreateFileMappingW
GetLastError
FileTimeToSystemTime
GetDateFormatA
UnmapViewOfFile
MapViewOfFile
CreateFileA
VerifyVersionInfoW
MultiByteToWideChar
VerSetConditionMask
CloseHandle
GetLocalTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleFileNameW
LoadLibraryW
FreeLibrary
CreateMutexW
GetSystemTime
ReleaseMutex
OutputDebugStringA
GetCurrentThreadId
WaitForSingleObject

advapi32

RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegSetValueExW
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyA
RegQueryValueExA

comctl32

CreatePropertySheetPageW

crypt32

CertCreateCertificateContext
CertOpenSystemStoreA
CertCompareCertificateName
CertGetNameStringA
CertGetCertificateContextProperty
CertEnumCertificatesInStore
CertCloseStore
CertAddCertificateContextToStore
CertFreeCertificateContext

cryptui

CryptUIDlgViewContext

comdlg32

GetOpenFileNameA

gdi32

GetDeviceCaps

mfc42u

ord626
ord2846
ord1040
ord1812
ord4557

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 622B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win81X64/Rtlihvs.dll
.dll windows x64

f5ec49062f03d062e455c7bab9bf8aa8

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-03-2017 19:05

Not After

01-06-2018 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

48:38:ae:21:e1:00:e5:66:c8:fd:08:5f:1c:1a:de:e6:56:ad:1c:f2:66:0c:f4:3e:fc:56:cc:da:42:7b:cf:3f
Signer

Actual PE Digest

48:38:ae:21:e1:00:e5:66:c8:fd:08:5f:1c:1a:de:e6:56:ad:1c:f2:66:0c:f4:3e:fc:56:cc:da:42:7b:cf:3f

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-12-2022 13:51
Valid: false

9b:db:37:92:fc:d7:bc:b5:93:d4:2d:5e:8c:02:18:e0:42:90:ec:67
Signer

Actual PE Digest

9b:db:37:92:fc:d7:bc:b5:93:d4:2d:5e:8c:02:18:e0:42:90:ec:67

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:37
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

crypt32

CertEnumCertificatesInStore
CryptUnprotectData
CertFreeCertificateContext
CertCloseStore
CertGetCertificateContextProperty
CertOpenStore

oleaut32

SysFreeString
SysStringByteLen
VariantInit
SysAllocString
VariantClear

kernel32

SetLastError
FlsGetValue
GetCurrentThreadId
FlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
RtlPcToFileHeader
GetCPInfo
GetACP
GetOEMCP
GetDriveTypeA
LCMapStringW
GetFileAttributesA
FreeLibrary
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
FlsFree
WriteConsoleW
SetFilePointer
CreateFileW
GetStringTypeW
VirtualProtect
VirtualAlloc
SetThreadStackGuarantee
GetSystemInfo
VirtualQuery
HeapReAlloc
GetExitCodeProcess
CreateProcessA
SetEndOfFile
GetProcessHeap
ReadFile
CompareStringW
SetEnvironmentVariableA
CloseHandle
GetLastError
ReleaseMutex
SetEvent
WaitForSingleObject
ResetEvent
LocalFree
Sleep
LeaveCriticalSection
EnterCriticalSection
GetTempPathW
GetLocalTime
WideCharToMultiByte
CreateMutexA
InitializeCriticalSection
CreateEventA
DecodePointer
EncodePointer
ExitProcess
CreateThread
GetModuleHandleW
GetProcAddress
RaiseException
GetFullPathNameW
GetCurrentDirectoryW
RtlLookupFunctionEntry
CreateDirectoryW
HeapAlloc
HeapFree
RtlUnwindEx
GetVersionExW
GetCommandLineA
FlsSetValue
VerSetConditionMask
VerifyVersionInfoA
MultiByteToWideChar
WTSGetActiveConsoleSessionId
LocalAlloc
FormatMessageW
GetModuleFileNameA
GetPrivateProfileIntW
GetPrivateProfileStringW
TerminateThread
DeleteCriticalSection
SetStdHandle
DisableThreadLibraryCalls
OutputDebugStringA
CreateFileA
HeapSize
LoadLibraryW
GlobalMemoryStatus
GetVersion
GetModuleHandleA
GetSystemDefaultLocaleName
GetComputerNameW
GetUserDefaultLocaleName
GetComputerNameA
GetTickCount64
GetVersionExA
SetThreadPriority
GetSystemTime
LoadLibraryA

advapi32

RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegSetValueExA
FreeSid
ConvertSidToStringSidA
RegisterEventSourceW
ReportEventW
DeregisterEventSource
CryptReleaseContext
DuplicateToken
GetTokenInformation
RegDeleteValueA
RegGetValueA
CryptAcquireContextA
CryptGenRandom
RegCreateKeyExA
ImpersonateLoggedOnUser
RevertToSelf
GetUserNameA
LookupAccountNameA
RegCloseKey

ole32

CreateStreamOnHGlobal
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoInitializeEx

ws2_32

getaddrinfo
WSACleanup
inet_addr
ntohs
WSAStartup
htons

rpcrt4

UuidToStringA
UuidCreate
RpcStringFreeA

user32

MessageBoxW
GetSystemMetrics
GetProcessWindowStation
GetUserObjectInformationW
MsgWaitForMultipleObjects
GetDesktopWindow

wtsapi32

WTSQueryUserToken
WTSFreeMemory
WTSQuerySessionInformationA
WTSEnumerateSessionsA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

wlanapi

WlanSetSecuritySettings
WlanGetProfile
WlanGetNetworkBssList
WlanFreeMemory
WlanScan
WlanOpenHandle
WlanCloseHandle
WlanQueryInterface
WlanReasonCodeToString
WlanDisconnect
WlanConnect
WlanGetAvailableNetworkList
WlanGetProfileList
WlanRegisterVirtualStationNotification
WlanRegisterNotification

xmllite

CreateXmlReader

iphlpapi

IcmpCloseHandle
IcmpSendEcho
GetIpNetTable2
IcmpCreateFile
IpReleaseAddress
IpRenewAddress
Icmp6SendEcho2
Icmp6CreateFile
FreeMibTable
GetUnicastIpAddressTable
GetAdaptersAddresses
GetAdaptersInfo
GetIpAddrTable
GetIfTable
CancelIPChangeNotify
GetInterfaceInfo
NotifyAddrChange

Exports

Exports

Dot11ExtIhvGetVersionInfo
Dot11ExtIhvInitService
Dot11ExtIhvInitVirtualStation

Sections

.text
Size: 981KB - Virtual size: 981KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win81X64/netrtwlanu.cat
Windows/RTWLANU_Driver/Win81X64/netrtwlanu.inf
Windows/RTWLANU_Driver/Win81X64/rtlCoInst.dat
Windows/RTWLANU_Driver/Win81X64/rtlCoInst.dll
.dll windows x64

49861fc8b24187bb146a41202e5ab2c3

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-03-2017 19:05

Not After

01-06-2018 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

16:88:3f:3a:a8:77:b2:3c:c0:8b:a7:7b:0c:1b:97:40:e8:ad:f7:5d:9e:5a:99:9f:f8:8d:4e:20:ef:6e:2d:ba
Signer

Actual PE Digest

16:88:3f:3a:a8:77:b2:3c:c0:8b:a7:7b:0c:1b:97:40:e8:ad:f7:5d:9e:5a:99:9f:f8:8d:4e:20:ef:6e:2d:ba

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-12-2022 13:51
Valid: false

0a:37:73:40:21:86:22:e8:a7:9f:54:7f:61:6d:21:cc:a1:23:51:82
Signer

Actual PE Digest

0a:37:73:40:21:86:22:e8:a7:9f:54:7f:61:6d:21:cc:a1:23:51:82

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:37
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

free
_strnicmp
strncmp
fclose
malloc
sprintf
_initterm
memset
fopen
fgets
strtok

ntdll

RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiClassGuidsFromNameA
SetupDiOpenDevRegKey
SetupDiGetDeviceRegistryPropertyA
SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
SetupDiEnumDeviceInfo

kernel32

DisableThreadLibraryCalls
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLocaleInfoA
GetLastError
OutputDebugStringA
GetSystemDirectoryA

advapi32

RegOpenKeyA
RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegQueryValueExA

Exports

Exports

rtlCoInst

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win81X64/rtwlanu.sys
.exe windows x64

df7620e73194af6a78533a92517075ed

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-03-2017 19:05

Not After

01-06-2018 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

93:5d:96:d1:6d:fb:d6:7c:8b:ab:b7:a9:ae:db:e4:f6:49:43:21:05:a2:ca:8e:14:5b:40:c6:ab:b7:ac:75:94
Signer

Actual PE Digest

93:5d:96:d1:6d:fb:d6:7c:8b:ab:b7:a9:ae:db:e4:f6:49:43:21:05:a2:ca:8e:14:5b:40:c6:ab:b7:ac:75:94

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-12-2022 13:51
Valid: false

96:03:8b:9c:8e:a2:de:2a:53:27:39:0f:27:30:26:2c:d0:71:34:5f
Signer

Actual PE Digest

96:03:8b:9c:8e:a2:de:2a:53:27:39:0f:27:30:26:2c:d0:71:34:5f

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:40
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

ZwDeviceIoControlFile
ZwClose
ZwCreateFile
KeWaitForSingleObject
KeClearEvent
PoUnregisterPowerSettingCallback
PoRegisterPowerSettingCallback
IoWMIRegistrationControl
IoReuseIrp
IoFreeIrp
IoCancelIrp
IofCallDriver
IoAllocateIrp
ExFreePoolWithTag
ExAllocatePool
KeSetEvent
RtlCompareMemory
RtlCopyUnicodeString
MmGetSystemRoutineAddress
KeInitializeEvent
KeFlushQueuedDpcs
KeBugCheckEx
KfRaiseIrql
KeLowerIrql
DbgPrint
RtlGUIDFromString
strncpy
_vsnprintf
RtlUnicodeStringToInteger
RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlFreeUnicodeString
strcmp
strchr
wcsstr
RtlInitString
RtlUnicodeStringToAnsiString
RtlFreeAnsiString
KeInitializeMutex
KeReleaseMutex
KeInitializeSemaphore
KeReleaseSemaphore
KeSetPriorityThread
PsCreateSystemThread
PsTerminateSystemThread
ObReferenceObjectByHandle
ObfDereferenceObject
ZwOpenKey
ZwEnumerateKey
ZwQueryValueKey
ZwSetValueKey
IofCompleteRequest
IoCsqInitialize
IoCsqInsertIrp
IoCsqRemoveNextIrp
MmMapLockedPagesSpecifyCache
KeReleaseSpinLock
KeAcquireSpinLockRaiseToDpc
KeInitializeSpinLock
RtlInitUnicodeString

hal

KeQueryPerformanceCounter
KeStallExecutionProcessor

ndis.sys

NdisOpenConfigurationEx
NdisInitializeEvent
NdisMIndicateReceiveNetBufferLists
NdisAllocateMdl
NdisAllocateNetBufferAndNetBufferList
NdisMIdleNotificationComplete
NdisMIdleNotificationConfirm
NdisMDeregisterMiniportDriver
NdisMRegisterMiniportDriver
NdisMGetDeviceProperty
NdisFreeMdl
NdisFreeNetBufferList
NdisFreeNetBufferListPool
NdisMIndicateStatusEx
NdisSetOptionalHandlers
NdisMFreePort
NdisMAllocatePort
NdisMNetPnPEvent
NdisFreeIoWorkItem
NdisQueueIoWorkItem
NdisAllocateIoWorkItem
NdisFreeTimerObject
NdisCancelTimerObject
NdisSetTimerObject
NdisAllocateTimerObject
NdisAllocateMemoryWithTagPriority
NdisReadNetworkAddress
NdisGetVersion
NdisMSleep
NdisAllocateNetBufferListPool
NdisSetEvent
NdisWriteConfiguration
NdisFreeMemory
NdisResetEvent
NdisWaitEvent
NdisOpenFile
NdisCloseFile
NdisMapFile
NdisUnmapFile
NdisInitializeString
NdisRegisterDeviceEx
NdisDeregisterDeviceEx
NdisMSetMiniportAttributes
NdisMRemoveMiniport
NdisMSendNetBufferListsComplete
NdisReadConfiguration
NdisCloseConfiguration
NdisMOidRequestComplete

wdfldr.sys

WdfVersionUnbind
WdfVersionBindClass
WdfVersionUnbindClass
WdfVersionBind

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.8MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 278KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win81X86/RtlExtUI.dll
.dll regsvr32 windows x86

f3b2dd92c703d59ebb05c6dc9bacf48e

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-03-2017 19:05

Not After

01-06-2018 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

57:05:ea:67:a8:3e:38:65:d9:e0:d0:c5:b3:4c:d9:7d:a5:e8:10:ce:19:23:82:8a:d5:a7:99:60:bb:48:bb:52
Signer

Actual PE Digest

57:05:ea:67:a8:3e:38:65:d9:e0:d0:c5:b3:4c:d9:7d:a5:e8:10:ce:19:23:82:8a:d5:a7:99:60:bb:48:bb:52

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-12-2022 13:51
Valid: false

65:0b:34:b8:63:71:21:6e:65:53:d5:5a:db:88:4e:05:be:91:d8:e3
Signer

Actual PE Digest

65:0b:34:b8:63:71:21:6e:65:53:d5:5a:db:88:4e:05:be:91:d8:e3

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:38
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fputs
sprintf_s
vsprintf_s
strcat_s
fflush
_except_handler4_common
_amsg_exit
_initterm
_XcptFilter
strcpy_s
strncmp
memcpy
free
malloc
_vsnprintf
_purecall
wcsncpy_s
_vsnwprintf
_itow_s
_wtoi
swprintf_s
wcschr
wcstoul
_wcsnicmp
??_U@YAPAXI@Z
??_V@YAXPAX@Z
__CxxFrameHandler3
??2@YAPAXI@Z
??3@YAXPAX@Z
memset
_fsopen
fclose
_vsnprintf_s

ole32

CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CoCreateInstance

oleaut32

SysAllocString
SysAllocStringByteLen
VariantInit
VariantClear
SysFreeString

user32

SetWindowsHookExW
SetWindowTextW
MessageBoxA
DestroyWindow
UnhookWindowsHookEx
SetPropW
RemovePropW
GetPropW
CallNextHookEx
GetDlgItem
GetWindowTextW
GetDlgItemTextA
GetParent
PostMessageW
GetDC
GetDialogBaseUnits
ReleaseDC
EnableWindow
MessageBoxW
DialogBoxParamW
IsDlgButtonChecked
EndDialog
CheckDlgButton
SetWindowTextA
GetWindowTextA
SendMessageW

kernel32

TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
FileTimeToSystemTime
GetDateFormatA
GetCurrentProcess
SetUnhandledExceptionFilter
GetLastError
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
CreateFileA
UnhandledExceptionFilter
GetModuleFileNameW
LoadLibraryW
MapViewOfFile
CreateFileMappingW
GetProcAddress
FreeLibrary
DisableThreadLibraryCalls
CreateMutexW
GetLocalTime
CloseHandle
OutputDebugStringA
GetSystemTime
GetCurrentThreadId
WaitForSingleObject
ReleaseMutex

advapi32

RegOpenKeyExA
RegQueryValueExA
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegCloseKey
RegSetValueExW
RegSetValueExA
RegOpenKeyA
RegDeleteValueA
RegDeleteKeyA

comctl32

CreatePropertySheetPageW

ws2_32

send

crypt32

CertCloseStore
CertAddCertificateContextToStore
CertCompareCertificateName
CertOpenSystemStoreA
CertFreeCertificateContext
CertGetNameStringA
CertEnumCertificatesInStore
CertCreateCertificateContext
CertGetCertificateContextProperty

cryptui

CryptUIDlgViewContext

comdlg32

GetOpenFileNameA

gdi32

GetDeviceCaps

mfc42u

ord800
ord2810
ord540
ord1808
ord4229

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win81X86/Rtlihvs.dll
.dll windows x86

975c929b21f0312d5667ff910ec73e33

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-03-2017 19:05

Not After

01-06-2018 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7f:32:44:1f:7a:1a:72:59:34:59:3c:96:81:0b:83:56:02:48:2f:a7:ec:49:17:31:f2:ae:98:f9:f3:84:f0:3c
Signer

Actual PE Digest

7f:32:44:1f:7a:1a:72:59:34:59:3c:96:81:0b:83:56:02:48:2f:a7:ec:49:17:31:f2:ae:98:f9:f3:84:f0:3c

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-12-2022 13:51
Valid: false

62:6c:68:12:86:e7:84:b2:00:57:44:04:ad:b2:8a:02:f1:1b:00:96
Signer

Actual PE Digest

62:6c:68:12:86:e7:84:b2:00:57:44:04:ad:b2:8a:02:f1:1b:00:96

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:38
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CertEnumCertificatesInStore
CertFreeCertificateContext
CertCloseStore
CertGetCertificateContextProperty
CryptUnprotectData
CertOpenStore

oleaut32

SysStringByteLen
VariantInit
VariantClear
SysFreeString
SysAllocString

kernel32

InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
VirtualAlloc
HeapReAlloc
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
GetDriveTypeA
LCMapStringA
LCMapStringW
GetFileAttributesA
FreeLibrary
InterlockedExchange
LoadLibraryExA
SetStdHandle
TlsFree
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
CreateFileW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
GetExitCodeProcess
CreateProcessA
CreateFileA
SetEndOfFile
GetProcessHeap
ReadFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
CloseHandle
GetLastError
ReleaseMutex
SetEvent
WaitForSingleObject
ResetEvent
LocalFree
Sleep
LeaveCriticalSection
EnterCriticalSection
GetTempPathW
GetLocalTime
WideCharToMultiByte
CreateMutexA
InitializeCriticalSection
CreateEventA
CreateThread
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
ExitProcess
GetModuleHandleA
GetProcAddress
RaiseException
GetFullPathNameW
GetCurrentDirectoryW
RtlUnwind
CreateDirectoryW
HeapAlloc
HeapFree
GetVersionExA
GetCommandLineA
VerSetConditionMask
VerifyVersionInfoA
MultiByteToWideChar
WTSGetActiveConsoleSessionId
LocalAlloc
FormatMessageW
GetModuleFileNameA
GetPrivateProfileIntW
GetPrivateProfileStringW
TerminateThread
DeleteCriticalSection
WriteConsoleA
DisableThreadLibraryCalls
OutputDebugStringA
HeapSize
GlobalMemoryStatus
GetVersion
GetUserDefaultLocaleName
GetSystemDefaultLocaleName
GetComputerNameW
InterlockedCompareExchange
GetTickCount64
GetComputerNameA
SetThreadPriority
GetSystemTime
LoadLibraryA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegOpenKeyA
RegSetValueExA
FreeSid
ConvertSidToStringSidA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
CryptReleaseContext
GetTokenInformation
DuplicateToken
RegDeleteValueA
RegGetValueA
CryptAcquireContextA
CryptGenRandom
RegCreateKeyExA
ImpersonateLoggedOnUser
RevertToSelf
GetUserNameA
LookupAccountNameA
RegCloseKey

ole32

CreateStreamOnHGlobal
CoCreateInstance
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize

ws2_32

getaddrinfo
WSACleanup
htons
inet_addr
ntohs
WSAStartup

rpcrt4

UuidCreate
RpcStringFreeA
UuidToStringA

user32

GetSystemMetrics
MessageBoxA
MsgWaitForMultipleObjects
GetUserObjectInformationW
GetProcessWindowStation
GetDesktopWindow

wtsapi32

WTSQuerySessionInformationA
WTSEnumerateSessionsA
WTSFreeMemory
WTSQueryUserToken

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

wlanapi

WlanScan
WlanFreeMemory
WlanRegisterVirtualStationNotification
WlanRegisterNotification
WlanOpenHandle
WlanCloseHandle
WlanGetNetworkBssList
WlanGetProfile
WlanQueryInterface
WlanReasonCodeToString
WlanConnect
WlanDisconnect
WlanGetAvailableNetworkList
WlanGetProfileList
WlanSetSecuritySettings

xmllite

CreateXmlReader

iphlpapi

Icmp6SendEcho2
Icmp6CreateFile
GetIpNetTable2
IcmpCreateFile
IpReleaseAddress
GetInterfaceInfo
IcmpSendEcho
IcmpCloseHandle
GetUnicastIpAddressTable
FreeMibTable
GetAdaptersAddresses
GetAdaptersInfo
NotifyAddrChange
CancelIPChangeNotify
GetIfTable
IpRenewAddress
GetIpAddrTable

Exports

Exports

Dot11ExtIhvGetVersionInfo
Dot11ExtIhvInitService
Dot11ExtIhvInitVirtualStation

Sections

.text
Size: 874KB - Virtual size: 873KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win81X86/netrtwlanu.cat
Windows/RTWLANU_Driver/Win81X86/netrtwlanu.inf
Windows/RTWLANU_Driver/Win81X86/rtlCoInst.dat
Windows/RTWLANU_Driver/Win81X86/rtlCoInst.dll
.dll windows x86

b56ee6cf404c5405eeff689c530d7c80

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-03-2017 19:05

Not After

01-06-2018 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b4:8b:6b:ff:2b:cd:83:f9:21:7b:4d:c7:84:39:a2:8c:f9:17:d8:f4:2d:42:30:73:d4:fd:1f:3d:48:9d:c8:82
Signer

Actual PE Digest

b4:8b:6b:ff:2b:cd:83:f9:21:7b:4d:c7:84:39:a2:8c:f9:17:d8:f4:2d:42:30:73:d4:fd:1f:3d:48:9d:c8:82

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-12-2022 13:51
Valid: false

05:8a:47:dc:06:4a:06:bb:0a:1f:09:35:bb:17:53:3f:6f:bf:40:7a
Signer

Actual PE Digest

05:8a:47:dc:06:4a:06:bb:0a:1f:09:35:bb:17:53:3f:6f:bf:40:7a

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:38
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

malloc
_adjust_fdiv
_initterm
free
fopen
fgets
strtok
fclose
strncmp
_strnicmp
sprintf

setupapi

SetupDiOpenDevRegKey
SetupDiClassGuidsFromNameA
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiSetClassInstallParamsA
SetupDiGetDeviceRegistryPropertyA
SetupDiCallClassInstaller

kernel32

DisableThreadLibraryCalls
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLocaleInfoA
GetSystemDirectoryA
GetLastError
OutputDebugStringA

advapi32

RegOpenKeyA
RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegQueryValueExA

Exports

Exports

rtlCoInst

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 554B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win81X86/rtwlanu.sys
.exe windows x86

2f8b2ee047e064ba5edb737fc541bf5f

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-03-2017 19:05

Not After

01-06-2018 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

aa:27:cb:05:80:98:01:6d:75:ae:06:25:7e:ec:71:1c:36:8f:7e:81:e3:bb:46:2a:b2:34:69:91:4b:de:68:72
Signer

Actual PE Digest

aa:27:cb:05:80:98:01:6d:75:ae:06:25:7e:ec:71:1c:36:8f:7e:81:e3:bb:46:2a:b2:34:69:91:4b:de:68:72

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-12-2022 13:51
Valid: false

e7:70:93:5f:05:6e:de:cb:9c:b3:7f:69:05:cc:02:c0:cc:fa:85:bd
Signer

Actual PE Digest

e7:70:93:5f:05:6e:de:cb:9c:b3:7f:69:05:cc:02:c0:cc:fa:85:bd

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:40
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ZwDeviceIoControlFile
ZwClose
ZwCreateFile
KeWaitForSingleObject
KeClearEvent
PoUnregisterPowerSettingCallback
PoRegisterPowerSettingCallback
IoWMIRegistrationControl
IoReuseIrp
IoFreeIrp
IoCancelIrp
IofCallDriver
IoAllocateIrp
ExFreePoolWithTag
ExAllocatePool
KeSetEvent
RtlCompareMemory
RtlCopyUnicodeString
MmGetSystemRoutineAddress
KeInitializeEvent
memcmp
_alldiv
KeFlushQueuedDpcs
memcpy
_aulldiv
KeQuerySystemTime
KeBugCheckEx
DbgPrint
memset
_aullrem
_aullshr
_allshl
strncpy
_vsnprintf
RtlUnicodeStringToInteger
RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlFreeUnicodeString
strchr
wcsstr
RtlInitString
RtlUnicodeStringToAnsiString
RtlFreeAnsiString
KeInitializeMutex
KeReleaseMutex
KeInitializeSemaphore
KeReleaseSemaphore
KeSetPriorityThread
PsCreateSystemThread
PsTerminateSystemThread
ObReferenceObjectByHandle
ObfDereferenceObject
ZwOpenKey
ZwEnumerateKey
ZwQueryValueKey
ZwSetValueKey
IofCompleteRequest
IoCsqInitialize
IoCsqInsertIrp
IoCsqRemoveNextIrp
RtlGUIDFromString
MmMapLockedPagesSpecifyCache
KeInitializeSpinLock
RtlInitUnicodeString
_allmul

hal

KeQueryPerformanceCounter
KfRaiseIrql
KfLowerIrql
KfReleaseSpinLock
KfAcquireSpinLock
KeGetCurrentIrql
KeStallExecutionProcessor

ndis.sys

NdisAllocateNetBufferAndNetBufferList
NdisMIdleNotificationComplete
NdisMIdleNotificationConfirm
NdisMDeregisterMiniportDriver
NdisMRegisterMiniportDriver
NdisMGetDeviceProperty
NdisFreeMdl
NdisFreeNetBufferList
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisSetOptionalHandlers
NdisMFreePort
NdisMAllocatePort
NdisAllocateMdl
NdisFreeIoWorkItem
NdisQueueIoWorkItem
NdisAllocateIoWorkItem
NdisFreeTimerObject
NdisCancelTimerObject
NdisSetTimerObject
NdisAllocateTimerObject
NdisAllocateMemoryWithTagPriority
NdisSetEvent
NdisGetVersion
NdisMOidRequestComplete
NdisMSendNetBufferListsComplete
NdisMIndicateStatusEx
NdisMIndicateReceiveNetBufferLists
NdisReadConfiguration
NdisCloseConfiguration
NdisReadNetworkAddress
NdisInitializeEvent
NdisMNetPnPEvent
NdisMSleep
NdisWriteConfiguration
NdisFreeMemory
NdisResetEvent
NdisWaitEvent
NdisOpenFile
NdisCloseFile
NdisMapFile
NdisUnmapFile
NdisInitializeString
NdisRegisterDeviceEx
NdisDeregisterDeviceEx
NdisMSetMiniportAttributes
NdisMRemoveMiniport
NdisOpenConfigurationEx

wdfldr.sys

WdfVersionUnbind
WdfVersionBindClass
WdfVersionUnbindClass
WdfVersionBind

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.2MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 403KB - Virtual size: 403KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win8X64/RtlExtUI.dll
.dll regsvr32 windows x64

2bf7f4adb8ae5e2b654042681a7120d7

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21-01-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-01-2017 00:00

Not After

18-01-2028 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:e8:60:cd:f0:68:52:17:8c:41:3d:a2:63:f8:2d:cb:2a:38:94:ec:f4:ce:9f:a3:00:cc:87:c5:90:9c:71
Signer

Actual PE Digest

0a:99:e8:60:cd:f0:68:52:17:8c:41:3d:a2:63:f8:2d:cb:2a:38:94:ec:f4:ce:9f:a3:00:cc:87:c5:90:9c:71

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

15-12-2022 13:51
Valid: false

7a:81:25:7b:f2:94:df:21:87:e3:6c:6a:92:66:67:0a:47:e3:9a:ec
Signer

Actual PE Digest

7a:81:25:7b:f2:94:df:21:87:e3:6c:6a:92:66:67:0a:47:e3:9a:ec

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:37
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

fflush
vsprintf_s
strcat_s
_fsopen
??3@YAXPEAX@Z
fclose
fputs
??_U@YAPEAX_K@Z
??_V@YAXPEAX@Z
wcschr
wcstoul
_wtoi
_wcsnicmp
_itow_s
??2@YAPEAX_K@Z
_vsnprintf_s
wcsncpy_s
_vsnwprintf
_purecall
free
malloc
_vsnprintf
strncmp
strcpy_s
_XcptFilter
_initterm
_amsg_exit
__C_specific_handler
__CxxFrameHandler3
memset
sprintf_s
swprintf_s
memcpy

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
StringFromCLSID

oleaut32

SysFreeString
VariantClear
VariantInit
SysAllocStringByteLen
SysAllocString

user32

IsDlgButtonChecked
CheckDlgButton
EndDialog
DialogBoxParamW
MessageBoxA
EnableWindow
GetDialogBaseUnits
GetPropW
SetWindowTextW
GetDlgItemTextA
MessageBoxW
UnhookWindowsHookEx
SetWindowsHookExW
GetDlgItem
ReleaseDC
GetDC
SetPropW
CallNextHookEx
GetParent
PostMessageW
RemovePropW
DestroyWindow
GetWindowTextW
GetWindowTextA
SetWindowTextA
SendMessageW

kernel32

QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
Sleep
CreateFileMappingW
GetLastError
FileTimeToSystemTime
GetDateFormatA
UnmapViewOfFile
MapViewOfFile
CreateFileA
VerifyVersionInfoW
MultiByteToWideChar
VerSetConditionMask
CloseHandle
GetLocalTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleFileNameW
LoadLibraryW
FreeLibrary
CreateMutexW
GetSystemTime
ReleaseMutex
OutputDebugStringA
GetCurrentThreadId
WaitForSingleObject

advapi32

RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegSetValueExW
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyA
RegQueryValueExA

comctl32

CreatePropertySheetPageW

crypt32

CertCreateCertificateContext
CertOpenSystemStoreA
CertCompareCertificateName
CertGetNameStringA
CertGetCertificateContextProperty
CertEnumCertificatesInStore
CertCloseStore
CertAddCertificateContextToStore
CertFreeCertificateContext

cryptui

CryptUIDlgViewContext

comdlg32

GetOpenFileNameA

gdi32

GetDeviceCaps

mfc42u

ord626
ord2846
ord1040
ord1812
ord4557

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 622B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win8X64/Rtlihvs.dll
.dll windows x64

f5ec49062f03d062e455c7bab9bf8aa8

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21-01-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-01-2017 00:00

Not After

18-01-2028 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

48:38:ae:21:e1:00:e5:66:c8:fd:08:5f:1c:1a:de:e6:56:ad:1c:f2:66:0c:f4:3e:fc:56:cc:da:42:7b:cf:3f
Signer

Actual PE Digest

48:38:ae:21:e1:00:e5:66:c8:fd:08:5f:1c:1a:de:e6:56:ad:1c:f2:66:0c:f4:3e:fc:56:cc:da:42:7b:cf:3f

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

15-12-2022 13:51
Valid: false

9b:db:37:92:fc:d7:bc:b5:93:d4:2d:5e:8c:02:18:e0:42:90:ec:67
Signer

Actual PE Digest

9b:db:37:92:fc:d7:bc:b5:93:d4:2d:5e:8c:02:18:e0:42:90:ec:67

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:37
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

crypt32

CertEnumCertificatesInStore
CryptUnprotectData
CertFreeCertificateContext
CertCloseStore
CertGetCertificateContextProperty
CertOpenStore

oleaut32

SysFreeString
SysStringByteLen
VariantInit
SysAllocString
VariantClear

kernel32

SetLastError
FlsGetValue
GetCurrentThreadId
FlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
RtlPcToFileHeader
GetCPInfo
GetACP
GetOEMCP
GetDriveTypeA
LCMapStringW
GetFileAttributesA
FreeLibrary
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
FlsFree
WriteConsoleW
SetFilePointer
CreateFileW
GetStringTypeW
VirtualProtect
VirtualAlloc
SetThreadStackGuarantee
GetSystemInfo
VirtualQuery
HeapReAlloc
GetExitCodeProcess
CreateProcessA
SetEndOfFile
GetProcessHeap
ReadFile
CompareStringW
SetEnvironmentVariableA
CloseHandle
GetLastError
ReleaseMutex
SetEvent
WaitForSingleObject
ResetEvent
LocalFree
Sleep
LeaveCriticalSection
EnterCriticalSection
GetTempPathW
GetLocalTime
WideCharToMultiByte
CreateMutexA
InitializeCriticalSection
CreateEventA
DecodePointer
EncodePointer
ExitProcess
CreateThread
GetModuleHandleW
GetProcAddress
RaiseException
GetFullPathNameW
GetCurrentDirectoryW
RtlLookupFunctionEntry
CreateDirectoryW
HeapAlloc
HeapFree
RtlUnwindEx
GetVersionExW
GetCommandLineA
FlsSetValue
VerSetConditionMask
VerifyVersionInfoA
MultiByteToWideChar
WTSGetActiveConsoleSessionId
LocalAlloc
FormatMessageW
GetModuleFileNameA
GetPrivateProfileIntW
GetPrivateProfileStringW
TerminateThread
DeleteCriticalSection
SetStdHandle
DisableThreadLibraryCalls
OutputDebugStringA
CreateFileA
HeapSize
LoadLibraryW
GlobalMemoryStatus
GetVersion
GetModuleHandleA
GetSystemDefaultLocaleName
GetComputerNameW
GetUserDefaultLocaleName
GetComputerNameA
GetTickCount64
GetVersionExA
SetThreadPriority
GetSystemTime
LoadLibraryA

advapi32

RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegSetValueExA
FreeSid
ConvertSidToStringSidA
RegisterEventSourceW
ReportEventW
DeregisterEventSource
CryptReleaseContext
DuplicateToken
GetTokenInformation
RegDeleteValueA
RegGetValueA
CryptAcquireContextA
CryptGenRandom
RegCreateKeyExA
ImpersonateLoggedOnUser
RevertToSelf
GetUserNameA
LookupAccountNameA
RegCloseKey

ole32

CreateStreamOnHGlobal
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoInitializeEx

ws2_32

getaddrinfo
WSACleanup
inet_addr
ntohs
WSAStartup
htons

rpcrt4

UuidToStringA
UuidCreate
RpcStringFreeA

user32

MessageBoxW
GetSystemMetrics
GetProcessWindowStation
GetUserObjectInformationW
MsgWaitForMultipleObjects
GetDesktopWindow

wtsapi32

WTSQueryUserToken
WTSFreeMemory
WTSQuerySessionInformationA
WTSEnumerateSessionsA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

wlanapi

WlanSetSecuritySettings
WlanGetProfile
WlanGetNetworkBssList
WlanFreeMemory
WlanScan
WlanOpenHandle
WlanCloseHandle
WlanQueryInterface
WlanReasonCodeToString
WlanDisconnect
WlanConnect
WlanGetAvailableNetworkList
WlanGetProfileList
WlanRegisterVirtualStationNotification
WlanRegisterNotification

xmllite

CreateXmlReader

iphlpapi

IcmpCloseHandle
IcmpSendEcho
GetIpNetTable2
IcmpCreateFile
IpReleaseAddress
IpRenewAddress
Icmp6SendEcho2
Icmp6CreateFile
FreeMibTable
GetUnicastIpAddressTable
GetAdaptersAddresses
GetAdaptersInfo
GetIpAddrTable
GetIfTable
CancelIPChangeNotify
GetInterfaceInfo
NotifyAddrChange

Exports

Exports

Dot11ExtIhvGetVersionInfo
Dot11ExtIhvInitService
Dot11ExtIhvInitVirtualStation

Sections

.text
Size: 981KB - Virtual size: 981KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win8X64/netrtwlanu.cat
Windows/RTWLANU_Driver/Win8X64/netrtwlanu.inf
Windows/RTWLANU_Driver/Win8X64/rtlCoInst.dat
Windows/RTWLANU_Driver/Win8X64/rtlCoInst.dll
.dll windows x64

49861fc8b24187bb146a41202e5ab2c3

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21-01-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-01-2017 00:00

Not After

18-01-2028 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

16:88:3f:3a:a8:77:b2:3c:c0:8b:a7:7b:0c:1b:97:40:e8:ad:f7:5d:9e:5a:99:9f:f8:8d:4e:20:ef:6e:2d:ba
Signer

Actual PE Digest

16:88:3f:3a:a8:77:b2:3c:c0:8b:a7:7b:0c:1b:97:40:e8:ad:f7:5d:9e:5a:99:9f:f8:8d:4e:20:ef:6e:2d:ba

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

15-12-2022 13:51
Valid: false

0a:37:73:40:21:86:22:e8:a7:9f:54:7f:61:6d:21:cc:a1:23:51:82
Signer

Actual PE Digest

0a:37:73:40:21:86:22:e8:a7:9f:54:7f:61:6d:21:cc:a1:23:51:82

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:37
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

free
_strnicmp
strncmp
fclose
malloc
sprintf
_initterm
memset
fopen
fgets
strtok

ntdll

RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiClassGuidsFromNameA
SetupDiOpenDevRegKey
SetupDiGetDeviceRegistryPropertyA
SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
SetupDiEnumDeviceInfo

kernel32

DisableThreadLibraryCalls
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLocaleInfoA
GetLastError
OutputDebugStringA
GetSystemDirectoryA

advapi32

RegOpenKeyA
RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegQueryValueExA

Exports

Exports

rtlCoInst

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win8X64/rtwlanu.sys
.exe windows x64

a24ff19d21a614a17722f551473be786

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-03-2017 19:05

Not After

01-06-2018 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c9:b4:dd:bf:c9:fa:a7:28:da:cb:b0:9c:2b:fc:70:0b:e0:4f:71:ca:b9:3e:77:16:88:35:d5:82:86:54:9d:6b
Signer

Actual PE Digest

c9:b4:dd:bf:c9:fa:a7:28:da:cb:b0:9c:2b:fc:70:0b:e0:4f:71:ca:b9:3e:77:16:88:35:d5:82:86:54:9d:6b

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-12-2022 13:51
Valid: false

68:2b:92:60:10:30:30:80:6c:94:b5:66:e6:ff:53:3a:de:21:55:a8
Signer

Actual PE Digest

68:2b:92:60:10:30:30:80:6c:94:b5:66:e6:ff:53:3a:de:21:55:a8

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:39
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

KeClearEvent
KeWaitForSingleObject
KeSetEvent
PoUnregisterPowerSettingCallback
PoRegisterPowerSettingCallback
RtlCopyUnicodeString
IofCompleteRequest
IoWMIRegistrationControl
RtlCompareMemory
MmGetSystemRoutineAddress
ExFreePoolWithTag
IoWMIWriteEvent
ExAllocatePoolWithTag
ZwClose
ZwDeviceIoControlFile
ZwCreateFile
KeInitializeEvent
KeFlushQueuedDpcs
KeBugCheckEx
DbgPrint
strncpy
_vsnprintf
RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlUnicodeStringToInteger
RtlFreeUnicodeString
KeInitializeMutex
KeReleaseMutex
PsTerminateSystemThread
PsCreateSystemThread
ObReferenceObjectByHandle
ObfDereferenceObject
KeInitializeSemaphore
KeReleaseSemaphore
RtlInitString
ZwOpenKey
ZwQueryValueKey
RtlUnicodeStringToAnsiString
RtlFreeAnsiString
strchr
wcsstr
ZwEnumerateKey
ZwSetValueKey
IoCsqInsertIrp
IoCsqInitialize
IoCsqRemoveNextIrp
RtlGUIDFromString
KeReleaseSpinLock
KeAcquireSpinLockRaiseToDpc
MmMapLockedPagesSpecifyCache
RtlInitUnicodeString

hal

KeQueryPerformanceCounter
KeStallExecutionProcessor

ndis.sys

NdisMIndicateStatusEx
NdisInitializeEvent
NdisMIndicateReceiveNetBufferLists
NdisAllocateNetBufferAndNetBufferList
NdisAllocateMdl
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisFreeNetBufferList
NdisFreeMdl
NdisMDeregisterMiniportDriver
NdisMGetDeviceProperty
NdisMOidRequestComplete
NdisGetVersion
NdisMFreePort
NdisMNetPnPEvent
NdisMAllocatePort
NdisAllocateMemoryWithTagPriority
NdisQueueIoWorkItem
NdisFreeIoWorkItem
NdisAllocateIoWorkItem
NdisFreeTimerObject
NdisCancelTimerObject
NdisSetEvent
NdisAllocateTimerObject
NdisMRegisterMiniportDriver
NdisInitializeString
NdisOpenFile
NdisMapFile
NdisUnmapFile
NdisCloseFile
NdisFreeMemory
NdisWriteConfiguration
NdisWaitEvent
NdisResetEvent
NdisMSendNetBufferListsComplete
NdisMSetMiniportAttributes
NdisMRemoveMiniport
NdisRegisterDeviceEx
NdisDeregisterDeviceEx
NdisMSleep
NdisOpenConfigurationEx
NdisCloseConfiguration
NdisReadConfiguration
NdisReadNetworkAddress
NdisSetTimerObject

wdfldr.sys

WdfVersionBindClass
WdfVersionUnbindClass
WdfVersionBind
WdfVersionUnbind

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.8MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 295KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win8X86/RtlExtUI.dll
.dll regsvr32 windows x86

f3b2dd92c703d59ebb05c6dc9bacf48e

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21-01-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-01-2017 00:00

Not After

18-01-2028 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

57:05:ea:67:a8:3e:38:65:d9:e0:d0:c5:b3:4c:d9:7d:a5:e8:10:ce:19:23:82:8a:d5:a7:99:60:bb:48:bb:52
Signer

Actual PE Digest

57:05:ea:67:a8:3e:38:65:d9:e0:d0:c5:b3:4c:d9:7d:a5:e8:10:ce:19:23:82:8a:d5:a7:99:60:bb:48:bb:52

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

15-12-2022 13:51
Valid: false

65:0b:34:b8:63:71:21:6e:65:53:d5:5a:db:88:4e:05:be:91:d8:e3
Signer

Actual PE Digest

65:0b:34:b8:63:71:21:6e:65:53:d5:5a:db:88:4e:05:be:91:d8:e3

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:38
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fputs
sprintf_s
vsprintf_s
strcat_s
fflush
_except_handler4_common
_amsg_exit
_initterm
_XcptFilter
strcpy_s
strncmp
memcpy
free
malloc
_vsnprintf
_purecall
wcsncpy_s
_vsnwprintf
_itow_s
_wtoi
swprintf_s
wcschr
wcstoul
_wcsnicmp
??_U@YAPAXI@Z
??_V@YAXPAX@Z
__CxxFrameHandler3
??2@YAPAXI@Z
??3@YAXPAX@Z
memset
_fsopen
fclose
_vsnprintf_s

ole32

CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CoCreateInstance

oleaut32

SysAllocString
SysAllocStringByteLen
VariantInit
VariantClear
SysFreeString

user32

SetWindowsHookExW
SetWindowTextW
MessageBoxA
DestroyWindow
UnhookWindowsHookEx
SetPropW
RemovePropW
GetPropW
CallNextHookEx
GetDlgItem
GetWindowTextW
GetDlgItemTextA
GetParent
PostMessageW
GetDC
GetDialogBaseUnits
ReleaseDC
EnableWindow
MessageBoxW
DialogBoxParamW
IsDlgButtonChecked
EndDialog
CheckDlgButton
SetWindowTextA
GetWindowTextA
SendMessageW

kernel32

TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
FileTimeToSystemTime
GetDateFormatA
GetCurrentProcess
SetUnhandledExceptionFilter
GetLastError
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
CreateFileA
UnhandledExceptionFilter
GetModuleFileNameW
LoadLibraryW
MapViewOfFile
CreateFileMappingW
GetProcAddress
FreeLibrary
DisableThreadLibraryCalls
CreateMutexW
GetLocalTime
CloseHandle
OutputDebugStringA
GetSystemTime
GetCurrentThreadId
WaitForSingleObject
ReleaseMutex

advapi32

RegOpenKeyExA
RegQueryValueExA
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegCloseKey
RegSetValueExW
RegSetValueExA
RegOpenKeyA
RegDeleteValueA
RegDeleteKeyA

comctl32

CreatePropertySheetPageW

ws2_32

send

crypt32

CertCloseStore
CertAddCertificateContextToStore
CertCompareCertificateName
CertOpenSystemStoreA
CertFreeCertificateContext
CertGetNameStringA
CertEnumCertificatesInStore
CertCreateCertificateContext
CertGetCertificateContextProperty

cryptui

CryptUIDlgViewContext

comdlg32

GetOpenFileNameA

gdi32

GetDeviceCaps

mfc42u

ord800
ord2810
ord540
ord1808
ord4229

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win8X86/Rtlihvs.dll
.dll windows x86

975c929b21f0312d5667ff910ec73e33

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21-01-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-01-2017 00:00

Not After

18-01-2028 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7f:32:44:1f:7a:1a:72:59:34:59:3c:96:81:0b:83:56:02:48:2f:a7:ec:49:17:31:f2:ae:98:f9:f3:84:f0:3c
Signer

Actual PE Digest

7f:32:44:1f:7a:1a:72:59:34:59:3c:96:81:0b:83:56:02:48:2f:a7:ec:49:17:31:f2:ae:98:f9:f3:84:f0:3c

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

15-12-2022 13:51
Valid: false

62:6c:68:12:86:e7:84:b2:00:57:44:04:ad:b2:8a:02:f1:1b:00:96
Signer

Actual PE Digest

62:6c:68:12:86:e7:84:b2:00:57:44:04:ad:b2:8a:02:f1:1b:00:96

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:38
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CertEnumCertificatesInStore
CertFreeCertificateContext
CertCloseStore
CertGetCertificateContextProperty
CryptUnprotectData
CertOpenStore

oleaut32

SysStringByteLen
VariantInit
VariantClear
SysFreeString
SysAllocString

kernel32

InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
VirtualAlloc
HeapReAlloc
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
GetDriveTypeA
LCMapStringA
LCMapStringW
GetFileAttributesA
FreeLibrary
InterlockedExchange
LoadLibraryExA
SetStdHandle
TlsFree
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
CreateFileW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
GetExitCodeProcess
CreateProcessA
CreateFileA
SetEndOfFile
GetProcessHeap
ReadFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
CloseHandle
GetLastError
ReleaseMutex
SetEvent
WaitForSingleObject
ResetEvent
LocalFree
Sleep
LeaveCriticalSection
EnterCriticalSection
GetTempPathW
GetLocalTime
WideCharToMultiByte
CreateMutexA
InitializeCriticalSection
CreateEventA
CreateThread
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
ExitProcess
GetModuleHandleA
GetProcAddress
RaiseException
GetFullPathNameW
GetCurrentDirectoryW
RtlUnwind
CreateDirectoryW
HeapAlloc
HeapFree
GetVersionExA
GetCommandLineA
VerSetConditionMask
VerifyVersionInfoA
MultiByteToWideChar
WTSGetActiveConsoleSessionId
LocalAlloc
FormatMessageW
GetModuleFileNameA
GetPrivateProfileIntW
GetPrivateProfileStringW
TerminateThread
DeleteCriticalSection
WriteConsoleA
DisableThreadLibraryCalls
OutputDebugStringA
HeapSize
GlobalMemoryStatus
GetVersion
GetUserDefaultLocaleName
GetSystemDefaultLocaleName
GetComputerNameW
InterlockedCompareExchange
GetTickCount64
GetComputerNameA
SetThreadPriority
GetSystemTime
LoadLibraryA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegOpenKeyA
RegSetValueExA
FreeSid
ConvertSidToStringSidA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
CryptReleaseContext
GetTokenInformation
DuplicateToken
RegDeleteValueA
RegGetValueA
CryptAcquireContextA
CryptGenRandom
RegCreateKeyExA
ImpersonateLoggedOnUser
RevertToSelf
GetUserNameA
LookupAccountNameA
RegCloseKey

ole32

CreateStreamOnHGlobal
CoCreateInstance
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize

ws2_32

getaddrinfo
WSACleanup
htons
inet_addr
ntohs
WSAStartup

rpcrt4

UuidCreate
RpcStringFreeA
UuidToStringA

user32

GetSystemMetrics
MessageBoxA
MsgWaitForMultipleObjects
GetUserObjectInformationW
GetProcessWindowStation
GetDesktopWindow

wtsapi32

WTSQuerySessionInformationA
WTSEnumerateSessionsA
WTSFreeMemory
WTSQueryUserToken

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

wlanapi

WlanScan
WlanFreeMemory
WlanRegisterVirtualStationNotification
WlanRegisterNotification
WlanOpenHandle
WlanCloseHandle
WlanGetNetworkBssList
WlanGetProfile
WlanQueryInterface
WlanReasonCodeToString
WlanConnect
WlanDisconnect
WlanGetAvailableNetworkList
WlanGetProfileList
WlanSetSecuritySettings

xmllite

CreateXmlReader

iphlpapi

Icmp6SendEcho2
Icmp6CreateFile
GetIpNetTable2
IcmpCreateFile
IpReleaseAddress
GetInterfaceInfo
IcmpSendEcho
IcmpCloseHandle
GetUnicastIpAddressTable
FreeMibTable
GetAdaptersAddresses
GetAdaptersInfo
NotifyAddrChange
CancelIPChangeNotify
GetIfTable
IpRenewAddress
GetIpAddrTable

Exports

Exports

Dot11ExtIhvGetVersionInfo
Dot11ExtIhvInitService
Dot11ExtIhvInitVirtualStation

Sections

.text
Size: 874KB - Virtual size: 873KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win8X86/netrtwlanu.cat
Windows/RTWLANU_Driver/Win8X86/netrtwlanu.inf
Windows/RTWLANU_Driver/Win8X86/rtlCoInst.dat
Windows/RTWLANU_Driver/Win8X86/rtlCoInst.dll
.dll windows x86

b56ee6cf404c5405eeff689c530d7c80

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21-01-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-01-2017 00:00

Not After

18-01-2028 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b4:8b:6b:ff:2b:cd:83:f9:21:7b:4d:c7:84:39:a2:8c:f9:17:d8:f4:2d:42:30:73:d4:fd:1f:3d:48:9d:c8:82
Signer

Actual PE Digest

b4:8b:6b:ff:2b:cd:83:f9:21:7b:4d:c7:84:39:a2:8c:f9:17:d8:f4:2d:42:30:73:d4:fd:1f:3d:48:9d:c8:82

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

15-12-2022 13:51
Valid: false

05:8a:47:dc:06:4a:06:bb:0a:1f:09:35:bb:17:53:3f:6f:bf:40:7a
Signer

Actual PE Digest

05:8a:47:dc:06:4a:06:bb:0a:1f:09:35:bb:17:53:3f:6f:bf:40:7a

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:38
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

malloc
_adjust_fdiv
_initterm
free
fopen
fgets
strtok
fclose
strncmp
_strnicmp
sprintf

setupapi

SetupDiOpenDevRegKey
SetupDiClassGuidsFromNameA
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiSetClassInstallParamsA
SetupDiGetDeviceRegistryPropertyA
SetupDiCallClassInstaller

kernel32

DisableThreadLibraryCalls
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLocaleInfoA
GetSystemDirectoryA
GetLastError
OutputDebugStringA

advapi32

RegOpenKeyA
RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegQueryValueExA

Exports

Exports

rtlCoInst

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 554B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/Win8X86/rtwlanu.sys
.exe windows x86

5cd316af5600416eb7c5311748c8ad1c

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-03-2017 19:05

Not After

01-06-2018 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:f4:e8:b4:6f:02:23:e4:83:87:d6:bd:c7:9c:d4:0b:9a:b5:56:eb:eb:9d:d4:01:04:2e:3d:f7:29:59:88:77
Signer

Actual PE Digest

0d:f4:e8:b4:6f:02:23:e4:83:87:d6:bd:c7:9c:d4:0b:9a:b5:56:eb:eb:9d:d4:01:04:2e:3d:f7:29:59:88:77

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-12-2022 13:51
Valid: false

85:0f:0e:da:d5:1c:99:d3:89:e3:2b:45:25:b9:8d:fe:3e:a8:1a:1e
Signer

Actual PE Digest

85:0f:0e:da:d5:1c:99:d3:89:e3:2b:45:25:b9:8d:fe:3e:a8:1a:1e

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:39
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeTickCount
KeWaitForSingleObject
KeClearEvent
RtlCopyUnicodeString
KeSetEvent
PoRegisterPowerSettingCallback
PoUnregisterPowerSettingCallback
IofCompleteRequest
IoWMIRegistrationControl
RtlCompareMemory
MmGetSystemRoutineAddress
ExAllocatePoolWithTag
IoWMIWriteEvent
ExFreePoolWithTag
ZwCreateFile
ZwDeviceIoControlFile
ZwClose
KeInitializeEvent
_alldiv
KeFlushQueuedDpcs
KeBugCheckEx
DbgPrint
_aulldiv
KeQuerySystemTime
memcpy
strncpy
_aullshr
_allshl
_vsnprintf
_aullrem
RtlFreeUnicodeString
RtlUnicodeStringToInteger
RtlAnsiStringToUnicodeString
RtlInitAnsiString
KeInitializeMutex
KeReleaseMutex
PsTerminateSystemThread
KeSetPriorityThread
ObReferenceObjectByHandle
PsCreateSystemThread
ObfDereferenceObject
KeInitializeSemaphore
KeReleaseSemaphore
strchr
RtlFreeAnsiString
RtlUnicodeStringToAnsiString
ZwQueryValueKey
ZwOpenKey
RtlInitString
ZwEnumerateKey
wcsstr
ZwSetValueKey
IoCsqInsertIrp
IoCsqRemoveNextIrp
IoCsqInitialize
RtlGUIDFromString
memset
RtlInitUnicodeString
_allmul
MmMapLockedPagesSpecifyCache

hal

KeStallExecutionProcessor
KfRaiseIrql
KfLowerIrql
KeGetCurrentIrql
KfAcquireSpinLock
KfReleaseSpinLock
KeQueryPerformanceCounter

ndis.sys

NdisMIndicateReceiveNetBufferLists
NdisMRegisterMiniportDriver
NdisGetVersion
NdisMGetDeviceProperty
NdisMDeregisterMiniportDriver
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisFreeMdl
NdisFreeNetBufferList
NdisMFreePort
NdisMNetPnPEvent
NdisAllocateNetBufferAndNetBufferList
NdisQueueIoWorkItem
NdisAllocateIoWorkItem
NdisFreeIoWorkItem
NdisAllocateTimerObject
NdisSetEvent
NdisAllocateMemoryWithTagPriority
NdisFreeTimerObject
NdisCancelTimerObject
NdisSetTimerObject
NdisMOidRequestComplete
NdisReadConfiguration
NdisInitializeEvent
NdisAllocateMdl
NdisOpenConfigurationEx
NdisMSleep
NdisCloseConfiguration
NdisReadNetworkAddress
NdisMAllocatePort
NdisMIndicateStatusEx
NdisFreeMemory
NdisCloseFile
NdisUnmapFile
NdisMapFile
NdisOpenFile
NdisInitializeString
NdisWriteConfiguration
NdisResetEvent
NdisWaitEvent
NdisMSendNetBufferListsComplete
NdisMSetMiniportAttributes
NdisRegisterDeviceEx
NdisDeregisterDeviceEx
NdisMRemoveMiniport

wdfldr.sys

WdfVersionBind
WdfVersionBindClass
WdfVersionUnbindClass
WdfVersionUnbind

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 189KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.3MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 411KB - Virtual size: 410KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/WinX64/netrtwlanu.cat
Windows/RTWLANU_Driver/WinX64/netrtwlanu_XP.inf
Windows/RTWLANU_Driver/WinX64/rtlCoInst.dat
Windows/RTWLANU_Driver/WinX64/rtlCoInst.dll
.dll windows x64

49861fc8b24187bb146a41202e5ab2c3

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21-01-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-01-2017 00:00

Not After

18-01-2028 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

16:88:3f:3a:a8:77:b2:3c:c0:8b:a7:7b:0c:1b:97:40:e8:ad:f7:5d:9e:5a:99:9f:f8:8d:4e:20:ef:6e:2d:ba
Signer

Actual PE Digest

16:88:3f:3a:a8:77:b2:3c:c0:8b:a7:7b:0c:1b:97:40:e8:ad:f7:5d:9e:5a:99:9f:f8:8d:4e:20:ef:6e:2d:ba

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

15-12-2022 13:51
Valid: false

0a:37:73:40:21:86:22:e8:a7:9f:54:7f:61:6d:21:cc:a1:23:51:82
Signer

Actual PE Digest

0a:37:73:40:21:86:22:e8:a7:9f:54:7f:61:6d:21:cc:a1:23:51:82

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:37
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

free
_strnicmp
strncmp
fclose
malloc
sprintf
_initterm
memset
fopen
fgets
strtok

ntdll

RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiClassGuidsFromNameA
SetupDiOpenDevRegKey
SetupDiGetDeviceRegistryPropertyA
SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
SetupDiEnumDeviceInfo

kernel32

DisableThreadLibraryCalls
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLocaleInfoA
GetLastError
OutputDebugStringA
GetSystemDirectoryA

advapi32

RegOpenKeyA
RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegQueryValueExA

Exports

Exports

rtlCoInst

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/WinX64/rtwlanu_XP.sys
.exe windows x64

bbc3e31b3ea12c32787ab9ff90a70de9

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-03-2017 19:05

Not After

01-06-2018 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:1e:d1:2f:f7:3e:bb:00:5a:20:33:e2:64:9a:66:80:51:2e:ee:64:26:38:24:c2:14:b2:92:85:ac:ab:92:4f
Signer

Actual PE Digest

4c:1e:d1:2f:f7:3e:bb:00:5a:20:33:e2:64:9a:66:80:51:2e:ee:64:26:38:24:c2:14:b2:92:85:ac:ab:92:4f

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-12-2022 13:51
Valid: false

1f:14:b6:c7:02:1f:dc:4c:30:14:f9:d0:08:43:89:76:ca:78:da:2b
Signer

Actual PE Digest

1f:14:b6:c7:02:1f:dc:4c:30:14:f9:d0:08:43:89:76:ca:78:da:2b

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:40
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

PoRequestPowerIrp
KeInitializeEvent
IoBuildDeviceIoControlRequest
KeWaitForSingleObject
KeClearEvent
IoFreeMdl
IoFreeIrp
KeSetEvent
IoReuseIrp
ExFreePoolWithTag
IoCancelIrp
IoAllocateIrp
IofCallDriver
DbgPrint
RtlGUIDFromString
MmMapLockedPages
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
KeBugCheckEx
ExAllocatePoolWithTag
_vsnprintf
strncpy
RtlFreeUnicodeString
RtlUnicodeStringToInteger
RtlAnsiStringToUnicodeString
RtlInitAnsiString
KeInitializeMutex
KeReleaseMutex
PsTerminateSystemThread
ZwClose
KeSetPriorityThread
ObReferenceObjectByHandle
PsCreateSystemThread
ObfDereferenceObject
KeInitializeSemaphore
KeReleaseSemaphore
MmMapLockedPagesSpecifyCache
strchr
RtlFreeAnsiString
RtlUnicodeStringToAnsiString
ZwQueryValueKey
ZwOpenKey
RtlInitString
ZwEnumerateKey
wcsstr
ZwSetValueKey
IofCompleteRequest
IoCsqInsertIrp
IoCsqRemoveNextIrp
IoCsqInitialize
RtlInitUnicodeString

hal

KeStallExecutionProcessor
KeQueryPerformanceCounter

ndis.sys

NdisAllocateBuffer
NdisInitializeWrapper
NdisMRegisterMiniport
NdisMRegisterUnloadHandler
NdisMGetDeviceProperty
NdisMSetAttributesEx
NdisGetVersion
NdisMRegisterAdapterShutdownHandler
NdisMDeregisterAdapterShutdownHandler
NdisAllocatePacket
NdisFreePacketPool
NdisAllocatePacketPoolEx
NdisMRemoveMiniport
NdisUnchainBufferAtFront
NdisFreePacket
NdisMSleep
NdisMInitializeTimer
NdisAllocateMemoryWithTag
NdisScheduleWorkItem
NdisFreeBufferPool
NdisAllocateBufferPool
NdisFreeMemory
NdisCloseFile
NdisUnmapFile
NdisMapFile
NdisOpenFile
NdisInitializeString
NdisInitializeEvent
NdisWaitEvent
NdisMRegisterDevice
NdisMDeregisterDevice
NdisCloseConfiguration
NdisReadNetworkAddress
NdisReadConfiguration
NdisOpenConfiguration
NdisResetEvent
NdisSetEvent
NdisSetTimer
NdisMCancelTimer

usbd.sys

USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 400KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.8MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 295KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/WinXP/netrtwlanu.cat
Windows/RTWLANU_Driver/WinXP/netrtwlanu_XP.inf
Windows/RTWLANU_Driver/WinXP/rtlCoInst.dat
Windows/RTWLANU_Driver/WinXP/rtlCoInst.dll
.dll windows x86

b56ee6cf404c5405eeff689c530d7c80

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21-01-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-01-2017 00:00

Not After

18-01-2028 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b4:8b:6b:ff:2b:cd:83:f9:21:7b:4d:c7:84:39:a2:8c:f9:17:d8:f4:2d:42:30:73:d4:fd:1f:3d:48:9d:c8:82
Signer

Actual PE Digest

b4:8b:6b:ff:2b:cd:83:f9:21:7b:4d:c7:84:39:a2:8c:f9:17:d8:f4:2d:42:30:73:d4:fd:1f:3d:48:9d:c8:82

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

15-12-2022 13:51
Valid: false

05:8a:47:dc:06:4a:06:bb:0a:1f:09:35:bb:17:53:3f:6f:bf:40:7a
Signer

Actual PE Digest

05:8a:47:dc:06:4a:06:bb:0a:1f:09:35:bb:17:53:3f:6f:bf:40:7a

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:38
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

malloc
_adjust_fdiv
_initterm
free
fopen
fgets
strtok
fclose
strncmp
_strnicmp
sprintf

setupapi

SetupDiOpenDevRegKey
SetupDiClassGuidsFromNameA
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiSetClassInstallParamsA
SetupDiGetDeviceRegistryPropertyA
SetupDiCallClassInstaller

kernel32

DisableThreadLibraryCalls
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLocaleInfoA
GetSystemDirectoryA
GetLastError
OutputDebugStringA

advapi32

RegOpenKeyA
RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegQueryValueExA

Exports

Exports

rtlCoInst

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 554B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/RTWLANU_Driver/WinXP/rtwlanu_XP.sys
.exe windows x86

1d380a6ab49cca0d891afe101556195c

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-06-2016 00:00

Not After

24-01-2019 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01-03-2017 19:05

Not After

01-06-2018 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9d:89:37:a7:e6:53:6e:59:62:2e:c0:17:77:bc:22:47:f0:78:93:0a:b9:7b:8e:68:fc:7f:97:96:74:ed:93:20
Signer

Actual PE Digest

9d:89:37:a7:e6:53:6e:59:62:2e:c0:17:77:bc:22:47:f0:78:93:0a:b9:7b:8e:68:fc:7f:97:96:74:ed:93:20

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15-12-2022 13:51
Valid: false

ed:61:e6:23:57:4c:e5:a6:2f:c4:b0:c2:0d:a9:da:ef:6a:7f:db:82
Signer

Actual PE Digest

ed:61:e6:23:57:4c:e5:a6:2f:c4:b0:c2:0d:a9:da:ef:6a:7f:db:82

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

11-09-2017 13:40
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoReuseIrp
PoRequestPowerIrp
InterlockedExchange
InterlockedDecrement
KeInitializeEvent
IoBuildDeviceIoControlRequest
KeWaitForSingleObject
KeClearEvent
KeTickCount
KeSetEvent
ExAllocatePoolWithTag
ExFreePool
IoCancelIrp
IoAllocateIrp
IofCallDriver
_alldiv
KeInitializeSpinLock
DbgPrint
KeBugCheckEx
IoFreeIrp
_allshl
_vsnprintf
_aullshr
_aullrem
strncpy
RtlFreeUnicodeString
RtlUnicodeStringToInteger
RtlAnsiStringToUnicodeString
RtlInitAnsiString
InterlockedCompareExchange
KeInitializeMutex
KeReleaseMutex
PsTerminateSystemThread
ZwClose
KeSetPriorityThread
ObReferenceObjectByHandle
PsCreateSystemThread
ObfDereferenceObject
KeInitializeSemaphore
KeReleaseSemaphore
MmMapLockedPagesSpecifyCache
strchr
RtlFreeAnsiString
RtlUnicodeStringToAnsiString
ZwQueryValueKey
RtlInitUnicodeString
ZwOpenKey
RtlInitString
ZwEnumerateKey
wcsstr
ZwSetValueKey
IofCompleteRequest
IoCsqInsertIrp
IoCsqRemoveNextIrp
IoCsqInitialize
_aulldiv
_allmul
RtlGUIDFromString

hal

KeStallExecutionProcessor
KeGetCurrentIrql
KfAcquireSpinLock
KfReleaseSpinLock
KeQueryPerformanceCounter

ndis.sys

NdisInitializeWrapper
NdisMRegisterMiniport
NdisMRegisterUnloadHandler
NdisMGetDeviceProperty
NdisMSetAttributesEx
NdisGetVersion
NdisMRegisterAdapterShutdownHandler
NdisMDeregisterAdapterShutdownHandler
NdisAllocateBuffer
NdisFreePacketPool
NdisAllocatePacketPoolEx
NdisAllocateBufferPool
NdisUnchainBufferAtFront
NdisInterlockedIncrement
NdisFreePacket
NdisMInitializeTimer
NdisMSleep
NdisAllocateMemoryWithTag
NdisAllocatePacket
NdisMRemoveMiniport
NdisInterlockedDecrement
NdisFreeBufferPool
NdisFreeBuffer
NdisFreeMemory
NdisCloseFile
NdisUnmapFile
NdisMapFile
NdisOpenFile
NdisInitializeString
NdisInitializeEvent
NdisWaitEvent
NDIS_BUFFER_TO_SPAN_PAGES
NdisQueryBufferOffset
NdisMRegisterDevice
NdisInitUnicodeString
NdisMDeregisterDevice
NdisQueryBuffer
NdisCloseConfiguration
NdisReadNetworkAddress
NdisReadConfiguration
NdisOpenConfiguration
NdisGetCurrentSystemTime
NdisResetEvent
NdisSetEvent
NdisSetTimer
NdisMCancelTimer
NdisScheduleWorkItem

usbd.sys

USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 349KB - Virtual size: 349KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/Release notes/BTCoexVersion.txt
Windows/Release notes/Drv_Release.txt
Windows/Setup.exe
.exe windows x86

da01e8fe05d7e1600f403c6468704f87

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:da:4c:26:c7:6e:12:55:dc:82:79:aa:9a:75:1a:cc
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

16-06-2016 00:00

Not After

05-09-2017 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b4:df:15:eb:bb:43:a1:03:e2:52:06:42:44:26:b8:2f:04:38:1c:2e
Signer

Actual PE Digest

b4:df:15:eb:bb:43:a1:03:e2:52:06:42:44:26:b8:2f:04:38:1c:2e

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

19-07-2017 04:02
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

comctl32

ord17

kernel32

GlobalLock
GlobalUnlock
GlobalFree
FindResourceW
CreateThread
GetExitCodeThread
GetTickCount
CopyFileW
GetTempFileNameW
QueryPerformanceFrequency
CreateEventW
InterlockedIncrement
InterlockedDecrement
GetVersionExW
lstrcatW
CompareStringW
CompareStringA
FreeLibrary
GetProcAddress
LoadLibraryW
GetModuleHandleW
lstrcmpW
lstrcmpiW
GetSystemDefaultLangID
GetUserDefaultLangID
VerLanguageNameW
CompareFileTime
CreateDirectoryW
FindClose
FindFirstFileW
FindNextFileW
SetFileAttributesW
GetSystemTimeAsFileTime
GetPrivateProfileStringW
MoveFileW
LocalFree
FormatMessageW
GetSystemInfo
MulDiv
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LoadLibraryExW
GetVersion
GetLocalTime
IsValidLocale
GetCommandLineW
GetFileAttributesW
FlushFileBuffers
SetEndOfFile
VirtualQuery
lstrcpyA
IsBadReadPtr
GetDiskFreeSpaceW
GetDriveTypeW
GetExitCodeProcess
lstrlenW
GetLocaleInfoW
InterlockedExchange
LoadLibraryExA
GlobalAlloc
GetConsoleCP
SetConsoleCtrlHandler
OutputDebugStringW
EnumSystemLocalesW
GetUserDefaultLCID
DeleteFileW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetFileType
HeapReAlloc
CreateSemaphoreW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStringTypeW
GetCPInfo
GetOEMCP
IsValidCodePage
GetCurrentThreadId
HeapSize
AreFileApisANSI
GetModuleHandleExW
GetStdHandle
GetACP
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
lstrcpynA
LocalAlloc
QueryPerformanceCounter
SearchPathW
lstrcmpA
SystemTimeToFileTime
ResetEvent
SetEvent
VirtualProtect
GetCurrentProcessId
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
lstrcpynW
GetDateFormatW
GetTimeFormatW
GetCurrentDirectoryW
FindResourceExW
GetEnvironmentVariableW
SetFileTime
GetFileTime
OpenProcess
GetProcessTimes
LCMapStringW
DecodePointer
EncodePointer
GetModuleFileNameW
GetProcessHeap
HeapFree
HeapAlloc
WriteFile
SetFilePointer
SizeofResource
LockResource
LoadResource
lstrcpyW
GetWindowsDirectoryW
SetErrorMode
GetTempPathW
ExpandEnvironmentStringsW
MoveFileExW
WriteProcessMemory
VirtualProtectEx
GetSystemDirectoryW
FlushInstructionCache
SetThreadContext
GetThreadContext
CreateProcessW
ResumeThread
TerminateProcess
ExitProcess
GetCurrentProcess
Sleep
WaitForSingleObject
DuplicateHandle
RemoveDirectoryW
ReadFile
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CloseHandle
GetFileSize
CreateFileW
SetLastError
GetLastError
FatalAppExitA
SetCurrentDirectoryW
SetFilePointerEx
ReadConsoleW
WriteConsoleW
GetCurrentThread
GetConsoleMode
SetStdHandle

user32

LoadImageW
CreateDialogParamW
SendDlgItemMessageW
CharPrevW
wvsprintfW
CharUpperW
ExitWindowsEx
MoveWindow
SetCursor
GetWindow
GetDlgItemTextW
SetFocus
EnableWindow
SetForegroundWindow
SetActiveWindow
SetDlgItemTextW
IsDialogMessageW
FindWindowW
SubtractRect
SetRect
FillRect
GetSysColorBrush
GetSysColor
GetWindowRect
GetDC
GetSystemMetrics
GetDlgCtrlID
CreateDialogIndirectParamW
DestroyWindow
IsWindow
SendMessageW
MessageBoxW
CharNextW
WaitForInputIdle
SetWindowLongW
GetWindowLongW
GetClientRect
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
SetWindowPos
SetWindowTextW
GetDlgItem
EndDialog
DialogBoxIndirectParamW
ShowWindow
GetDesktopWindow
MsgWaitForMultipleObjects
PeekMessageW
wsprintfW
LoadIconW
LoadCursorW
KillTimer
SetTimer
CreateWindowExW
RegisterClassW
PostQuitMessage
DefWindowProcW
PostMessageW
DispatchMessageW
TranslateMessage
GetMessageW
IntersectRect

gdi32

UnrealizeObject
CreateHalftonePalette
GetDIBColorTable
SelectPalette
RealizePalette
GetSystemPaletteEntries
CreatePalette
CreateFontW
GetObjectW
SetTextColor
SetBkMode
GetDeviceCaps
CreateSolidBrush
CreateFontIndirectW
SetStretchBltMode
StretchBlt
SelectObject
DeleteDC
CreateDIBitmap
CreateCompatibleDC
BitBlt
DeleteObject
GetStockObject
TranslateCharsetInfo

advapi32

FreeSid
AllocateAndInitializeSid
OpenThreadToken
OpenProcessToken
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteKeyW
RegSetValueExW
RegEnumValueW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
GetTokenInformation
RegOpenKeyW
RegEnumKeyW
RegCreateKeyW
LookupPrivilegeValueW
AdjustTokenPrivileges
EqualSid

shell32

CommandLineToArgvW
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteExW
SHGetSpecialFolderLocation

ole32

CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CLSIDFromProgID
CoUninitialize
CreateItemMoniker
CoCreateGuid
StringFromGUID2
CoCreateInstance
ProgIDFromCLSID
CoInitializeSecurity
CoInitialize
GetRunningObjectTable

oleaut32

VariantChangeType
VarBstrFromDate
VarBstrCat
SysAllocStringByteLen
SysStringByteLen
SysAllocString
SysStringLen
SysReAllocStringLen
SysFreeString
GetErrorInfo
VarUI4FromStr
SystemTimeToVariantTime
CreateErrorInfo
SysAllocStringLen
LoadTypeLi
RegisterTypeLi
SetErrorInfo
VariantClear

rpcrt4

UuidToStringW
UuidCreate
RpcStringFreeW
UuidFromStringW

Sections

.text
Size: 711KB - Virtual size: 711KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 215KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Windows/UnInstall.bat
.bat .vbs
Windows/Uninstall.iss
Windows/WlanUI/0x0402.ini
Windows/WlanUI/0x0403.ini
Windows/WlanUI/0x0404.ini
Windows/WlanUI/0x0405.ini
Windows/WlanUI/0x0406.ini
Windows/WlanUI/0x0407.ini
Windows/WlanUI/0x0408.ini
Windows/WlanUI/0x0409.ini
Windows/WlanUI/0x040a.ini
Windows/WlanUI/0x040b.ini
Windows/WlanUI/0x040c.ini
Windows/WlanUI/0x040e.ini
Windows/WlanUI/0x0410.ini
Windows/WlanUI/0x0411.ini
Windows/WlanUI/0x0412.ini
Windows/WlanUI/0x0413.ini
Windows/WlanUI/0x0414.ini
Windows/WlanUI/0x0415.ini
Windows/WlanUI/0x0416.ini
Windows/WlanUI/0x0418.ini
Windows/WlanUI/0x0419.ini
Windows/WlanUI/0x041a.ini
Windows/WlanUI/0x041b.ini
Windows/WlanUI/0x041d.ini
Windows/WlanUI/0x041e.ini
Windows/WlanUI/0x041f.ini
Windows/WlanUI/0x0421.ini
Windows/WlanUI/0x0424.ini
Windows/WlanUI/0x042d.ini
Windows/WlanUI/0x0804.ini
Windows/WlanUI/0x0816.ini
Windows/WlanUI/0x0c0c.ini
Windows/WlanUI/0x0c1a.ini
Windows/WlanUI/DATA/RtlService.ini
Windows/WlanUI/DATA/WPS
Windows/WlanUI/DATA/Win10/text.file
Windows/WlanUI/DATA/Win7/text.file
Windows/WlanUI/DATA/Win8/text.file
Windows/WlanUI/DATA/Win81/text.file
Windows/WlanUI/DATA/text.file
Windows/WlanUI/DATAe/8188EE.ini
Windows/WlanUI/DATAe/8192CE.ini
Windows/WlanUI/DATAe/8192DE.ini
Windows/WlanUI/DATAe/8723AE.ini
Windows/WlanUI/DATAe/8723BE.ini
Windows/WlanUI/DATAe/8812AE.ini
Windows/WlanUI/DATAe/8812BE.ini
Windows/WlanUI/DATAe/8821AE.ini
Windows/WlanUI/DATAe/8822BE.ini
Windows/WlanUI/DATAe/RtWLan.ico
Windows/WlanUI/DATAe/RtlService.ini
Windows/WlanUI/DATAe/TrayIcon.bmp
Windows/WlanUI/DATAe/Vista/8188EE.ini
Windows/WlanUI/DATAe/Vista/8192CE.ini
Windows/WlanUI/DATAe/Vista/8192DE.ini
Windows/WlanUI/DATAe/Vista/8723AE.ini
Windows/WlanUI/DATAe/Vista/8723BE.ini
Windows/WlanUI/DATAe/Vista/8812AE.ini
Windows/WlanUI/DATAe/Vista/8812BE.ini
Windows/WlanUI/DATAe/Vista/8821AE.ini
Windows/WlanUI/DATAe/Vista/8822BE.ini
Windows/WlanUI/DATAe/Vista/RtlService.ini
Windows/WlanUI/DATAe/WPS
Windows/WlanUI/DATAe/Win10/8188EE.ini
Windows/WlanUI/DATAe/Win10/8192CE.ini
Windows/WlanUI/DATAe/Win10/8192DE.ini
Windows/WlanUI/DATAe/Win10/8723AE.ini
Windows/WlanUI/DATAe/Win10/8723BE.ini
Windows/WlanUI/DATAe/Win10/8812AE.ini
Windows/WlanUI/DATAe/Win10/8812BE.ini
Windows/WlanUI/DATAe/Win10/8821AE.ini
Windows/WlanUI/DATAe/Win10/8822BE.ini
Windows/WlanUI/DATAe/Win10/RtlService.ini
Windows/WlanUI/DATAe/Win7/8188EE.ini
Windows/WlanUI/DATAe/Win7/8192CE.ini
Windows/WlanUI/DATAe/Win7/8192DE.ini
Windows/WlanUI/DATAe/Win7/8723AE.ini
Windows/WlanUI/DATAe/Win7/8723BE.ini
Windows/WlanUI/DATAe/Win7/8812AE.ini
Windows/WlanUI/DATAe/Win7/8812BE.ini
Windows/WlanUI/DATAe/Win7/8821AE.ini
Windows/WlanUI/DATAe/Win7/8822BE.ini
Windows/WlanUI/DATAe/Win7/RtlService.ini
Windows/WlanUI/DATAe/Win8/8188EE.ini
Windows/WlanUI/DATAe/Win8/8192CE.ini
Windows/WlanUI/DATAe/Win8/8192DE.ini
Windows/WlanUI/DATAe/Win8/8723AE.ini
Windows/WlanUI/DATAe/Win8/8723BE.ini
Windows/WlanUI/DATAe/Win8/8812AE.ini
Windows/WlanUI/DATAe/Win8/8812BE.ini
Windows/WlanUI/DATAe/Win8/8821AE.ini
Windows/WlanUI/DATAe/Win8/8822BE.ini
Windows/WlanUI/DATAe/Win8/RtlService.ini
Windows/WlanUI/DATAe/Win81/8188EE.ini
Windows/WlanUI/DATAe/Win81/8192CE.ini
Windows/WlanUI/DATAe/Win81/8192DE.ini
Windows/WlanUI/DATAe/Win81/8723AE.ini
Windows/WlanUI/DATAe/Win81/8723BE.ini
Windows/WlanUI/DATAe/Win81/8812AE.ini
Windows/WlanUI/DATAe/Win81/8812BE.ini
Windows/WlanUI/DATAe/Win81/8821AE.ini
Windows/WlanUI/DATAe/Win81/8822BE.ini
Windows/WlanUI/DATAe/Win81/RtlService.ini
Windows/WlanUI/DATAe/background.jpg
.jpg
Windows/WlanUI/DATAe/background2.jpg
.jpg
Windows/WlanUI/DATAe/text.file
Windows/WlanUI/DATAs/8188ES.ini
Windows/WlanUI/DATAs/8723AS.ini
Windows/WlanUI/DATAs/8723BS.ini
Windows/WlanUI/DATAs/8812BS.ini
Windows/WlanUI/DATAs/8821AS.ini
Windows/WlanUI/DATAs/8822BS.ini
Windows/WlanUI/DATAs/RtWLan.ico
Windows/WlanUI/DATAs/RtlService.ini
Windows/WlanUI/DATAs/Thumbs.db
Windows/WlanUI/DATAs/TrayIcon.bmp
Windows/WlanUI/DATAs/Vista/8188ES.ini
Windows/WlanUI/DATAs/Vista/8723AS.ini
Windows/WlanUI/DATAs/Vista/8723BS.ini
Windows/WlanUI/DATAs/Vista/8812BS.ini
Windows/WlanUI/DATAs/Vista/8821AS.ini
Windows/WlanUI/DATAs/Vista/8822BS.ini
Windows/WlanUI/DATAs/WPS
Windows/WlanUI/DATAs/Win10/8188ES.ini
Windows/WlanUI/DATAs/Win10/8723AS.ini
Windows/WlanUI/DATAs/Win10/8723BS.ini
Windows/WlanUI/DATAs/Win10/8812BS.ini
Windows/WlanUI/DATAs/Win10/8821AS.ini
Windows/WlanUI/DATAs/Win10/8822BS.ini
Windows/WlanUI/DATAs/Win10/RtlService.ini
Windows/WlanUI/DATAs/Win7/8188ES.ini
Windows/WlanUI/DATAs/Win7/8723AS.ini
Windows/WlanUI/DATAs/Win7/8723BS.ini
Windows/WlanUI/DATAs/Win7/8812BS.ini
Windows/WlanUI/DATAs/Win7/8821AS.ini
Windows/WlanUI/DATAs/Win7/8822BS.ini
Windows/WlanUI/DATAs/Win7/RtlService.ini
Windows/WlanUI/DATAs/Win8/8188ES.ini
Windows/WlanUI/DATAs/Win8/8723AS.ini
Windows/WlanUI/DATAs/Win8/8723BS.ini
Windows/WlanUI/DATAs/Win8/8812BS.ini
Windows/WlanUI/DATAs/Win8/8821AS.ini
Windows/WlanUI/DATAs/Win8/8822BS.ini
Windows/WlanUI/DATAs/Win8/RtlService.ini
Windows/WlanUI/DATAs/Win81/8188ES.ini
Windows/WlanUI/DATAs/Win81/8723AS.ini
Windows/WlanUI/DATAs/Win81/8723BS.ini
Windows/WlanUI/DATAs/Win81/8812BS.ini
Windows/WlanUI/DATAs/Win81/8821AS.ini
Windows/WlanUI/DATAs/Win81/8822BS.ini
Windows/WlanUI/DATAs/Win81/RtlService.ini
Windows/WlanUI/DATAs/background.jpg
.jpg
Windows/WlanUI/DATAs/background2.jpg
.jpg
Windows/WlanUI/DATAs/text.file
Windows/WlanUI/DATAu/8188EU.ini
Windows/WlanUI/DATAu/8192CU.ini
Windows/WlanUI/DATAu/8192DU.ini
Windows/WlanUI/DATAu/8192EU.ini
Windows/WlanUI/DATAu/8723AU.ini
Windows/WlanUI/DATAu/8723BU.ini
Windows/WlanUI/DATAu/8723U.ini
Windows/WlanUI/DATAu/8811AU.ini
Windows/WlanUI/DATAu/8812AU.ini
Windows/WlanUI/DATAu/8812AU_VX.ini
Windows/WlanUI/DATAu/8812BU.ini
Windows/WlanUI/DATAu/8814AU.ini
Windows/WlanUI/DATAu/8821AU.ini
Windows/WlanUI/DATAu/8822BU.ini
Windows/WlanUI/DATAu/RtWLan.ico
Windows/WlanUI/DATAu/RtlService.ini
Windows/WlanUI/DATAu/TrayIcon.bmp
Windows/WlanUI/DATAu/Vista/8188EU.ini
Windows/WlanUI/DATAu/Vista/8192CU.ini
Windows/WlanUI/DATAu/Vista/8192DU.ini
Windows/WlanUI/DATAu/Vista/8192EU.ini
Windows/WlanUI/DATAu/Vista/8723AU.ini
Windows/WlanUI/DATAu/Vista/8723BU.ini
Windows/WlanUI/DATAu/Vista/8811AU.ini
Windows/WlanUI/DATAu/Vista/8812AU.ini
Windows/WlanUI/DATAu/Vista/8812AU_VX.ini
Windows/WlanUI/DATAu/Vista/8812BU.ini
Windows/WlanUI/DATAu/Vista/8814AU.ini
Windows/WlanUI/DATAu/Vista/8821AU.ini
Windows/WlanUI/DATAu/Vista/8822BU.ini
Windows/WlanUI/DATAu/WPS
Windows/WlanUI/DATAu/Win10/8188EU.ini
Windows/WlanUI/DATAu/Win10/8192CU.ini
Windows/WlanUI/DATAu/Win10/8192DU.ini
Windows/WlanUI/DATAu/Win10/8192EU.ini
Windows/WlanUI/DATAu/Win10/8723AU.ini
Windows/WlanUI/DATAu/Win10/8723BU.ini
Windows/WlanUI/DATAu/Win10/8811AU.ini
Windows/WlanUI/DATAu/Win10/8812AU.ini
Windows/WlanUI/DATAu/Win10/8812AU_VX.ini
Windows/WlanUI/DATAu/Win10/8812BU.ini
Windows/WlanUI/DATAu/Win10/8814AU.ini
Windows/WlanUI/DATAu/Win10/8821AU.ini
Windows/WlanUI/DATAu/Win10/8822BU.ini
Windows/WlanUI/DATAu/Win10/RtlService.ini
Windows/WlanUI/DATAu/Win7/8188EU.ini
Windows/WlanUI/DATAu/Win7/8192CU.ini
Windows/WlanUI/DATAu/Win7/8192DU.ini
Windows/WlanUI/DATAu/Win7/8192EU.ini
Windows/WlanUI/DATAu/Win7/8723AU.ini
Windows/WlanUI/DATAu/Win7/8723BU.ini
Windows/WlanUI/DATAu/Win7/8811AU.ini
Windows/WlanUI/DATAu/Win7/8812AU.ini
Windows/WlanUI/DATAu/Win7/8812AU_VX.ini
Windows/WlanUI/DATAu/Win7/8812BU.ini
Windows/WlanUI/DATAu/Win7/8814AU.ini
Windows/WlanUI/DATAu/Win7/8821AU.ini
Windows/WlanUI/DATAu/Win7/8822BU.ini
Windows/WlanUI/DATAu/Win7/RtlService.ini
Windows/WlanUI/DATAu/Win8/8188EU.ini
Windows/WlanUI/DATAu/Win8/8192CU.ini
Windows/WlanUI/DATAu/Win8/8192DU.ini
Windows/WlanUI/DATAu/Win8/8192EU.ini
Windows/WlanUI/DATAu/Win8/8723AU.ini
Windows/WlanUI/DATAu/Win8/8723BU.ini
Windows/WlanUI/DATAu/Win8/8811AU.ini
Windows/WlanUI/DATAu/Win8/8812AU.ini
Windows/WlanUI/DATAu/Win8/8812AU_VX.ini
Windows/WlanUI/DATAu/Win8/8812BU.ini
Windows/WlanUI/DATAu/Win8/8814AU.ini
Windows/WlanUI/DATAu/Win8/8821AU.ini
Windows/WlanUI/DATAu/Win8/8822BU.ini
Windows/WlanUI/DATAu/Win8/RtlService.ini
Windows/WlanUI/DATAu/Win81/8188EU.ini
Windows/WlanUI/DATAu/Win81/8192CU.ini
Windows/WlanUI/DATAu/Win81/8192DU.ini
Windows/WlanUI/DATAu/Win81/8192EU.ini
Windows/WlanUI/DATAu/Win81/8723AU.ini
Windows/WlanUI/DATAu/Win81/8723BU.ini
Windows/WlanUI/DATAu/Win81/8811AU.ini
Windows/WlanUI/DATAu/Win81/8812AU.ini
Windows/WlanUI/DATAu/Win81/8812AU_VX.ini
Windows/WlanUI/DATAu/Win81/8812BU.ini
Windows/WlanUI/DATAu/Win81/8814AU.ini
Windows/WlanUI/DATAu/Win81/8821AU.ini
Windows/WlanUI/DATAu/Win81/8822BU.ini
Windows/WlanUI/DATAu/Win81/RtlService.ini
Windows/WlanUI/DATAu/background.jpg
.jpg
Windows/WlanUI/DATAu/background2.jpg
.jpg
Windows/WlanUI/DATAu/text.file
Windows/WlanUI/IM/WINXP/32/TWOPORT/XPTWOPORT.INF
Windows/WlanUI/IM/WINXP/32/TWOPORT/XPTWOPORT.sys
.exe windows x86

55a4f81470875775cc73de399276eb6d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeBugCheckEx
KeTickCount
RtlUpcaseUnicodeString
MmMapLockedPagesSpecifyCache
IofCompleteRequest
RtlInitUnicodeString
memset
memcpy

hal

KfReleaseSpinLock
KfAcquireSpinLock

ndis.sys

NdisCloseAdapter
NdisOpenAdapter
NdisIMCancelInitializeDeviceInstance
NdisIMDeInitializeDeviceInstance
NdisIMInitializeDeviceInstanceEx
NdisInitializeReadWriteLock
NdisOpenProtocolConfiguration
NdisResetEvent
NdisMIndicateStatusComplete
NdisReturnPackets
NdisFreePacket
NdisAllocatePacket
NdisRequest
NdisReleaseReadWriteLock
NdisAcquireReadWriteLock
NdisCancelSendPackets
NdisIMDeregisterLayeredMiniport
NdisDeregisterProtocol
NdisSetEvent
NdisMSetAttributesEx
NdisCloseConfiguration
NdisReadConfiguration
NdisReadNetworkAddress
NdisOpenConfiguration
NdisIMGetDeviceContext
NdisIMCopySendPerPacketInfo
NdisMIndicateStatus
NdisMSleep
NdisMDeregisterDevice
NdisTerminateWrapper
NdisIMAssociateMiniport
NdisRegisterProtocol
NdisMRegisterUnloadHandler
NdisIMRegisterLayeredMiniport
NdisInitializeWrapper
NdisMRegisterDevice
NdisFreeMemory
NdisIMCopySendCompletePerPacketInfo
NdisDprAllocatePacket
NdisFreePacketPool
NdisAllocateMemoryWithTag
NdisWaitEvent
NdisInitializeEvent
NdisGetReceivedPacket
NdisAllocatePacketPoolEx

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 363B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 384B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 768B - Virtual size: 690B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/WlanUI/IM/WINXP/32/TWOPORT/XPTWOPORT_MP.INF
Windows/WlanUI/IM/WINXP/32/TWOPORT/xptwoport.cat
Windows/WlanUI/IM/WINXP/64/TWOPORT/XPTWOPORT.INF
Windows/WlanUI/IM/WINXP/64/TWOPORT/XPTWOPORT.sys
.exe windows x64

ef98bfbce84b22ba4e18405658c2855e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

KeBugCheckEx
RtlUpcaseUnicodeString
MmMapLockedPagesSpecifyCache
IofCompleteRequest
RtlInitUnicodeString
KeReleaseSpinLock
KeAcquireSpinLockRaiseToDpc

ndis.sys

NdisIMDeregisterLayeredMiniport
NdisOpenProtocolConfiguration
NdisIMDeInitializeDeviceInstance
NdisIMCancelInitializeDeviceInstance
NdisFreePacketPool
NdisAllocatePacketPoolEx
NdisIMInitializeDeviceInstanceEx
NdisDprAllocatePacket
NdisIMGetDeviceContext
NdisOpenConfiguration
NdisReadNetworkAddress
NdisReadConfiguration
NdisCloseConfiguration
NdisMSetAttributesEx
NdisSetEvent
NdisAllocatePacket
NdisIMCopySendPerPacketInfo
NdisFreePacket
NdisMIndicateStatus
NdisMIndicateStatusComplete
NdisReturnPackets
NdisMSleep
NdisRequest
NdisAcquireReadWriteLock
NdisReleaseReadWriteLock
NdisCancelSendPackets
NdisDeregisterProtocol
NdisInitializeWrapper
NdisIMRegisterLayeredMiniport
NdisMRegisterUnloadHandler
NdisRegisterProtocol
NdisIMAssociateMiniport
NdisTerminateWrapper
NdisMRegisterDevice
NdisMDeregisterDevice
NdisAllocateMemoryWithTag
NdisInitializeEvent
NdisInitializeReadWriteLock
NdisOpenAdapter
NdisWaitEvent
NdisResetEvent
NdisCloseAdapter
NdisFreeMemory
NdisIMCopySendCompletePerPacketInfo
NdisGetReceivedPacket

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Windows/WlanUI/IM/WINXP/64/TWOPORT/XPTWOPORT_MP.INF
Windows/WlanUI/IM/WINXP/64/TWOPORT/xptwoport.cat
Windows/WlanUI/ISSetup.dll
.dll regsvr32 windows x86

af93d22cb4944e6dc29e33177a19eda0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

rpcrt4

UuidCreate

winmm

sndPlaySoundW

user32

DestroyWindow

gdi32

CreatePalette

advapi32

IsValidSecurityDescriptor

shell32

SHGetFolderPathW

ole32

CoCreateInstance

oleaut32

GetErrorInfo

shlwapi

SHStrDupW

version

VerQueryValueW

gdiplus

GdipDeleteGraphics

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProductSKU
GetScriptEngine
InstallEngineTypelib
RemoveEngineTypelib
SuiteIsFeatureInstalled
SuiteStartupInstall

Sections

.text
Size: 640KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 131KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Windows/WlanUI/Install.bat
Windows/WlanUI/IsConfig.ini
Windows/WlanUI/Release notes/ISS_Release.txt
Windows/WlanUI/Release notes/Utility_Release.txt
Windows/WlanUI/Setup.exe
.exe windows x86

c56467cb733da5d0dc212a96a41dcb6c

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

13:22:2a:5d:cc:f7:16:df:5a:f9:c8:70:84:41:2d:d9
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

13-05-2013 00:00

Not After

11-07-2016 23:59

Subject

CN=Realtek Semiconductor Corp,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Realtek Semiconductor Corp,L=Hsinchu,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-02-2011 19:25

Not After

22-02-2021 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7d:f5:e1:c5:35:08:b1:90:47:18:d8:a5:4e:bc:04:20:ad:6d:6c:d2
Signer

Actual PE Digest

7d:f5:e1:c5:35:08:b1:90:47:18:d8:a5:4e:bc:04:20:ad:6d:6c:d2

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Realtek Semiconductor Corp,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Realtek Semiconductor Corp,L=Hsinchu,ST=Taiwan,C=TW

03-05-2016 09:43
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

lz32

LZOpenFileW
LZCopy
LZClose

msi

ord88
ord17
ord137
ord141
ord8
ord125
ord171
ord169

kernel32

CreateDirectoryW
FindClose
FindFirstFileW
GetDiskFreeSpaceW
GetDriveTypeW
GetFileAttributesW
GetFileSize
SetFilePointer
WriteFile
RaiseException
SetErrorMode
QueryPerformanceFrequency
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
ReleaseMutex
CreateMutexW
CreateEventW
GetSystemTimeAsFileTime
GetSystemInfo
VirtualQuery
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
FindResourceExW
FreeLibrary
LoadLibraryExW
lstrcmpiW
lstrcpynW
lstrcatW
LoadLibraryW
GetPrivateProfileIntW
IsBadReadPtr
CompareStringW
CompareStringA
GetSystemDefaultLangID
GetUserDefaultLangID
ExpandEnvironmentStringsW
GetCurrentDirectoryW
FileTimeToLocalFileTime
GetFileTime
SetFileAttributesW
HeapAlloc
VerLanguageNameW
GetProcessHeap
CopyFileW
IsValidLocale
GetLocaleInfoW
WideCharToMultiByte
lstrcpyA
GetTickCount
ExitThread
CreateThread
GetExitCodeProcess
ReadFile
GetCommandLineW
FormatMessageW
LocalFree
GetVersionExW
GetWindowsDirectoryW
InterlockedDecrement
InterlockedIncrement
GetTempPathW
CreateFileW
FindResourceW
GlobalFree
GlobalUnlock
FreeResource
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcatA
lstrcmpiA
MulDiv
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
SetConsoleCtrlHandler
OutputDebugStringW
EnumSystemLocalesW
GetUserDefaultLCID
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetFileType
HeapReAlloc
GetStringTypeW
GetCurrentThreadId
GetCPInfo
GetOEMCP
IsValidCodePage
HeapSize
AreFileApisANSI
GetModuleHandleExW
GetStdHandle
CreateSemaphoreW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FatalAppExitA
GlobalLock
GlobalAlloc
SizeofResource
LockResource
LoadResource
MultiByteToWideChar
MoveFileExW
WriteProcessMemory
VirtualProtectEx
GetSystemDirectoryW
FlushInstructionCache
SetThreadContext
GetThreadContext
ResumeThread
TerminateProcess
ExitProcess
GetCurrentProcess
WaitForSingleObject
SetLastError
GetLastError
DuplicateHandle
RemoveDirectoryW
HeapFree
DeleteFileW
SetCurrentDirectoryW
lstrlenW
lstrcpyW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
CreateProcessW
Sleep
CloseHandle
GetACP
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
InterlockedExchange
lstrcpynA
ReadConsoleW
LocalAlloc
FindNextFileW
WritePrivateProfileSectionW
GetPrivateProfileSectionW
lstrcmpW
GetShortPathNameW
GetCurrentThread
QueryPerformanceCounter
SearchPathW
lstrcmpA
SystemTimeToFileTime
ResetEvent
SetEvent
VirtualProtect
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetDateFormatW
GetTimeFormatW
GetTempFileNameW
GetEnvironmentVariableW
CompareFileTime
SetFileTime
OpenProcess
GetProcessTimes
lstrlenA
GetLocalTime
GetCurrentProcessId
GetVersion
LCMapStringW
DecodePointer
EncodePointer
LeaveCriticalSection
EnterCriticalSection

user32

wsprintfW
CharUpperBuffW
SendMessageW
MoveWindow
DialogBoxIndirectParamW
EndDialog
GetDlgItem
SetDlgItemTextW
SetActiveWindow
SetForegroundWindow
SetWindowTextW
GetWindowRect
MessageBoxW
GetWindowLongW
WaitForInputIdle
SetWindowLongW
LoadIconW
TranslateMessage
DispatchMessageW
PeekMessageW
PostMessageW
SystemParametersInfoW
GetWindow
FillRect
GetSysColor
MapWindowPoints
RemovePropW
GetPropW
SetPropW
EndPaint
BeginPaint
EnableMenuItem
GetSystemMetrics
SetFocus
DefWindowProcW
GetMessageW
LoadStringW
LoadImageW
ReleaseDC
GetDC
CreateDialogParamW
GetParent
GetWindowTextW
CharNextW
GetDesktopWindow
GetClientRect
IsWindowEnabled
CreateDialogIndirectParamW
IsWindowVisible
IsDialogMessageW
FindWindowExW
ScreenToClient
EnableWindow
MsgWaitForMultipleObjects
SendDlgItemMessageW
SetWindowPos
ShowWindow
DestroyWindow
IsWindow
ExitWindowsEx
CharUpperW
wsprintfA
CallWindowProcW
CreateWindowExW
DrawIcon
DrawTextW
UpdateWindow
GetWindowDC
InvalidateRect
DrawFocusRect
CopyRect
InflateRect
EnumChildWindows
GetClassNameW
MapDialogRect
RegisterClassExW
GetDlgItemTextW
IntersectRect
MonitorFromPoint

gdi32

SetTextColor
SetBkMode
SetBkColor
SaveDC
RestoreDC
CreateSolidBrush
UnrealizeObject
CreateHalftonePalette
GetDIBColorTable
SelectPalette
SelectObject
RealizePalette
GetSystemPaletteEntries
GetDeviceCaps
DeleteDC
CreatePalette
CreateCompatibleDC
BitBlt
GetObjectW
TranslateCharsetInfo
DeleteObject
CreateFontIndirectW
CreateCompatibleBitmap
CreateDCW
CreatePatternBrush
GetStockObject
GetTextExtentPoint32W
DeleteMetaFile
CreateDIBitmap
CreateBitmap
CreateRectRgn
PatBlt
PlayMetaFile
SelectClipRgn
SetMapMode
SetMetaFileBitsEx
SetPixel
StretchBlt
SetStretchBltMode
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
TextOutW

advapi32

RegCreateKeyExW
RegOpenKeyExW
FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenThreadToken
RegEnumKeyW
RegCreateKeyW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
RegOpenKeyW
RegEnumValueW
RegQueryValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegCloseKey

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetMalloc
ShellExecuteExW

ole32

CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoInitializeSecurity
CoInitializeEx
CoUninitialize
ProgIDFromCLSID
CreateStreamOnHGlobal
GetRunningObjectTable
CreateItemMoniker
CoLoadLibrary
CoCreateGuid
StringFromGUID2

oleaut32

LoadTypeLi
SetErrorInfo
SysReAllocStringLen
GetErrorInfo
CreateErrorInfo
VarBstrCmp
SysAllocStringLen
RegisterTypeLi
VariantClear
SysAllocString
SysFreeString
SysStringByteLen
SysStringLen
SysAllocStringByteLen
VariantInit
VariantChangeType
VarBstrCat
VarUI4FromStr

rpcrt4

RpcStringFreeW
UuidCreate
UuidToStringW
UuidFromStringW

gdiplus

GdipGetImageWidth
GdipCreateFromHDC
GdipAlloc
GdipFree
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromResource
GdipDrawImageRectI
GdipSetInterpolationMode
GdiplusStartup
GdipGetImageHeight
GdipDeleteGraphics

Sections

.text
Size: 682KB - Virtual size: 682KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 305KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Windows/WlanUI/Setup.ini
Windows/WlanUI/UnInstall.bat
.bat .vbs
Windows/WlanUI/Uninstall.iss
Windows/WlanUI/data1.cab
Windows/WlanUI/data1.hdr
Windows/WlanUI/data2.cab
Windows/WlanUI/layout.bin
Windows/WlanUI/setup.inx
Windows/WlanUI/setup.iss
Windows/WlanUI/vcredist/vc_red.cab
.cab
Windows/WlanUI/vcredist/vc_red.msi
.msi
Windows/setup.iss

Sharing

General

Malware Config

Signatures

Files

Password: P3n4mM

Password: P3n4mM

Password: P3n4mM

Password: P3n4mM

Password: P3n4mM

Password: P3n4mM

Password: P3n4mM

Password: P3n4mM

Password: P3n4mM

c23e822feac4ccc189a3fe07d78b6e98

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

13:22:2a:5d:cc:f7:16:df:5a:f9:c8:70:84:41:2d:d9Certificate

Extended Key Usages

Key Usages

61:19:93:e4:00:00:00:00:00:1cCertificate

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

33:66:94:66:95:bc:1c:ed:ab:83:ab:7d:a2:47:bb:23:db:d1:75:b1Signer

Signature Validations

Verification

12-08-2015 14:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

crypt32

oleaut32

kernel32

advapi32

ole32

ws2_32

rpcrt4

user32

wtsapi32

version

wlanapi

xmllite

iphlpapi

Exports

Exports

Sections

.text Size: 966KB - Virtual size: 966KB

.data Size: 85KB - Virtual size: 108KB

.pdata Size: 32KB - Virtual size: 31KB

.rsrc Size: 1024B - Virtual size: 1008B

.reloc Size: 19KB - Virtual size: 18KB

611f1f929b7fa547b62a979678e70858

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

13:22:2a:5d:cc:f7:16:df:5a:f9:c8:70:84:41:2d:d9Certificate

Extended Key Usages

Key Usages

61:19:93:e4:00:00:00:00:00:1cCertificate

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

a8:28:78:31:2a:6f:d5:d9:86:4d:35:5e:c7:a6:5f:f0:cf:4a:78:3eSigner

Signature Validations

Verification

12-08-2015 14:34 Valid: false

Headers

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

13:22:2a:5d:cc:f7:16:df:5a:f9:c8:70:84:41:2d:d9
Certificate

61:19:93:e4:00:00:00:00:00:1c
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

33:66:94:66:95:bc:1c:ed:ab:83:ab:7d:a2:47:bb:23:db:d1:75:b1
Signer

12-08-2015 14:34
Valid: false

.text
Size: 966KB - Virtual size: 966KB

.data
Size: 85KB - Virtual size: 108KB

.pdata
Size: 32KB - Virtual size: 31KB

.rsrc
Size: 1024B - Virtual size: 1008B

.reloc
Size: 19KB - Virtual size: 18KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

13:22:2a:5d:cc:f7:16:df:5a:f9:c8:70:84:41:2d:d9
Certificate

61:19:93:e4:00:00:00:00:00:1c
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

a8:28:78:31:2a:6f:d5:d9:86:4d:35:5e:c7:a6:5f:f0:cf:4a:78:3e
Signer

12-08-2015 14:34
Valid: false

.text
Size: 861KB - Virtual size: 860KB

.data
Size: 55KB - Virtual size: 76KB

.rsrc
Size: 1024B - Virtual size: 1008B

.reloc
Size: 52KB - Virtual size: 52KB

61:20:4d:b4:00:00:00:00:00:27
Certificate

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

61:20:4d:b4:00:00:00:00:00:27
Certificate

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

0a:99:e8:60:cd:f0:68:52:17:8c:41:3d:a2:63:f8:2d:cb:2a:38:94:ec:f4:ce:9f:a3:00:cc:87:c5:90:9c:71
Signer

15-12-2022 13:51
Valid: false

7a:81:25:7b:f2:94:df:21:87:e3:6c:6a:92:66:67:0a:47:e3:9a:ec
Signer

11-09-2017 13:37
Valid: false