d540183095e0908ff597eecce2810030

resource
unpack001/Bin/sqlite3.dll
unpack001/TP/AssistantTools.dll
unpack001/TP/DHT.dll
unpack001/TP/DownloadSDK.dll
unpack001/TP/DownloadSDKProxy.dll
unpack001/TP/DownloadSDKServer.exe
unpack001/TP/Ftp.dll
unpack001/TP/Http.dll
unpack001/TP/P2PBase.dll
unpack001/TP/P2PCommonObjects.dll
unpack001/TP/P2PFramework.dll
unpack001/TP/P2PIO.dll
unpack001/TP/P2PStat.dll
unpack001/TP/P2PTarget.dll
unpack001/TP/ProxyVerifier.dll
unpack001/TP/TcpImpl.dll
unpack001/TP/X509Cert.dll
unpack001/TP/XBT.dll
unpack001/TP/XLBugHandler.dll
unpack001/TP/XLBugReport.exe
unpack001/TP/XLLiveUDownload.dll
unpack001/TP/XLReImport.dll
unpack001/TP/XLTaskUpgrade.dll
unpack001/TP/XUdt.dll
unpack001/TP/Xdt.dll
unpack001/TP/libexpat.dll
unpack001/TP/mini_unzip_dll.dll
unpack001/TP/minizip.dll
unpack001/TP/upnp.exe
unpack001/TP/zlib1.dll

.cab

Bin/DapCtrl.dll

.dll regsvr32 windows:5 windows x86 arch:x86

6c65f26173686f2aa00e83a55807a491

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

04:00:00:00:00:01:25:07:1d:f9:af
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18/11/2009, 10:00

Not After

18/03/2019, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2016, 00:00

Not After

24/06/2027, 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

61:29:15:27:00:00:00:00:00:2a
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:55

Not After

15/04/2021, 20:05

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

16:e6:f4:e6:63:82:fb:a8:47:30:d8:99
Certificate

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

08/10/2016, 08:57

Not After

20/05/2017, 06:36

Subject

SERIALNUMBER=440301103773964,CN=深圳市迅雷网络技术有限公司,OU=operate dept,O=深圳市迅雷网络技术有限公司,STREET=南山区科技中二路深圳软件园11号楼7、8层,L=Shen Zhen,ST=Guang Dong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13085348454e5a48454e,1.3.6.1.4.1.311.60.2.1.2=#13094755414e47444f4e47,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:25:07:1d:f9:af
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18/11/2009, 10:00

Not After

18/03/2019, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

61:29:15:27:00:00:00:00:00:2a
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:55

Not After

15/04/2021, 20:05

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

16:e6:f4:e6:63:82:fb:a8:47:30:d8:99
Certificate

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

08/10/2016, 08:57

Not After

20/05/2017, 06:36

Subject

SERIALNUMBER=440301103773964,CN=深圳市迅雷网络技术有限公司,OU=operate dept,O=深圳市迅雷网络技术有限公司,STREET=南山区科技中二路深圳软件园11号楼7、8层,L=Shen Zhen,ST=Guang Dong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13085348454e5a48454e,1.3.6.1.4.1.311.60.2.1.2=#13094755414e47444f4e47,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

11:21:b4:55:35:1e:bb:1a:b2:4f:97:ef:07:fe:2a:b3:0b:8a
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2016, 00:00

Not After

24/06/2027, 00:00

Subject

CN=GlobalSign TSA for Standard - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

86:41:68:26:6b:7f:c9:5e:50:df:97:cf:3d:4a:7f:05:fe:dd:61:9a:7c:d7:4d:05:19:41:37:a9:84:25:e1:57
Signer

Actual PE Digest

86:41:68:26:6b:7f:c9:5e:50:df:97:cf:3d:4a:7f:05:fe:dd:61:9a:7c:d7:4d:05:19:41:37:a9:84:25:e1:57

Digest Algorithm

sha256

PE Digest Matches

true

7b:75:e6:df:3d:a4:5d:a8:3d:a7:11:eb:7e:c4:b8:45:47:13:ea:25
Signer

Actual PE Digest

7b:75:e6:df:3d:a4:5d:a8:3d:a7:11:eb:7e:c4:b8:45:47:13:ea:25

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

d:\work\dapctrl\trunk\Bin\NoLogRel\DapCtrl.pdb

Imports

kernel32

GetPrivateProfileStringA

CreateDirectoryA

GetFileAttributesA

LoadLibraryW

GetCurrentThreadId

SetEnvironmentVariableA

GetEnvironmentVariableA

WinExec

CreateEventW

GetModuleFileNameW

Module32Next

Module32First

RaiseException

lstrcmpiA

FlushInstructionCache

GlobalDeleteAtom

GlobalAddAtomA

InterlockedIncrement

DeleteFileA

GetPrivateProfileIntW

GetDiskFreeSpaceExA

GetSystemDirectoryA

WriteFile

CreateFileA

IsDBCSLeadByte

GetTempPathW

SetLastError

LoadLibraryExA

ExpandEnvironmentStringsA

GetCurrentProcessId

CreateDirectoryW

ExpandEnvironmentStringsW

GetExitCodeProcess

CreateProcessA

GetPrivateProfileIntA

GetDriveTypeA

GetLogicalDriveStringsA

UnmapViewOfFile

MapViewOfFile

CreateFileMappingW

WritePrivateProfileStringA

GetFileSize

MulDiv

GetModuleHandleW

GetFileAttributesExA

VerifyVersionInfoA

VerSetConditionMask

lstrcpyW

CreateFileW

SetFileAttributesA

FormatMessageA

SetThreadLocale

GetThreadLocale

WaitForMultipleObjects

CopyFileA

VirtualQuery

RemoveDirectoryA

GetLongPathNameA

GetPrivateProfileStringW

GetPrivateProfileSectionW

GetExitCodeThread

ResetEvent

MoveFileA

GetVolumeInformationA

lstrcmpA

GlobalUnlock

GlobalLock

GlobalAlloc

ReadFile

GetCurrentDirectoryA

FindResourceA

DeviceIoControl

lstrcpyA

lstrcatA

IsBadCodePtr

SetEndOfFile

CompareStringW

CompareStringA

GetLocaleInfoW

LocalAlloc

WriteConsoleW

GetConsoleOutputCP

WriteConsoleA

InitializeCriticalSectionAndSpinCount

IsValidLocale

EnumSystemLocalesA

GetUserDefaultLCID

GetStringTypeW

GetStringTypeA

GetLocaleInfoA

QueryPerformanceCounter

GetEnvironmentStringsW

FreeEnvironmentStringsW

GetEnvironmentStrings

FreeEnvironmentStringsA

SetFilePointer

FlushFileBuffers

GetConsoleMode

GetConsoleCP

GetStartupInfoA

GetFileType

SetHandleCount

GetStdHandle

ExitProcess

HeapCreate

TlsFree

TlsSetValue

TlsAlloc

TlsGetValue

IsValidCodePage

GetOEMCP

GetACP

GetCPInfo

LCMapStringW

LCMapStringA

GetCommandLineA

GetTimeZoneInformation

ExitThread

GetFileAttributesW

GetDateFormatA

GetTimeFormatA

VirtualProtect

IsDebuggerPresent

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RtlUnwind

GetSystemTimeAsFileTime

InterlockedExchange

VirtualAlloc

VirtualFree

IsProcessorFeaturePresent

InterlockedCompareExchange

GetProcessHeap

HeapSize

HeapReAlloc

HeapFree

HeapAlloc

HeapDestroy

SetCurrentDirectoryA

LocalFree

CreateToolhelp32Snapshot

Process32First

LoadResource

LockResource

SizeofResource

FileTimeToLocalFileTime

FileTimeToSystemTime

GetTempPathA

CreateThread

FreeLibrary

LoadLibraryA

GetModuleFileNameA

GetModuleHandleA

GetProcAddress

CreateEventA

lstrlenA

lstrlenW

WaitForSingleObject

TerminateThread

CloseHandle

GetTickCount

OpenProcess

TerminateProcess

Process32Next

Sleep

OpenMutexA

GetCurrentProcess

GetSystemTimes

GetProcessTimes

InitializeCriticalSection

DeleteCriticalSection

GetVersionExA

SetEvent

GetSystemInfo

FindFirstFileA

FindNextFileA

FindClose

InterlockedDecrement

SetStdHandle

FindResourceExA

GetLastError

WideCharToMultiByte

EnterCriticalSection

MultiByteToWideChar

LeaveCriticalSection

SetPriorityClass

user32

GetClassInfoExA

RegisterHotKey

GetWindowThreadProcessId

SetParent

ShowWindow

ScreenToClient

SetWindowPos

SendMessageA

CharNextA

KillTimer

SetTimer

SendMessageTimeoutA

IsWindow

SendMessageW

FindWindowA

FindWindowExW

GetMessageA

TranslateMessage

DispatchMessageA

MessageBoxA

PostMessageA

UnregisterClassA

FillRect

DestroyAcceleratorTable

GetWindow

GetDesktopWindow

CreateAcceleratorTableA

SetClassLongA

SetWindowTextA

GetWindowTextA

GetWindowTextLengthA

RegisterWindowMessageA

SetActiveWindow

GetMonitorInfoA

MonitorFromRect

mouse_event

IsWindowVisible

GetCursorPos

GetLastInputInfo

SetWindowLongA

LoadCursorA

CallNextHookEx

SetFocus

GetWindowInfo

GetSystemMetrics

GetWindowLongA

GetWindowRect

GetClassNameW

GetParent

SetForegroundWindow

GetClassNameA

GetAncestor

GetForegroundWindow

DestroyWindow

ShowCursor

SetCursor

DefWindowProcA

CharLowerBuffA

CharUpperBuffA

RegisterClassExA

EnumChildWindows

SetWindowsHookExA

UnhookWindowsHookEx

CreateWindowExA

UnregisterHotKey

FindWindowW

PostThreadMessageA

ReleaseDC

ReleaseCapture

GetDlgItem

SetCapture

GetDC

SetWindowRgn

OffsetRect

EqualRect

IntersectRect

EndPaint

GetClientRect

BeginPaint

CallWindowProcA

PtInRect

UnionRect

IsChild

GetFocus

GetKeyState

InvalidateRect

CharNextW

wsprintfW

PostQuitMessage

UpdateWindow

GetSysColor

MoveWindow

ClientToScreen

InvalidateRgn

RedrawWindow

gdi32

GetObjectA

CreateSolidBrush

BitBlt

CreateCompatibleDC

CreateCompatibleBitmap

SelectObject

DeleteObject

LPtoDP

GetStockObject

SetMapMode

SetWindowOrgEx

SetViewportOrgEx

DeleteDC

RestoreDC

CreateDCA

CreateRectRgnIndirect

GetDeviceCaps

SetBkMode

SaveDC

SetBkColor

advapi32

RegQueryValueExA

GetSidSubAuthorityCount

GetSidSubAuthority

RegOpenKeyExA

RegCloseKey

OpenProcessToken

RegDeleteKeyA

RegDeleteValueA

RegCreateKeyExA

RegSetValueExA

RegQueryInfoKeyA

RegEnumKeyExA

RegQueryValueExW

RegOpenKeyExW

RegOpenKeyA

RegCreateKeyA

GetTokenInformation

shell32

ShellExecuteW

SHChangeNotify

SHGetMalloc

SHBrowseForFolderA

SHGetSpecialFolderPathA

SHGetPathFromIDListA

SHGetFolderPathW

ShellExecuteExA

ord680

ShellExecuteA

SHGetFolderPathA

SHCreateDirectoryExA

SHGetSpecialFolderPathW

ole32

CoUninitialize

CoCreateInstance

CoInitialize

OleUninitialize

OleInitialize

CreateStreamOnHGlobal

CLSIDFromString

CLSIDFromProgID

CoGetClassObject

OleLockRunning

ReadClassStm

OleSaveToStream

WriteClassStm

OleRegGetMiscStatus

OleRegGetUserType

OleRegEnumVerbs

CreateOleAdviseHolder

CoCreateGuid

StringFromCLSID

CoSetProxyBlanket

CoTaskMemRealloc

CoTaskMemAlloc

CoTaskMemFree

StringFromGUID2

CoGetObject

oleaut32

SafeArrayDestroy

SafeArrayAccessData

SafeArrayCreateVector

SysFreeString

VariantInit

VariantClear

VariantCopy

SysAllocStringLen

SysAllocStringByteLen

SysStringByteLen

SysAllocString

SysStringLen

VarBstrCat

VarBstrCmp

OleCreateFontIndirect

DispCallFunc

RegisterTypeLi

VarCmp

VariantChangeType

VarUI4FromStr

LoadRegTypeLi

LoadTypeLi

OleCreatePropertyFrame

UnRegisterTypeLi

GetErrorInfo

SafeArrayUnaccessData

shlwapi

PathAddBackslashA

PathFileExistsA

PathAppendA

PathFileExistsW

PathFindFileNameW

PathFindFileNameA

StrStrW

PathAppendW

StrStrIW

AssocQueryStringW

wnsprintfW

PathFindExtensionA

PathRemoveFileSpecA

urlmon

URLDownloadToFileW

URLDownloadToCacheFileW

URLDownloadToCacheFileA

version

VerQueryValueA

GetFileVersionInfoA

GetFileVersionInfoSizeA

wininet

HttpAddRequestHeadersA

InternetCloseHandle

InternetReadFile

InternetQueryDataAvailable

HttpEndRequestA

InternetWriteFile

HttpSendRequestExA

InternetCombineUrlA

HttpOpenRequestA

InternetConnectA

InternetOpenA

HttpQueryInfoA

HttpSendRequestA

InternetCreateUrlA

InternetCrackUrlA

wintrust

WTHelperGetProvCertFromChain

WTHelperProvDataFromStateData

WinVerifyTrust

WTHelperGetProvSignerFromChain

crypt32

CertGetNameStringW

CertGetNameStringA

ws2_32

recv

inet_ntoa

inet_addr

WSAStartup

WSACleanup

closesocket

gethostbyname

gethostname

accept

listen

bind

htons

socket

connect

WSAGetLastError

send

shutdown

sendto

ioctlsocket

select

ntohs

recvfrom

setsockopt

iphlpapi

GetAdaptersInfo

Exports

DllCanUnloadNow

DllGetClassObject

DllRegisterServer

DllUnregisterServer

RegisterServerDirect

Repair_realplayer11

UnregisterServerDirect

Sections

.text
Size: 663KB - Virtual size: 662KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Bin/DapCtrl64.dll

.dll regsvr32 windows:5 windows x64 arch:x64

a0b382f9fe6ec2f118812959f853c2e2

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

04:00:00:00:00:01:25:07:1d:f9:af
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18/11/2009, 10:00

Not After

18/03/2019, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2016, 00:00

Not After

24/06/2027, 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

61:29:15:27:00:00:00:00:00:2a
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:55

Not After

15/04/2021, 20:05

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

16:e6:f4:e6:63:82:fb:a8:47:30:d8:99
Certificate

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

08/10/2016, 08:57

Not After

20/05/2017, 06:36

Subject

SERIALNUMBER=440301103773964,CN=深圳市迅雷网络技术有限公司,OU=operate dept,O=深圳市迅雷网络技术有限公司,STREET=南山区科技中二路深圳软件园11号楼7、8层,L=Shen Zhen,ST=Guang Dong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13085348454e5a48454e,1.3.6.1.4.1.311.60.2.1.2=#13094755414e47444f4e47,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:25:07:1d:f9:af
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18/11/2009, 10:00

Not After

18/03/2019, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

61:29:15:27:00:00:00:00:00:2a
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:55

Not After

15/04/2021, 20:05

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

16:e6:f4:e6:63:82:fb:a8:47:30:d8:99
Certificate

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

08/10/2016, 08:57

Not After

20/05/2017, 06:36

Subject

SERIALNUMBER=440301103773964,CN=深圳市迅雷网络技术有限公司,OU=operate dept,O=深圳市迅雷网络技术有限公司,STREET=南山区科技中二路深圳软件园11号楼7、8层,L=Shen Zhen,ST=Guang Dong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13085348454e5a48454e,1.3.6.1.4.1.311.60.2.1.2=#13094755414e47444f4e47,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

11:21:b4:55:35:1e:bb:1a:b2:4f:97:ef:07:fe:2a:b3:0b:8a
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2016, 00:00

Not After

24/06/2027, 00:00

Subject

CN=GlobalSign TSA for Standard - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

aa:b1:07:d1:60:39:26:93:2b:fe:24:fe:67:20:4d:7b:a2:de:fe:33:be:0c:07:30:e7:ed:fc:32:46:3b:a1:e2
Signer

Actual PE Digest

aa:b1:07:d1:60:39:26:93:2b:fe:24:fe:67:20:4d:7b:a2:de:fe:33:be:0c:07:30:e7:ed:fc:32:46:3b:a1:e2

Digest Algorithm

sha256

PE Digest Matches

true

67:da:05:6c:65:df:b6:6a:90:9d:c4:c7:69:a7:4c:a0:f3:f3:94:dd
Signer

Actual PE Digest

67:da:05:6c:65:df:b6:6a:90:9d:c4:c7:69:a7:4c:a0:f3:f3:94:dd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

h:\workspaces\xmp6\app\dapctrl\Bin\DllLogRel\DapCtrl64.pdb

Imports

kernel32

InitializeCriticalSection

GetEnvironmentVariableA

ExitProcess

CreateMutexA

TerminateProcess

GetCurrentProcess

TerminateThread

TlsAlloc

GetSystemInfo

CreateEventA

CreateThread

FileTimeToSystemTime

FileTimeToLocalFileTime

SizeofResource

LockResource

LoadResource

FindResourceA

FindResourceExA

SetEvent

GetProcessTimes

GetSystemTimes

GetVersionExA

Sleep

Process32Next

Process32First

CreateToolhelp32Snapshot

SetCurrentDirectoryA

GetCurrentDirectoryA

OpenMutexA

LocalFree

LocalAlloc

OpenProcess

Module32Next

Module32First

WinExec

CreateEventW

LoadLibraryW

GetModuleFileNameW

RaiseException

lstrcmpiA

FlushInstructionCache

GlobalDeleteAtom

GlobalAddAtomA

IsDBCSLeadByte

SetLastError

LoadLibraryExA

UnmapViewOfFile

MapViewOfFile

CreateFileMappingW

GetDiskFreeSpaceExA

GetSystemDirectoryA

CreateDirectoryW

ExpandEnvironmentStringsW

GetExitCodeProcess

CreateProcessA

ExpandEnvironmentStringsA

GetFileSize

GetDriveTypeA

GetLogicalDriveStringsA

GetTempPathW

GetPrivateProfileIntW

MulDiv

GetModuleHandleW

VerifyVersionInfoA

VerSetConditionMask

lstrcpyW

CreateFileW

SetFileAttributesA

FormatMessageA

SetThreadLocale

GetThreadLocale

GetFileAttributesExA

RemoveDirectoryA

GetLongPathNameA

WaitForMultipleObjects

GetExitCodeThread

GetPrivateProfileStringW

DeleteCriticalSection

ResetEvent

GetVolumeInformationA

lstrcmpA

ReadFile

SetEndOfFile

CompareStringW

CompareStringA

GetLocaleInfoW

SetStdHandle

WriteConsoleW

GetConsoleOutputCP

WriteConsoleA

InitializeCriticalSectionAndSpinCount

IsValidLocale

EnumSystemLocalesA

GetUserDefaultLCID

GetStringTypeW

GetStringTypeA

GetLocaleInfoA

GetEnvironmentStringsW

FreeEnvironmentStringsW

GetEnvironmentStrings

FreeEnvironmentStringsA

GetConsoleMode

GetConsoleCP

GetStartupInfoA

GetFileType

SetHandleCount

GetFullPathNameA

HeapCreate

HeapSetInformation

GetStdHandle

FlsAlloc

FlsFree

FlsGetValue

DecodePointer

EncodePointer

IsValidCodePage

GetOEMCP

GetACP

GetCPInfo

LCMapStringW

LCMapStringA

GetCommandLineA

FlsSetValue

GetTimeZoneInformation

ExitThread

GetFileAttributesW

GetTimeFormatA

GetDateFormatA

RtlUnwindEx

VirtualProtect

GetSystemTimeAsFileTime

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

IsDebuggerPresent

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RtlPcToFileHeader

InterlockedPopEntrySList

VirtualAlloc

VirtualFree

InterlockedPushEntrySList

GetProcessHeap

HeapSize

HeapReAlloc

HeapFree

HeapAlloc

HeapDestroy

SetEnvironmentVariableA

TlsFree

ReleaseMutex

TlsGetValue

TlsSetValue

GetLocalTime

FindFirstChangeNotificationA

WaitForSingleObject

FindCloseChangeNotification

MoveFileA

CopyFileA

GetPrivateProfileStringA

GetPrivateProfileIntA

FreeLibrary

FindFirstFileA

FindNextFileA

FindClose

GetCurrentThreadId

OutputDebugStringA

LoadLibraryA

GetModuleHandleA

GetProcAddress

lstrlenA

lstrlenW

CreateFileA

GetTempPathA

WritePrivateProfileStringA

SetFilePointer

WriteFile

FlushFileBuffers

DeleteFileA

GetCurrentProcessId

CloseHandle

GetFileAttributesA

CreateDirectoryA

GetModuleFileNameA

GlobalUnlock

GlobalFree

GlobalAlloc

GlobalLock

VirtualQuery

QueryPerformanceFrequency

EnterCriticalSection

QueryPerformanceCounter

GetTickCount64

GetLastError

GetTickCount

WideCharToMultiByte

MultiByteToWideChar

LeaveCriticalSection

GetPrivateProfileSectionW

user32

SetParent

GetWindowThreadProcessId

RegisterHotKey

GetClassInfoExA

LoadCursorA

ShowWindow

ScreenToClient

SetWindowPos

SendMessageA

SetWindowLongA

KillTimer

SetTimer

SendMessageW

FindWindowExW

SendMessageTimeoutA

FindWindowA

IsWindow

GetMessageA

TranslateMessage

DispatchMessageA

MessageBoxA

PostMessageA

UnregisterClassA

RedrawWindow

SetCapture

GetDlgItem

ReleaseCapture

FillRect

DestroyAcceleratorTable

GetWindow

GetDesktopWindow

CreateAcceleratorTableA

SetClassLongPtrA

SetWindowTextA

GetWindowTextA

GetWindowTextLengthA

RegisterWindowMessageA

SetActiveWindow

IsWindowVisible

GetCursorPos

GetMonitorInfoA

MonitorFromRect

mouse_event

GetLastInputInfo

CharNextA

SetFocus

SetWindowLongPtrA

GetWindowLongPtrA

GetWindowInfo

GetSystemMetrics

GetWindowLongA

GetWindowRect

GetClassNameW

GetParent

CallNextHookEx

GetClassNameA

DestroyWindow

ShowCursor

SetCursor

DefWindowProcA

CharLowerBuffA

CharUpperBuffA

RegisterClassExA

EnumChildWindows

CreateWindowExA

FindWindowW

SetForegroundWindow

GetAncestor

GetForegroundWindow

UnhookWindowsHookEx

SetWindowsHookExA

PostThreadMessageA

UnregisterHotKey

InvalidateRgn

ClientToScreen

MoveWindow

ReleaseDC

GetDC

SetWindowRgn

OffsetRect

EqualRect

IntersectRect

EndPaint

GetClientRect

BeginPaint

CallWindowProcA

PtInRect

UnionRect

IsChild

GetFocus

GetKeyState

InvalidateRect

CharNextW

wsprintfW

PostQuitMessage

UpdateWindow

GetSysColor

gdi32

RestoreDC

DeleteDC

SetViewportOrgEx

SetWindowOrgEx

SetMapMode

SaveDC

LPtoDP

DeleteObject

CreateDCA

CreateCompatibleBitmap

CreateCompatibleDC

CreateSolidBrush

GetObjectA

GetStockObject

SetBkMode

SetBkColor

CreateRectRgnIndirect

SelectObject

GetDeviceCaps

BitBlt

advapi32

RegOpenKeyExA

RegCloseKey

RegCreateKeyA

RegOpenKeyExW

RegQueryValueExW

RegOpenKeyA

RegEnumKeyExA

RegQueryInfoKeyA

RegSetValueExA

RegCreateKeyExA

RegDeleteValueA

RegDeleteKeyA

OpenProcessToken

GetTokenInformation

RegQueryValueExA

GetSidSubAuthority

GetSidSubAuthorityCount

shell32

SHGetSpecialFolderPathW

SHChangeNotify

SHGetFolderPathW

SHGetPathFromIDListA

SHBrowseForFolderA

SHGetMalloc

ShellExecuteExA

SHGetFolderPathA

SHCreateDirectoryExA

ord680

ShellExecuteA

ShellExecuteW

ole32

CoUninitialize

CoCreateInstance

CoInitialize

OleUninitialize

OleInitialize

CreateStreamOnHGlobal

CLSIDFromString

CLSIDFromProgID

CoGetClassObject

OleLockRunning

OleSaveToStream

WriteClassStm

OleRegGetMiscStatus

OleRegGetUserType

OleRegEnumVerbs

CreateOleAdviseHolder

OleLoadFromStream

CoCreateGuid

StringFromCLSID

CoSetProxyBlanket

CoTaskMemRealloc

CoTaskMemAlloc

CoTaskMemFree

StringFromGUID2

CoGetObject

oleaut32

SafeArrayDestroy

SafeArrayAccessData

SafeArrayCreateVector

SysFreeString

VariantInit

VariantClear

VariantCopy

SysAllocStringLen

SysAllocStringByteLen

SysStringByteLen

SysAllocString

SysStringLen

VarBstrCat

VarBstrCmp

OleCreateFontIndirect

DispCallFunc

RegisterTypeLi

UnRegisterTypeLi

OleCreatePropertyFrame

LoadTypeLi

LoadRegTypeLi

VarCmp

VariantChangeType

VarUI4FromStr

GetErrorInfo

SafeArrayUnaccessData

shlwapi

PathRemoveFileSpecA

PathAddBackslashA

PathAppendA

PathFindFileNameW

PathFileExistsW

PathFindFileNameA

PathAppendW

StrStrIW

wnsprintfW

AssocQueryStringW

StrStrW

PathFindExtensionA

PathFileExistsA

urlmon

URLDownloadToFileW

URLDownloadToCacheFileW

URLDownloadToCacheFileA

version

VerQueryValueA

GetFileVersionInfoA

GetFileVersionInfoSizeA

wininet

HttpAddRequestHeadersA

InternetCloseHandle

InternetReadFile

InternetQueryDataAvailable

HttpEndRequestA

InternetWriteFile

HttpSendRequestExA

InternetOpenA

HttpOpenRequestA

InternetConnectA

HttpQueryInfoA

HttpSendRequestA

InternetCombineUrlA

InternetCreateUrlA

InternetCrackUrlA

wintrust

WTHelperGetProvCertFromChain

WTHelperProvDataFromStateData

WinVerifyTrust

WTHelperGetProvSignerFromChain

crypt32

CertGetNameStringW

CertGetNameStringA

ws2_32

WSAGetLastError

inet_ntoa

inet_addr

recv

WSAStartup

WSACleanup

gethostbyname

gethostname

closesocket

accept

listen

bind

htons

socket

connect

send

shutdown

sendto

ioctlsocket

select

setsockopt

recvfrom

ntohs

iphlpapi

GetAdaptersInfo

Exports

DllCanUnloadNow

DllGetClassObject

DllRegisterServer

DllUnregisterServer

RegisterServerDirect

Repair_realplayer11

UnregisterServerDirect

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 398KB - Virtual size: 397KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 434KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Bin/LiveUDInstaller.exe

.exe windows:5 windows x86 arch:x86

719703dcfbfe24b4843266b90b5d50ef

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

04:00:00:00:00:01:25:07:1d:f9:af
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18/11/2009, 10:00

Not After

18/03/2019, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2016, 00:00

Not After

24/06/2027, 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

61:29:15:27:00:00:00:00:00:2a
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:55

Not After

15/04/2021, 20:05

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

4a:9e:ff:30:a3:43:aa:0d:e0:42:34:7c
Certificate

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

26/05/2017, 11:03

Not After

26/06/2018, 10:11

Subject

SERIALNUMBER=91440300746612636Q,CN=深圳市迅雷网络技术有限公司,OU=Operating Dept.,O=深圳市迅雷网络技术有限公司,STREET=南山区粤海街道科技中二路深圳软件园11号楼7、8层,L=SHENZHEN,ST=GUANGDONG,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13085348454e5a48454e,1.3.6.1.4.1.311.60.2.1.2=#13094755414e47444f4e47,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:25:07:1d:f9:af
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18/11/2009, 10:00

Not After

18/03/2019, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

61:29:15:27:00:00:00:00:00:2a
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:55

Not After

15/04/2021, 20:05

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

4a:9e:ff:30:a3:43:aa:0d:e0:42:34:7c
Certificate

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

26/05/2017, 11:03

Not After

26/06/2018, 10:11

Subject

SERIALNUMBER=91440300746612636Q,CN=深圳市迅雷网络技术有限公司,OU=Operating Dept.,O=深圳市迅雷网络技术有限公司,STREET=南山区粤海街道科技中二路深圳软件园11号楼7、8层,L=SHENZHEN,ST=GUANGDONG,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13085348454e5a48454e,1.3.6.1.4.1.311.60.2.1.2=#13094755414e47444f4e47,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

11:21:b4:55:35:1e:bb:1a:b2:4f:97:ef:07:fe:2a:b3:0b:8a
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2016, 00:00

Not After

24/06/2027, 00:00

Subject

CN=GlobalSign TSA for Standard - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

e7:a5:0b:a5:74:56:c0:d9:75:63:6c:43:dd:03:d8:5b:85:ff:f5:dd:fd:c1:05:51:13:47:79:6c:7c:b2:94:b9
Signer

Actual PE Digest

e7:a5:0b:a5:74:56:c0:d9:75:63:6c:43:dd:03:d8:5b:85:ff:f5:dd:fd:c1:05:51:13:47:79:6c:7c:b2:94:b9

Digest Algorithm

sha256

PE Digest Matches

true

d1:8c:63:6c:76:d2:2e:ea:54:3e:e3:34:84:dc:fe:e4:76:1d:9e:0e
Signer

Actual PE Digest

d1:8c:63:6c:76:d2:2e:ea:54:3e:e3:34:84:dc:fe:e4:76:1d:9e:0e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\xunlei_jx\XLLiveUD\pdb\LiveUDInstaller\ProductRelease\LiveUDInstaller.pdb

Imports

ws2_32

WSACleanup

WSAStartup

version

GetFileVersionInfoSizeW

VerQueryValueW

GetFileVersionInfoW

libexpat

ord20

ord35

ord48

ord50

ord25

ord21

ord16

ord52

xlstat4

XLSTAT4_SyncSendAllStat

XLSTAT4_Uninit

XLSTAT4_InitParam

XLSTAT4_PrepareParam

kernel32

Sleep

MoveFileExW

WideCharToMultiByte

MultiByteToWideChar

GetModuleFileNameW

VirtualQuery

IsBadCodePtr

GetFileAttributesW

GetTempPathW

FindClose

FindFirstFileW

CloseHandle

SetLastError

GetLastError

GetCurrentProcess

TerminateProcess

GetLocalTime

InterlockedIncrement

LocalFree

WaitForSingleObject

GetExitCodeProcess

DeleteFileW

VerifyVersionInfoW

WritePrivateProfileStringA

GetPrivateProfileStringA

GetVolumeInformationA

GetSystemDirectoryA

GetModuleFileNameA

lstrcatA

CreateDirectoryA

GetFileAttributesA

lstrcpyA

DeviceIoControl

CreateFileA

SetPriorityClass

GetVersionExA

RaiseException

HeapSize

HeapReAlloc

HeapFree

HeapAlloc

GetProcessHeap

HeapDestroy

GetSystemTimeAsFileTime

GetCurrentProcessId

GetCurrentThreadId

GetTickCount

QueryPerformanceCounter

SetUnhandledExceptionFilter

UnhandledExceptionFilter

GetStartupInfoW

InterlockedCompareExchange

VerSetConditionMask

InterlockedDecrement

InterlockedExchange

IsDebuggerPresent

user32

wsprintfW

advapi32

CopySid

InitializeSid

GetSidLengthRequired

GetLengthSid

IsValidSid

EqualSid

InitializeAcl

SetNamedSecurityInfoW

GetNamedSecurityInfoW

GetAce

GetAclInformation

AddAce

GetSidSubAuthority

shell32

ShellExecuteExW

SHGetFolderPathW

SHGetSpecialFolderPathA

SHCreateDirectoryExW

ole32

CoUninitialize

CoInitialize

msvcp90

?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z

?unget@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ

??$?5DU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAD@Z

?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z

?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z

?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ

?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ

??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z

??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z

??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z

??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z

??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z

?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ

?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z

??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z

??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ

??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z

??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ

??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z

?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z

?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB

?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z

??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z

?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z

?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z

?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z

??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z

??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z

??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_J@Z

??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z

??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z

?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z

??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z

??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ

?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ

??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z

??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ

??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z

?str@?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z

??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z

?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z

?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z

?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z

?_Lock@_Mutex@std@@QAEXXZ

?_Unlock@_Mutex@std@@QAEXXZ

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ

?uncaught_exception@std@@YA_NXZ

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z

?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z

msvcr90

_itoa

??0exception@std@@QAE@ABQBD@Z

??1exception@std@@UAE@XZ

??3@YAXPAX@Z

memmove_s

??0exception@std@@QAE@XZ

??0exception@std@@QAE@ABV01@@Z

??2@YAPAXI@Z

_invalid_parameter_noinfo

__argc

__wargv

_wfopen

feof

fread

fclose

?what@exception@std@@UBEPBDXZ

_purecall

??_V@YAXPAX@Z

memset

_swprintf

__CxxFrameHandler3

_snprintf

malloc

free

_stricmp

fwrite

sprintf_s

memcpy_s

tolower

calloc

memcpy

_time64

sprintf

rand

srand

strlen

memcmp

_CxxThrowException

isprint

isspace

strncpy

isalnum

_unlock

__dllonexit

_encode_pointer

_lock

_onexit

_decode_pointer

_amsg_exit

__wgetmainargs

_cexit

_exit

_XcptFilter

exit

_wcmdln

_initterm

_initterm_e

_configthreadlocale

__setusermatherr

_adjust_fdiv

__p__commode

__p__fmode

__set_app_type

?terminate@@YAXXZ

_crt_debugger_hook

?_type_info_dtor_internal_method@type_info@@QAEXXZ

_except_handler4_common

_invoke_watson

_controlfp_s

shlwapi

PathFileExistsW

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Bin/LiveUpdate_stat4.xml

Bin/ShlExt.dll

.dll regsvr32 windows:5 windows x86 arch:x86

96b6b8286768e13a3129718a9827c0ce

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

04:00:00:00:00:01:25:07:1d:f9:af
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18/11/2009, 10:00

Not After

18/03/2019, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2016, 00:00

Not After

24/06/2027, 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

61:29:15:27:00:00:00:00:00:2a
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:55

Not After

15/04/2021, 20:05

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

16:e6:f4:e6:63:82:fb:a8:47:30:d8:99
Certificate

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

08/10/2016, 08:57

Not After

20/05/2017, 06:36

Subject

SERIALNUMBER=440301103773964,CN=深圳市迅雷网络技术有限公司,OU=operate dept,O=深圳市迅雷网络技术有限公司,STREET=南山区科技中二路深圳软件园11号楼7、8层,L=Shen Zhen,ST=Guang Dong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13085348454e5a48454e,1.3.6.1.4.1.311.60.2.1.2=#13094755414e47444f4e47,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:25:07:1d:f9:af
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18/11/2009, 10:00

Not After

18/03/2019, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

61:29:15:27:00:00:00:00:00:2a
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:55

Not After

15/04/2021, 20:05

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

16:e6:f4:e6:63:82:fb:a8:47:30:d8:99
Certificate

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

08/10/2016, 08:57

Not After

20/05/2017, 06:36

Subject

SERIALNUMBER=440301103773964,CN=深圳市迅雷网络技术有限公司,OU=operate dept,O=深圳市迅雷网络技术有限公司,STREET=南山区科技中二路深圳软件园11号楼7、8层,L=Shen Zhen,ST=Guang Dong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13085348454e5a48454e,1.3.6.1.4.1.311.60.2.1.2=#13094755414e47444f4e47,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

11:21:b4:55:35:1e:bb:1a:b2:4f:97:ef:07:fe:2a:b3:0b:8a
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2016, 00:00

Not After

24/06/2027, 00:00

Subject

CN=GlobalSign TSA for Standard - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

48:82:f5:cc:9e:4b:88:af:40:af:7b:b1:92:6e:d8:5c:44:a1:c0:c3:a0:3a:f1:8e:9a:19:8c:0e:5b:2d:f8:e7
Signer

Actual PE Digest

48:82:f5:cc:9e:4b:88:af:40:af:7b:b1:92:6e:d8:5c:44:a1:c0:c3:a0:3a:f1:8e:9a:19:8c:0e:5b:2d:f8:e7

Digest Algorithm

sha256

PE Digest Matches

true

24:1f:6f:1c:70:d0:16:3e:e9:4b:73:49:ef:cc:d7:4e:44:db:af:6a
Signer

Actual PE Digest

24:1f:6f:1c:70:d0:16:3e:e9:4b:73:49:ef:cc:d7:4e:44:db:af:6a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

c:\svn\xmp\xmp6\trunk\bin\ProductRelease\symbols\ShlExt\pdb\ShlExt.pdb

Imports

kernel32

InitializeCriticalSection

DeleteCriticalSection

GetLastError

lstrcmpiW

InterlockedIncrement

InterlockedDecrement

FreeLibrary

MultiByteToWideChar

SizeofResource

LoadResource

FindResourceW

LoadLibraryExW

GetModuleHandleW

OutputDebugStringW

GetCurrentThreadId

GetCurrentProcessId

FindClose

FindNextFileW

DeleteFileW

FindFirstFileW

GlobalLock

GlobalAlloc

CloseHandle

FlushFileBuffers

WritePrivateProfileStringW

SetFilePointer

WriteFile

GetTempPathA

CreateFileW

WritePrivateProfileStringA

GetPrivateProfileIntW

GetPrivateProfileStringA

GetPrivateProfileStringW

CopyFileW

MoveFileW

SetEnvironmentVariableW

ReleaseMutex

RaiseException

WaitForSingleObject

ExitProcess

CreateMutexW

TerminateProcess

GetCurrentProcess

TlsSetValue

FindCloseChangeNotification

FindFirstChangeNotificationW

GetLocalTime

TlsGetValue

TlsAlloc

LoadLibraryW

GetSystemInfo

TlsFree

GetProcAddress

WideCharToMultiByte

lstrcpynW

GetDriveTypeW

CreateProcessW

lstrcpyW

SetFileAttributesW

SetThreadLocale

GetThreadLocale

GetFileAttributesExW

RemoveDirectoryW

GetLongPathNameW

TerminateThread

WaitForMultipleObjects

CreateThread

CompareStringW

CompareStringA

GetDriveTypeA

WriteConsoleW

GetConsoleOutputCP

WriteConsoleA

GetEnvironmentVariableW

lstrlenW

GetFileAttributesW

CreateDirectoryW

GetFileAttributesA

CreateDirectoryA

GetModuleFileNameW

GlobalUnlock

GlobalFree

VirtualQuery

EnterCriticalSection

LeaveCriticalSection

InterlockedExchangeAdd

CreateFileA

GetTimeZoneInformation

SetEnvironmentVariableA

ReadFile

SetEndOfFile

SetStdHandle

GetStringTypeW

GetStringTypeA

GetLocaleInfoA

LoadLibraryA

InitializeCriticalSectionAndSpinCount

GetConsoleMode

GetConsoleCP

GetTickCount

QueryPerformanceCounter

GetEnvironmentStringsW

FreeEnvironmentStringsW

GetEnvironmentStrings

FreeEnvironmentStringsA

GetStartupInfoA

SetHandleCount

GetModuleHandleA

GetCurrentDirectoryA

GetFileType

lstrcpynA

GetVersionExW

HeapDestroy

HeapAlloc

HeapFree

HeapReAlloc

HeapSize

GetProcessHeap

RtlUnwind

UnhandledExceptionFilter

SetUnhandledExceptionFilter

IsDebuggerPresent

FileTimeToSystemTime

FileTimeToLocalFileTime

GetSystemTimeAsFileTime

GetCommandLineA

SetLastError

VirtualFree

VirtualAlloc

HeapCreate

Sleep

GetStdHandle

GetModuleFileNameA

GetCPInfo

GetACP

GetOEMCP

IsValidCodePage

LCMapStringA

LCMapStringW

GetFullPathNameW

GetFileInformationByHandle

PeekNamedPipe

user32

InsertMenuW

LoadBitmapW

CharNextW

SetMenuItemBitmaps

wsprintfW

MessageBoxW

gdi32

DeleteObject

advapi32

RegQueryValueExW

RegOpenKeyW

RegEnumKeyExW

RegQueryInfoKeyW

RegSetValueExW

RegDeleteKeyW

RegOpenKeyExW

RegCreateKeyExW

RegCloseKey

RegDeleteValueW

shell32

ShellExecuteW

DragQueryFileW

SHGetFolderPathW

ole32

CoTaskMemRealloc

ReleaseStgMedium

StringFromGUID2

CoCreateInstance

CoTaskMemFree

CoTaskMemAlloc

oleaut32

SysStringLen

RegisterTypeLi

UnRegisterTypeLi

LoadTypeLi

VarUI4FromStr

SysAllocString

SysFreeString

version

VerQueryValueW

GetFileVersionInfoW

GetFileVersionInfoSizeW

shlwapi

PathFindExtensionW

PathFindFileNameW

PathAddBackslashW

PathFileExistsW

wintrust

WTHelperGetProvSignerFromChain

WTHelperProvDataFromStateData

WinVerifyTrust

WTHelperGetProvCertFromChain

crypt32

CertGetNameStringW

Exports

DllCanUnloadNow

DllGetClassObject

DllRegisterServer

DllUnregisterServer

RegisterServerDirect

UnregisterServerDirect

Sections

.text
Size: 213KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Bin/ShlExt_x64.dll

.dll regsvr32 windows:5 windows x64 arch:x64

865e16ab93115577ac64c61f6f62fa75

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

04:00:00:00:00:01:25:07:1d:f9:af
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18/11/2009, 10:00

Not After

18/03/2019, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2016, 00:00

Not After

24/06/2027, 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

61:29:15:27:00:00:00:00:00:2a
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:55

Not After

15/04/2021, 20:05

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

16:e6:f4:e6:63:82:fb:a8:47:30:d8:99
Certificate

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

08/10/2016, 08:57

Not After

20/05/2017, 06:36

Subject

SERIALNUMBER=440301103773964,CN=深圳市迅雷网络技术有限公司,OU=operate dept,O=深圳市迅雷网络技术有限公司,STREET=南山区科技中二路深圳软件园11号楼7、8层,L=Shen Zhen,ST=Guang Dong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13085348454e5a48454e,1.3.6.1.4.1.311.60.2.1.2=#13094755414e47444f4e47,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:25:07:1d:f9:af
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18/11/2009, 10:00

Not After

18/03/2019, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

61:29:15:27:00:00:00:00:00:2a
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:55

Not After

15/04/2021, 20:05

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

16:e6:f4:e6:63:82:fb:a8:47:30:d8:99
Certificate

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

08/10/2016, 08:57

Not After

20/05/2017, 06:36

Subject

SERIALNUMBER=440301103773964,CN=深圳市迅雷网络技术有限公司,OU=operate dept,O=深圳市迅雷网络技术有限公司,STREET=南山区科技中二路深圳软件园11号楼7、8层,L=Shen Zhen,ST=Guang Dong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13085348454e5a48454e,1.3.6.1.4.1.311.60.2.1.2=#13094755414e47444f4e47,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

11:21:b4:55:35:1e:bb:1a:b2:4f:97:ef:07:fe:2a:b3:0b:8a
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2016, 00:00

Not After

24/06/2027, 00:00

Subject

CN=GlobalSign TSA for Standard - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

f5:6d:a0:14:57:2c:e5:e8:52:cb:55:24:69:cd:d1:57:38:2b:b4:15:cf:e0:d4:7a:21:33:cd:f7:d8:6e:f9:9c
Signer

Actual PE Digest

f5:6d:a0:14:57:2c:e5:e8:52:cb:55:24:69:cd:d1:57:38:2b:b4:15:cf:e0:d4:7a:21:33:cd:f7:d8:6e:f9:9c

Digest Algorithm

sha256

PE Digest Matches

true

3c:b9:fd:38:62:38:bf:17:ac:11:bf:7f:0e:69:79:7c:0c:de:e2:49
Signer

Actual PE Digest

3c:b9:fd:38:62:38:bf:17:ac:11:bf:7f:0e:69:79:7c:0c:de:e2:49

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

c:\svn\xmp\xmp6\trunk\Symbols\x64\ProductRelease\ShlExt\pdb\ShlExt.pdb

Imports

kernel32

lstrlenW

RaiseException

InitializeCriticalSection

DeleteCriticalSection

GetLastError

lstrcmpiW

FreeLibrary

MultiByteToWideChar

SizeofResource

LoadResource

FindResourceW

LoadLibraryExW

GetModuleHandleW

OutputDebugStringW

GetCurrentThreadId

GetCurrentProcessId

FindClose

FindNextFileW

DeleteFileW

FindFirstFileW

GlobalLock

GlobalAlloc

CloseHandle

FlushFileBuffers

WriteFile

SetFilePointer

WritePrivateProfileStringW

GetTempPathA

CreateFileW

WritePrivateProfileStringA

GetPrivateProfileIntW

GetPrivateProfileStringA

GetPrivateProfileStringW

CopyFileW

MoveFileW

FindCloseChangeNotification

WaitForSingleObject

WideCharToMultiByte

GetLocalTime

TlsSetValue

TlsGetValue

ReleaseMutex

SetEnvironmentVariableW

TlsFree

GetProcAddress

GetEnvironmentVariableW

ExitProcess

CreateMutexW

TerminateProcess

GetCurrentProcess

TlsAlloc

LoadLibraryW

GetSystemInfo

CreateDirectoryW

lstrcpynW

GetDriveTypeW

CreateProcessW

lstrcpyW

SetFileAttributesW

SetThreadLocale

GetThreadLocale

GetFileAttributesExW

RemoveDirectoryW

GetLongPathNameW

TerminateThread

WaitForMultipleObjects

CreateThread

CompareStringW

CompareStringA

GetDriveTypeA

WriteConsoleW

GetConsoleOutputCP

WriteConsoleA

FindFirstChangeNotificationW

GetFileAttributesW

GetFileAttributesA

CreateDirectoryA

GetModuleFileNameW

GlobalUnlock

GlobalFree

VirtualQuery

QueryPerformanceFrequency

QueryPerformanceCounter

GetTickCount64

EnterCriticalSection

LeaveCriticalSection

CreateFileA

GetTimeZoneInformation

ReadFile

SetEndOfFile

SetStdHandle

SetEnvironmentVariableA

GetStringTypeW

GetStringTypeA

GetLocaleInfoA

InitializeCriticalSectionAndSpinCount

LoadLibraryA

GetConsoleMode

GetConsoleCP

GetTickCount

GetEnvironmentStringsW

FreeEnvironmentStringsW

GetEnvironmentStrings

FreeEnvironmentStringsA

GetStartupInfoA

SetHandleCount

GetCurrentDirectoryA

GetFileType

PeekNamedPipe

GetFileInformationByHandle

lstrcpynA

GetVersionExW

HeapDestroy

HeapAlloc

HeapFree

HeapReAlloc

HeapSize

GetProcessHeap

RtlLookupFunctionEntry

RtlUnwindEx

UnhandledExceptionFilter

SetUnhandledExceptionFilter

IsDebuggerPresent

RtlVirtualUnwind

RtlCaptureContext

RtlPcToFileHeader

FileTimeToSystemTime

FileTimeToLocalFileTime

GetSystemTimeAsFileTime

FlsSetValue

GetCommandLineA

EncodePointer

DecodePointer

FlsGetValue

FlsFree

SetLastError

FlsAlloc

Sleep

GetStdHandle

GetModuleFileNameA

HeapSetInformation

HeapCreate

GetCPInfo

GetACP

GetOEMCP

IsValidCodePage

LCMapStringA

LCMapStringW

GetFullPathNameW

user32

LoadBitmapW

InsertMenuW

SetMenuItemBitmaps

wsprintfW

CharNextW

MessageBoxW

gdi32

DeleteObject

advapi32

RegQueryValueExW

RegOpenKeyW

RegEnumKeyExW

RegQueryInfoKeyW

RegSetValueExW

RegDeleteKeyW

RegOpenKeyExW

RegCreateKeyExW

RegCloseKey

RegDeleteValueW

shell32

DragQueryFileW

ShellExecuteW

SHGetFolderPathW

ole32

CoTaskMemFree

ReleaseStgMedium

StringFromGUID2

CoCreateInstance

CoTaskMemRealloc

CoTaskMemAlloc

oleaut32

SysStringLen

VarUI4FromStr

SysFreeString

SysAllocString

LoadTypeLi

UnRegisterTypeLi

RegisterTypeLi

version

GetFileVersionInfoSizeW

GetFileVersionInfoW

VerQueryValueW

shlwapi

PathFileExistsW

PathFindExtensionW

PathAddBackslashW

PathFindFileNameW

wintrust

WinVerifyTrust

WTHelperGetProvCertFromChain

WTHelperGetProvSignerFromChain

WTHelperProvDataFromStateData

crypt32

CertGetNameStringW

Exports

DllCanUnloadNow

DllGetClassObject

DllRegisterServer

DllUnregisterServer

RegisterServerDirect

UnregisterServerDirect

Sections

.text
Size: 195KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Bin/ThunderFW.exe

.exe windows:5 windows x86 arch:x86

2fb79d630975ed8d224afda8654df16a

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0c:ff:7b:32:9c:ff:7f:3b:8d:2d:54:2a:b2:58:26:ba
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

18/09/2013, 00:00

Not After

23/06/2015, 23:59

Subject

CN=ShenZhen Thunder Networking Technologies Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Operate,O=ShenZhen Thunder Networking Technologies Ltd.,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

27:c8:26:00:d6:af:e9:63:35:6e:04:38:d6:bb:e7:9d:e7:af:b4:4d
Signer

Actual PE Digest

27:c8:26:00:d6:af:e9:63:35:6e:04:38:d6:bb:e7:9d:e7:af:b4:4d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\workspace\xlframework\win32_component\ThunderFW\Release\ThunderFW.pdb

Imports

kernel32

GetVersionExA

RaiseException

GetProcessHeap

lstrlenA

GetModuleHandleW

Sleep

GetProcAddress

ExitProcess

GetCommandLineA

GetStartupInfoA

TerminateProcess

GetCurrentProcess

UnhandledExceptionFilter

SetUnhandledExceptionFilter

IsDebuggerPresent

GetCPInfo

InterlockedIncrement

InterlockedDecrement

GetACP

GetOEMCP

IsValidCodePage

TlsGetValue

TlsAlloc

TlsSetValue

TlsFree

SetLastError

GetCurrentThreadId

GetLastError

WriteFile

GetStdHandle

GetModuleFileNameA

DeleteCriticalSection

LeaveCriticalSection

EnterCriticalSection

LoadLibraryA

InitializeCriticalSectionAndSpinCount

FreeEnvironmentStringsA

GetEnvironmentStrings

FreeEnvironmentStringsW

WideCharToMultiByte

GetEnvironmentStringsW

SetHandleCount

GetFileType

HeapCreate

VirtualFree

HeapFree

QueryPerformanceCounter

GetTickCount

GetCurrentProcessId

GetSystemTimeAsFileTime

LCMapStringA

MultiByteToWideChar

LCMapStringW

GetStringTypeA

GetStringTypeW

GetLocaleInfoA

HeapSize

RtlUnwind

HeapAlloc

VirtualAlloc

HeapReAlloc

GetModuleHandleA

ole32

CoInitialize

CLSIDFromProgID

CoCreateInstance

CoUninitialize

CoInitializeEx

oleaut32

SysAllocString

VariantClear

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Bin/UserAgent.dll

.dll regsvr32 windows:5 windows x86 arch:x86

8f306935f47fe19e0a7bb64ac3505be6

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2016, 00:00

Not After

24/06/2027, 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

45:98:a2:8d:fd:dc:bc:31:de:d0:f2:98:07:c5:a7:43
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

05/01/2016, 00:00

Not After

26/07/2018, 23:59

Subject

CN=ShenZhen Thunder Networking Technologies Ltd.,OU=Operate,O=ShenZhen Thunder Networking Technologies Ltd.,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

45:98:a2:8d:fd:dc:bc:31:de:d0:f2:98:07:c5:a7:43
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

05/01/2016, 00:00

Not After

26/07/2018, 23:59

Subject

CN=ShenZhen Thunder Networking Technologies Ltd.,OU=Operate,O=ShenZhen Thunder Networking Technologies Ltd.,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

11:21:b4:55:35:1e:bb:1a:b2:4f:97:ef:07:fe:2a:b3:0b:8a
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2016, 00:00

Not After

24/06/2027, 00:00

Subject

CN=GlobalSign TSA for Standard - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

b3:fd:cf:c3:e5:cc:83:0a:8d:98:87:1e:6d:dc:fb:e1:d2:aa:6c:34:77:77:a3:d9:e2:7c:48:30:92:77:ef:dd
Signer

Actual PE Digest

b3:fd:cf:c3:e5:cc:83:0a:8d:98:87:1e:6d:dc:fb:e1:d2:aa:6c:34:77:77:a3:d9:e2:7c:48:30:92:77:ef:dd

Digest Algorithm

sha256

PE Digest Matches

true

a0:ed:3c:f0:71:fc:e8:96:42:f5:a7:04:0d:35:58:3c:cb:10:93:8d
Signer

Actual PE Digest

a0:ed:3c:f0:71:fc:e8:96:42:f5:a7:04:0d:35:58:3c:cb:10:93:8d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

e:\xl9_client\PC\trunk\BHO\Release\UserAgent.pdb

Imports

version

VerQueryValueW

GetFileVersionInfoW

GetFileVersionInfoSizeW

imm32

ImmDisableIME

libexpat

ord52

ord48

ord20

ord50

ord25

ord16

ord21

ord35

kernel32

CreateMutexW

UnmapViewOfFile

MapViewOfFile

CreateFileMappingW

LocalFree

OpenFileMappingW

lstrlenW

SizeofResource

LockResource

LoadResource

FindResourceW

FindResourceExW

OpenProcess

MultiByteToWideChar

GetCurrentProcessId

WideCharToMultiByte

CopyFileW

LoadLibraryW

GetLastError

GetThreadLocale

OpenMutexW

GetCurrentProcess

WaitForSingleObject

ReleaseMutex

SetLastError

lstrlenA

CloseHandle

GetProcessHeap

GetCurrentThreadId

CreateEventW

ResumeThread

WaitForMultipleObjects

SetEvent

OpenEventW

ResetEvent

GetTickCount

FlushInstructionCache

HeapAlloc

HeapDestroy

InterlockedDecrement

InterlockedIncrement

GetModuleHandleW

GetProcAddress

DeleteCriticalSection

InitializeCriticalSection

LeaveCriticalSection

EnterCriticalSection

RaiseException

LoadLibraryA

IsProcessorFeaturePresent

VirtualFree

HeapSize

InterlockedCompareExchange

VirtualAlloc

InterlockedExchange

Sleep

TerminateProcess

UnhandledExceptionFilter

SetUnhandledExceptionFilter

HeapFree

GetModuleFileNameW

IsDebuggerPresent

QueryPerformanceCounter

GetSystemTimeAsFileTime

SetThreadLocale

HeapReAlloc

user32

GetClassInfoExW

LoadCursorW

RegisterClassExW

FindWindowW

IsWindow

SendMessageTimeoutW

wsprintfW

SendMessageW

GetDesktopWindow

SetWindowLongW

GetWindowLongW

DefWindowProcW

CreateWindowExW

CallWindowProcW

DestroyWindow

UnregisterClassA

CharNextW

advapi32

MakeSelfRelativeSD

GetSecurityDescriptorOwner

GetSecurityDescriptorGroup

GetSecurityDescriptorDacl

GetSecurityDescriptorSacl

GetSecurityDescriptorControl

GetSecurityDescriptorLength

ConvertStringSecurityDescriptorToSecurityDescriptorW

RegCloseKey

RegSetValueExW

RegCreateKeyExW

shell32

SHGetSpecialFolderPathW

SHCreateDirectoryExW

ole32

CoCreateInstance

oleaut32

SysStringLen

SysFreeString

UnRegisterTypeLi

RegisterTypeLi

VariantInit

VariantClear

VariantCopy

SysAllocString

SysAllocStringByteLen

SysStringByteLen

LoadRegTypeLi

LoadTypeLi

VarBstrCmp

SysAllocStringLen

atl90

ord64

ord68

ord56

ord49

ord30

ord32

ord23

ord61

ord58

ord31

ord15

ord67

shlwapi

PathFileExistsW

PathCombineW

msvcp90

?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB

?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z

??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z

??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z

?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB

?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z

?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ

?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z

?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z

??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z

??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z

??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z

??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z