intel_wifi_driver_WT[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

intel_wifi_driver_WT.zip
Size

76.7MB
MD5

2a8c7be2086b4aed674a1256fa0c5bef
SHA1

d0cbb542bda446467d109958e330596078262000
SHA256

cc820696d6fc9203ff4589547c941ff9c112e967fb45c7a264761f2864ecee6e
SHA512

2ab6cc7cbd1156ce46202a15255a2ee48618c2e31ff6e2352e841a21c04150282927037f5931c5d17194bdf6a7e8385746f16c8af99cc3069161dae057d75b3a
SSDEEP

1572864:+eEx1OPNz1V57lfUFuoMrlRy4qk1ubSYAa1WTiaaxFthy7Y37DKB1:pEx6X78yy4qk1ubSigsFXAgD2

Score

1^/10

Malware Config

Signatures

Files

intel_wifi_driver_WT.zip
.zip
WT/Docs/ARA/adaptusr.htm
WT/Docs/ARA/caution.jpg
.jpg
WT/Docs/ARA/index.htm
WT/Docs/ARA/japan.jpg
.jpg
WT/Docs/ARA/korea.jpg
.jpg
WT/Docs/ARA/regs.htm
WT/Docs/ARA/specs.htm
WT/Docs/ARA/style.css
WT/Docs/ARA/support.htm
.html
WT/Docs/ARA/taiwan.jpg
.jpg
WT/Docs/ARA/warning.jpg
.jpg
WT/Docs/ARA/warranty.htm
.html
WT/Docs/CHS/adaptusr.htm
WT/Docs/CHS/caution.jpg
.jpg
WT/Docs/CHS/index.htm
WT/Docs/CHS/japan.jpg
.jpg
WT/Docs/CHS/korea.jpg
.jpg
WT/Docs/CHS/regs.htm
WT/Docs/CHS/specs.htm
WT/Docs/CHS/style.css
WT/Docs/CHS/support.htm
.html
WT/Docs/CHS/taiwan.jpg
.jpg
WT/Docs/CHS/warning.jpg
.jpg
WT/Docs/CHS/warranty.htm
.html
WT/Docs/CHT/adaptusr.htm
WT/Docs/CHT/caution.jpg
.jpg
WT/Docs/CHT/index.htm
WT/Docs/CHT/japan.jpg
.jpg
WT/Docs/CHT/korea.jpg
.jpg
WT/Docs/CHT/regs.htm
WT/Docs/CHT/specs.htm
WT/Docs/CHT/style.css
WT/Docs/CHT/support.htm
.html
WT/Docs/CHT/taiwan.jpg
.jpg
WT/Docs/CHT/warning.jpg
.jpg
WT/Docs/CHT/warranty.htm
.html
WT/Docs/CSY/adaptusr.htm
WT/Docs/CSY/caution.jpg
.jpg
WT/Docs/CSY/index.htm
WT/Docs/CSY/japan.jpg
.jpg
WT/Docs/CSY/korea.jpg
.jpg
WT/Docs/CSY/regs.htm
WT/Docs/CSY/specs.htm
WT/Docs/CSY/style.css
WT/Docs/CSY/support.htm
.html
WT/Docs/CSY/taiwan.jpg
.jpg
WT/Docs/CSY/warning.jpg
.jpg
WT/Docs/CSY/warranty.htm
.html
WT/Docs/DAN/adaptusr.htm
WT/Docs/DAN/caution.jpg
.jpg
WT/Docs/DAN/index.htm
WT/Docs/DAN/japan.jpg
.jpg
WT/Docs/DAN/korea.jpg
.jpg
WT/Docs/DAN/regs.htm
WT/Docs/DAN/specs.htm
WT/Docs/DAN/style.css
WT/Docs/DAN/support.htm
.html
WT/Docs/DAN/taiwan.jpg
.jpg
WT/Docs/DAN/warning.jpg
.jpg
WT/Docs/DAN/warranty.htm
.html
WT/Docs/DEU/adaptusr.htm
WT/Docs/DEU/caution.jpg
.jpg
WT/Docs/DEU/index.htm
WT/Docs/DEU/japan.jpg
.jpg
WT/Docs/DEU/korea.jpg
.jpg
WT/Docs/DEU/regs.htm
WT/Docs/DEU/specs.htm
WT/Docs/DEU/style.css
WT/Docs/DEU/support.htm
.html
WT/Docs/DEU/taiwan.jpg
.jpg
WT/Docs/DEU/warning.jpg
.jpg
WT/Docs/DEU/warranty.htm
.html
WT/Docs/ELL/adaptusr.htm
WT/Docs/ELL/caution.jpg
.jpg
WT/Docs/ELL/index.htm
WT/Docs/ELL/japan.jpg
.jpg
WT/Docs/ELL/korea.jpg
.jpg
WT/Docs/ELL/regs.htm
WT/Docs/ELL/specs.htm
WT/Docs/ELL/style.css
WT/Docs/ELL/support.htm
.html
WT/Docs/ELL/taiwan.jpg
.jpg
WT/Docs/ELL/warning.jpg
.jpg
WT/Docs/ELL/warranty.htm
.html
WT/Docs/ENU/adaptusr.htm
WT/Docs/ENU/caution.jpg
.jpg
WT/Docs/ENU/index.htm
WT/Docs/ENU/japan.jpg
.jpg
WT/Docs/ENU/korea.jpg
.jpg
WT/Docs/ENU/regs.htm
WT/Docs/ENU/specs.htm
WT/Docs/ENU/style.css
WT/Docs/ENU/support.htm
.html
WT/Docs/ENU/taiwan.jpg
.jpg
WT/Docs/ENU/warning.jpg
.jpg
WT/Docs/ENU/warranty.htm
.html
WT/Docs/ESN/adaptusr.htm
WT/Docs/ESN/caution.jpg
.jpg
WT/Docs/ESN/index.htm
WT/Docs/ESN/japan.jpg
.jpg
WT/Docs/ESN/korea.jpg
.jpg
WT/Docs/ESN/regs.htm
WT/Docs/ESN/specs.htm
WT/Docs/ESN/style.css
WT/Docs/ESN/support.htm
.html
WT/Docs/ESN/taiwan.jpg
.jpg
WT/Docs/ESN/warning.jpg
.jpg
WT/Docs/ESN/warranty.htm
.html
WT/Docs/FIN/adaptusr.htm
WT/Docs/FIN/caution.jpg
.jpg
WT/Docs/FIN/index.htm
WT/Docs/FIN/japan.jpg
.jpg
WT/Docs/FIN/korea.jpg
.jpg
WT/Docs/FIN/regs.htm
WT/Docs/FIN/specs.htm
WT/Docs/FIN/style.css
WT/Docs/FIN/support.htm
.html
WT/Docs/FIN/taiwan.jpg
.jpg
WT/Docs/FIN/warning.jpg
.jpg
WT/Docs/FIN/warranty.htm
.html
WT/Docs/FRA/adaptusr.htm
WT/Docs/FRA/caution.jpg
.jpg
WT/Docs/FRA/index.htm
WT/Docs/FRA/japan.jpg
.jpg
WT/Docs/FRA/korea.jpg
.jpg
WT/Docs/FRA/regs.htm
WT/Docs/FRA/specs.htm
WT/Docs/FRA/style.css
WT/Docs/FRA/support.htm
.html
WT/Docs/FRA/taiwan.jpg
.jpg
WT/Docs/FRA/warning.jpg
.jpg
WT/Docs/FRA/warranty.htm
.html
WT/Docs/HEB/adaptusr.htm
WT/Docs/HEB/caution.jpg
.jpg
WT/Docs/HEB/index.htm
WT/Docs/HEB/japan.jpg
.jpg
WT/Docs/HEB/korea.jpg
.jpg
WT/Docs/HEB/regs.htm
WT/Docs/HEB/specs.htm
WT/Docs/HEB/style.css
WT/Docs/HEB/support.htm
.html
WT/Docs/HEB/taiwan.jpg
.jpg
WT/Docs/HEB/warning.jpg
.jpg
WT/Docs/HEB/warranty.htm
.html
WT/Docs/HUN/adaptusr.htm
WT/Docs/HUN/caution.jpg
.jpg
WT/Docs/HUN/index.htm
WT/Docs/HUN/japan.jpg
.jpg
WT/Docs/HUN/korea.jpg
.jpg
WT/Docs/HUN/regs.htm
WT/Docs/HUN/specs.htm
WT/Docs/HUN/style.css
WT/Docs/HUN/support.htm
.html
WT/Docs/HUN/taiwan.jpg
.jpg
WT/Docs/HUN/warning.jpg
.jpg
WT/Docs/HUN/warranty.htm
.html
WT/Docs/ITA/adaptusr.htm
WT/Docs/ITA/caution.jpg
.jpg
WT/Docs/ITA/index.htm
WT/Docs/ITA/japan.jpg
.jpg
WT/Docs/ITA/korea.jpg
.jpg
WT/Docs/ITA/regs.htm
WT/Docs/ITA/specs.htm
WT/Docs/ITA/style.css
WT/Docs/ITA/support.htm
.html
WT/Docs/ITA/taiwan.jpg
.jpg
WT/Docs/ITA/warning.jpg
.jpg
WT/Docs/ITA/warranty.htm
.html
WT/Docs/Icons/3945doc.jpg
.jpg
WT/Docs/Icons/8265_Korea.jpg
.jpg
WT/Docs/Icons/AdHoc.jpg
.jpg
WT/Docs/Icons/Argentina.jpg
.jpg
WT/Docs/Icons/Argentina_3165D2W_C-16041.jpg
.jpg
WT/Docs/Icons/Argentina_3165NGW_C-14446.jpg
.jpg
WT/Docs/Icons/Argentina_3168NGW_C-16378.jpg
.jpg
WT/Docs/Icons/Argentina_7265D2W_C-13902.jpg
.jpg
WT/Docs/Icons/Argentina_8260D2W_C-15886.jpg
.jpg
WT/Docs/Icons/Argentina_8260NGWH_C-15598.jpg
.jpg
WT/Docs/Icons/Argentina_8260NGW_C-14827.jpg
.jpg
WT/Docs/Icons/Argentina_8265D2W_C-17071.jpg
.jpg
WT/Docs/Icons/Argentina_8265NGW_C-16376.jpg
.jpg
WT/Docs/Icons/Argentina_9260D2WL_C-22837.jpg
.jpg
WT/Docs/Icons/Argentina_AX200D2WL_C-22839.jpg
.jpg
WT/Docs/Icons/Argentina_AX200NGW_C-22838.jpg
.jpg
WT/Docs/Icons/Argentina_AX201D2WL_C-22504.jpg
.jpg
WT/Docs/Icons/Argentina_AX201D2W_C-22445.jpg
.jpg
WT/Docs/Icons/Argentina_AX201NGW_C-22446.jpg
.jpg
WT/Docs/Icons/China_8265D2W.jpg
.jpg
WT/Docs/Icons/China_8265NGW.jpg
.jpg
WT/Docs/Icons/China_9461D2W.jpg
.jpg
WT/Docs/Icons/China_9461NGW.jpg
.jpg
WT/Docs/Icons/China_9462D2W.jpg
.jpg
WT/Docs/Icons/China_9462NGW.jpg
.jpg
WT/Docs/Icons/China_9560D2W.jpg
.jpg
WT/Docs/Icons/China_9560D2WL.jpg
.jpg
WT/Docs/Icons/China_AX201D2W.jpg
.jpg
WT/Docs/Icons/China_AX201D2WL.jpg
.jpg
WT/Docs/Icons/China_AX201NGW.jpg
.jpg
WT/Docs/Icons/Europe.jpg
.jpg
WT/Docs/Icons/Europe_18265.jpg
.jpg
WT/Docs/Icons/Europe_2.jpg
.jpg
WT/Docs/Icons/Japan-SD 11000.jpg
.jpg
WT/Docs/Icons/Japan_18265NGW.jpg
.jpg
WT/Docs/Icons/Japan_3165D2W.jpg
.jpg
WT/Docs/Icons/Japan_3165NGW.jpg
.jpg
WT/Docs/Icons/Japan_3168NGW.jpg
.jpg
WT/Docs/Icons/Japan_7265D2W.jpg
.jpg
WT/Docs/Icons/Japan_7265NGW.jpg
.jpg
WT/Docs/Icons/Japan_8260D2W.jpg
.jpg
WT/Docs/Icons/Japan_8260NGW.jpg
.jpg
WT/Docs/Icons/Japan_8260NGWH.jpg
.jpg
WT/Docs/Icons/Japan_8265D2W.jpg
.jpg
WT/Docs/Icons/Japan_8265NGW.jpg
.jpg
WT/Docs/Icons/Japan_9260D2WL.jpg
.jpg
WT/Docs/Icons/Japan_9260NGW.jpg
.jpg
WT/Docs/Icons/Japan_9461D2W.jpg
.jpg
WT/Docs/Icons/Japan_9461NGW.jpg
.jpg
WT/Docs/Icons/Japan_9462D2W.jpg
.jpg
WT/Docs/Icons/Japan_9462NGW.jpg
.jpg
WT/Docs/Icons/Japan_9560D2W.jpg
.jpg
WT/Docs/Icons/Japan_9560D2WL.jpg
.jpg
WT/Docs/Icons/Japan_9560NGW.jpg
.jpg
WT/Docs/Icons/Japan_AX200D2WL.jpg
.jpg
WT/Docs/Icons/Japan_AX200NGW.jpg
.jpg
WT/Docs/Icons/Japan_AX201D2W.jpg
.jpg
WT/Docs/Icons/Japan_AX201D2WL.jpg
.jpg
WT/Docs/Icons/Japan_AX201NGW.jpg
.jpg
WT/Docs/Icons/NCC_ID.jpg
.jpg
WT/Docs/Icons/NCC_ID_11000.jpg
.jpg
WT/Docs/Icons/NCC_ID_11000_LC.jpg
.jpg
WT/Docs/Icons/NCC_ID_3165.jpg
.jpg
WT/Docs/Icons/NCC_ID_8265D2W.jpg
.jpg
WT/Docs/Icons/NCC_ID_8265NGW.jpg
.jpg
WT/Docs/Icons/NCC_ID_9260NGW.jpg
.jpg
WT/Docs/Icons/NCC_ID_9560NGW.jpg
.jpg
WT/Docs/Icons/NCC_ID_9560NGW_R.jpg
.jpg
WT/Docs/Icons/RCM_jpg.jpg
.jpg
WT/Docs/Icons/Singapore Reg ID.jpg
.jpg
WT/Docs/Icons/Singapore_Reg_ID.jpg
.jpg
WT/Docs/Icons/Taiwan_11100D2W.jpg
.jpg
WT/Docs/Icons/Taiwan_13110NGW.jpg
.jpg
WT/Docs/Icons/Taiwan_18265.jpg
.jpg
WT/Docs/Icons/Taiwan_9461D2W.jpg
.jpg
WT/Docs/Icons/Taiwan_9461NGW.jpg
.jpg
WT/Docs/Icons/Taiwan_9462D2W.jpg
.jpg
WT/Docs/Icons/Taiwan_9462NGW.jpg
.jpg
WT/Docs/Icons/Taiwan_9560D2W.jpg
.jpg
WT/Docs/Icons/Taiwan_9560D2WL.jpg
.jpg
WT/Docs/Icons/Taiwan_AX200D2WL.jpg
.jpg
WT/Docs/Icons/Taiwan_AX200NGW.jpg
.jpg
WT/Docs/Icons/Taiwan_AX201D2W.jpg
.jpg
WT/Docs/Icons/Taiwan_AX201D2WL.jpg
.jpg
WT/Docs/Icons/Taiwan_AX201NGW.jpg
.jpg
WT/Docs/Icons/WEEE_Icon1.JPG
.jpg
WT/Docs/Icons/XSP1.jpg
.jpg
WT/Docs/Icons/all.jpg
.jpg
WT/Docs/Icons/arrows.jpg
.jpg
WT/Docs/Icons/caution.jpg
.jpg
WT/Docs/Icons/check.png
.png
WT/Docs/Icons/conicon.jpg
.jpg
WT/Docs/Icons/conicon3.jpg
.jpg
WT/Docs/Icons/conicon5.jpg
.jpg
WT/Docs/Icons/exclude.jpg
.jpg
WT/Docs/Icons/icon0.JPG
.jpg
WT/Docs/Icons/icon2.jpg
.jpg
WT/Docs/Icons/icon3.jpg
.jpg
WT/Docs/Icons/icon4.jpg
.jpg
WT/Docs/Icons/icon_1.JPG
.jpg
WT/Docs/Icons/icon_2.JPG
.jpg
WT/Docs/Icons/icon_3.JPG
.jpg
WT/Docs/Icons/icon_4.JPG
.jpg
WT/Docs/Icons/icon_5.JPG
.jpg
WT/Docs/Icons/import1.jpg
.jpg
WT/Docs/Icons/it.jpg
.jpg
WT/Docs/Icons/japan.jpg
.jpg
WT/Docs/Icons/korea.jpg
.jpg
WT/Docs/Icons/mark.png
.png
WT/Docs/Icons/note.jpg
.jpg
WT/Docs/Icons/profile.jpg
.jpg
WT/Docs/Icons/regs002.jpg
.jpg
WT/Docs/Icons/regs003.jpg
.jpg
WT/Docs/Icons/regs004.jpg
.jpg
WT/Docs/Icons/regs005.jpg
.jpg
WT/Docs/Icons/sigicon.jpg
.jpg
WT/Docs/Icons/singapore_DB02941.jpg
.jpg
WT/Docs/Icons/taiwan.jpg
.jpg
WT/Docs/Icons/titicon7.jpg
.jpg
WT/Docs/Icons/ttico1.jpg
.jpg
WT/Docs/Icons/ttico2.jpg
.jpg
WT/Docs/Icons/ttico3.jpg
.jpg
WT/Docs/Icons/ttico4.jpg
.jpg
WT/Docs/Icons/ttico5.jpg
.jpg
WT/Docs/Icons/ttico6.jpg
.jpg
WT/Docs/Icons/tticon1.jpg
.jpg
WT/Docs/Icons/tticon2.jpg
.jpg
WT/Docs/Icons/tticon3.jpg
.jpg
WT/Docs/Icons/tticon4.jpg
.jpg
WT/Docs/Icons/tticon5.jpg
.jpg
WT/Docs/Icons/tticon6.jpg
.jpg
WT/Docs/Icons/tticon8.jpg
.jpg
WT/Docs/Icons/tticon9.jpg
.jpg
WT/Docs/Icons/warning.jpg
.jpg
WT/Docs/Icons/xpsp2.jpg
.jpg
WT/Docs/JPN/adaptusr.htm
WT/Docs/JPN/caution.jpg
.jpg
WT/Docs/JPN/index.htm
WT/Docs/JPN/japan.jpg
.jpg
WT/Docs/JPN/korea.jpg
.jpg
WT/Docs/JPN/regs.htm
WT/Docs/JPN/specs.htm
WT/Docs/JPN/style.css
WT/Docs/JPN/support.htm
.html
WT/Docs/JPN/taiwan.jpg
.jpg
WT/Docs/JPN/warning.jpg
.jpg
WT/Docs/JPN/warranty.htm
.html
WT/Docs/KOR/adaptusr.htm
WT/Docs/KOR/caution.jpg
.jpg
WT/Docs/KOR/index.htm
WT/Docs/KOR/japan.jpg
.jpg
WT/Docs/KOR/korea.jpg
.jpg
WT/Docs/KOR/regs.htm
WT/Docs/KOR/specs.htm
WT/Docs/KOR/style.css
WT/Docs/KOR/support.htm
.html
WT/Docs/KOR/taiwan.jpg
.jpg
WT/Docs/KOR/warning.jpg
.jpg
WT/Docs/KOR/warranty.htm
.html
WT/Docs/NLD/adaptusr.htm
WT/Docs/NLD/caution.jpg
.jpg
WT/Docs/NLD/index.htm
WT/Docs/NLD/japan.jpg
.jpg
WT/Docs/NLD/korea.jpg
.jpg
WT/Docs/NLD/regs.htm
WT/Docs/NLD/specs.htm
WT/Docs/NLD/style.css
WT/Docs/NLD/support.htm
.html
WT/Docs/NLD/taiwan.jpg
.jpg
WT/Docs/NLD/warning.jpg
.jpg
WT/Docs/NLD/warranty.htm
.html
WT/Docs/NOR/adaptusr.htm
WT/Docs/NOR/caution.jpg
.jpg
WT/Docs/NOR/index.htm
WT/Docs/NOR/japan.jpg
.jpg
WT/Docs/NOR/korea.jpg
.jpg
WT/Docs/NOR/regs.htm
WT/Docs/NOR/specs.htm
WT/Docs/NOR/style.css
WT/Docs/NOR/support.htm
.html
WT/Docs/NOR/taiwan.jpg
.jpg
WT/Docs/NOR/warning.jpg
.jpg
WT/Docs/NOR/warranty.htm
.html
WT/Docs/PLK/adaptusr.htm
WT/Docs/PLK/caution.jpg
.jpg
WT/Docs/PLK/index.htm
WT/Docs/PLK/japan.jpg
.jpg
WT/Docs/PLK/korea.jpg
.jpg
WT/Docs/PLK/regs.htm
WT/Docs/PLK/specs.htm
WT/Docs/PLK/style.css
WT/Docs/PLK/support.htm
.html
WT/Docs/PLK/taiwan.jpg
.jpg
WT/Docs/PLK/warning.jpg
.jpg
WT/Docs/PLK/warranty.htm
.html
WT/Docs/PTB/adaptusr.htm
WT/Docs/PTB/caution.jpg
.jpg
WT/Docs/PTB/index.htm
WT/Docs/PTB/japan.jpg
.jpg
WT/Docs/PTB/korea.jpg
.jpg
WT/Docs/PTB/regs.htm
WT/Docs/PTB/specs.htm
WT/Docs/PTB/style.css
WT/Docs/PTB/support.htm
.html
WT/Docs/PTB/taiwan.jpg
.jpg
WT/Docs/PTB/warning.jpg
.jpg
WT/Docs/PTB/warranty.htm
.html
WT/Docs/PTG/adaptusr.htm
WT/Docs/PTG/caution.jpg
.jpg
WT/Docs/PTG/index.htm
WT/Docs/PTG/japan.jpg
.jpg
WT/Docs/PTG/korea.jpg
.jpg
WT/Docs/PTG/regs.htm
WT/Docs/PTG/specs.htm
WT/Docs/PTG/style.css
WT/Docs/PTG/support.htm
.html
WT/Docs/PTG/taiwan.jpg
.jpg
WT/Docs/PTG/warning.jpg
.jpg
WT/Docs/PTG/warranty.htm
.html
WT/Docs/RUS/adaptusr.htm
WT/Docs/RUS/caution.jpg
.jpg
WT/Docs/RUS/index.htm
WT/Docs/RUS/japan.jpg
.jpg
WT/Docs/RUS/korea.jpg
.jpg
WT/Docs/RUS/regs.htm
WT/Docs/RUS/specs.htm
WT/Docs/RUS/style.css
WT/Docs/RUS/support.htm
.html
WT/Docs/RUS/taiwan.jpg
.jpg
WT/Docs/RUS/warning.jpg
.jpg
WT/Docs/RUS/warranty.htm
.html
WT/Docs/SVE/adaptusr.htm
WT/Docs/SVE/caution.jpg
.jpg
WT/Docs/SVE/index.htm
WT/Docs/SVE/japan.jpg
.jpg
WT/Docs/SVE/korea.jpg
.jpg
WT/Docs/SVE/regs.htm
WT/Docs/SVE/specs.htm
WT/Docs/SVE/style.css
WT/Docs/SVE/support.htm
.html
WT/Docs/SVE/taiwan.jpg
.jpg
WT/Docs/SVE/warning.jpg
.jpg
WT/Docs/SVE/warranty.htm
.html
WT/Docs/THA/adaptusr.htm
WT/Docs/THA/caution.jpg
.jpg
WT/Docs/THA/index.htm
WT/Docs/THA/japan.jpg
.jpg
WT/Docs/THA/korea.jpg
.jpg
WT/Docs/THA/regs.htm
WT/Docs/THA/specs.htm
WT/Docs/THA/style.css
WT/Docs/THA/support.htm
.html
WT/Docs/THA/taiwan.jpg
.jpg
WT/Docs/THA/warning.jpg
.jpg
WT/Docs/THA/warranty.htm
.html
WT/Docs/TRK/adaptusr.htm
WT/Docs/TRK/caution.jpg
.jpg
WT/Docs/TRK/index.htm
WT/Docs/TRK/japan.jpg
.jpg
WT/Docs/TRK/korea.jpg
.jpg
WT/Docs/TRK/regs.htm
WT/Docs/TRK/specs.htm
WT/Docs/TRK/style.css
WT/Docs/TRK/support.htm
.html
WT/Docs/TRK/taiwan.jpg
.jpg
WT/Docs/TRK/warning.jpg
.jpg
WT/Docs/TRK/warranty.htm
.html
WT/Docs/releasenotes.htm
.html
WT/INTEL Software License Agreement.rtf
.rtf
WT/NonIntelLicenses/IBL Pinvoke.net License.txt
WT/NonIntelLicenses/MIT License.txt
WT/NonIntelLicenses/Microsoft Enterprise WDK License for VS 2019.txt
WT/NonIntelLicenses/Microsoft Public License.txt
WT/NonIntelLicenses/Microsoft Reciprocal License.txt
WT/NonIntelLicenses/Microsoft Visual Studio 2017 Enterprise.txt
WT/NonIntelLicenses/Microsoft Windows 10 SDK License.txt
WT/NonIntelLicenses/apache_license.txt
WT/NonIntelLicenses/brown_crc32.txt
WT/NonIntelLicenses/doxegen.txt
WT/NonIntelLicenses/express_logic_threadx.txt
WT/NonIntelLicenses/gladman_older_rijndael_license.txt
WT/NonIntelLicenses/hackers_delight_algorithms_code.txt
WT/NonIntelLicenses/hostapd_authenticator.txt
WT/NonIntelLicenses/jouni_malinen_wpa_supplicant.txt
WT/NonIntelLicenses/msft_sdk_license.txt
WT/NonIntelLicenses/msft_vs_2019_license.txt
WT/NonIntelLicenses/msft_vs_autogenerated_code.txt
WT/NonIntelLicenses/oss_notice_intel_conectivity_wireless_firmware_code.txt
WT/NonIntelLicenses/tmake.txt
WT/UWD/Win64/Drivers/IntelIhvRouter04.dll
.dll windows:6 windows x64 arch:x64

44770483078318d55aa0556b4dc7d74b

Code Sign

58:b1:c1:c4:3e:99:9c:1c:f7:c6:94:a1:d7:76:d0:fe
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05/04/2021, 00:00

Not After

05/04/2023, 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/07/2015, 21:03

Not After

22/07/2025, 21:03

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

33:00:00:00:b5:21:3f:ca:1e:4a:a0:3d:e4:00:00:00:00:00:b5
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 22:15

Not After

02/12/2021, 22:15

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:36:fe:0d:b0:10:1d:67:7d:57:24:54:30:6f:10:35:0b:ca:49:2c:04:67:6a:f0:55:32:97:99:ba:0c:0f:26
Signer

Actual PE Digest

4c:36:fe:0d:b0:10:1d:67:7d:57:24:54:30:6f:10:35:0b:ca:49:2c:04:67:6a:f0:55:32:97:99:ba:0c:0f:26

Digest Algorithm

sha256

PE Digest Matches

true

4c:36:fe:0d:b0:10:1d:67:7d:57:24:54:30:6f:10:35:0b:ca:49:2c:04:67:6a:f0:55:32:97:99:ba:0c:0f:26
Signer

Actual PE Digest

4c:36:fe:0d:b0:10:1d:67:7d:57:24:54:30:6f:10:35:0b:ca:49:2c:04:67:6a:f0:55:32:97:99:ba:0c:0f:26

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\jkp\workspace\RouterDLL\766\ROUTER_DLL01439\Source\Output\ReleaseUap\x64\IntelIHVRouter.pdb

Imports

advapi32

RegCloseKey
RegSetValueExW
RegQueryValueExW

setupapi

CM_Get_Device_ID_List_SizeW
CM_Open_DevNode_Key
CM_Get_Device_ID_ListW
CM_Locate_DevNodeW
CM_Get_DevNode_Status
CM_Disable_DevNode
CM_Get_Child
CM_Get_Device_IDW
CM_Get_DevNode_Registry_PropertyW
CM_Get_Sibling
CM_Enable_DevNode

api-ms-win-devices-config-l1-1-1

CM_Unregister_Notification
CM_Register_Notification
CM_Get_DevNode_PropertyW

kernel32

CreateFileW
SetStdHandle
HeapSize
GetModuleFileNameA
GetCurrentProcess
GetLastError
K32GetModuleBaseNameA
WideCharToMultiByte
CreateDirectoryA
GetProcessHeap
SetEnvironmentVariableW
WriteConsoleW
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
CreateEventW
SetEvent
CloseHandle
ResetEvent
GetProcAddress
DeleteCriticalSection
FindFirstFileW
GetACP
SetEndOfFile
IsValidCodePage
FindNextFileW
FindFirstFileExW
ReleaseSemaphore
CreateSemaphoreW
GetTimeZoneInformation
CreateThread
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
FreeLibrary
LoadLibraryExW
HeapReAlloc
SetConsoleCtrlHandler
ReadConsoleW
ReadFile
Sleep
GetConsoleMode
LocalFree
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetFilePointerEx
__C_specific_handler
GetFileSizeEx
GetFileType
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
InitializeSRWLock
FindClose
GetDateFormatW
HeapAlloc
HeapFree
ExitProcess
ResumeThread
ExitThread
GetCurrentThreadId
GetCurrentProcessId
GetLocalTime
OutputDebugStringA
FormatMessageA
RtlPcToFileHeader
RaiseException
RtlCaptureStackBackTrace
IsProcessorFeaturePresent
QueueUserWorkItem
GetModuleHandleExW
TryEnterCriticalSection
GetStringTypeW
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
EncodePointer
DecodePointer
WaitForSingleObjectEx
GetExitCodeThread
GetNativeSystemInfo
QueryPerformanceCounter
QueryPerformanceFrequency
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
OutputDebugStringW
GetCurrentThread
GetThreadTimes
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleA
GetVersionExW
VirtualAlloc
VirtualProtect
VirtualFree
SetProcessAffinityMask
DuplicateHandle
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
WaitForMultipleObjectsEx
LoadLibraryW
RtlUnwindEx
RtlUnwind

ole32

StringFromGUID2
CoTaskMemFree

shell32

SHGetKnownFolderPath

rpcrt4

RpcBindingVectorFree
NdrServerCall2
NdrServerCallAll
RpcServerInqCallAttributesW
RpcServerUnsubscribeForNotification
RpcServerSubscribeForNotification
RpcStringFreeW
UuidToStringW
RpcMgmtStopServerListening
RpcServerInqBindings
RpcEpRegisterW
RpcEpUnregister
RpcServerListen
RpcServerRegisterIf3
RpcServerUnregisterIf
RpcServerUseProtseqEpW

Exports

Exports

Dot11ExtIhvGetVersionInfo
Dot11ExtIhvInitService
Dot11ExtIhvInitVirtualStation

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 285KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WT/UWD/Win64/Drivers/IntelIhvRouter06.dll
.dll windows:6 windows x64 arch:x64

44770483078318d55aa0556b4dc7d74b

Code Sign

58:b1:c1:c4:3e:99:9c:1c:f7:c6:94:a1:d7:76:d0:fe
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05/04/2021, 00:00

Not After

05/04/2023, 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/07/2015, 21:03

Not After

22/07/2025, 21:03

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

33:00:00:00:b5:21:3f:ca:1e:4a:a0:3d:e4:00:00:00:00:00:b5
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 22:15

Not After

02/12/2021, 22:15

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:36:fe:0d:b0:10:1d:67:7d:57:24:54:30:6f:10:35:0b:ca:49:2c:04:67:6a:f0:55:32:97:99:ba:0c:0f:26
Signer

Actual PE Digest

4c:36:fe:0d:b0:10:1d:67:7d:57:24:54:30:6f:10:35:0b:ca:49:2c:04:67:6a:f0:55:32:97:99:ba:0c:0f:26

Digest Algorithm

sha256

PE Digest Matches

true

4c:36:fe:0d:b0:10:1d:67:7d:57:24:54:30:6f:10:35:0b:ca:49:2c:04:67:6a:f0:55:32:97:99:ba:0c:0f:26
Signer

Actual PE Digest

4c:36:fe:0d:b0:10:1d:67:7d:57:24:54:30:6f:10:35:0b:ca:49:2c:04:67:6a:f0:55:32:97:99:ba:0c:0f:26

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\jkp\workspace\RouterDLL\766\ROUTER_DLL01439\Source\Output\ReleaseUap\x64\IntelIHVRouter.pdb

Imports

advapi32

RegCloseKey
RegSetValueExW
RegQueryValueExW

setupapi

CM_Get_Device_ID_List_SizeW
CM_Open_DevNode_Key
CM_Get_Device_ID_ListW
CM_Locate_DevNodeW
CM_Get_DevNode_Status
CM_Disable_DevNode
CM_Get_Child
CM_Get_Device_IDW
CM_Get_DevNode_Registry_PropertyW
CM_Get_Sibling
CM_Enable_DevNode

api-ms-win-devices-config-l1-1-1

CM_Unregister_Notification
CM_Register_Notification
CM_Get_DevNode_PropertyW

kernel32

CreateFileW
SetStdHandle
HeapSize
GetModuleFileNameA
GetCurrentProcess
GetLastError
K32GetModuleBaseNameA
WideCharToMultiByte
CreateDirectoryA
GetProcessHeap
SetEnvironmentVariableW
WriteConsoleW
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
CreateEventW
SetEvent
CloseHandle
ResetEvent
GetProcAddress
DeleteCriticalSection
FindFirstFileW
GetACP
SetEndOfFile
IsValidCodePage
FindNextFileW
FindFirstFileExW
ReleaseSemaphore
CreateSemaphoreW
GetTimeZoneInformation
CreateThread
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
FreeLibrary
LoadLibraryExW
HeapReAlloc
SetConsoleCtrlHandler
ReadConsoleW
ReadFile
Sleep
GetConsoleMode
LocalFree
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetFilePointerEx
__C_specific_handler
GetFileSizeEx
GetFileType
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
InitializeSRWLock
FindClose
GetDateFormatW
HeapAlloc
HeapFree
ExitProcess
ResumeThread
ExitThread
GetCurrentThreadId
GetCurrentProcessId
GetLocalTime
OutputDebugStringA
FormatMessageA
RtlPcToFileHeader
RaiseException
RtlCaptureStackBackTrace
IsProcessorFeaturePresent
QueueUserWorkItem
GetModuleHandleExW
TryEnterCriticalSection
GetStringTypeW
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
EncodePointer
DecodePointer
WaitForSingleObjectEx
GetExitCodeThread
GetNativeSystemInfo
QueryPerformanceCounter
QueryPerformanceFrequency
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
OutputDebugStringW
GetCurrentThread
GetThreadTimes
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleA
GetVersionExW
VirtualAlloc
VirtualProtect
VirtualFree
SetProcessAffinityMask
DuplicateHandle
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
WaitForMultipleObjectsEx
LoadLibraryW
RtlUnwindEx
RtlUnwind

ole32

StringFromGUID2
CoTaskMemFree

shell32

SHGetKnownFolderPath

rpcrt4

RpcBindingVectorFree
NdrServerCall2
NdrServerCallAll
RpcServerInqCallAttributesW
RpcServerUnsubscribeForNotification
RpcServerSubscribeForNotification
RpcStringFreeW
UuidToStringW
RpcMgmtStopServerListening
RpcServerInqBindings
RpcEpRegisterW
RpcEpUnregister
RpcServerListen
RpcServerRegisterIf3
RpcServerUnregisterIf
RpcServerUseProtseqEpW

Exports

Exports

Dot11ExtIhvGetVersionInfo
Dot11ExtIhvInitService
Dot11ExtIhvInitVirtualStation

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 285KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WT/UWD/Win64/Drivers/IntelIhvRouter08.dll
.dll windows:6 windows x64 arch:x64

5b971accd4406b4e8f421b1b7eabf998

Code Sign

58:b1:c1:c4:3e:99:9c:1c:f7:c6:94:a1:d7:76:d0:fe
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05/04/2021, 00:00

Not After

05/04/2023, 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/07/2015, 21:03

Not After

22/07/2025, 21:03

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

76:8b:10:5c:7b:d7:64:80:96:8f:a0:cd:ae:2f:23:61:49:b9:23:2c:d5:f0:6c:1c:a6:78:77:5f:ae:40:66:8e
Signer

Actual PE Digest

76:8b:10:5c:7b:d7:64:80:96:8f:a0:cd:ae:2f:23:61:49:b9:23:2c:d5:f0:6c:1c:a6:78:77:5f:ae:40:66:8e

Digest Algorithm

sha256

PE Digest Matches

true

76:8b:10:5c:7b:d7:64:80:96:8f:a0:cd:ae:2f:23:61:49:b9:23:2c:d5:f0:6c:1c:a6:78:77:5f:ae:40:66:8e
Signer

Actual PE Digest

76:8b:10:5c:7b:d7:64:80:96:8f:a0:cd:ae:2f:23:61:49:b9:23:2c:d5:f0:6c:1c:a6:78:77:5f:ae:40:66:8e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\jkp\workspace\RouterDLL\858\ROUTER_DLL01572\Source\Output\ReleaseUap\x64\IntelIHVRouter.pdb

Imports

api-ms-win-devices-config-l1-1-1

CM_Unregister_Notification
CM_Register_Notification
CM_Get_DevNode_PropertyW

kernel32

WaitForSingleObjectEx
GetModuleFileNameA
GetCurrentProcess
GetLastError
K32GetModuleBaseNameA
WideCharToMultiByte
CreateDirectoryA
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
CreateEventW
SetEvent
CloseHandle
ResetEvent
GetProcAddress
DeleteCriticalSection
FindFirstFileW
FindClose
WriteConsoleW
HeapSize
ReleaseSemaphore
CreateSemaphoreW
CreateThread
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
FreeLibrary
LoadLibraryExW
Sleep
LocalFree
__C_specific_handler
InitializeSRWLock
SetStdHandle
GetProcessHeap
GetCurrentThreadId
GetCurrentProcessId
GetLocalTime
OutputDebugStringA
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
GetModuleHandleW
LoadLibraryExA
FormatMessageA
RtlPcToFileHeader
RtlCaptureStackBackTrace
IsProcessorFeaturePresent
QueueUserWorkItem
GetModuleHandleExW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
DeleteFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesW
GetFileAttributesExW
GetFileInformationByHandle
GetFullPathNameW
RemoveDirectoryW
SetEndOfFile
SetFileAttributesW
SetFilePointerEx
SetFileTime
GetTempPathW
AreFileApisANSI
SetLastError
DeviceIoControl
CreateDirectoryExW
CopyFileW
MoveFileExW
CreateHardLinkW
TryEnterCriticalSection
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
EncodePointer
DecodePointer
RtlUnwind
GetExitCodeThread
GetNativeSystemInfo
QueryPerformanceCounter
QueryPerformanceFrequency
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
OutputDebugStringW
GetCurrentThread
GetThreadTimes
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleA
GetVersionExW
VirtualAlloc
VirtualFree
SetProcessAffinityMask
DuplicateHandle
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
WaitForMultipleObjectsEx
LoadLibraryW
RtlUnwindEx
ExitThread
ResumeThread
ExitProcess
HeapFree
HeapAlloc
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
GetFileSizeEx
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
ReadFile
ReadConsoleW
SetConsoleCtrlHandler
HeapReAlloc
GetTimeZoneInformation
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW

Exports

Exports

Dot11ExtIhvGetVersionInfo
Dot11ExtIhvInitService
Dot11ExtIhvInitVirtualStation

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WT/UWD/Win64/Drivers/IntelIhvRouter10.dll
.dll windows:6 windows x64 arch:x64

6c2fb987ca109aa3d3d1185d5d4307ee

Code Sign

58:b1:c1:c4:3e:99:9c:1c:f7:c6:94:a1:d7:76:d0:fe
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05/04/2021, 00:00

Not After

05/04/2023, 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/07/2015, 21:03

Not After

22/07/2025, 21:03

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:7e:f4:be:11:ee:a4:5f:42:61:60:56:6b:73:df:89:26:de:d0:92:c2:15:f4:f9:83:06:f0:1f:d9:73:da:47
Signer

Actual PE Digest

30:7e:f4:be:11:ee:a4:5f:42:61:60:56:6b:73:df:89:26:de:d0:92:c2:15:f4:f9:83:06:f0:1f:d9:73:da:47

Digest Algorithm

sha256

PE Digest Matches

true

30:7e:f4:be:11:ee:a4:5f:42:61:60:56:6b:73:df:89:26:de:d0:92:c2:15:f4:f9:83:06:f0:1f:d9:73:da:47
Signer

Actual PE Digest

30:7e:f4:be:11:ee:a4:5f:42:61:60:56:6b:73:df:89:26:de:d0:92:c2:15:f4:f9:83:06:f0:1f:d9:73:da:47

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\jkp\workspace\RouterDLL\922\ROUTER_DLL01635\Source\Output\ReleaseUap\x64\IntelIHVRouter.pdb

Imports

api-ms-win-devices-config-l1-1-1

CM_Register_Notification
CM_Unregister_Notification
CM_Get_DevNode_PropertyW

kernel32

GetTickCount
GetModuleFileNameA
GetCurrentProcess
GetLastError
K32GetModuleBaseNameA
WideCharToMultiByte
CreateDirectoryA
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
CreateEventW
SetEvent
CloseHandle
ResetEvent
GetProcAddress
DeleteCriticalSection
FindFirstFileW
WriteConsoleW
HeapSize
FindClose
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
ReleaseSemaphore
CreateSemaphoreW
CreateThread
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
FreeLibrary
LoadLibraryExW
Sleep
LocalFree
__C_specific_handler
InitializeSRWLock
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCurrentThreadId
GetCurrentProcessId
GetLocalTime
OutputDebugStringA
GetCommandLineA
GetOEMCP
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
GetModuleHandleW
LoadLibraryExA
FormatMessageA
RtlPcToFileHeader
RtlCaptureStackBackTrace
IsProcessorFeaturePresent
QueueUserWorkItem
GetModuleHandleExW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
DeleteFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesW
GetFileAttributesExW
GetFileInformationByHandle
GetFullPathNameW
RemoveDirectoryW
SetEndOfFile
SetFileAttributesW
SetFilePointerEx
SetFileTime
GetTempPathW
AreFileApisANSI
SetLastError
DeviceIoControl
CreateDirectoryExW
CopyFileW
MoveFileExW
CreateHardLinkW
TryEnterCriticalSection
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
RtlUnwind
EncodePointer
DecodePointer
WaitForSingleObjectEx
GetExitCodeThread
GetNativeSystemInfo
QueryPerformanceCounter
QueryPerformanceFrequency
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
OutputDebugStringW
GetCurrentThread
GetThreadTimes
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleA
GetVersionExW
VirtualAlloc
VirtualFree
SetProcessAffinityMask
DuplicateHandle
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
WaitForMultipleObjectsEx
LoadLibraryW
RtlUnwindEx
ExitThread
ResumeThread
ExitProcess
HeapFree
HeapAlloc
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
GetFileSizeEx
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
ReadFile
ReadConsoleW
SetConsoleCtrlHandler
HeapReAlloc
GetTimeZoneInformation
IsValidCodePage
GetACP

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

user32

wsprintfW

Exports

Exports

Dot11ExtIhvGetVersionInfo
Dot11ExtIhvInitService
Dot11ExtIhvInitVirtualStation

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 292KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WT/UWD/Win64/Drivers/NETwaw10.sys
.sys windows:10 windows x64 arch:x64

b70aa09f7fe60f9373c6414604c88a41

Code Sign

58:b1:c1:c4:3e:99:9c:1c:f7:c6:94:a1:d7:76:d0:fe
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05/04/2021, 00:00

Not After

05/04/2023, 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/07/2015, 21:03

Not After

22/07/2025, 21:03

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d9:30:cd:4f:61:43:f4:46:b5:94:ef:c3:ec:b7:1b:ef:67:40:97:f3:35:76:7a:52:76:53:52:73:25:5f:b2:ef
Signer

Actual PE Digest

d9:30:cd:4f:61:43:f4:46:b5:94:ef:c3:ec:b7:1b:ef:67:40:97:f3:35:76:7a:52:76:53:52:73:25:5f:b2:ef

Digest Algorithm

sha256

PE Digest Matches

true

d9:30:cd:4f:61:43:f4:46:b5:94:ef:c3:ec:b7:1b:ef:67:40:97:f3:35:76:7a:52:76:53:52:73:25:5f:b2:ef
Signer

Actual PE Digest

d9:30:cd:4f:61:43:f4:46:b5:94:ef:c3:ec:b7:1b:ef:67:40:97:f3:35:76:7a:52:76:53:52:73:25:5f:b2:ef

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Jenkins\workspace\windows-wifi-driver\WIFI_DRV@3\92301\Source_WINA\drv\win_driver\Win_Driver\Miniport\WinA\obj_rel_winAx64\Netwaw10.pdb

Imports

ntoskrnl.exe

RtlInitUnicodeString
RtlUnicodeStringToAnsiString
KeDelayExecutionThread
KeQuerySystemTimePrecise
KeQueryTimeIncrement
InitializeSListHead
IoAllocateErrorLogEntry
IoWriteErrorLogEntry
KeBugCheckEx
KeQueryLogicalProcessorRelationship
KeNumberProcessors
sprintf_s
RtlQueryRegistryValues
MmGetSystemRoutineAddress
IoWMIRegistrationControl
RtlTimeToTimeFields
ExSystemTimeToLocalTime
PsGetCurrentThreadId
_stricmp
PcwRegister
PcwUnregister
PcwCreateInstance
PcwCloseInstance
ExCreateCallback
ExRegisterCallback
ExUnregisterCallback
ExNotifyCallback
IoBuildSynchronousFsdRequest
IofCallDriver
IoCancelIrp
IoGetDeviceObjectPointer
IoRegisterDeviceInterface
strtok_s
IoGetDeviceInterfaces
EtwUnregister
IoUnregisterPlugPlayNotificationEx
ObfDereferenceObject
IoGetStackLimits
_snprintf_s
_vsnprintf_s
_vsnwprintf
ExGetFirmwareEnvironmentVariable
IoWMIOpenBlock
IoWMIQueryAllData
IoWMIExecuteMethod
IoWMISetNotificationCallback
KeDeregisterBugCheckReasonCallback
KeRegisterBugCheckReasonCallback
atoi
atol
strncmp
RtlFreeUnicodeString
RtlStringFromGUID
IoBuildDeviceIoControlRequest
ZwOpenFile
ZwQueryInformationFile
ZwReadFile
ZwClose
wcsrchr
ExAllocatePoolWithTag
ExFreePoolWithTag
ZwOpenKey
ZwQueryValueKey
rand
srand
vsprintf_s
strcat_s
strstr
RtlAnsiStringToUnicodeString
strncpy_s
strnlen
KeGetCurrentIrql
EtwRegister
MmUnmapIoSpace
MmMapIoSpace
IoRegisterPlugPlayNotification
KfRaiseIrql
KeLowerIrql
RtlCopyUnicodeString
wcsnlen
strcpy_s
KeWaitForSingleObject
KeSetEvent
KeResetEvent
KeInitializeEvent
EtwWriteTransfer
MmUnlockPagableImageSection
MmLockPagableDataSection
DbgPrintEx
__chkstk
IoSetDeviceInterfaceState
_purecall
PsGetVersion
ExAllocatePoolWithQuotaTag
ZwQuerySystemInformation

ndis.sys

NdisWriteEventLogEntry
NdisMResetComplete
NdisGetVersion

hal

KeQueryPerformanceCounter
KeStallExecutionProcessor

wdfldr.sys

WdfVersionBindClass
WdfVersionUnbind
WdfVersionBind
WdfVersionUnbindClass

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 596KB - Virtual size: 595KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 303KB - Virtual size: 533KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGEcsrv
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcsec
Size: 512B - Virtual size: 14B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcjaw
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcwfd
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGE
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcimg
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEccln
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcsv_
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcctw
Size: 512B - Virtual size: 321B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEdoid
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdcln
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdQua
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdSlr
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdMag
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdBla
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdJfp
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdHrp
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdGfp
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdMrp
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdFmp
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdSim
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdFpg
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdSle
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdreg
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdimg
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdsv_
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdjaw
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WT/UWD/Win64/Drivers/NETwtw04.sys
.sys windows:10 windows x64 arch:x64

5a8799a4eaa891df84daa82c95942e37

Code Sign

58:b1:c1:c4:3e:99:9c:1c:f7:c6:94:a1:d7:76:d0:fe
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05/04/2021, 00:00

Not After

05/04/2023, 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/07/2015, 21:03

Not After

22/07/2025, 21:03

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

33:00:00:00:b5:21:3f:ca:1e:4a:a0:3d:e4:00:00:00:00:00:b5
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 22:15

Not After

02/12/2021, 22:15

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1e:3b:24:fd:5c:1d:ad:3e:ad:2a:17:d5:06:f7:e6:cb:2f:a3:d5:d7:1b:94:85:e8:66:8d:55:ce:7f:c6:8c:c3
Signer

Actual PE Digest

1e:3b:24:fd:5c:1d:ad:3e:ad:2a:17:d5:06:f7:e6:cb:2f:a3:d5:d7:1b:94:85:e8:66:8d:55:ce:7f:c6:8c:c3

Digest Algorithm

sha256

PE Digest Matches

true

1e:3b:24:fd:5c:1d:ad:3e:ad:2a:17:d5:06:f7:e6:cb:2f:a3:d5:d7:1b:94:85:e8:66:8d:55:ce:7f:c6:8c:c3
Signer

Actual PE Digest

1e:3b:24:fd:5c:1d:ad:3e:ad:2a:17:d5:06:f7:e6:cb:2f:a3:d5:d7:1b:94:85:e8:66:8d:55:ce:7f:c6:8c:c3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Jenkins\workspace\windows-wifi-driver\WIFI_DRV\66135\Source_Full\drv\win_driver\Win_Driver\Miniport\WinT\obj_rel_winTx64\Netwtw04.pdb

Imports

ntoskrnl.exe

RtlEqualString
IoWMIOpenBlock
IoWMIQueryAllData
IoWMIExecuteMethod
IoWMISetNotificationCallback
PcwUnregister
KeRegisterBugCheckReasonCallback
IoBuildDeviceIoControlRequest
MmMapIoSpace
MmUnmapIoSpace
ExGetFirmwareEnvironmentVariable
vsprintf_s
DbgPrint
RtlInitString
RtlTimeToTimeFields
ExSystemTimeToLocalTime
strstr
RtlAnsiStringToUnicodeString
ZwWriteFile
ZwQueryInformationFile
ZwReadFile
PcwRegister
_vsnprintf
ObfDereferenceObject
ZwDeviceIoControlFile
srand
rand
PcwCloseInstance
strcat_s
IoUnregisterPlugPlayNotificationEx
IoRegisterPlugPlayNotification
IoGetDeviceInterfaces
IoGetDeviceObjectPointer
IoGetStackLimits
sprintf_s
__chkstk
MmMapLockedPagesSpecifyCache
strnlen
ZwClose
ZwOpenFile
ZwCreateFile
strcmp
IofCallDriver
IoBuildSynchronousFsdRequest
KeInitializeEvent
strcpy_s
PsGetCurrentThreadId
KeWaitForSingleObject
EtwUnregister
EtwRegister
IoWMIRegistrationControl
MmGetSystemRoutineAddress
RtlQueryRegistryValues
RtlInitUnicodeString
RtlUnicodeStringToAnsiString
KeNumberProcessors
atol
atoi
ExDeleteNPagedLookasideList
ExInitializeNPagedLookasideList
ExpInterlockedPushEntrySList
ExpInterlockedPopEntrySList
ExQueryDepthSList
InitializeSListHead
_snprintf
KeBugCheckEx
KfRaiseIrql
KeLowerIrql
sprintf
strncpy_s
KeQuerySystemTimePrecise
strncpy
RtlCopyUnicodeString
PcwCreateInstance
KeReleaseSpinLock
KeAcquireSpinLockRaiseToDpc
MmUnlockPagableImageSection
MmLockPagableDataSection
KeInitializeSpinLock
DbgPrintEx
EtwWriteTransfer
KeDeregisterBugCheckReasonCallback
_purecall

ndis.sys

NdisMUnmapIoSpace
NdisMMapIoSpace
NdisUnmapFile
NdisMapFile
NdisMDeregisterInterruptEx
NdisCloseConfiguration
NdisWriteErrorLogEntry
NdisOpenConfigurationEx
NdisMSleep
NdisMOidRequestComplete
NdisMDirectOidRequestComplete
NdisGetVersion
NdisMIndicateStatusEx
NdisMRegisterWdiMiniportDriver
NdisMDeregisterWdiMiniportDriver
NdisCloseFile
NdisOpenFile
NdisMResetMiniport
NdisMSetBusData
NdisMGetBusData
NdisMFreeNetBufferSGList
NdisMAllocateNetBufferSGList
NdisFreeMdl
NdisAllocateMdl
NdisCopyFromNetBufferToNetBuffer
NdisMDeregisterScatterGatherDma
NdisFreeNetBufferList
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisSetCoalescableTimerObject
NdisFreeTimerObject
NdisCancelTimerObject
NdisAllocateTimerObject
NdisMGetDeviceProperty
NdisMResetComplete
NdisGetSystemUpTimeEx
NdisInitializeString
NdisReadNetworkAddress
NdisWriteConfiguration
NdisReadConfiguration
NdisOpenConfigurationKeyByName
NdisWaitEvent
NdisResetEvent
NdisSetEvent
NdisInitializeEvent
NdisMRestartComplete
NdisMSetMiniportAttributes
NdisSetOptionalHandlers
NdisMFreeSharedMemory
NdisMAllocateSharedMemory
NdisAllocateMemoryWithTagPriority
NdisFreeMemory
NdisFreeIoWorkItem
NdisQueueIoWorkItem
NdisAllocateIoWorkItem
NdisMRegisterScatterGatherDma
NdisAllocateNetBufferAndNetBufferList
NdisMSynchronizeWithInterruptEx
NdisMRegisterInterruptEx

hal

KeQueryPerformanceCounter
KeStallExecutionProcessor

wdfldr.sys

WdfVersionBindClass
WdfVersionUnbind
WdfVersionBind
WdfVersionUnbindClass

Sections

.text
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 785KB - Virtual size: 784KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 350KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGEcsrv
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcjaw
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcwfd
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcnlo
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEccln
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcsec
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcsv_
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcimg
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcpsm
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcctw
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEdoid
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdcln
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdsv_
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdreg
Size: 259KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdStn
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdSnd
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdSnF
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdWsP
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdPsr
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdThP
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdQua
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdjaw
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdctw
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdimg
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdrlg
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WT/UWD/Win64/Drivers/NETwtw06.sys
.sys windows:10 windows x64 arch:x64

b1fdb2d0162f9049205b514c993cfba2

Code Sign

58:b1:c1:c4:3e:99:9c:1c:f7:c6:94:a1:d7:76:d0:fe
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05/04/2021, 00:00

Not After

05/04/2023, 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/07/2015, 21:03

Not After

22/07/2025, 21:03

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

33:00:00:00:b5:21:3f:ca:1e:4a:a0:3d:e4:00:00:00:00:00:b5
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 22:15

Not After

02/12/2021, 22:15

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

32:97:33:79:55:7d:4f:97:bc:1b:58:73:38:51:cb:3b:bf:8e:04:dd:cb:ee:0e:e6:ca:4f:fc:d0:1c:57:ef:95
Signer

Actual PE Digest

32:97:33:79:55:7d:4f:97:bc:1b:58:73:38:51:cb:3b:bf:8e:04:dd:cb:ee:0e:e6:ca:4f:fc:d0:1c:57:ef:95

Digest Algorithm

sha256

PE Digest Matches

true

32:97:33:79:55:7d:4f:97:bc:1b:58:73:38:51:cb:3b:bf:8e:04:dd:cb:ee:0e:e6:ca:4f:fc:d0:1c:57:ef:95
Signer

Actual PE Digest

32:97:33:79:55:7d:4f:97:bc:1b:58:73:38:51:cb:3b:bf:8e:04:dd:cb:ee:0e:e6:ca:4f:fc:d0:1c:57:ef:95

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Jenkins\workspace\windows-wifi-driver\WIFI_DRV@5\70754\Source_Full\drv\win_driver\Win_Driver\Miniport\WinT\obj_rel_winTx64\Netwtw06.pdb

Imports

ntoskrnl.exe

PcwRegister
PcwUnregister
PcwCreateInstance
PcwCloseInstance
strcmp
IoWMIOpenBlock
IoWMIQueryAllData
IoWMIExecuteMethod
IoWMISetNotificationCallback
KeDeregisterBugCheckReasonCallback
KeRegisterBugCheckReasonCallback
IoBuildDeviceIoControlRequest
MmMapIoSpace
MmUnmapIoSpace
RtlInitString
RtlEqualString
IoRegisterDeviceInterface
ZwDeviceIoControlFile
ExGetFirmwareEnvironmentVariable
rand
srand
KeSetEvent
ExSetTimer
ExCancelTimer
KeClearEvent
_vsnprintf_s
ExAllocateTimer
ExDeleteTimer
ExAllocatePoolWithTag
ExFreePoolWithTag
ZwQueryInformationFile
ZwReadFile
DbgPrint
RtlTimeToTimeFields
ExSystemTimeToLocalTime
KeResetEvent
KeWaitForMultipleObjects
PsCreateSystemThread
PsTerminateSystemThread
IoCancelIrp
IofCompleteRequest
ObReferenceObjectByHandle
strstr
RtlAnsiStringToUnicodeString
ZwWriteFile
_vsnprintf
IoGetDeviceObjectPointer
IofCallDriver
IoBuildSynchronousFsdRequest
ObfDereferenceObject
IoUnregisterPlugPlayNotificationEx
IoRegisterPlugPlayNotification
IoGetDeviceInterfaces
PoSetSystemState
ExNotifyCallback
ExUnregisterCallback
ExRegisterCallback
ExCreateCallback
KeWaitForSingleObject
KeInitializeEvent
IoGetStackLimits
atol
atoi
strtok_s
__chkstk
ZwClose
ZwOpenFile
ZwCreateFile
KeNumberProcessors
EtwUnregister
EtwRegister
PsGetCurrentThreadId
IoWMIRegistrationControl
MmGetSystemRoutineAddress
RtlQueryRegistryValues
RtlInitUnicodeString
MmMapLockedPagesSpecifyCache
strnlen
RtlUnicodeStringToAnsiString
_snprintf
ExDeleteNPagedLookasideList
ExInitializeNPagedLookasideList
ExpInterlockedPushEntrySList
ExpInterlockedPopEntrySList
ExQueryDepthSList
InitializeSListHead
KeBugCheckEx
KfRaiseIrql
KeLowerIrql
sprintf_s
strcat_s
KeQuerySystemTimePrecise
strncpy_s
RtlCopyUnicodeString
IoSetDeviceInterfaceState
strcpy_s
KeReleaseSpinLock
KeAcquireSpinLockRaiseToDpc
EtwWriteTransfer
MmUnlockPagableImageSection
MmLockPagableDataSection
KeInitializeSpinLock
DbgPrintEx
vsprintf_s
_purecall

ndis.sys

NdisMDeregisterInterruptEx
NdisMRegisterInterruptEx
NdisUnmapFile
NdisMapFile
NdisCloseFile
NdisOpenFile
NdisMRegisterScatterGatherDma
NdisCloseConfiguration
NdisWriteErrorLogEntry
NdisOpenConfigurationEx
NdisAllocateIoWorkItem
NdisQueueIoWorkItem
NdisFreeIoWorkItem
NdisMOidRequestComplete
NdisMDirectOidRequestComplete
NdisGetVersion
NdisMIndicateStatusEx
NdisMRegisterWdiMiniportDriver
NdisMDeregisterWdiMiniportDriver
NdisMGetDeviceProperty
NdisMResetMiniport
NdisMResetComplete
NdisMSetMiniportAttributes
NdisSetOptionalHandlers
NdisMMapIoSpace
NdisResetEvent
NdisSetEvent
NdisInitializeEvent
NdisGetSystemUpTimeEx
NdisMSetBusData
NdisMGetBusData
NdisMFreeNetBufferSGList
NdisMAllocateNetBufferSGList
NdisFreeMdl
NdisAllocateMdl
NdisCopyFromNetBufferToNetBuffer
NdisAllocateNetBufferAndNetBufferList
NdisFreeNetBufferList
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisSetCoalescableTimerObject
NdisFreeTimerObject
NdisCancelTimerObject
NdisAllocateTimerObject
NdisInitializeString
NdisReadNetworkAddress
NdisWriteConfiguration
NdisReadConfiguration
NdisOpenConfigurationKeyByName
NdisMSleep
NdisMFreeSharedMemory
NdisMAllocateSharedMemory
NdisAllocateMemoryWithTagPriority
NdisFreeMemory
NdisMSynchronizeWithInterruptEx
NdisWaitEvent
NdisMDeregisterScatterGatherDma
NdisMUnmapIoSpace

hal

KeQueryPerformanceCounter
KeStallExecutionProcessor

wdfldr.sys

WdfVersionBindClass
WdfVersionUnbind
WdfVersionBind
WdfVersionUnbindClass

Sections

.text
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 819KB - Virtual size: 818KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 170KB - Virtual size: 382KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGEcsrv
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcjaw
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGE
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcsec
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcnlo
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcwfd
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEccln
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcsv_
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcimg
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcpsm
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcctw
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEdoid
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdcln
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdsv_
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdreg
Size: 254KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdSnF
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdWsP
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdPsr
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdThP
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdQua
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdSun
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdSim
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdFpg
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdjaw
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdimg
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdrlg
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WT/UWD/Win64/Drivers/NETwtw08.sys
.sys windows:10 windows x64 arch:x64

6ecbbad59fde2ab0e7dcd3fd2e9dbe79

Code Sign

58:b1:c1:c4:3e:99:9c:1c:f7:c6:94:a1:d7:76:d0:fe
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05/04/2021, 00:00

Not After

05/04/2023, 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/07/2015, 21:03

Not After

22/07/2025, 21:03

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9b:55:89:45:9a:91:49:6e:9e:e3:da:86:fc:df:b6:5c:e7:ae:53:5e:cd:c8:f1:07:3c:50:c2:fa:54:ba:39:4b
Signer

Actual PE Digest

9b:55:89:45:9a:91:49:6e:9e:e3:da:86:fc:df:b6:5c:e7:ae:53:5e:cd:c8:f1:07:3c:50:c2:fa:54:ba:39:4b

Digest Algorithm

sha256

PE Digest Matches

true

9b:55:89:45:9a:91:49:6e:9e:e3:da:86:fc:df:b6:5c:e7:ae:53:5e:cd:c8:f1:07:3c:50:c2:fa:54:ba:39:4b
Signer

Actual PE Digest

9b:55:89:45:9a:91:49:6e:9e:e3:da:86:fc:df:b6:5c:e7:ae:53:5e:cd:c8:f1:07:3c:50:c2:fa:54:ba:39:4b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Jenkins\Workspace\windows-wifi-driver\WIFI_DRV\84241\Source_Full\drv\win_driver\Win_Driver\Miniport\WinT\obj_rel_winTx64\Netwtw08.pdb

Imports

ntoskrnl.exe

ExRegisterCallback
ExUnregisterCallback
ExNotifyCallback
IoBuildSynchronousFsdRequest
IofCallDriver
IoGetDeviceObjectPointer
IoRegisterDeviceInterface
IoSetDeviceInterfaceState
IoGetDeviceInterfaces
IoRegisterPlugPlayNotification
IoUnregisterPlugPlayNotificationEx
ObfDereferenceObject
ExInitializeNPagedLookasideList
MmMapLockedPagesSpecifyCache
_vsnprintf_s
strcmp
RtlEqualString
ExGetFirmwareEnvironmentVariable
IoWMIOpenBlock
IoWMIQueryAllData
IoWMIExecuteMethod
IoWMISetNotificationCallback
ZwOpenFile
KeSetEvent
ZwReadFile
KeDeregisterBugCheckReasonCallback
KeRegisterBugCheckReasonCallback
_stricmp
atoi
atol
IoBuildDeviceIoControlRequest
MmMapIoSpace
MmUnmapIoSpace
ZwCreateFile
ZwDeviceIoControlFile
ExSetTimer
ExCancelTimer
MmBuildMdlForNonPagedPool
IoAllocateMdl
IoFreeMdl
MmGetPhysicalAddress
KeClearEvent
PoSetSystemState
ExAllocateTimer
ExDeleteTimer
rand
srand
vsprintf_s
PcwCloseInstance
RtlGetVersion
KeWaitForMultipleObjects
PsCreateSystemThread
PsTerminateSystemThread
IoCancelIrp
IofCompleteRequest
ObReferenceObjectByHandle
strstr
RtlAnsiStringToUnicodeString
DbgPrint
RtlTimeToTimeFields
_vsnprintf
strcat_s
MmGetSystemRoutineAddress
RtlQueryRegistryValues
ExDeleteNPagedLookasideList
PcwCreateInstance
PcwUnregister
PcwRegister
IoGetStackLimits
sprintf_s
ExpInterlockedPushEntrySList
ExpInterlockedPopEntrySList
ExQueryDepthSList
InitializeSListHead
KeQuerySystemTimePrecise
KeInitializeEvent
RtlUnicodeStringToAnsiString
RtlInitString
KeReleaseSpinLock
KeAcquireSpinLockRaiseToDpc
KeInitializeSpinLock
EtwUnregister
EtwRegister
_snprintf
KeBugCheckEx
wcsnlen
strtok_s
strncpy_s
strnlen
KfRaiseIrql
KeLowerIrql
_vsnwprintf
RtlCaptureContext
NtBuildNumber
RtlInitUnicodeString
ZwWriteFile
KeCapturePersistentThreadState
ExAllocatePoolWithTag
ZwQueryValueKey
ExFreePoolWithTag
ZwClose
ZwOpenKey
ExCreateCallback
KeNumberProcessors
PsGetCurrentThreadId
KeResetEvent
IoWMIRegistrationControl
wcsrchr
RtlCopyUnicodeString
KeWaitForSingleObject
strcpy_s
EtwWriteTransfer
MmUnlockPagableImageSection
MmLockPagableDataSection
DbgPrintEx
__chkstk
ZwQueryInformationFile
_purecall

ndis.sys

NdisMFreeNetBufferSGList
NdisMAllocateNetBufferSGList
NdisMSetBusData
NdisMRegisterInterruptEx
NdisWriteErrorLogEntry
NdisMOidRequestComplete
NdisMDirectOidRequestComplete
NdisGetVersion
NdisMIndicateStatusEx
NdisMRegisterWdiMiniportDriver
NdisMDeregisterWdiMiniportDriver
NdisFreeMdl
NdisAllocateMdl
NdisAllocateNetBufferAndNetBufferList
NdisFreeNetBufferList
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisFreeTimerObject
NdisCancelTimerObject
NdisAllocateTimerObject
NdisCopyFromNetBufferToNetBuffer
NdisMResetMiniport
NdisMRegisterScatterGatherDma
NdisMSetMiniportAttributes
NdisSetOptionalHandlers
NdisFreeIoWorkItem
NdisQueueIoWorkItem
NdisAllocateIoWorkItem
NdisMGetBusData
NdisWriteEventLogEntry
NdisMGetDeviceProperty
NdisMFreeSharedMemory
NdisMAllocateSharedMemory
NdisMSleep
NdisSetCoalescableTimerObject
NdisGetSystemUpTimeEx
NdisAllocateMemoryWithTagPriority
NdisOpenConfigurationEx
NdisInitializeString
NdisFreeMemory
NdisReadNetworkAddress
NdisCloseConfiguration
NdisWriteConfiguration
NdisReadConfiguration
NdisOpenConfigurationKeyByName
NdisMUnmapIoSpace
NdisMMapIoSpace
NdisMSynchronizeWithInterruptEx
NdisMResetComplete
NdisMDeregisterInterruptEx
NdisMDeregisterScatterGatherDma

ext-ms-win-ntos-werkernel-l1-1-1

WerLiveKernelCancelReport
WerLiveKernelOpenDumpFile
WerLiveKernelCreateReport
WerLiveKernelSubmitReport
WerLiveKernelCloseHandle

hal

KeQueryPerformanceCounter
KeStallExecutionProcessor

wdfldr.sys

WdfVersionUnbind
WdfVersionBindClass
WdfVersionUnbindClass
WdfVersionBind

Sections

.text
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 732KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 312KB - Virtual size: 711KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGEcsrv
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGE
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcjaw
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcsec
Size: 512B - Virtual size: 14B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcwfd
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEccln
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcsv_
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcimg
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcctw
Size: 512B - Virtual size: 347B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEdoid
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdcln
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdsv_
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdreg
Size: 254KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdSnF
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdWsP
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdPsr
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdThP
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdQua
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdSun
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdSlr
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdCcl
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdSim
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdFpg
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdSle
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdjaw
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdimg
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdrlg
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WT/UWD/Win64/Drivers/NETwtw10.sys
.sys windows:10 windows x64 arch:x64

3de91370cce7b63eabd29757b0966033

Code Sign

58:b1:c1:c4:3e:99:9c:1c:f7:c6:94:a1:d7:76:d0:fe
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05/04/2021, 00:00

Not After

05/04/2023, 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/07/2015, 21:03

Not After

22/07/2025, 21:03

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:b8:4b:7b:04:51:11:da:fc:8c:dd:fb:96:bd:c1:16:8a:e6:3b:51:44:cd:69:0a:48:75:a9:0c:10:66:5c:e5
Signer

Actual PE Digest

52:b8:4b:7b:04:51:11:da:fc:8c:dd:fb:96:bd:c1:16:8a:e6:3b:51:44:cd:69:0a:48:75:a9:0c:10:66:5c:e5

Digest Algorithm

sha256

PE Digest Matches

true

52:b8:4b:7b:04:51:11:da:fc:8c:dd:fb:96:bd:c1:16:8a:e6:3b:51:44:cd:69:0a:48:75:a9:0c:10:66:5c:e5
Signer

Actual PE Digest

52:b8:4b:7b:04:51:11:da:fc:8c:dd:fb:96:bd:c1:16:8a:e6:3b:51:44:cd:69:0a:48:75:a9:0c:10:66:5c:e5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Jenkins\workspace\windows-wifi-driver\WIFI_DRV@3\92301\Source_Full\drv\win_driver\Win_Driver\Miniport\WinT\obj_rel_winTx64\Netwtw10.pdb

Imports

ntoskrnl.exe

ExCreateCallback
ExRegisterCallback
ExUnregisterCallback
ExNotifyCallback
IoBuildSynchronousFsdRequest
IofCallDriver
IoCancelIrp
IoGetDeviceObjectPointer
IoRegisterDeviceInterface
IoSetDeviceInterfaceState
IoGetDeviceInterfaces
IoRegisterPlugPlayNotification
IoUnregisterPlugPlayNotificationEx
ObfDereferenceObject
PcwRegister
PcwUnregister
PcwCreateInstance
PcwCloseInstance
_snprintf_s
_stricmp
_vsnwprintf
KeDeregisterBugCheckReasonCallback
KeRegisterBugCheckReasonCallback
atoi
atol
strncmp
IoGetStackLimits
RtlStringFromGUID
IoBuildDeviceIoControlRequest
IoWMIOpenBlock
IoWMIQueryAllData
IoWMIExecuteMethod
IoWMISetNotificationCallback
ExGetFirmwareEnvironmentVariable
wcsrchr
ExAllocatePoolWithTag
ExFreePoolWithTag
ZwClose
ZwOpenKey
ZwQueryValueKey
ZwOpenFile
ZwQueryInformationFile
ZwReadFile
rand
srand
vsprintf_s
strcat_s
strstr
RtlAnsiStringToUnicodeString
sprintf_s
KeNumberProcessors
KeQueryLogicalProcessorRelationship
ExSystemTimeToLocalTime
RtlTimeToTimeFields
IoWMIRegistrationControl
MmGetSystemRoutineAddress
RtlFreeUnicodeString
KeBugCheckEx
InitializeSListHead
KeQuerySystemTimePrecise
RtlUnicodeStringToAnsiString
RtlInitUnicodeString
PsGetCurrentThreadId
KeWaitForSingleObject
KeSetEvent
KeResetEvent
KeInitializeEvent
KeReleaseSpinLock
KeAcquireSpinLockRaiseToDpc
KeInitializeSpinLock
EtwUnregister
EtwRegister
ExDeleteNPagedLookasideList
ExInitializeNPagedLookasideList
ExpInterlockedPushEntrySList
ExpInterlockedPopEntrySList
ExQueryDepthSList
wcsnlen
strtok_s
strncpy_s
strnlen
KeGetCurrentIrql
KfRaiseIrql
KeLowerIrql
RtlCopyUnicodeString
RtlQueryRegistryValues
strcpy_s
MmMapLockedPagesSpecifyCache
EtwWriteTransfer
MmUnlockPagableImageSection
MmLockPagableDataSection
DbgPrintEx
__chkstk
_vsnprintf_s
PsGetVersion
ExAllocatePoolWithQuotaTag
ZwQuerySystemInformation
_purecall

ndis.sys

NdisMDeregisterInterruptEx
NdisMRegisterInterruptEx
NdisMFreeNetBufferSGList
NdisMAllocateNetBufferSGList
NdisMDeregisterScatterGatherDma
NdisMRegisterScatterGatherDma
NdisMIndicateStatusEx
NdisMOidRequestComplete
NdisMDirectOidRequestComplete
NdisAllocateNetBufferListPool
NdisFreeNetBufferListPool
NdisGetVersion
NdisMRegisterWdiMiniportDriver
NdisMDeregisterWdiMiniportDriver
NdisWriteErrorLogEntry
NdisGetDataBuffer
NdisFreeMdl
NdisAllocateMdl
NdisFreeNetBufferList
NdisAllocateNetBufferAndNetBufferList
NdisFreeTimerObject
NdisCancelTimerObject
NdisWriteEventLogEntry
NdisOpenConfigurationEx
NdisReadNetworkAddress
NdisCloseConfiguration
NdisWriteConfiguration
NdisReadConfiguration
NdisMResetComplete
NdisMSetMiniportAttributes
NdisSetOptionalHandlers
NdisFreeIoWorkItem
NdisQueueIoWorkItem
NdisAllocateIoWorkItem
NdisMGetDeviceProperty
NdisMSleep
NdisSetCoalescableTimerObject
NdisGetSystemUpTimeEx
NdisInitializeString
NdisFreeMemory
NdisMFreeSharedMemory
NdisMAllocateSharedMemory
NdisMUnmapIoSpace
NdisMMapIoSpace
NdisAllocateMemoryWithTagPriority
NdisMSynchronizeWithInterruptEx
NdisAllocateTimerObject
NdisMSetBusData
NdisMGetBusData

hal

KeQueryPerformanceCounter
KeStallExecutionProcessor

wdfldr.sys

WdfVersionBindClass
WdfVersionUnbind
WdfVersionBind
WdfVersionUnbindClass

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 594KB - Virtual size: 594KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 302KB - Virtual size: 538KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGEcsrv
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcsec
Size: 512B - Virtual size: 14B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcjaw
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcwfd
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcimg
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGE
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEccln
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcsv_
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEcctw
Size: 512B - Virtual size: 321B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEdoid
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdcln
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdQua
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdSlr
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdMag
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdBla
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdJfp
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdHrp
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdGfp
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdMrp
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdFmp
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdSim
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdFpg
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdSle
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdreg
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdimg
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdsv_
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEdjaw
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WT/UWD/Win64/Drivers/Netwfw04.dat
WT/UWD/Win64/Drivers/Netwfw06.dat
WT/UWD/Win64/Drivers/Netwfw08.dat
WT/UWD/Win64/Drivers/Netwfw10.dat
WT/UWD/Win64/Drivers/Netwtw04.INF
WT/UWD/Win64/Drivers/Netwtw06.INF
WT/UWD/Win64/Drivers/Netwtw08.INF
WT/UWD/Win64/Drivers/Netwtw6e.INF
WT/UWD/Win64/Drivers/netwtw04.cat
WT/UWD/Win64/Drivers/netwtw06.cat
WT/UWD/Win64/Drivers/netwtw08.cat
WT/UWD/Win64/Drivers/netwtw6e.cat
WT/UWD/Win64/Installer/WirelessSetup.exe
.exe windows:5 windows x86 arch:x86

d7e2fd259780271687ffca462b9e69b7

Code Sign

70:71:1b:35:6e:72:4b:35:55:aa:b1:49:d9:d2:a9:70
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/04/2021, 00:00

Not After

07/04/2023, 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/07/2015, 21:03

Not After

22/07/2025, 21:03

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

37:8f:9d:f7:2e:4e:b6:4d:37:f0:8f:25:ba:94:66:61:e5:1b:14:1d:92:0e:c8:44:40:5a:97:88:9b:fc:48:29
Signer

Actual PE Digest

37:8f:9d:f7:2e:4e:b6:4d:37:f0:8f:25:ba:94:66:61:e5:1b:14:1d:92:0e:c8:44:40:5a:97:88:9b:fc:48:29

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

C:\agent\_work\8\s\build\ship\x86\burn.pdb

Imports

advapi32

RegCloseKey
RegOpenKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
CloseEventLog
OpenEventLogW
ReportEventW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DecryptFileW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetNamedSecurityInfoW
CheckTokenMembership
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
QueryServiceConfigW

user32

PeekMessageW
PostMessageW
IsWindow
WaitForInputIdle
PostQuitMessage
GetMessageW
TranslateMessage
MsgWaitForMultipleObjects
PostThreadMessageW
GetMonitorInfoW
MonitorFromPoint
IsDialogMessageW
LoadCursorW
LoadBitmapW
SetWindowLongW
GetWindowLongW
GetCursorPos
MessageBoxW
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
DispatchMessageW

oleaut32

VariantInit
SysAllocString
VariantClear
SysFreeString

gdi32

DeleteDC
DeleteObject
SelectObject
StretchBlt
GetObjectW
CreateCompatibleDC

shell32

CommandLineToArgvW
SHGetFolderPathW
ShellExecuteExW

ole32

CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CLSIDFromProgID
CoInitializeSecurity

kernel32

GetCommandLineA
GetCPInfo
GetOEMCP
CloseHandle
CreateFileW
GetProcAddress
LocalFree
HeapSetInformation
GetLastError
GetModuleHandleW
FormatMessageW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
Sleep
GetLocalTime
GetModuleFileNameW
ExpandEnvironmentStringsW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFullPathNameW
CompareStringW
GetCurrentProcessId
WriteFile
SetFilePointer
LoadLibraryW
GetSystemDirectoryW
CreateFileA
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FindClose
GetCommandLineW
GetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileExW
GetCurrentProcess
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
GetVersionExW
VerSetConditionMask
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetNativeSystemInfo
GetModuleHandleExW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetEnvironmentStringsW
VerifyVersionInfoW
GetVolumePathNameW
GetDateFormatW
GetUserDefaultUILanguage
GetSystemDefaultLangID
GetUserDefaultLangID
GetStringTypeW
ReadFile
SetFilePointerEx
DuplicateHandle
InterlockedExchange
InterlockedCompareExchange
LoadLibraryExW
CreateEventW
ProcessIdToSessionId
OpenProcess
GetProcessId
WaitForSingleObject
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
CreateThread
GetExitCodeThread
SetEvent
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
ResetEvent
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CompareStringA
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
MapViewOfFile
UnmapViewOfFile
CreateMutexW
CreateFileMappingW
GetThreadLocale
IsValidCodePage
FindFirstFileExW
FreeEnvironmentStringsW
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DecodePointer
WriteConsoleW
GetModuleHandleA
GlobalAlloc
GlobalFree
GetFileSizeEx
CopyFileW
VirtualAlloc
VirtualFree
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
SystemTimeToFileTime
GetSystemInfo
VirtualProtect
VirtualQuery
GetComputerNameW
SetCurrentDirectoryW
GetFileType
GetACP
ExitProcess
GetStdHandle
InitializeCriticalSectionAndSpinCount
SetLastError
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
LoadLibraryExA

rpcrt4

UuidCreate

Sections

.text
Size: 294KB - Virtual size: 294KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WT/UWD/Win64/Installer/setup.xml
.xml
WT/UWD/Win64/Tools/Diagnostics/ETW/Driver/RegisterCustomerManifest.bat
WT/UWD/Win64/Tools/Diagnostics/ETW/Driver/UnRegisterCustomerManifest.bat
WT/UWD/Win64/Tools/Diagnostics/ETW/Driver/WlanDriverEventsCustomer.man
.xml
WT/UWD/Win64/Tools/Diagnostics/ETW/RegisterAllManifests.bat
WT/UWD/Win64/Tools/Diagnostics/ETW/UnRegisterAllManifests.bat
WT/UWD/Win64/Tools/Diagnostics/RESOURCES/IntelWiFiDriverEtw_driver_customer.dll
.dll windows:6 windows x86 arch:x86

Code Sign

58:b1:c1:c4:3e:99:9c:1c:f7:c6:94:a1:d7:76:d0:fe
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05/04/2021, 00:00

Not After

05/04/2023, 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/07/2015, 21:03

Not After

22/07/2025, 21:03

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

9e:9c:05:ec:a0:5e:01:0d:3e:eb:fb:42:c7:8e:03:24:a2:4b:18:7c:e6:15:0e:8b:98:54:c5:ed:52:35:be:58
Signer

Actual PE Digest

9e:9c:05:ec:a0:5e:01:0d:3e:eb:fb:42:c7:8e:03:24:a2:4b:18:7c:e6:15:0e:8b:98:54:c5:ed:52:35:be:58

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Jenkins\Workspace\windows-wifi-driver\WIFI_DRV\84241\Source_WCOS\drv\Shared\Scripts\ETW_PCW\ETW\Driver\IntelWiFiDriverEtw_driver_customer.pdb

Sections

.rdata
Size: 1024B - Virtual size: 810B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WT/UWD/Win64/Tools/Diagnostics/RegisterCustomerEtwPcwFiles.bat
WT/UWD/Win64/Tools/Diagnostics/UnRegisterCustomerEtwPcwFiles.bat
WT/UWD/Win64/Utilities/PIE/IntelIHVPipeClient.dll
.dll windows:6 windows x64 arch:x64

a78326bc2f94cfc87f9bb1ecc45b230e

Code Sign

70:71:1b:35:6e:72:4b:35:55:aa:b1:49:d9:d2:a9:70
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/04/2021, 00:00

Not After

07/04/2023, 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/07/2015, 21:03

Not After

22/07/2025, 21:03

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:fa:0f:9e:6a:2f:69:0a:32:99:0c:b5:c1:b7:7b:40:83:92:f9:12:31:f1:bd:66:e5:a1:31:14:d6:e9:5c:11
Signer

Actual PE Digest

8c:fa:0f:9e:6a:2f:69:0a:32:99:0c:b5:c1:b7:7b:40:83:92:f9:12:31:f1:bd:66:e5:a1:31:14:d6:e9:5c:11

Digest Algorithm

sha256

PE Digest Matches

true

8c:fa:0f:9e:6a:2f:69:0a:32:99:0c:b5:c1:b7:7b:40:83:92:f9:12:31:f1:bd:66:e5:a1:31:14:d6:e9:5c:11
Signer

Actual PE Digest

8c:fa:0f:9e:6a:2f:69:0a:32:99:0c:b5:c1:b7:7b:40:83:92:f9:12:31:f1:bd:66:e5:a1:31:14:d6:e9:5c:11

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\jkp\workspace\RouterDLL\922\ROUTER_DLL01635\Source\Output\ReleaseUap\x64\IntelIHVPipeClient.pdb

Imports

kernel32

GetModuleFileNameA
GetCurrentProcess
GetLastError
K32GetModuleBaseNameA
WideCharToMultiByte
CreateDirectoryA
__C_specific_handler
WaitForSingleObject
CloseHandle
CreateThread
OutputDebugStringW
GetCurrentThreadId
GetCurrentProcessId
GetLocalTime
OutputDebugStringA
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryExA
FormatMessageA
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
LocalFree
EncodePointer
DecodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
SetEvent
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
InterlockedPushEntrySList
InterlockedFlushSList
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetCurrentThread
HeapFree
HeapAlloc
GetStdHandle
GetFileType
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
ReadFile
ReadConsoleW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
SetConsoleCtrlHandler
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
CreateFileW
HeapSize
WriteConsoleW
SetEndOfFile
RtlUnwind

Exports

Exports

IhvExpInitHandlers

Sections

.text
Size: 720KB - Virtual size: 720KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WT/UWD/Win64/Utilities/PIE/Intel_PIE_IHV.dll
.dll windows:6 windows x64 arch:x64

333efd4a67156ea62362a93e79cabcc3

Code Sign

70:71:1b:35:6e:72:4b:35:55:aa:b1:49:d9:d2:a9:70
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/04/2021, 00:00

Not After

07/04/2023, 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/07/2015, 21:03

Not After

22/07/2025, 21:03

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5b:b2:d9:64:8a:ee:08:bc:69:95:22:72:ac:d1:b1:75:54:d4:83:05:99:4d:b4:7e:cd:1c:ef:ab:8e:44:87:12
Signer

Actual PE Digest

5b:b2:d9:64:8a:ee:08:bc:69:95:22:72:ac:d1:b1:75:54:d4:83:05:99:4d:b4:7e:cd:1c:ef:ab:8e:44:87:12

Digest Algorithm

sha256

PE Digest Matches

true

5b:b2:d9:64:8a:ee:08:bc:69:95:22:72:ac:d1:b1:75:54:d4:83:05:99:4d:b4:7e:cd:1c:ef:ab:8e:44:87:12
Signer

Actual PE Digest

5b:b2:d9:64:8a:ee:08:bc:69:95:22:72:ac:d1:b1:75:54:d4:83:05:99:4d:b4:7e:cd:1c:ef:ab:8e:44:87:12

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\jkp\workspace\PIE_Install\822\PIE_INSTALL04638\Source\PIESource\x64\Release\Intel_PIE_IHV.pdb

Imports

kernel32

RaiseException
GetLastError
InitializeCriticalSectionEx
DeleteCriticalSection
LoadResource
LockResource
SizeofResource
FindResourceW
FindResourceExW
WriteConsoleW
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
Sleep
MultiByteToWideChar
__C_specific_handler
WideCharToMultiByte
GetCurrentThreadId
GetCurrentProcessId
GetLocalTime
OutputDebugStringW
CloseHandle
WriteFile
GetTickCount
GetSystemInfo
VirtualProtect
VirtualQuery
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryExA
LocalFree
FormatMessageA
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetFilePointerEx
AreFileApisANSI
GetFileInformationByHandleEx
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetCPInfo
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
GetFileType
GetStringTypeW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
SetStdHandle
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode

Exports

Exports

AgentGetVersion
AgentInitHandlers
Dot11ExtIhvGetVersionInfo
Dot11ExtIhvInitService
Dot11ExtPipeIhvInitService

Sections

.text
Size: 243KB - Virtual size: 243KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WT/UWD/Win64/Utilities/PIE/Intel_PIE_SDK_Common.dll
.dll windows:6 windows x64 arch:x64

83536d28b9fa197f89e9ebcd06d0ecaf

Code Sign

70:71:1b:35:6e:72:4b:35:55:aa:b1:49:d9:d2:a9:70
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/04/2021, 00:00

Not After

07/04/2023, 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/07/2015, 21:03

Not After

22/07/2025, 21:03

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6e:52:cb:a5:c7:07:37:4d:a5:12:65:56:f2:14:a8:87:a3:d4:f9:f9:6f:30:de:45:31:4d:11:9e:67:bb:62:88
Signer

Actual PE Digest

6e:52:cb:a5:c7:07:37:4d:a5:12:65:56:f2:14:a8:87:a3:d4:f9:f9:6f:30:de:45:31:4d:11:9e:67:bb:62:88

Digest Algorithm

sha256

PE Digest Matches

true

6e:52:cb:a5:c7:07:37:4d:a5:12:65:56:f2:14:a8:87:a3:d4:f9:f9:6f:30:de:45:31:4d:11:9e:67:bb:62:88
Signer

Actual PE Digest

6e:52:cb:a5:c7:07:37:4d:a5:12:65:56:f2:14:a8:87:a3:d4:f9:f9:6f:30:de:45:31:4d:11:9e:67:bb:62:88

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\jkp\workspace\PIE_Install\822\PIE_INSTALL04638\Source\PIESource\x64\Release\Intel_PIE_SDK_Common.pdb

Imports

kernel32

RaiseException
GetLastError
InitializeCriticalSectionEx
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThreadId
GetCurrentProcessId
GetLocalTime
OutputDebugStringW
CloseHandle
WriteFile
MultiByteToWideChar
GetProcAddress
LoadLibraryW
FreeLibrary
Sleep
GetFileInformationByHandleEx
GetSystemInfo
VirtualProtect
VirtualQuery
GetModuleHandleW
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
WideCharToMultiByte
HeapAlloc
GetStdHandle
GetFileType
HeapSize
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStringTypeW
SetFilePointerEx
SetStdHandle
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
CreateFileW
WriteConsoleW
DeleteTimerQueueTimer
CreateTimerQueueTimer
CreateTimerQueue
DeleteTimerQueueEx
LocalFree
FormatMessageA
GetFileAttributesExW
AreFileApisANSI

Exports

Exports

ProcessCmdInternal_adapter_hdr_pBuff
ProcessCmdInternal_adapter_hdr_ppBuff
ProcessCmdInternal_adapter_pHdr
ProcessCmdInternal_pBuff
ProcessCmdInternal_pHdr_pBuff
ProcessCmdInternal_pHdr_ppBuff

Sections

.text
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WT/UWD/Win64/Utilities/PIE/Intel_PIE_Service.exe
.exe windows:6 windows x64 arch:x64

7429383b1ba231ed429cee4c12fcd5f3

Code Sign

70:71:1b:35:6e:72:4b:35:55:aa:b1:49:d9:d2:a9:70
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/04/2021, 00:00

Not After

07/04/2023, 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/07/2015, 21:03

Not After

22/07/2025, 21:03

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:20:62:2a:3d:6e:6e:c1:42:fe:f8:26:56:24:17:70:bf:26:32:43:cf:5e:5d:ad:52:96:86:b1:38:25:31:19
Signer

Actual PE Digest

0b:20:62:2a:3d:6e:6e:c1:42:fe:f8:26:56:24:17:70:bf:26:32:43:cf:5e:5d:ad:52:96:86:b1:38:25:31:19

Digest Algorithm

sha256

PE Digest Matches

true

0b:20:62:2a:3d:6e:6e:c1:42:fe:f8:26:56:24:17:70:bf:26:32:43:cf:5e:5d:ad:52:96:86:b1:38:25:31:19
Signer

Actual PE Digest

0b:20:62:2a:3d:6e:6e:c1:42:fe:f8:26:56:24:17:70:bf:26:32:43:cf:5e:5d:ad:52:96:86:b1:38:25:31:19

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\jkp\workspace\PIE_Install\822\PIE_INSTALL04638\Source\PIESource\x64\Release\Intel_PIE_Service.pdb

Imports

kernel32

SizeofResource
HeapFree
InitializeCriticalSectionEx
HeapSize
MultiByteToWideChar
GetPrivateProfileStringW
GetLastError
LockResource
HeapReAlloc
RaiseException
FindResourceExW
LoadResource
FindResourceW
HeapAlloc
DecodePointer
HeapDestroy
GetWindowsDirectoryW
WriteConsoleW
DeleteCriticalSection
GetProcessHeap
CopyFileW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CloseThreadpoolWork
WaitForSingleObject
CreateEventW
SetEvent
CloseHandle
ResetEvent
SubmitThreadpoolWork
CreateThreadpoolWork
GetConsoleMode
GetCurrentThreadId
GetCurrentProcessId
GetLocalTime
OutputDebugStringW
WriteFile
GetProcAddress
LoadLibraryW
FreeLibrary
Sleep
GetCurrentProcess
ReadFile
CreateProcessW
GetExitCodeProcess
PeekNamedPipe
CreatePipe
GetTickCount
MoveFileExW
CreateDirectoryW
DeleteTimerQueueTimer
CreateTimerQueueTimer
CreateTimerQueue
DeleteTimerQueueEx
GetConsoleOutputCP
FlushFileBuffers
GetSystemInfo
VirtualProtect
VirtualQuery
GetModuleHandleW
LoadLibraryExA
LocalFree
FormatMessageA
GetCurrentDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetFileInformationByHandle
GetFullPathNameW
SetFilePointerEx
AreFileApisANSI
GetFileInformationByHandleEx
WideCharToMultiByte
GetStringTypeW
EncodePointer
LCMapStringEx
GetCPInfo
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetDriveTypeW
GetFileType
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
GetCommandLineA
GetCommandLineW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
GetTimeZoneInformation
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW

Sections

.text
Size: 275KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WT/UWD/Win64/Utilities/PIE/MurocApi.dll
.dll windows:6 windows x64 arch:x64

a7597627c7375839d5af9fbd5102cf14

Code Sign

70:71:1b:35:6e:72:4b:35:55:aa:b1:49:d9:d2:a9:70
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/04/2021, 00:00

Not After

07/04/2023, 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/07/2015, 21:03

Not After

22/07/2025, 21:03

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

75:20:8d:38:ef:16:5a:aa:63:94:a6:17:e6:7c:74:cf:99:15:52:22:28:e6:3e:c8:40:54:38:d9:d5:fb:30:9c
Signer

Actual PE Digest

75:20:8d:38:ef:16:5a:aa:63:94:a6:17:e6:7c:74:cf:99:15:52:22:28:e6:3e:c8:40:54:38:d9:d5:fb:30:9c

Digest Algorithm

sha256

PE Digest Matches

true

75:20:8d:38:ef:16:5a:aa:63:94:a6:17:e6:7c:74:cf:99:15:52:22:28:e6:3e:c8:40:54:38:d9:d5:fb:30:9c
Signer

Actual PE Digest

75:20:8d:38:ef:16:5a:aa:63:94:a6:17:e6:7c:74:cf:99:15:52:22:28:e6:3e:c8:40:54:38:d9:d5:fb:30:9c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\jkp\workspace\PIE_Install\822\PIE_INSTALL04638\Source\PIESource\x64\Release\MurocApi.pdb

Imports

kernel32

LoadLibraryW
GetLastError
GetProcAddress
GetCurrentThreadId
GetCurrentProcessId
GetLocalTime
OutputDebugStringW
CloseHandle
WriteFile
RaiseException
InitializeCriticalSectionEx
DeleteCriticalSection
WriteConsoleW
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetSystemInfo
VirtualProtect
VirtualQuery
FreeLibrary
GetModuleHandleW
LoadLibraryExA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
LocalFree
FormatMessageA
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetFilePointerEx
AreFileApisANSI
GetFileInformationByHandleEx
MultiByteToWideChar
WideCharToMultiByte
RtlUnwindEx
InterlockedFlushSList
RtlPcToFileHeader
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetCPInfo
GetStdHandle
GetFileType
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetStringTypeW
SetStdHandle
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode

Exports

Exports

DeregisterIntelCallback
FreeListMemory
Get11ACTxRxData
Get11nAntennaInUse
GetAPIVersion
GetAdapterConfiguration
GetAdapterFeatures
GetAdapterFeaturesEx
GetAdapterList
GetAdapterListEx
GetAntennaSelectionMode
GetAssocStatistics
GetAssociationInfo
GetAssociationStatus
GetBand
GetCachedScanListCount
GetChannelNoiseInformation
GetConnectedRSSI
GetDeviceInfo
GetMCSTxRxData
GetProsetInstallationInfo
GetProtocolPreference
GetRadioState
GetRadioStateEx
GetRoamingAggressiveness
GetRxSensitivitySettings
GetScanList
GetScanListEx
GetScanOptimizationConfiguration
GetSupportedRates
GetTxRate
GetTxRxData
GetVersionInfo
Is11acInOperation
Is11nInOperation
ReSetRoamingAggressiveness
ReSetScanOptimizationConfiguration
RegisterIntelCallback
Set11nChannelWidth
Set11nMode
SetAntennaSelectionMode
SetPlatformMaxTxPower
SetProtocolPreference
SetRadioState
SetRadioStateEx
SetRoamingAggressiveness
SetRxSensitivityValues
SetScanOptimizationConfiguration
SetTxAntenna
WifiCmdTimingMeasurementRequest
WifiCmdTimingPtmWa
WifiCmdTriggerTimingMeasurementRequest
WifiConfigurationRemoteWake
WifiGet11ACTxRxData
WifiGetAdapterConfiguration
WifiGetAdapterFeatures
WifiGetAdapterList
WifiGetAdapterListEx
WifiGetAllAssociationInformation
WifiGetAntennaSelectionMode
WifiGetAssocStatistics
WifiGetAssociationInfo
WifiGetBSSConfigurationStatistics
WifiGetChannelNoiseInformation
WifiGetDeviceInfo
WifiGetMCSTxRxData
WifiGetProsetInstallationInfo
WifiGetScanList
WifiGetTxRxData
WifiGetVersionInfo
WifiGetWOWLANConfiguration
WifiGetWOWLANWakeData
WifiIsRemoteWakeSupported
WifiLegacyGoSetScanFilter
WifiPanQueryPreferredChannelSetting
WifiPanQuerySupportedChannels
WifiPanReSetDiscoveryFilter
WifiPanReSetLegacyGoScanFilter
WifiPanResetPreferredChannelSettings
WifiPanSetDiscoveryFilter
WifiPanSetPreferredChannelSettings
WifiSet11nChannelWidth
WifiSetAntennaSelectionMode
WifiSetLTEConfigInfo
WifiSetLTEDynamicInfo
WifiSetLTEModemStateInfo
WifiSetLTESpsInfo
WifiSetRemoteWakeArpOffload
WifiSetRemoteWakeConfiguration
WifiSetS5Configuration
WifiSetWOWLANConfiguration
WifiSetWiFiPreferredChannels
WifiSetWiFiReportedChannel

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WT/UWD/Win64/Utilities/PIE/PieComponent.INF
WT/UWD/Win64/Utilities/PIE/PieExtension.INF
WT/UWD/Win64/Utilities/PIE/piecomponent.cat
WT/UWD/Win64/Utilities/PIE/pieextension.cat
WT/UWD/Win64/Utilities/Special Configs/WifiDrv04Customizations.cat
WT/UWD/Win64/Utilities/Special Configs/WifiDrv04Customizations.inf
WT/UWD/Win64/Utilities/Special Configs/WifiDrv06Customizations.cat
WT/UWD/Win64/Utilities/Special Configs/WifiDrv06Customizations.inf
WT/UWD/Win64/Utilities/Special Configs/WifiDrv08Customizations.cat
WT/UWD/Win64/Utilities/Special Configs/WifiDrv08Customizations.inf
WT/UWD/Win64/Utilities/Special Configs/WifiDrv6eCustomizations.cat
WT/UWD/Win64/Utilities/Special Configs/WifiDrv6eCustomizations.inf
WT/verfile.tic

Sharing

General

Malware Config

Signatures

Files

44770483078318d55aa0556b4dc7d74b

Code Sign

58:b1:c1:c4:3e:99:9c:1c:f7:c6:94:a1:d7:76:d0:feCertificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

33:00:00:00:b5:21:3f:ca:1e:4a:a0:3d:e4:00:00:00:00:00:b5Certificate

Extended Key Usages

61:0b:aa:c1:00:00:00:00:00:09Certificate

Key Usages

4c:36:fe:0d:b0:10:1d:67:7d:57:24:54:30:6f:10:35:0b:ca:49:2c:04:67:6a:f0:55:32:97:99:ba:0c:0f:26Signer

4c:36:fe:0d:b0:10:1d:67:7d:57:24:54:30:6f:10:35:0b:ca:49:2c:04:67:6a:f0:55:32:97:99:ba:0c:0f:26Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

advapi32

setupapi

api-ms-win-devices-config-l1-1-1

kernel32

ole32

shell32

rpcrt4

Exports

Exports

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 285KB - Virtual size: 285KB

.data Size: 19KB - Virtual size: 32KB

.pdata Size: 65KB - Virtual size: 65KB

_RDATA Size: 512B - Virtual size: 148B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 7KB - Virtual size: 7KB

44770483078318d55aa0556b4dc7d74b

Code Sign

58:b1:c1:c4:3e:99:9c:1c:f7:c6:94:a1:d7:76:d0:feCertificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

33:00:00:00:b5:21:3f:ca:1e:4a:a0:3d:e4:00:00:00:00:00:b5Certificate

Extended Key Usages

61:0b:aa:c1:00:00:00:00:00:09Certificate

Key Usages

4c:36:fe:0d:b0:10:1d:67:7d:57:24:54:30:6f:10:35:0b:ca:49:2c:04:67:6a:f0:55:32:97:99:ba:0c:0f:26Signer

4c:36:fe:0d:b0:10:1d:67:7d:57:24:54:30:6f:10:35:0b:ca:49:2c:04:67:6a:f0:55:32:97:99:ba:0c:0f:26Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

advapi32

setupapi

58:b1:c1:c4:3e:99:9c:1c:f7:c6:94:a1:d7:76:d0:fe
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

33:00:00:00:b5:21:3f:ca:1e:4a:a0:3d:e4:00:00:00:00:00:b5
Certificate

61:0b:aa:c1:00:00:00:00:00:09
Certificate

4c:36:fe:0d:b0:10:1d:67:7d:57:24:54:30:6f:10:35:0b:ca:49:2c:04:67:6a:f0:55:32:97:99:ba:0c:0f:26
Signer

4c:36:fe:0d:b0:10:1d:67:7d:57:24:54:30:6f:10:35:0b:ca:49:2c:04:67:6a:f0:55:32:97:99:ba:0c:0f:26
Signer

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 285KB - Virtual size: 285KB

.data
Size: 19KB - Virtual size: 32KB

.pdata
Size: 65KB - Virtual size: 65KB

_RDATA
Size: 512B - Virtual size: 148B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 7KB - Virtual size: 7KB

58:b1:c1:c4:3e:99:9c:1c:f7:c6:94:a1:d7:76:d0:fe
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

33:00:00:00:b5:21:3f:ca:1e:4a:a0:3d:e4:00:00:00:00:00:b5
Certificate

61:0b:aa:c1:00:00:00:00:00:09
Certificate

4c:36:fe:0d:b0:10:1d:67:7d:57:24:54:30:6f:10:35:0b:ca:49:2c:04:67:6a:f0:55:32:97:99:ba:0c:0f:26
Signer

4c:36:fe:0d:b0:10:1d:67:7d:57:24:54:30:6f:10:35:0b:ca:49:2c:04:67:6a:f0:55:32:97:99:ba:0c:0f:26
Signer

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 285KB - Virtual size: 285KB

.data
Size: 19KB - Virtual size: 32KB

.pdata
Size: 65KB - Virtual size: 65KB

_RDATA
Size: 512B - Virtual size: 148B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 7KB - Virtual size: 7KB

58:b1:c1:c4:3e:99:9c:1c:f7:c6:94:a1:d7:76:d0:fe
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

61:0b:aa:c1:00:00:00:00:00:09
Certificate

76:8b:10:5c:7b:d7:64:80:96:8f:a0:cd:ae:2f:23:61:49:b9:23:2c:d5:f0:6c:1c:a6:78:77:5f:ae:40:66:8e
Signer

76:8b:10:5c:7b:d7:64:80:96:8f:a0:cd:ae:2f:23:61:49:b9:23:2c:d5:f0:6c:1c:a6:78:77:5f:ae:40:66:8e
Signer

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 291KB - Virtual size: 290KB

.data
Size: 19KB - Virtual size: 32KB

.pdata
Size: 67KB - Virtual size: 67KB

.didat
Size: 512B - Virtual size: 304B

_RDATA
Size: 512B - Virtual size: 148B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 7KB - Virtual size: 7KB

58:b1:c1:c4:3e:99:9c:1c:f7:c6:94:a1:d7:76:d0:fe
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate