Network Unflagging[.]7z

Sharing

Copy URL Twitter E-mail

General

Target

Network Unflagging.7z
Size

31.6MB
MD5

98ce3dc76b106ee53a7ea9d486f2fd64
SHA1

0e7978db41e3ee36f95c5c6562c0fbf84e90eee9
SHA256

618816abbc59ee9fc72c2a9568b16dd77fbcb7649dca905341383b0da4711f35
SHA512

90d33365ced62aa1b5fdcd6d4f238c7ab8bc92020e7788689991f36e2728d1264fb3036ada96e0fcbbfe6dc8c74f0aebc8ece0bea5e1400e7b270970eeb9a741
SSDEEP

786432:SL+3jyPekmRs8piYqkGk8oIGZXuDIDlfo4P3nu:C+YSRs8pFGk8otgGgInu

Score

3^/10

Malware Config

Signatures

Unsigned PE 17 IoCs

Checks for missing Authenticode signature.

resource
unpack002/REALTEKDRIVER/DASH_V3/PROTDRV/WIN10/32/RtDashPt.sys
unpack002/REALTEKDRIVER/DASH_V3/PROTDRV/WIN10/64/RtDashPt.sys
unpack002/REALTEKDRIVER/DASH_V3/RtDashInstallUtil.exe
unpack002/REALTEKDRIVER/DASH_V3/x64/rtkiow10x64.sys
unpack002/REALTEKDRIVER/DASH_V3/x86/rtkiow10x86.sys
unpack002/REALTEKDRIVER/WIN10/NDIS6/32/rt640x86.sys
unpack002/REALTEKDRIVER/WIN10/NDIS6/32/rtvdevw10x86.sys
unpack002/REALTEKDRIVER/WIN10/NDIS6/64/rt640x64.sys
unpack002/REALTEKDRIVER/WIN10/NDIS6/64/rtvdevw10x64.sys
unpack002/REALTEKDRIVER/WIN7/NDIS6/32/rt86win7.sys
unpack002/REALTEKDRIVER/WIN7/NDIS6/32/rtvdevw7x86.sys
unpack002/REALTEKDRIVER/WIN7/NDIS6/64/rt64win7.sys
unpack002/REALTEKDRIVER/WIN7/NDIS6/64/rtvdevw7x64.sys
unpack002/REALTEKDRIVER/WIN8/NDIS6/32/rt630x86.sys
unpack002/REALTEKDRIVER/WIN8/NDIS6/32/rtvdevw7x86.sys
unpack002/REALTEKDRIVER/WIN8/NDIS6/64/rt630x64.sys
unpack002/REALTEKDRIVER/WIN8/NDIS6/64/rtvdevw7x64.sys

Files

Network Unflagging.7z
.7z
Network Unflagging/ARP-Ban-Fix.bat
.bat .vbs
Network Unflagging/INSTRUCTIONSREADME.txt
Network Unflagging/REALTEKDRIVER.7z
.7z
REALTEKDRIVER/0x0402.ini
REALTEKDRIVER/0x0403.ini
REALTEKDRIVER/0x0404.ini
REALTEKDRIVER/0x0405.ini
REALTEKDRIVER/0x0406.ini
REALTEKDRIVER/0x0407.ini
REALTEKDRIVER/0x0408.ini
REALTEKDRIVER/0x0409.ini
REALTEKDRIVER/0x040a.ini
REALTEKDRIVER/0x040b.ini
REALTEKDRIVER/0x040c.ini
REALTEKDRIVER/0x040e.ini
REALTEKDRIVER/0x0410.ini
REALTEKDRIVER/0x0411.ini
REALTEKDRIVER/0x0412.ini
REALTEKDRIVER/0x0413.ini
REALTEKDRIVER/0x0414.ini
REALTEKDRIVER/0x0415.ini
REALTEKDRIVER/0x0416.ini
REALTEKDRIVER/0x0418.ini
REALTEKDRIVER/0x0419.ini
REALTEKDRIVER/0x041a.ini
REALTEKDRIVER/0x041b.ini
REALTEKDRIVER/0x041d.ini
REALTEKDRIVER/0x041e.ini
REALTEKDRIVER/0x041f.ini
REALTEKDRIVER/0x0421.ini
REALTEKDRIVER/0x0424.ini
REALTEKDRIVER/0x042d.ini
REALTEKDRIVER/0x0804.ini
REALTEKDRIVER/0x0816.ini
REALTEKDRIVER/0x0c0c.ini
REALTEKDRIVER/0x0c1a.ini
REALTEKDRIVER/AutoInst.exe
.exe windows:4 windows x86 arch:x86

e865c201423cde4808175edf07c06249

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:da:4c:26:c7:6e:12:55:dc:82:79:aa:9a:75:1a:cc
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

16/06/2016, 00:00

Not After

05/09/2017, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:d7:e0:27:b2:95:b6:d1:08:d8:a7:df:2c:e2:ac:05
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

31/07/2015, 00:00

Not After

05/09/2017, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fb:98:f7:b8:b0:36:e2:8f:18:14:c0:89:d1:6c:81:46:30:8f:ae:98:02:60:2a:79:c7:59:90:fa:67:4e:af:ae
Signer

Actual PE Digest

fb:98:f7:b8:b0:36:e2:8f:18:14:c0:89:d1:6c:81:46:30:8f:ae:98:02:60:2a:79:c7:59:90:fa:67:4e:af:ae

Digest Algorithm

sha256

PE Digest Matches

true

c7:cb:a6:ef:f4:c2:9c:78:7d:83:35:d6:e6:68:b5:46:05:bb:72:d7
Signer

Actual PE Digest

c7:cb:a6:ef:f4:c2:9c:78:7d:83:35:d6:e6:68:b5:46:05:bb:72:d7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\SVN\AutoInstall\Release\AutoInst.pdb

Imports

kernel32

CloseHandle
SetCurrentDirectoryW
GetExitCodeProcess
GetSystemDefaultLangID
GetVersionExW
WaitForSingleObject
CreateProcessW
GetCurrentDirectoryW
GetModuleFileNameW
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetLastError
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
LCMapStringW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
CreateFileW
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LoadLibraryA
SetFilePointer
SetEndOfFile
ReadFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
CreateFileA

advapi32

RegSetValueExW
RegCreateKeyExW
RegCloseKey

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/BIN/RtDashUI.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:fc:fa:c0:8e:21:6a:1c:1f:da:a6:b7:7b:b2:d6:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

06/01/2020, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:59:58:f8:a9:0b:14:fa:25:43:6b:89:fb:30:76:60
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

03/01/2019, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e7:11:99:30:69:33:40:ef:dc:9f:41:5d:1b:24:66:c5:0f:a7:e4:f4:76:81:2d:34:bb:a0:40:8a:58:bb:d6:a8
Signer

Actual PE Digest

e7:11:99:30:69:33:40:ef:dc:9f:41:5d:1b:24:66:c5:0f:a7:e4:f4:76:81:2d:34:bb:a0:40:8a:58:bb:d6:a8

Digest Algorithm

sha256

PE Digest Matches

true

7e:d6:17:9c:2f:31:79:1c:af:25:7a:ea:7e:12:75:c5:c2:f5:f4:a1
Signer

Actual PE Digest

7e:d6:17:9c:2f:31:79:1c:af:25:7a:ea:7e:12:75:c5:c2:f5:f4:a1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\WorkingSpace\GitServer2\RtDashClientV2\RtDashGUI\RtDashUI\RtDashUI\obj\Release\RtDashUI.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 205KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/BIN/RtRDServer.exe
.exe windows:5 windows x86 arch:x86

cb347fbd4386f7a358b82088cd1fed9e

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:fc:fa:c0:8e:21:6a:1c:1f:da:a6:b7:7b:b2:d6:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

06/01/2020, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:59:58:f8:a9:0b:14:fa:25:43:6b:89:fb:30:76:60
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

03/01/2019, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e6:03:fd:34:94:d3:b4:aa:15:28:36:b5:05:6a:d2:ce:c2:79:ac:a3:4b:39:e5:9d:13:35:aa:67:5f:bc:58:27
Signer

Actual PE Digest

e6:03:fd:34:94:d3:b4:aa:15:28:36:b5:05:6a:d2:ce:c2:79:ac:a3:4b:39:e5:9d:13:35:aa:67:5f:bc:58:27

Digest Algorithm

sha256

PE Digest Matches

true

e1:7a:e3:b8:5c:e5:f0:fe:91:d1:c5:64:7d:6a:8c:34:53:3b:af:70
Signer

Actual PE Digest

e1:7a:e3:b8:5c:e5:f0:fe:91:d1:c5:64:7d:6a:8c:34:53:3b:af:70

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Grant-Win10EnPC\Documents\Dash\ConsoleTool\RtkConsole\RtRemoteDesktop\RtRDServer\Win32\Release\RtRDServer.pdb

Imports

kernel32

VirtualQuery
GetCommandLineA
GetStartupInfoA
RtlUnwind
ExitThread
CreateThread
RaiseException
HeapReAlloc
ExitProcess
HeapSize
VirtualFree
HeapCreate
GetStdHandle
GetACP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetSystemInfo
GetTickCount
GetSystemTimeAsFileTime
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetOEMCP
GetCPInfo
SetErrorMode
InterlockedIncrement
GetModuleHandleW
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
InterlockedDecrement
GetModuleFileNameW
GlobalAddAtomA
FreeResource
WritePrivateProfileStringA
GlobalDeleteAtom
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
CompareStringA
InterlockedExchange
lstrcmpA
FreeLibrary
GetCurrentProcessId
GetModuleFileNameA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
LoadLibraryA
GetFileTime
GetFileSizeEx
GetFileAttributesA
CreateFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalFree
GlobalAlloc
MultiByteToWideChar
lstrlenA
MulDiv
GetModuleHandleA
GetProcAddress
SetLastError
SuspendThread
WaitForSingleObject
GetCurrentThreadId
ResumeThread
GlobalUnlock
GlobalLock
Sleep
LockResource
SizeofResource
LoadResource
FindResourceA
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
ReleaseMutex
CreateMutexA
GetVersionExA
LocalFree
FormatMessageA
GetLastError
OutputDebugStringA
CloseHandle
WaitForMultipleObjects
SetEvent
SetThreadPriority
QueryPerformanceCounter
CreateEventA

user32

UnregisterClassA
LoadCursorA
GetSysColorBrush
DestroyMenu
ShowWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
UpdateWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
UnhookWindowsHookEx
SetCursor
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
PostMessageA
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
CharUpperA
GetMenuItemCount
GetSysColor
EndPaint
BeginPaint
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
SetWindowsHookExA
CallNextHookEx
GetMessageA
RegisterClassA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
ValidateRect
GetMenuItemID
TrackPopupMenu
SetForegroundWindow
GetCursorPos
SetMenuDefaultItem
GetSubMenu
LoadMenuA
OffsetRect
SendInput
SetTimer
ChangeDisplaySettingsExA
EnumDisplaySettingsExA
EnumDisplayDevicesA
KillTimer
DrawIcon
GetClientRect
SendMessageA
IsIconic
GetSystemMetrics
LoadIconA
EnableWindow
ReleaseDC
GetDesktopWindow
GetDC
PostThreadMessageA
PostQuitMessage
DefWindowProcA

gdi32

GetDeviceCaps
PtVisible
GetStockObject
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
CreateCompatibleDC
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
CreateBitmap
BitBlt
DeleteObject
GetObjectA
PatBlt
SelectObject
CreateDIBSection
RectVisible

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
RegSetValueExA
RegCloseKey
CryptAcquireContextA
RegQueryValueExA
RegOpenKeyExA
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptReleaseContext
CryptDestroyKey
CryptDestroyHash

shell32

Shell_NotifyIconA

comctl32

ord17

shlwapi

PathIsUNCA
PathFindExtensionA
PathFindFileNameA
PathStripToRootA

ole32

CreateStreamOnHGlobal
CoTaskMemFree
GetHGlobalFromStream

oleaut32

VariantClear
VariantChangeType
VariantInit

wsock32

WSACleanup
closesocket
accept
socket
select
htonl
WSAStartup
ioctlsocket
bind
WSAGetLastError
WSASetLastError
connect
sendto
htons
listen
shutdown
inet_ntoa
recv
send
WSAAsyncSelect
recvfrom

gdiplus

GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipSaveImageToStream
GdipCloneImage
GdipDisposeImage
GdipAlloc
GdipFree
GdiplusShutdown

ws2_32

WSAIoctl

Sections

.text
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/BIN/RtUICtrlLib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:df:4d:56:73:3a:e3:8d:59:8e:a0:04:dd:2d:9c:51
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09/01/2020, 00:00

Not After

15/09/2020, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:94:73:e0:01:50:bc:5e:b4:7f:29:a1:0d:cc:dd:bd
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

26/12/2018, 00:00

Not After

15/09/2020, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c8:37:1d:c4:f0:4c:a7:da:9d:9d:77:e5:6e:35:83:62:d5:28:ac:cd:d5:db:94:ff:91:86:a0:b6:c3:f3:06:ef
Signer

Actual PE Digest

c8:37:1d:c4:f0:4c:a7:da:9d:9d:77:e5:6e:35:83:62:d5:28:ac:cd:d5:db:94:ff:91:86:a0:b6:c3:f3:06:ef

Digest Algorithm

sha256

PE Digest Matches

true

06:92:99:08:2b:12:83:f7:c4:7d:92:35:d0:5a:50:56:c4:17:47:63
Signer

Actual PE Digest

06:92:99:08:2b:12:83:f7:c4:7d:92:35:d0:5a:50:56:c4:17:47:63

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\WorkingSpace\GitServer2\Dragon\DragonUI\RtUICtrlLib\RtUICtrlLib\obj\Debug\RtUICtrlLib.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/BIN/RtlStartInstall.exe
.exe windows:4 windows x86 arch:x86

dcea4d15905f2f772284d67ed745d7cb

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:df:4d:56:73:3a:e3:8d:59:8e:a0:04:dd:2d:9c:51
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09/01/2020, 00:00

Not After

15/09/2020, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:94:73:e0:01:50:bc:5e:b4:7f:29:a1:0d:cc:dd:bd
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

26/12/2018, 00:00

Not After

15/09/2020, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:2d:26:3a:56:ea:90:ac:71:70:2c:e1:87:04:02:96:8d:06:f4:56:58:90:a1:a5:e5:37:24:72:6b:b5:6e:b7
Signer

Actual PE Digest

01:2d:26:3a:56:ea:90:ac:71:70:2c:e1:87:04:02:96:8d:06:f4:56:58:90:a1:a5:e5:37:24:72:6b:b5:6e:b7

Digest Algorithm

sha256

PE Digest Matches

true

90:ae:23:de:32:5e:85:85:5c:b2:60:97:06:ea:ea:9a:89:08:25:8c
Signer

Actual PE Digest

90:ae:23:de:32:5e:85:85:5c:b2:60:97:06:ea:ea:9a:89:08:25:8c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Realtek\Realtek Source\Vista StartUp RtWlan\RtlVistaStart - New\RtlStartInstall - Copy\Release\RtlStartInstall.pdb

Imports

kernel32

GetLocalTime
lstrcmpiW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
LocalFree
QueryPerformanceCounter

advapi32

GetUserNameW

ole32

CoCreateInstance
OleRun
CoInitialize

msvcr80

_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
_initterm
_encode_pointer
__set_app_type
_except_handler4_common
_crt_debugger_hook
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_invoke_watson
_controlfp_s
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__winitenv
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
memset
??3@YAXPAX@Z
_CxxThrowException
printf
__p__fmode
__CxxFrameHandler3

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/PROTDRV/WIN10/32/RtDashPt.inf
REALTEKDRIVER/DASH_V3/PROTDRV/WIN10/32/RtDashPt.sys
.sys windows:6 windows x86 arch:x86

7a5bff0022de39fdf3cae4314da83e06

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Lei\Desktop\NDIS Connection-less Protocol Driver Sample Hao\NDIS Connection-less Protocol Driver Sample Hao\C++\sys\630\Win8Release\RtDashPt.pdb

Imports

ntoskrnl.exe

IoAcquireCancelSpinLock
IoReleaseCancelSpinLock
MmMapLockedPagesSpecifyCache
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
ObfDereferenceObject
ObReferenceObjectByHandle
IoDeleteSymbolicLink
IoDeleteDevice
IoCreateSymbolicLink
IoCreateDevice
IofCompleteRequest
KeLeaveCriticalRegion
KeEnterCriticalRegion
DbgPrint
memset
memcpy
memcmp
KeInitializeSpinLock
KeSetEvent
RtlInitUnicodeString

hal

KfAcquireSpinLock
KfReleaseSpinLock

ndis.sys

NdisReturnNetBufferLists
NdisFreeMdl
NdisAllocateMdl
NdisCopyFromNetBufferToNetBuffer
NdisAllocateNetBufferAndNetBufferList
NdisFreeNetBufferList
NdisRegisterProtocolDriver
NdisGeneratePartialCancelId
NdisMSleep
NdisSendNetBufferLists
NdisOpenAdapterEx
NdisOidRequest
NdisQueryAdapterInstanceName
NdisDeregisterProtocolDriver
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisWaitEvent
NdisSetEvent
NdisInitializeEvent
NdisCancelSendNetBufferLists
NdisCloseAdapterEx
NdisAllocateMemoryWithTag
NdisFreeMemory

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1024B - Virtual size: 922B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 746B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/PROTDRV/WIN10/32/rtdashpt32.cat
REALTEKDRIVER/DASH_V3/PROTDRV/WIN10/64/RtDashPt.inf
REALTEKDRIVER/DASH_V3/PROTDRV/WIN10/64/RtDashPt.sys
.sys windows:6 windows x64 arch:x64

62615b8fef921bbf78a5f53e587faf40

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Lei\Desktop\NDIS Connection-less Protocol Driver Sample Hao\NDIS Connection-less Protocol Driver Sample Hao\C++\sys\630\x64\Win8Release\RtDashPt.pdb

Imports

ntoskrnl.exe

IoAcquireCancelSpinLock
IoReleaseCancelSpinLock
MmMapLockedPagesSpecifyCache
KeReleaseSpinLockFromDpcLevel
KeAcquireSpinLockAtDpcLevel
ObfDereferenceObject
ObReferenceObjectByHandle
IoDeleteSymbolicLink
IoDeleteDevice
IoCreateSymbolicLink
IoCreateDevice
IofCompleteRequest
KeLeaveCriticalRegion
KeEnterCriticalRegion
DbgPrint
KeReleaseSpinLock
KeAcquireSpinLockRaiseToDpc
KeInitializeSpinLock
KeSetEvent
RtlInitUnicodeString

ndis.sys

NdisFreeMemory
NdisCancelSendNetBufferLists
NdisSendNetBufferLists
NdisReturnNetBufferLists
NdisFreeMdl
NdisAllocateMdl
NdisCopyFromNetBufferToNetBuffer
NdisAllocateNetBufferAndNetBufferList
NdisFreeNetBufferList
NdisRegisterProtocolDriver
NdisGeneratePartialCancelId
NdisMSleep
NdisCloseAdapterEx
NdisOpenAdapterEx
NdisOidRequest
NdisQueryAdapterInstanceName
NdisDeregisterProtocolDriver
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisWaitEvent
NdisSetEvent
NdisAllocateMemoryWithTag
NdisInitializeEvent

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/PROTDRV/WIN10/64/rtdashpt64.cat
REALTEKDRIVER/DASH_V3/PROTDRV/WIN7/32/RtDashPt.inf
REALTEKDRIVER/DASH_V3/PROTDRV/WIN7/32/RtDashPt.sys
.sys windows:6 windows x86 arch:x86

17c353d3e8735604babf006e7a403eaa

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2c:80:89:2e:01:15:b0:b7:7a:a3:59:4b:9a:73:39:53
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

21/07/2010, 00:00

Not After

11/06/2013, 23:59

Subject

CN=Realtek Semiconductor Corp,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=RTCN,O=Realtek Semiconductor Corp,L=Hsinchu,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

33:00:00:00:6d:9d:a5:3e:87:00:9d:33:49:00:00:00:00:00:6d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

20/09/2018, 19:45

Not After

20/09/2019, 19:45

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

be:14:52:73:c4:38:bf:43:85:17:83:fc:22:34:78:e3:d8:6c:18:f0:29:df:e7:50:57:16:3f:1a:43:1a:d6:8e
Signer

Actual PE Digest

be:14:52:73:c4:38:bf:43:85:17:83:fc:22:34:78:e3:d8:6c:18:f0:29:df:e7:50:57:16:3f:1a:43:1a:d6:8e

Digest Algorithm

sha256

PE Digest Matches

true

9c:f9:d4:4c:5e:22:cb:dd:34:ca:c0:83:b8:da:da:e9:7e:4b:3c:7e
Signer

Actual PE Digest

9c:f9:d4:4c:5e:22:cb:dd:34:ca:c0:83:b8:da:da:e9:7e:4b:3c:7e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Lei\Desktop\NDIS Connection-less Protocol Driver(Realtek)DashPtWin8\NDIS Connection-less Protocol Driver(Realtek)DashPtWin8\C++\sys\60\Win7Release\RtDashPt.pdb

Imports

ntoskrnl.exe

KeBugCheckEx
KeTickCount
IoAcquireCancelSpinLock
IoReleaseCancelSpinLock
MmMapLockedPagesSpecifyCache
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
ObfDereferenceObject
ObReferenceObjectByHandle
IoDeleteSymbolicLink
IoDeleteDevice
IoCreateSymbolicLink
IoCreateDevice
IofCompleteRequest
KeLeaveCriticalRegion
KeEnterCriticalRegion
DbgPrint
memset
memcpy
KeSetEvent
RtlInitUnicodeString

hal

KfAcquireSpinLock
KfReleaseSpinLock

ndis.sys

NdisReturnNetBufferLists
NdisFreeMdl
NdisAllocateMdl
NdisCopyFromNetBufferToNetBuffer
NdisAllocateNetBufferAndNetBufferList
NdisFreeNetBufferList
NdisRegisterProtocolDriver
NdisGeneratePartialCancelId
NdisMSleep
NdisSendNetBufferLists
NdisOpenAdapterEx
NdisOidRequest
NdisQueryAdapterInstanceName
NdisDeregisterProtocolDriver
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisWaitEvent
NdisSetEvent
NdisInitializeEvent
NdisCancelSendNetBufferLists
NdisCloseAdapterEx
NdisAllocateMemoryWithTag
NdisFreeMemory

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1024B - Virtual size: 922B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 758B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/PROTDRV/WIN7/32/rtdashpt32.cat
REALTEKDRIVER/DASH_V3/PROTDRV/WIN7/64/RtDashPt.inf
REALTEKDRIVER/DASH_V3/PROTDRV/WIN7/64/RtDashPt.sys
.sys windows:6 windows x64 arch:x64

fc308e106c97f32546a26f219a6b55e1

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2c:80:89:2e:01:15:b0:b7:7a:a3:59:4b:9a:73:39:53
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

21/07/2010, 00:00

Not After

11/06/2013, 23:59

Subject

CN=Realtek Semiconductor Corp,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=RTCN,O=Realtek Semiconductor Corp,L=Hsinchu,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

33:00:00:00:6d:9d:a5:3e:87:00:9d:33:49:00:00:00:00:00:6d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

20/09/2018, 19:45

Not After

20/09/2019, 19:45

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f3:ce:ea:18:71:ca:42:72:e8:47:d2:71:d9:40:26:b0:95:e7:4f:82:c1:93:cf:fe:70:65:c0:02:66:04:fb:2b
Signer

Actual PE Digest

f3:ce:ea:18:71:ca:42:72:e8:47:d2:71:d9:40:26:b0:95:e7:4f:82:c1:93:cf:fe:70:65:c0:02:66:04:fb:2b

Digest Algorithm

sha256

PE Digest Matches

true

85:2a:69:9e:36:5d:8b:fa:e8:33:4f:d3:20:ca:9f:43:17:e1:8e:f7
Signer

Actual PE Digest

85:2a:69:9e:36:5d:8b:fa:e8:33:4f:d3:20:ca:9f:43:17:e1:8e:f7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Lei\Desktop\NDIS Connection-less Protocol Driver(Realtek)DashPtWin8\NDIS Connection-less Protocol Driver(Realtek)DashPtWin8\C++\sys\60\x64\Win7Release\RtDashPt.pdb

Imports

ntoskrnl.exe

KeBugCheckEx
IoAcquireCancelSpinLock
IoReleaseCancelSpinLock
MmMapLockedPagesSpecifyCache
KeReleaseSpinLockFromDpcLevel
KeAcquireSpinLockAtDpcLevel
ObfDereferenceObject
ObReferenceObjectByHandle
IoDeleteSymbolicLink
IoDeleteDevice
IoCreateSymbolicLink
IoCreateDevice
IofCompleteRequest
KeLeaveCriticalRegion
KeEnterCriticalRegion
DbgPrint
KeReleaseSpinLock
KeAcquireSpinLockRaiseToDpc
KeSetEvent
RtlInitUnicodeString

ndis.sys

NdisFreeMemory
NdisCancelSendNetBufferLists
NdisSendNetBufferLists
NdisReturnNetBufferLists
NdisFreeMdl
NdisAllocateMdl
NdisCopyFromNetBufferToNetBuffer
NdisAllocateNetBufferAndNetBufferList
NdisFreeNetBufferList
NdisRegisterProtocolDriver
NdisGeneratePartialCancelId
NdisMSleep
NdisCloseAdapterEx
NdisOpenAdapterEx
NdisOidRequest
NdisQueryAdapterInstanceName
NdisDeregisterProtocolDriver
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisWaitEvent
NdisSetEvent
NdisAllocateMemoryWithTag
NdisInitializeEvent

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/PROTDRV/WIN7/64/rtdashpt64.cat
REALTEKDRIVER/DASH_V3/PROTDRV/WIN8/32/RtDashPt.inf
REALTEKDRIVER/DASH_V3/PROTDRV/WIN8/32/RtDashPt.sys
.sys windows:6 windows x86 arch:x86

7a5bff0022de39fdf3cae4314da83e06

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2c:80:89:2e:01:15:b0:b7:7a:a3:59:4b:9a:73:39:53
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

21/07/2010, 00:00

Not After

11/06/2013, 23:59

Subject

CN=Realtek Semiconductor Corp,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=RTCN,O=Realtek Semiconductor Corp,L=Hsinchu,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

33:00:00:00:6d:9d:a5:3e:87:00:9d:33:49:00:00:00:00:00:6d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

20/09/2018, 19:45

Not After

20/09/2019, 19:45

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b2:3a:c1:ef:92:7a:19:8a:b9:58:00:9d:74:dc:70:71:7c:17:d5:fb:f5:8e:71:26:65:33:7a:0c:51:06:7b:93
Signer

Actual PE Digest

b2:3a:c1:ef:92:7a:19:8a:b9:58:00:9d:74:dc:70:71:7c:17:d5:fb:f5:8e:71:26:65:33:7a:0c:51:06:7b:93

Digest Algorithm

sha256

PE Digest Matches

true

0e:3f:36:e2:75:43:ba:73:46:c6:1d:86:ad:ba:98:1d:ea:27:ca:da
Signer

Actual PE Digest

0e:3f:36:e2:75:43:ba:73:46:c6:1d:86:ad:ba:98:1d:ea:27:ca:da

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Lei\Desktop\NDIS Connection-less Protocol Driver Sample Hao\NDIS Connection-less Protocol Driver Sample Hao\C++\sys\630\Win8Release\RtDashPt.pdb

Imports

ntoskrnl.exe

IoAcquireCancelSpinLock
IoReleaseCancelSpinLock
MmMapLockedPagesSpecifyCache
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
ObfDereferenceObject
ObReferenceObjectByHandle
IoDeleteSymbolicLink
IoDeleteDevice
IoCreateSymbolicLink
IoCreateDevice
IofCompleteRequest
KeLeaveCriticalRegion
KeEnterCriticalRegion
DbgPrint
memset
memcpy
memcmp
KeInitializeSpinLock
KeSetEvent
RtlInitUnicodeString

hal

KfAcquireSpinLock
KfReleaseSpinLock

ndis.sys

NdisReturnNetBufferLists
NdisFreeMdl
NdisAllocateMdl
NdisCopyFromNetBufferToNetBuffer
NdisAllocateNetBufferAndNetBufferList
NdisFreeNetBufferList
NdisRegisterProtocolDriver
NdisGeneratePartialCancelId
NdisMSleep
NdisSendNetBufferLists
NdisOpenAdapterEx
NdisOidRequest
NdisQueryAdapterInstanceName
NdisDeregisterProtocolDriver
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisWaitEvent
NdisSetEvent
NdisInitializeEvent
NdisCancelSendNetBufferLists
NdisCloseAdapterEx
NdisAllocateMemoryWithTag
NdisFreeMemory

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1024B - Virtual size: 922B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 746B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/PROTDRV/WIN8/32/rtdashpt32.cat
REALTEKDRIVER/DASH_V3/PROTDRV/WIN8/64/RtDashPt.inf
REALTEKDRIVER/DASH_V3/PROTDRV/WIN8/64/RtDashPt.sys
.sys windows:6 windows x64 arch:x64

62615b8fef921bbf78a5f53e587faf40

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2c:80:89:2e:01:15:b0:b7:7a:a3:59:4b:9a:73:39:53
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

21/07/2010, 00:00

Not After

11/06/2013, 23:59

Subject

CN=Realtek Semiconductor Corp,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=RTCN,O=Realtek Semiconductor Corp,L=Hsinchu,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

33:00:00:00:6d:9d:a5:3e:87:00:9d:33:49:00:00:00:00:00:6d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

20/09/2018, 19:45

Not After

20/09/2019, 19:45

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fc:90:c7:0a:0c:0d:d3:7d:3d:aa:f9:51:92:2f:a4:f2:0e:47:6c:03:38:9b:b3:93:3a:37:74:fa:f1:28:ae:d9
Signer

Actual PE Digest

fc:90:c7:0a:0c:0d:d3:7d:3d:aa:f9:51:92:2f:a4:f2:0e:47:6c:03:38:9b:b3:93:3a:37:74:fa:f1:28:ae:d9

Digest Algorithm

sha256

PE Digest Matches

true

d6:f8:85:27:99:cd:68:97:e5:42:a9:17:cd:4e:95:c5:04:c6:81:a8
Signer

Actual PE Digest

d6:f8:85:27:99:cd:68:97:e5:42:a9:17:cd:4e:95:c5:04:c6:81:a8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Lei\Desktop\NDIS Connection-less Protocol Driver Sample Hao\NDIS Connection-less Protocol Driver Sample Hao\C++\sys\630\x64\Win8Release\RtDashPt.pdb

Imports

ntoskrnl.exe

IoAcquireCancelSpinLock
IoReleaseCancelSpinLock
MmMapLockedPagesSpecifyCache
KeReleaseSpinLockFromDpcLevel
KeAcquireSpinLockAtDpcLevel
ObfDereferenceObject
ObReferenceObjectByHandle
IoDeleteSymbolicLink
IoDeleteDevice
IoCreateSymbolicLink
IoCreateDevice
IofCompleteRequest
KeLeaveCriticalRegion
KeEnterCriticalRegion
DbgPrint
KeReleaseSpinLock
KeAcquireSpinLockRaiseToDpc
KeInitializeSpinLock
KeSetEvent
RtlInitUnicodeString

ndis.sys

NdisFreeMemory
NdisCancelSendNetBufferLists
NdisSendNetBufferLists
NdisReturnNetBufferLists
NdisFreeMdl
NdisAllocateMdl
NdisCopyFromNetBufferToNetBuffer
NdisAllocateNetBufferAndNetBufferList
NdisFreeNetBufferList
NdisRegisterProtocolDriver
NdisGeneratePartialCancelId
NdisMSleep
NdisCloseAdapterEx
NdisOpenAdapterEx
NdisOidRequest
NdisQueryAdapterInstanceName
NdisDeregisterProtocolDriver
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisWaitEvent
NdisSetEvent
NdisAllocateMemoryWithTag
NdisInitializeEvent

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/PROTDRV/WIN8/64/rtdashpt64.cat
REALTEKDRIVER/DASH_V3/PROTDRV/rtkbind.exe
.exe windows:6 windows x86 arch:x86

7072d6702e468306e0dd22e9be30be21

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:5d:9b:67:16:c5:16:ef:45:a1:21:6d:fd:9f:30:60
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24/01/2019, 00:00

Not After

31/12/2019, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:59:58:f8:a9:0b:14:fa:25:43:6b:89:fb:30:76:60
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

03/01/2019, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7d:1b:29:a5:cf:8a:d6:b2:42:5f:0c:e0:1d:90:4e:3b:df:8b:0b:82:03:ff:aa:88:e1:d5:6c:d6:b5:53:9b:b7
Signer

Actual PE Digest

7d:1b:29:a5:cf:8a:d6:b2:42:5f:0c:e0:1d:90:4e:3b:df:8b:0b:82:03:ff:aa:88:e1:d5:6c:d6:b5:53:9b:b7

Digest Algorithm

sha256

PE Digest Matches

true

16:27:52:35:70:e4:b8:1c:90:dc:a2:8f:a1:f3:90:24:27:d2:f1:65
Signer

Actual PE Digest

16:27:52:35:70:e4:b8:1c:90:dc:a2:8f:a1:f3:90:24:27:d2:f1:65

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\test\rtkbind\i386\rtkbind.pdb

Imports

kernel32

GetVersionExW
GetLastError
LocalFree
FormatMessageW
GetFullPathNameW
MultiByteToWideChar
Sleep
CreateFileA
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
VirtualQuery
GetSystemInfo
VirtualProtect
GetCommandLineA
GetVersionExA
GetStartupInfoA
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
HeapDestroy
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
OutputDebugStringA
CloseHandle
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
LCMapStringA
LCMapStringW
ReadFile
LoadLibraryA
InitializeCriticalSection
GetModuleHandleW
VirtualAlloc
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
CreateFileW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

user32

MessageBoxW

ole32

CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitialize

setupapi

SetupCopyOEMInfW

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/PROTDRV/rtkbind6.exe
.exe windows:6 windows x64 arch:x64

e1a9a51ff6bffdab164845a80f30ff9a

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:5d:9b:67:16:c5:16:ef:45:a1:21:6d:fd:9f:30:60
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24/01/2019, 00:00

Not After

31/12/2019, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:59:58:f8:a9:0b:14:fa:25:43:6b:89:fb:30:76:60
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

03/01/2019, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a7:e5:c6:bf:ba:a9:fb:89:f8:d6:ee:80:24:41:b3:44:16:fd:72:ed:1c:57:a0:df:a2:06:b1:90:cb:5b:bc:f6
Signer

Actual PE Digest

a7:e5:c6:bf:ba:a9:fb:89:f8:d6:ee:80:24:41:b3:44:16:fd:72:ed:1c:57:a0:df:a2:06:b1:90:cb:5b:bc:f6

Digest Algorithm

sha256

PE Digest Matches

true

c2:10:a0:9a:77:8b:19:f7:8d:7d:25:4f:9c:9b:a2:ab:c8:13:c5:f6
Signer

Actual PE Digest

c2:10:a0:9a:77:8b:19:f7:8d:7d:25:4f:9c:9b:a2:ab:c8:13:c5:f6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

e:\test\rtkbind\amd64\rtkbind6.pdb

Imports

kernel32

GetLastError
GetFullPathNameW
LocalFree
FormatMessageW
GetVersionExW
MultiByteToWideChar
Sleep
WriteConsoleW
GetProcessHeap
SetEndOfFile
VirtualQuery
GetSystemInfo
SetThreadStackGuarantee
VirtualAlloc
VirtualProtect
GetCommandLineA
GetStartupInfoW
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
EncodePointer
DecodePointer
FlsFree
SetLastError
FlsSetValue
FlsGetValue
GetCurrentThreadId
FlsAlloc
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringA
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
HeapFree
CloseHandle
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
LCMapStringW
ReadFile
InitializeCriticalSectionAndSpinCount
LoadLibraryW
CreateFileW
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
GetStringTypeW

user32

MessageBoxW

ole32

CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize

setupapi

SetupCopyOEMInfW

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 702B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/RtDashInstallUtil.exe
.exe windows:6 windows x86 arch:x86

700dd80d0e44d57d2bd8ffaa75b31947

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\WorkingSpace\GitServer2\RtDashClientV2\Installer\RtDashInstallUtil\Release\RtDashInstallUtil.pdb

Imports

user32

MessageBoxW
SendMessageW
FindWindowW

ole32

CoCreateInstance
CoInitialize

advapi32

RegSetValueExW
RegCreateKeyW
RegCloseKey
RegQueryValueExW
RegOpenKeyW
RegDeleteKeyW

shell32

ShellExecuteExW
SHFileOperationW

kernel32

GetConsoleCP
FlushFileBuffers
GetProcessHeap
GetStringTypeW
GetConsoleMode
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
HeapSize
HeapReAlloc
SetFilePointerEx
WriteConsoleW
DecodePointer
SetStdHandle
RtlUnwind
IsValidCodePage
FindNextFileA
GetProcAddress
GetModuleHandleW
GetCurrentProcess
MultiByteToWideChar
GetCurrentDirectoryW
CopyFileW
SetCurrentDirectoryW
WaitForSingleObject
CloseHandle
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OpenProcess
TerminateProcess
CreateDirectoryW
GetLastError
LocalFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
SetLastError
CreateFileW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameA
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
GetACP
HeapFree
HeapAlloc
GetFileType
CompareStringW
LCMapStringW
FindClose
FindFirstFileExA

Sections

.text
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/x64/RTIoLib64.dll
.dll windows:4 windows x64 arch:x64

625a9a2139046104e37e4654c9a0a63d

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:df:4d:56:73:3a:e3:8d:59:8e:a0:04:dd:2d:9c:51
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09/01/2020, 00:00

Not After

15/09/2020, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:94:73:e0:01:50:bc:5e:b4:7f:29:a1:0d:cc:dd:bd
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

26/12/2018, 00:00

Not After

15/09/2020, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

97:a7:6c:15:98:8d:69:07:17:d4:b2:1e:78:7a:85:12:ca:d9:55:a1:2b:d8:03:e4:61:ce:5e:18:c8:a1:4c:6a
Signer

Actual PE Digest

97:a7:6c:15:98:8d:69:07:17:d4:b2:1e:78:7a:85:12:ca:d9:55:a1:2b:d8:03:e4:61:ce:5e:18:c8:a1:4c:6a

Digest Algorithm

sha256

PE Digest Matches

true

86:f8:4c:8b:35:c4:41:84:68:6b:cb:d6:1c:c1:cf:fb:1c:4b:3a:eb
Signer

Actual PE Digest

86:f8:4c:8b:35:c4:41:84:68:6b:cb:d6:1c:c1:cf:fb:1c:4b:3a:eb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\documents and settings\administrator\桌面\src\x64\release\RTIoLib64.pdb

Imports

kernel32

GetCurrentProcessId
CreateFileW
OpenProcess
DeviceIoControl
DuplicateHandle
GetModuleFileNameW
FreeLibrary
LoadLibraryExW
Sleep
GetLastError
GetVersionExW
GetCurrentProcess
GetProcAddress
CloseHandle
GetModuleHandleW
GetCurrentThreadId
FlsSetValue
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlPcToFileHeader
GetModuleHandleA
ExitProcess
FlsGetValue
TlsFree
FlsFree
SetLastError
TlsSetValue
FlsAlloc
HeapSetInformation
HeapCreate
HeapDestroy
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
HeapSize
WriteFile
LoadLibraryA
InitializeCriticalSection
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA

advapi32

StartServiceW
DeleteService
OpenServiceW
CloseServiceHandle
CreateServiceW
OpenSCManagerW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
ControlService

Exports

Exports

GetIoBase
LoadPhyMemDriver
MapPhyMem
ReadPortByte
ReadPortLong
ReadPortWord
RtIoInformFWS3S4S5
RtIoReadAsfUchar
RtIoReadAsfUlong
RtIoReadAsfUshort
RtIoReadCPUUchar
RtIoReadCPUUlong
RtIoReadCPUUshort
RtIoReadCSIUchar
RtIoReadCSIUlong
RtIoReadCSIUshort
RtIoReadChannel
RtIoReadEEPROMUshort
RtIoReadEfuseByte
RtIoReadExtGMACUchar
RtIoReadExtGMACUlong
RtIoReadExtGMACUshort
RtIoReadMacByte
RtIoReadMacDword
RtIoReadMacWord
RtIoReadMcuAccessRegWord
RtIoReadOCPUchar
RtIoReadOCPUlong
RtIoReadOCPUshort
RtIoReadPCIUchar
RtIoReadPCIUlong
RtIoReadPCIUshort
RtIoReadPciEPhyUshort
RtIoReadPhyOcpRegWord
RtIoReadPhyUshort
RtIoReadUSBUchar
RtIoReadUSBUlong
RtIoReadUSBUshort
RtIoReadVPD
RtIoWriteAsfUchar
RtIoWriteAsfUlong
RtIoWriteAsfUshort
RtIoWriteCPUUchar
RtIoWriteCPUUlong
RtIoWriteCPUUshort
RtIoWriteCSIUchar
RtIoWriteCSIUlong
RtIoWriteCSIUshort
RtIoWriteChannel
RtIoWriteEEPROMUshort
RtIoWriteEfuseByte
RtIoWriteExtGMACUchar
RtIoWriteExtGMACUlong
RtIoWriteExtGMACUshort
RtIoWriteMacByte
RtIoWriteMacDword
RtIoWriteMacWord
RtIoWriteMcuAccessRegWord
RtIoWriteOCPUchar
RtIoWriteOCPUlong
RtIoWriteOCPUshort
RtIoWritePCIUchar
RtIoWritePCIUlong
RtIoWritePCIUshort
RtIoWritePciEPhyUshort
RtIoWritePhyOcpRegWord
RtIoWritePhyUshort
RtIoWriteUSBUchar
RtIoWriteUSBUlong
RtIoWriteUSBUshort
RtIoWriteVPD
SendSMI
UnloadPhyMemDriver
UnmapPhyMem
WritePortByte
WritePortLong
WritePortWord

Sections

.text
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Shared
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/x64/RtDashCtrl.dll
.dll windows:6 windows x64 arch:x64

57202e512752a50fb6a133eafea3c8af

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:fc:fa:c0:8e:21:6a:1c:1f:da:a6:b7:7b:b2:d6:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

06/01/2020, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:59:58:f8:a9:0b:14:fa:25:43:6b:89:fb:30:76:60
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

03/01/2019, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

53:00:d6:f0:bd:ac:e2:8b:8a:01:c9:d7:99:02:2c:76:9c:8d:68:6b:49:e2:90:d9:99:02:45:36:35:86:6b:78
Signer

Actual PE Digest

53:00:d6:f0:bd:ac:e2:8b:8a:01:c9:d7:99:02:2c:76:9c:8d:68:6b:49:e2:90:d9:99:02:45:36:35:86:6b:78

Digest Algorithm

sha256

PE Digest Matches

true

ae:08:ef:8a:93:31:0a:d0:58:1e:1e:23:c3:03:58:25:95:a6:6b:28
Signer

Actual PE Digest

ae:08:ef:8a:93:31:0a:d0:58:1e:1e:23:c3:03:58:25:95:a6:6b:28

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\WorkingSpace\GitServer2\RtDashClientV2\RtDashCtrl\x64\Release\RtDashCtrl.pdb

Imports

kernel32

CreateProcessA
GetExitCodeProcess
GetStdHandle
GetACP
GetModuleFileNameA
ExitProcess
GetFileType
SetStdHandle
QueryPerformanceFrequency
VirtualQuery
VirtualAlloc
IsValidLocale
HeapQueryInformation
GetCommandLineW
GetCommandLineA
FreeLibraryAndExitThread
ExitThread
CreateThread
InterlockedFlushSList
RtlUnwindEx
RtlPcToFileHeader
GetCPInfo
GetStringTypeW
LCMapStringW
EnumSystemLocalesW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
FindFirstFileExA
FindNextFileA
GetOEMCP
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
WaitForSingleObjectEx
ResetEvent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetUserDefaultLCID
SearchPathW
GetProfileIntW
GetTickCount
GetTempPathW
GetTempFileNameW
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
FindResourceExW
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
VirtualProtect
lstrcmpiW
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
FileTimeToSystemTime
GlobalGetAtomNameW
SetErrorMode
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GlobalFindAtomW
LoadLibraryW
GetModuleHandleExW
FreeResource
GetSystemDirectoryW
EncodePointer
OutputDebugStringA
GlobalAddAtomW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetProcAddress
GetModuleHandleW
SetThreadPriority
lstrcmpW
lstrcmpA
GlobalDeleteAtom
LoadLibraryExW
FreeLibrary
GetVersionExW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
SetLastError
CopyFileW
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
GetProcessHeap
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
HeapFree
ResumeThread
GetCurrentProcess
GetModuleFileNameW
WTSGetActiveConsoleSessionId
CreateSemaphoreW
MultiByteToWideChar
DeleteFileW
WideCharToMultiByte
ConnectNamedPipe
CreateNamedPipeW
ReleaseSemaphore
CancelSynchronousIo
SetEvent
LeaveCriticalSection
EnterCriticalSection
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
TerminateProcess
OpenProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
WriteFile
ReadFile
CreateEventW
lstrlenW
lstrcpyW
CloseHandle
DeviceIoControl
Sleep
CreateFileW
WaitForSingleObject
OutputDebugStringW
GetLastError
CreateProcessW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetSystemInfo

user32

RealChildWindowFromPoint
GetDesktopWindow
ClientToScreen
DeleteMenu
SystemParametersInfoW
CopyImage
LoadCursorW
GetSysColorBrush
ReleaseDC
GetDC
GetSystemMetrics
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
UnhookWindowsHookEx
GetWindow
GetTopWindow
GetClassNameW
GetClassLongPtrW
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
PtInRect
EqualRect
SetTimer
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
GetClientRect
GetWindowTextLengthW
SetCapture
ReleaseCapture
WindowFromPoint
DrawFocusRect
IsRectEmpty
RegisterPowerSettingNotification
EnableWindow
SendMessageW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
GetNextDlgTabItem
EndPaint
BeginPaint
DrawIconEx
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
GetDlgItem
IsIconic
KillTimer
InvalidateRect
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
FillRect
DestroyIcon
CharUpperW
GetKeyNameTextW
MapVirtualKeyW
LoadMenuW
DestroyMenu
GetMenuItemInfoW
InflateRect
SendDlgItemMessageA
SetRectEmpty
OffsetRect
CreateDialogIndirectParamW
CopyRect
EndDialog
MsgWaitForMultipleObjects
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
ChangeDisplaySettingsW
SetDisplayConfig
EnumDisplaySettingsW
GetDisplayConfigBufferSizes
QueryDisplayConfig
UnregisterClassW
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
IsWindowEnabled
MessageBoxW
GetWindowLongW
GetParent
GetWindowThreadProcessId
GetLastActivePopup
PostMessageW
PostQuitMessage
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
IsWindowVisible
GetActiveWindow
GetKeyState
ValidateRect
GetCursorPos
SetWindowsHookExW
CallNextHookEx
ShowOwnedPopups
SetCursor
DrawMenuBar
RegisterWindowMessageW
GetMessagePos
GetMessageTime
DefWindowProcW
GetIconInfo
MessageBeep
EnableScrollBar
HideCaret
GetAsyncKeyState
MapDialogRect
IntersectRect
TrackMouseEvent
LoadImageW
RedrawWindow
GetNextDlgGroupItem
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
IsWindow
IsMenu
IsChild
DestroyWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
InvertRect
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
SetLayeredWindowAttributes
EnumDisplayMonitors
SetClassLongPtrW
SetWindowRgn
SetParent
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
IsZoomed
GetSystemMenu
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
UnionRect
UpdateLayeredWindow
MonitorFromPoint
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetRect
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
DestroyCursor
GetWindowRgn
CreateMenu
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
SetForegroundWindow

gdi32

RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
PatBlt
CreateFontIndirectW
GetTextExtentPoint32W
CombineRgn
SetRectRgn
DPtoLP
GetTextMetricsW
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
RectVisible
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
DeleteObject
GetObjectW
SetTextColor
SetBkColor
CreateBitmap
GetDeviceCaps
CreateDCW
GetPaletteEntries
CopyMetaFileW

msimg32

TransparentBlt
AlphaBlend

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegCreateKeyExW
RegQueryValueExW
RegCloseKey
SetServiceStatus
RegisterServiceCtrlHandlerExW
InitializeSecurityDescriptor
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
CreateProcessAsUserW
SetTokenInformation
DuplicateTokenEx
OpenProcessToken
SetSecurityDescriptorDacl

shell32

SHGetFileInfoW
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHAppBarMessage
SHBrowseForFolderW
DragFinish
DragQueryFileW
SHGetDesktopFolder

shlwapi

PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
PathFindExtensionW
StrFormatKBSizeW

uxtheme

GetThemePartSize
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetWindowTheme
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed

ole32

OleLockRunning
CoLockObjectExternal
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
RevokeDragDrop
RegisterDragDrop
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoDisconnectObject
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoInitializeSecurity
CoInitializeEx
CoSetProxyBlanket
StringFromCLSID
CoCreateInstance
CLSIDFromProgID
CoUninitialize
CoInitialize

oleaut32

LoadTypeLi
VarBstrFromDate
VariantCopy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringLen
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayGetLBound
VariantChangeType
VariantClear
VariantInit
SysFreeString
SysStringLen
SysAllocString

powrprof

PowerUnregisterSuspendResumeNotification
PowerRegisterSuspendResumeNotification
GetPwrCapabilities
SetSuspendState

rtiolib64

RtIoWritePCIUchar
RtIoInformFWS3S4S5
RtIoWriteMacDword
RtIoReadMacDword
RtIoReadChannel
RtIoWriteChannel
UnloadPhyMemDriver
LoadPhyMemDriver
ReadPortByte
RtIoReadPCIUchar
RtIoReadPCIUshort
RtIoReadPCIUlong
ReadPortLong

cfgmgr32

CM_Get_DevNode_Status
CM_Locate_DevNode_ExW
CM_Reenumerate_DevNode_Ex
CM_Get_DevNode_Status_Ex

iphlpapi

ConvertLengthToIpv4Mask
GetAdaptersAddresses
GetIfTable2
NotifyUnicastIpAddressChange
CancelMibChangeNotify2

setupapi

SetupDiClassGuidsFromNameW
SetupDiEnumDeviceInfo
SetupDiOpenDevRegKey
SetupDiGetClassDevsW

userenv

DestroyEnvironmentBlock
CreateEnvironmentBlock

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

ws2_32

WSAGetLastError
shutdown
closesocket
listen
bind
socket
htons
send
gethostname
WSAStartup

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

gdiplus

GdipFree
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImagePalette
GdipAlloc
GdiplusShutdown
GdiplusStartup

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Exports

Exports

?GetDashFWVersion@@YAIAEAPEA_W@Z
ChangeDashAdapter
CreatePtDrvInstance
GetAdapterConnectionName
GetDashAdapterConnectionName
GetDashFWVersion
GetDashPinCode
GetDashStatus
GetNetAdapterCount
InitRuntimeEnvironment
IsDashWorked
IsKernalCtrlLinked
UnInitRuntimeEnvironment

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 684KB - Virtual size: 683KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/x64/RtDashService.exe
.exe windows:4 windows x64 arch:x64

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:fc:fa:c0:8e:21:6a:1c:1f:da:a6:b7:7b:b2:d6:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

06/01/2020, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:59:58:f8:a9:0b:14:fa:25:43:6b:89:fb:30:76:60
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

03/01/2019, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

48:86:fd:5d:7b:16:71:9e:65:67:bf:f7:70:f4:05:8e:f4:82:76:28:06:bb:58:c3:5f:ff:52:ad:ba:c1:0c:be
Signer

Actual PE Digest

48:86:fd:5d:7b:16:71:9e:65:67:bf:f7:70:f4:05:8e:f4:82:76:28:06:bb:58:c3:5f:ff:52:ad:ba:c1:0c:be

Digest Algorithm

sha256

PE Digest Matches

true

0b:72:87:7b:68:ae:89:40:70:a5:4d:50:53:4c:02:ce:de:f1:43:8b
Signer

Actual PE Digest

0b:72:87:7b:68:ae:89:40:70:a5:4d:50:53:4c:02:ce:de:f1:43:8b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\WorkingSpace\GitServer2\RtDashClientV2\RtDashService\RtDashService\obj\x64\Release\RtDashService.pdb

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/x64/RtDashWCFctrl.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:fc:fa:c0:8e:21:6a:1c:1f:da:a6:b7:7b:b2:d6:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

06/01/2020, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:59:58:f8:a9:0b:14:fa:25:43:6b:89:fb:30:76:60
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

03/01/2019, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

53:95:ec:69:c4:ad:a8:bc:36:b3:e7:e4:d3:ed:0a:39:b5:38:fd:cc:24:2a:6d:08:cd:fe:19:4f:f5:18:67:2d
Signer

Actual PE Digest

53:95:ec:69:c4:ad:a8:bc:36:b3:e7:e4:d3:ed:0a:39:b5:38:fd:cc:24:2a:6d:08:cd:fe:19:4f:f5:18:67:2d

Digest Algorithm

sha256

PE Digest Matches

true

37:a9:20:f9:e0:be:6b:f3:35:f7:67:76:9c:d3:62:6a:a2:11:d1:07
Signer

Actual PE Digest

37:a9:20:f9:e0:be:6b:f3:35:f7:67:76:9c:d3:62:6a:a2:11:d1:07

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\WorkingSpace\GitServer2\RtDashClientV2\RtDashService\RtDashWCFctrl\obj\Debug\RtDashWCFctrl.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/x64/devcon64.exe
.exe windows:6 windows x64 arch:x64

e51c98ef74588417cce26448a7352a75

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/06/2016, 00:00

Not After

24/01/2019, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21/01/2016, 00:00

Not After

24/01/2019, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9d:1c:4f:6f:d6:ed:32:20:4d:19:70:c2:ab:10:55:80:a9:7e:c7:c3:2c:b3:88:b5:38:88:af:61:9d:55:11:20
Signer

Actual PE Digest

9d:1c:4f:6f:d6:ed:32:20:4d:19:70:c2:ab:10:55:80:a9:7e:c7:c3:2c:b3:88:b5:38:88:af:61:9d:55:11:20

Digest Algorithm

sha256

PE Digest Matches

true

37:c4:cf:ba:0a:e4:e9:8b:89:ae:a1:71:6f:ec:93:28:58:e5:8b:40
Signer

Actual PE Digest

37:c4:cf:ba:0a:e4:e9:8b:89:ae:a1:71:6f:ec:93:28:58:e5:8b:40

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

devcon.pdb

Imports

advapi32

OpenProcessToken
RegQueryValueExW
LookupPrivilegeValueW
AdjustTokenPrivileges
InitiateSystemShutdownExW
RegCloseKey
CloseServiceHandle
OpenSCManagerW
OpenServiceW
RegDeleteValueW
RegSetValueExW

kernel32

GetCurrentProcess
FormatMessageW
lstrlenW
GetLastError
CloseHandle
LocalFree
GetDateFormatW
FreeLibrary
LoadLibraryW
FileTimeToSystemTime
GetProcAddress
GetFullPathNameW
FindFirstFileW
GetFileAttributesW
FindClose
FindNextFileW
GetWindowsDirectoryW
Sleep
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
TerminateProcess

msvcrt

wcschr
_wcsicmp
towlower
_wcsnicmp
fputs
__iob_func
wcsrchr
fputws
?terminate@@YAXXZ
memset
_commode
_fmode
__C_specific_handler
_initterm
__setusermatherr
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
_XcptFilter
wprintf
??2@YAPEAX_K@Z
towupper
??3@YAXPEAX@Z
iswalpha

ntdll

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

ole32

CLSIDFromString

setupapi

SetupScanFileQueueW
SetupDiGetClassDevsExW
SetupDiGetDeviceRegistryPropertyW
SetupDiSetClassInstallParamsW
SetupDiClassNameFromGuidExW
CM_Reenumerate_DevNode_Ex
SetupCopyOEMInfW
SetupDiSetDeviceRegistryPropertyW
SetupDiGetINFClassW
CM_Disconnect_Machine
SetupDiBuildClassInfoListExW
SetupDiCreateDeviceInfoW
SetupDiCreateDeviceInfoList
CM_Connect_MachineW
CM_Locate_DevNode_ExW
CM_Get_DevNode_Status_Ex
SetupDiBuildDriverInfoList
SetupDiGetDeviceInstallParamsW
SetupDiOpenDevRegKey
SetupDiSetSelectedDriverW
SetupGetStringFieldW
CM_Get_Res_Des_Data_Size_Ex
SetupDiEnumDriverInfoW
CM_Free_Log_Conf_Handle
CM_Get_Device_ID_ExW
CM_Get_Next_Res_Des_Ex
SetupCloseFileQueue
SetupDiGetDriverInstallParamsW
CM_Get_Res_Des_Data_Ex
SetupDiOpenClassRegKeyExW
SetupCloseInfFile
SetupOpenFileQueue
SetupDiCallClassInstaller
SetupDiDestroyDriverInfoList
SetupOpenInfFileW
CM_Free_Res_Des_Handle
CM_Get_First_Log_Conf_Ex
SetupDiSetDeviceInstallParamsW
SetupFindFirstLineW
SetupDiGetDriverInfoDetailW
SetupDiGetClassDescriptionExW
SetupDiClassGuidsFromNameExW
SetupDiOpenDeviceInfoW
SetupDiGetDeviceInfoListDetailW
SetupDiCreateDeviceInfoListExW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList

user32

CharNextW
CharPrevW
LoadStringW

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/x64/rtkio64.sys
.sys windows:6 windows x64 arch:x64

4343c9c0b78ee21e895f10d929c240d4

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:df:4d:56:73:3a:e3:8d:59:8e:a0:04:dd:2d:9c:51
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09/01/2020, 00:00

Not After

15/09/2020, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:94:73:e0:01:50:bc:5e:b4:7f:29:a1:0d:cc:dd:bd
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

26/12/2018, 00:00

Not After

15/09/2020, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:2b:75:4d:d3:02:a9:94:07:4e:a8:d3:e6:19:d2:f9:00:0e:6c:69:97:e4:28:f1:9f:41:53:3f:7c:5e:19:2c
Signer

Actual PE Digest

90:2b:75:4d:d3:02:a9:94:07:4e:a8:d3:e6:19:d2:f9:00:0e:6c:69:97:e4:28:f1:9f:41:53:3f:7c:5e:19:2c

Digest Algorithm

sha256

PE Digest Matches

true

e6:6b:3b:65:07:61:b1:27:2b:22:d4:6a:b4:16:49:b8:a5:c2:66:03
Signer

Actual PE Digest

e6:6b:3b:65:07:61:b1:27:2b:22:d4:6a:b4:16:49:b8:a5:c2:66:03

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

d:\svn\rtiolib\rtkio\src\x64\objfre_wnet_amd64\amd64\rtkio64.pdb

Imports

ntoskrnl.exe

MmMapIoSpace
MmUnmapLockedPages
ExUnregisterCallback
ExAllocatePoolWithTag
IoWMIRegistrationControl
KeQueryActiveProcessors
IoDeleteSymbolicLink
ExFreePoolWithTag
IoWMIWriteEvent
IoRegisterShutdownNotification
RtlInitUnicodeString
IoDeleteDevice
MmGetSystemRoutineAddress
MmBuildMdlForNonPagedPool
IoFreeMdl
MmUnmapIoSpace
ZwQueryValueKey
IoUnregisterShutdownNotification
ZwClose
IofCompleteRequest
ExRegisterCallback
RtlCompareMemory
IoCreateSymbolicLink
KeSetSystemAffinityThread
ObfDereferenceObject
ExCreateCallback
IoAllocateMdl
ZwOpenKey
KeBugCheckEx
MmMapLockedPagesSpecifyCache
_vsnprintf
IoCreateDevice
ObOpenObjectByPointer
ZwSetSecurityObject
IoDeviceObjectType
_snwprintf
RtlLengthSecurityDescriptor
SeCaptureSecurityDescriptor
RtlCreateSecurityDescriptor
RtlSetDaclSecurityDescriptor
RtlAbsoluteToSelfRelativeSD
IoIsWdmVersionAvailable
SeExports
wcschr
_wcsnicmp
RtlLengthSid
RtlAddAccessAllowedAce
RtlGetSaclSecurityDescriptor
RtlGetDaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetOwnerSecurityDescriptor
ZwCreateKey
ZwSetValueKey
RtlFreeUnicodeString
__C_specific_handler

hal

KeStallExecutionProcessor

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/x64/rtkiow10x64.sys
.sys windows:10 windows x64 arch:x64

317f02ddc9809d608a9bf63ce24e9550

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\SVN\RTIoLib\rtkio\SRC\sysw10x64\Release\x64\rtkiow10x64.pdb

Imports

ntoskrnl.exe

KfRaiseIrql
MmUnmapIoSpace
MmMapIoSpaceEx
RtlInitUnicodeString
MmGetSystemRoutineAddress
KeSetSystemAffinityThreadEx
KeQueryActiveProcessors
ExAllocatePoolWithTag
ExFreePoolWithTag
ExCreateCallback
ExRegisterCallback
ExUnregisterCallback
MmBuildMdlForNonPagedPool
MmMapLockedPagesSpecifyCache
KeLowerIrql
IoAllocateMdl
IofCompleteRequest
IoCreateSymbolicLink
IoDeleteDevice
IoDeleteSymbolicLink
IoFreeMdl
IoRegisterShutdownNotification
IoUnregisterShutdownNotification
IoWMIRegistrationControl
ObfDereferenceObject
ZwClose
ZwOpenKey
ZwQueryValueKey
__C_specific_handler
ZwCreateKey
MmUnmapLockedPages
_vsnprintf
ZwSetSecurityObject
IoDeviceObjectType
IoCreateDevice
ObOpenObjectByPointer
RtlGetDaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetOwnerSecurityDescriptor
RtlGetSaclSecurityDescriptor
SeCaptureSecurityDescriptor
_snwprintf
RtlLengthSecurityDescriptor
SeExports
RtlCreateSecurityDescriptor
_wcsnicmp
wcschr
RtlAbsoluteToSelfRelativeSD
RtlAddAccessAllowedAce
RtlLengthSid
IoIsWdmVersionAvailable
RtlSetDaclSecurityDescriptor
ZwSetValueKey
RtlFreeUnicodeString

hal

KeStallExecutionProcessor

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/x64/rtkiow8x64.sys
.sys windows:10 windows x64 arch:x64

cb6cd53c7b292ea3b6a0c8c94176bbce

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:df:4d:56:73:3a:e3:8d:59:8e:a0:04:dd:2d:9c:51
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09/01/2020, 00:00

Not After

15/09/2020, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:94:73:e0:01:50:bc:5e:b4:7f:29:a1:0d:cc:dd:bd
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

26/12/2018, 00:00

Not After

15/09/2020, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

51:6f:0b:bb:c1:b4:7e:c2:d8:3c:c5:1b:e1:04:92:08:99:19:3e:27:84:a4:5b:83:5f:e6:8f:86:4a:f1:73:3b
Signer

Actual PE Digest

51:6f:0b:bb:c1:b4:7e:c2:d8:3c:c5:1b:e1:04:92:08:99:19:3e:27:84:a4:5b:83:5f:e6:8f:86:4a:f1:73:3b

Digest Algorithm

sha256

PE Digest Matches

true

99:af:a3:bb:2f:c8:9d:e8:58:bc:70:54:95:ec:51:f0:57:1b:c7:67
Signer

Actual PE Digest

99:af:a3:bb:2f:c8:9d:e8:58:bc:70:54:95:ec:51:f0:57:1b:c7:67

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\SVN\RTIoLib\rtkio\SRC\sysw8x64\Release\x64\rtkiow8x64.pdb

Imports

ntoskrnl.exe

KfRaiseIrql
MmMapIoSpace
MmUnmapIoSpace
RtlInitUnicodeString
MmGetSystemRoutineAddress
KeSetSystemAffinityThreadEx
KeQueryActiveProcessors
ExAllocatePoolWithTag
ExFreePoolWithTag
ExCreateCallback
ExRegisterCallback
ExUnregisterCallback
MmBuildMdlForNonPagedPool
MmMapLockedPagesSpecifyCache
KeLowerIrql
IoAllocateMdl
IofCompleteRequest
IoCreateSymbolicLink
IoDeleteDevice
IoDeleteSymbolicLink
IoFreeMdl
IoRegisterShutdownNotification
IoUnregisterShutdownNotification
IoWMIRegistrationControl
ObfDereferenceObject
ZwClose
ZwOpenKey
ZwQueryValueKey
__C_specific_handler
ZwCreateKey
MmUnmapLockedPages
_vsnprintf
ZwSetSecurityObject
IoDeviceObjectType
IoCreateDevice
ObOpenObjectByPointer
RtlGetDaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetOwnerSecurityDescriptor
RtlGetSaclSecurityDescriptor
SeCaptureSecurityDescriptor
_snwprintf
RtlLengthSecurityDescriptor
SeExports
RtlCreateSecurityDescriptor
_wcsnicmp
wcschr
RtlAbsoluteToSelfRelativeSD
RtlAddAccessAllowedAce
RtlLengthSid
IoIsWdmVersionAvailable
RtlSetDaclSecurityDescriptor
ZwSetValueKey
RtlFreeUnicodeString

hal

KeStallExecutionProcessor

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/x86/RTIoLib32.dll
.dll windows:4 windows x86 arch:x86

cbfd74732ec2a8190d1e1e7b56a943da

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:df:4d:56:73:3a:e3:8d:59:8e:a0:04:dd:2d:9c:51
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09/01/2020, 00:00

Not After

15/09/2020, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:94:73:e0:01:50:bc:5e:b4:7f:29:a1:0d:cc:dd:bd
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

26/12/2018, 00:00

Not After

15/09/2020, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c7:95:70:64:9e:3d:86:cb:c5:99:d2:cc:00:82:ec:e7:d0:1c:a6:70:47:08:43:ff:42:fd:d4:1a:8b:c8:d7:34
Signer

Actual PE Digest

c7:95:70:64:9e:3d:86:cb:c5:99:d2:cc:00:82:ec:e7:d0:1c:a6:70:47:08:43:ff:42:fd:d4:1a:8b:c8:d7:34

Digest Algorithm

sha256

PE Digest Matches

true

78:49:02:3a:3f:2a:23:98:9e:5f:17:51:db:e0:94:41:b4:f3:ce:1b
Signer

Actual PE Digest

78:49:02:3a:3f:2a:23:98:9e:5f:17:51:db:e0:94:41:b4:f3:ce:1b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Documents and Settings\Administrator\桌面\SRC\release\RTIoLib32.pdb

Imports

kernel32

GetCurrentProcessId
CreateFileW
OpenProcess
DeviceIoControl
DuplicateHandle
GetModuleFileNameW
FreeLibrary
LoadLibraryExW
Sleep
GetLastError
GetVersionExW
GetCurrentProcess
GetProcAddress
CloseHandle
GetModuleHandleW
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
RaiseException
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
RtlUnwind
HeapSize
VirtualAlloc
HeapReAlloc
WriteFile
LoadLibraryA
InitializeCriticalSection
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA

advapi32

StartServiceW
DeleteService
OpenServiceW
CloseServiceHandle
CreateServiceW
OpenSCManagerW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
ControlService

Exports

Exports

GetIoBase
LoadPhyMemDriver
MapPhyMem
ReadPortByte
ReadPortLong
ReadPortWord
RtIoInformFWS3S4S5
RtIoReadAsfUchar
RtIoReadAsfUlong
RtIoReadAsfUshort
RtIoReadCPUUchar
RtIoReadCPUUlong
RtIoReadCPUUshort
RtIoReadCSIUchar
RtIoReadCSIUlong
RtIoReadCSIUshort
RtIoReadChannel
RtIoReadEEPROMUshort
RtIoReadEfuseByte
RtIoReadExtGMACUchar
RtIoReadExtGMACUlong
RtIoReadExtGMACUshort
RtIoReadMacByte
RtIoReadMacDword
RtIoReadMacWord
RtIoReadMcuAccessRegWord
RtIoReadOCPUchar
RtIoReadOCPUlong
RtIoReadOCPUshort
RtIoReadPCIUchar
RtIoReadPCIUlong
RtIoReadPCIUshort
RtIoReadPciEPhyUshort
RtIoReadPhyOcpRegWord
RtIoReadPhyUshort
RtIoReadUSBUchar
RtIoReadUSBUlong
RtIoReadUSBUshort
RtIoReadVPD
RtIoWriteAsfUchar
RtIoWriteAsfUlong
RtIoWriteAsfUshort
RtIoWriteCPUUchar
RtIoWriteCPUUlong
RtIoWriteCPUUshort
RtIoWriteCSIUchar
RtIoWriteCSIUlong
RtIoWriteCSIUshort
RtIoWriteChannel
RtIoWriteEEPROMUshort
RtIoWriteEfuseByte
RtIoWriteExtGMACUchar
RtIoWriteExtGMACUlong
RtIoWriteExtGMACUshort
RtIoWriteMacByte
RtIoWriteMacDword
RtIoWriteMacWord
RtIoWriteMcuAccessRegWord
RtIoWriteOCPUchar
RtIoWriteOCPUlong
RtIoWriteOCPUshort
RtIoWritePCIUchar
RtIoWritePCIUlong
RtIoWritePCIUshort
RtIoWritePciEPhyUshort
RtIoWritePhyOcpRegWord
RtIoWritePhyUshort
RtIoWriteUSBUchar
RtIoWriteUSBUlong
RtIoWriteUSBUshort
RtIoWriteVPD
SendSMI
UnloadPhyMemDriver
UnmapPhyMem
WritePortByte
WritePortLong
WritePortWord

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/x86/RtDashCtrl.dll
.dll windows:6 windows x86 arch:x86

f33d50c72e38ce9dea3869d121fa2c52

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:fc:fa:c0:8e:21:6a:1c:1f:da:a6:b7:7b:b2:d6:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

06/01/2020, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:59:58:f8:a9:0b:14:fa:25:43:6b:89:fb:30:76:60
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

03/01/2019, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a1:fd:78:1f:21:e9:95:d3:4b:84:16:3d:4c:3b:d4:66:f1:b1:ed:3d:3f:24:83:dc:13:af:a8:85:04:f4:a2:d3
Signer

Actual PE Digest

a1:fd:78:1f:21:e9:95:d3:4b:84:16:3d:4c:3b:d4:66:f1:b1:ed:3d:3f:24:83:dc:13:af:a8:85:04:f4:a2:d3

Digest Algorithm

sha256

PE Digest Matches

true

aa:53:3b:3e:36:4c:67:55:0e:3c:b6:e7:a0:00:f8:be:d9:25:6b:41
Signer

Actual PE Digest

aa:53:3b:3e:36:4c:67:55:0e:3c:b6:e7:a0:00:f8:be:d9:25:6b:41

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\WorkingSpace\GitServer2\RtDashClientV2\RtDashCtrl\Release\RtDashCtrl.pdb

Imports

kernel32

ExitProcess
GetFileType
SetStdHandle
QueryPerformanceFrequency
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapQueryInformation
GetCommandLineW
GetModuleFileNameA
ReadConsoleW
FreeLibraryAndExitThread
ExitThread
CreateThread
InterlockedFlushSList
RtlUnwind
GetCPInfo
GetStringTypeW
LCMapStringW
GetACP
GetStdHandle
GetExitCodeProcess
CreateProcessA
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
GetConsoleCP
GetCommandLineA
GetConsoleMode
SetFilePointerEx
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
WaitForSingleObjectEx
ResetEvent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetUserDefaultLCID
SearchPathW
GetProfileIntW
GetTickCount
GetTempPathW
GetTempFileNameW
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
FindResourceExW
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
VirtualProtect
lstrcmpiW
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
FileTimeToSystemTime
GlobalGetAtomNameW
SetErrorMode
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GlobalFindAtomW
LoadLibraryW
LoadLibraryA
GetModuleHandleA
FreeResource
GetSystemDirectoryW
EncodePointer
OutputDebugStringA
GlobalAddAtomW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetProcAddress
GetModuleHandleW
SetThreadPriority
lstrcmpW
lstrcmpA
GlobalDeleteAtom
LoadLibraryExW
FreeLibrary
GetVersionExW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
SetLastError
CopyFileW
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
GetProcessHeap
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
HeapFree
GetModuleFileNameW
ResumeThread
GetCurrentProcess
WTSGetActiveConsoleSessionId
CreateSemaphoreW
MultiByteToWideChar
DeleteFileW
WideCharToMultiByte
ConnectNamedPipe
CreateNamedPipeW
ReleaseSemaphore
CancelSynchronousIo
SetEvent
LeaveCriticalSection
EnterCriticalSection
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
TerminateProcess
OpenProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
WriteFile
ReadFile
CreateEventW
lstrlenW
lstrcpyW
CloseHandle
DeviceIoControl
Sleep
CreateFileW
WaitForSingleObject
OutputDebugStringW
GetLastError
CreateProcessW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetModuleHandleExW

user32

RealChildWindowFromPoint
GetDesktopWindow
ClientToScreen
DeleteMenu
SystemParametersInfoW
CopyImage
LoadCursorW
GetSysColorBrush
ReleaseDC
GetDC
GetSystemMetrics
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
UnhookWindowsHookEx
GetWindow
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
PtInRect
EqualRect
CopyRect
SetTimer
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
GetClientRect
GetWindowTextLengthW
SetCapture
ReleaseCapture
WindowFromPoint
DrawFocusRect
IsRectEmpty
RegisterPowerSettingNotification
EnableWindow
SendMessageW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
GetNextDlgTabItem
BeginPaint
SetForegroundWindow
DrawIconEx
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
GetDlgItem
IsIconic
KillTimer
InvalidateRect
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
FillRect
DestroyIcon
CharUpperW
GetKeyNameTextW
MapVirtualKeyW
LoadMenuW
DestroyMenu
GetMenuItemInfoW
InflateRect
SendDlgItemMessageA
SetRectEmpty
OffsetRect
CreateDialogIndirectParamW
GetSysColor
EndDialog
MsgWaitForMultipleObjects
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
ChangeDisplaySettingsW
SetDisplayConfig
EnumDisplaySettingsW
GetDisplayConfigBufferSizes
QueryDisplayConfig
UnregisterClassW
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
IsWindowEnabled
MessageBoxW
GetWindowLongW
GetParent
GetWindowThreadProcessId
GetLastActivePopup
PostMessageW
PostQuitMessage
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
IsWindowVisible
GetActiveWindow
GetKeyState
ValidateRect
GetCursorPos
SetWindowsHookExW
CallNextHookEx
ShowOwnedPopups
SetCursor
RegisterWindowMessageW
DefMDIChildProcW
GetMessagePos
GetMessageTime
DefWindowProcW
GetIconInfo
MessageBeep
EnableScrollBar
HideCaret
GetAsyncKeyState
MapDialogRect
IntersectRect
TrackMouseEvent
LoadImageW
EndPaint
GetNextDlgGroupItem
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
IsWindow
IsMenu
IsChild
DestroyWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
InvertRect
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
SetLayeredWindowAttributes
EnumDisplayMonitors
SetClassLongW
SetWindowRgn
SetParent
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
IsZoomed
GetSystemMenu
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
UnionRect
UpdateLayeredWindow
MonitorFromPoint
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetRect
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcW
DestroyCursor
GetWindowRgn
CreateMenu
SubtractRect
TranslateMDISysAccel
GetForegroundWindow

gdi32

RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
PatBlt
CreateFontIndirectW
GetTextExtentPoint32W
CombineRgn
SetRectRgn
DPtoLP
GetTextMetricsW
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
RectVisible
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
DeleteObject
GetObjectW
SetTextColor
SetBkColor
CreateBitmap
GetDeviceCaps
CreateDCW
GetPaletteEntries
SetPolyFillMode
CopyMetaFileW

msimg32

TransparentBlt
AlphaBlend

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegCreateKeyExW
RegQueryValueExW
RegCloseKey
SetServiceStatus
RegisterServiceCtrlHandlerExW
InitializeSecurityDescriptor
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
CreateProcessAsUserW
SetTokenInformation
DuplicateTokenEx
OpenProcessToken
SetSecurityDescriptorDacl

shell32

SHGetFileInfoW
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHAppBarMessage
SHBrowseForFolderW
DragFinish
DragQueryFileW
SHGetDesktopFolder

shlwapi

PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
PathFindExtensionW
StrFormatKBSizeW

uxtheme

GetThemePartSize
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetWindowTheme
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed

ole32

OleLockRunning
RegisterDragDrop
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
RevokeDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoDisconnectObject
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoInitializeSecurity
CoInitializeEx
CoSetProxyBlanket
StringFromCLSID
CoCreateInstance
CLSIDFromProgID
CoUninitialize
CoInitialize

oleaut32

LoadTypeLi
VarBstrFromDate
VariantCopy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringLen
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayGetLBound
VariantChangeType
VariantClear
VariantInit
SysFreeString
SysStringLen
SysAllocString

powrprof

PowerUnregisterSuspendResumeNotification
PowerRegisterSuspendResumeNotification
GetPwrCapabilities
SetSuspendState

rtiolib32

RtIoWritePCIUchar
RtIoInformFWS3S4S5
RtIoWriteMacDword
RtIoReadMacDword
RtIoReadChannel
RtIoWriteChannel
UnloadPhyMemDriver
LoadPhyMemDriver
ReadPortByte
RtIoReadPCIUchar
RtIoReadPCIUshort
RtIoReadPCIUlong
ReadPortLong

cfgmgr32

CM_Get_DevNode_Status
CM_Locate_DevNode_ExW
CM_Reenumerate_DevNode_Ex
CM_Get_DevNode_Status_Ex

iphlpapi

ConvertLengthToIpv4Mask
GetAdaptersAddresses
GetIfTable2
NotifyUnicastIpAddressChange
CancelMibChangeNotify2

setupapi

SetupDiClassGuidsFromNameW
SetupDiEnumDeviceInfo
SetupDiOpenDevRegKey
SetupDiGetClassDevsW

userenv

DestroyEnvironmentBlock
CreateEnvironmentBlock

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

ws2_32

WSAGetLastError
shutdown
closesocket
listen
bind
socket
htons
send
gethostname
WSAStartup

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

gdiplus

GdipFree
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImagePalette
GdipAlloc
GdiplusShutdown
GdiplusStartup

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Exports

Exports

?GetDashFWVersion@@YAIAAPA_W@Z
ChangeDashAdapter
CreatePtDrvInstance
GetAdapterConnectionName
GetDashAdapterConnectionName
GetDashFWVersion
GetDashPinCode
GetDashStatus
GetNetAdapterCount
InitRuntimeEnvironment
IsDashWorked
IsKernalCtrlLinked
UnInitRuntimeEnvironment

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/x86/RtDashService.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:fc:fa:c0:8e:21:6a:1c:1f:da:a6:b7:7b:b2:d6:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

06/01/2020, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:59:58:f8:a9:0b:14:fa:25:43:6b:89:fb:30:76:60
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

03/01/2019, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

44:21:be:82:26:b2:c0:81:61:39:8b:cb:35:24:d2:de:26:74:08:6d:9d:c4:fc:26:44:10:8b:b5:e1:1d:43:c2
Signer

Actual PE Digest

44:21:be:82:26:b2:c0:81:61:39:8b:cb:35:24:d2:de:26:74:08:6d:9d:c4:fc:26:44:10:8b:b5:e1:1d:43:c2

Digest Algorithm

sha256

PE Digest Matches

true

09:1c:70:fd:f9:d4:f2:f1:62:76:13:d1:e7:2e:6d:30:92:7a:56:2c
Signer

Actual PE Digest

09:1c:70:fd:f9:d4:f2:f1:62:76:13:d1:e7:2e:6d:30:92:7a:56:2c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\WorkingSpace\GitServer2\RtDashClientV2\RtDashService\RtDashService\obj\x86\Release\RtDashService.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/x86/RtDashWCFctrl.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:fc:fa:c0:8e:21:6a:1c:1f:da:a6:b7:7b:b2:d6:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

06/01/2020, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:59:58:f8:a9:0b:14:fa:25:43:6b:89:fb:30:76:60
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

03/01/2019, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

53:95:ec:69:c4:ad:a8:bc:36:b3:e7:e4:d3:ed:0a:39:b5:38:fd:cc:24:2a:6d:08:cd:fe:19:4f:f5:18:67:2d
Signer

Actual PE Digest

53:95:ec:69:c4:ad:a8:bc:36:b3:e7:e4:d3:ed:0a:39:b5:38:fd:cc:24:2a:6d:08:cd:fe:19:4f:f5:18:67:2d

Digest Algorithm

sha256

PE Digest Matches

true

37:a9:20:f9:e0:be:6b:f3:35:f7:67:76:9c:d3:62:6a:a2:11:d1:07
Signer

Actual PE Digest

37:a9:20:f9:e0:be:6b:f3:35:f7:67:76:9c:d3:62:6a:a2:11:d1:07

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\WorkingSpace\GitServer2\RtDashClientV2\RtDashService\RtDashWCFctrl\obj\Debug\RtDashWCFctrl.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/x86/devcon.exe
.exe windows:6 windows x86 arch:x86

2b2c6b36e068e2b94a7d149c6d17ac02

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/06/2016, 00:00

Not After

24/01/2019, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21/01/2016, 00:00

Not After

24/01/2019, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4d:10:7f:4e:0e:8b:81:94:d5:3f:d0:a2:0e:85:b4:1b:1a:52:52:9e:c8:8b:95:cf:d0:5e:6d:91:41:7b:7f:a3
Signer

Actual PE Digest

4d:10:7f:4e:0e:8b:81:94:d5:3f:d0:a2:0e:85:b4:1b:1a:52:52:9e:c8:8b:95:cf:d0:5e:6d:91:41:7b:7f:a3

Digest Algorithm

sha256

PE Digest Matches

true

71:74:60:1b:93:0b:d4:87:cc:93:91:e8:36:9c:f9:94:35:f6:76:46
Signer

Actual PE Digest

71:74:60:1b:93:0b:d4:87:cc:93:91:e8:36:9c:f9:94:35:f6:76:46

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

devcon.pdb

Imports

advapi32

OpenProcessToken
RegQueryValueExW
LookupPrivilegeValueW
AdjustTokenPrivileges
InitiateSystemShutdownExW
RegCloseKey
CloseServiceHandle
OpenSCManagerW
OpenServiceW
RegDeleteValueW
RegSetValueExW

kernel32

GetCurrentProcess
FormatMessageW
lstrlenW
GetLastError
CloseHandle
LocalFree
GetDateFormatW
FreeLibrary
LoadLibraryW
FileTimeToSystemTime
GetProcAddress
GetFullPathNameW
FindFirstFileW
GetFileAttributesW
FindClose
FindNextFileW
GetWindowsDirectoryW
TerminateProcess
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
Sleep

msvcrt

wcschr
_wcsicmp
towlower
_wcsnicmp
_controlfp
?terminate@@YAXXZ
memset
_initterm
__setusermatherr
__p__fmode
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
__p__commode
_XcptFilter
wprintf
??2@YAPAXI@Z
towupper
fputws
??3@YAXPAX@Z
iswalpha
wcsrchr
__iob_func
fputs

ntdll

RtlUnwind

ole32

CLSIDFromString

setupapi

SetupDiGetClassDevsExW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiSetClassInstallParamsW
SetupDiClassNameFromGuidExW
CM_Reenumerate_DevNode_Ex
SetupCopyOEMInfW
SetupDiSetDeviceRegistryPropertyW
SetupDiGetINFClassW
CM_Disconnect_Machine
SetupDiBuildClassInfoListExW
SetupDiCreateDeviceInfoW
SetupDiCreateDeviceInfoList
CM_Connect_MachineW
CM_Locate_DevNode_ExW
CM_Get_DevNode_Status_Ex
SetupDiBuildDriverInfoList
SetupDiGetDeviceInstallParamsW
SetupDiOpenDevRegKey
SetupDiSetSelectedDriverW
SetupGetStringFieldW
CM_Get_Res_Des_Data_Size_Ex
SetupDiEnumDriverInfoW
CM_Free_Log_Conf_Handle
SetupScanFileQueueW
CM_Get_Next_Res_Des_Ex
SetupCloseFileQueue
SetupDiGetDriverInstallParamsW
CM_Get_Res_Des_Data_Ex
SetupDiOpenClassRegKeyExW
SetupCloseInfFile
SetupOpenFileQueue
SetupDiCallClassInstaller
SetupDiDestroyDriverInfoList
SetupOpenInfFileW
CM_Free_Res_Des_Handle
CM_Get_First_Log_Conf_Ex
SetupDiSetDeviceInstallParamsW
SetupFindFirstLineW
SetupDiGetDriverInfoDetailW
SetupDiGetClassDescriptionExW
SetupDiClassGuidsFromNameExW
SetupDiOpenDeviceInfoW
SetupDiGetDeviceInfoListDetailW
SetupDiCreateDeviceInfoListExW
CM_Get_Device_ID_ExW

user32

LoadStringW
CharNextW
CharPrevW

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/x86/rtkio86.sys
.sys windows:6 windows x86 arch:x86

33b9501c96af867d643890dbe6c7cde0

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:df:4d:56:73:3a:e3:8d:59:8e:a0:04:dd:2d:9c:51
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09/01/2020, 00:00

Not After

15/09/2020, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:94:73:e0:01:50:bc:5e:b4:7f:29:a1:0d:cc:dd:bd
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

26/12/2018, 00:00

Not After

15/09/2020, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ac:f3:d4:6b:97:49:1e:4a:6c:9f:5b:ab:be:5a:08:39:0b:fc:66:fd:fb:6e:ed:10:43:29:f8:2f:90:21:12:48
Signer

Actual PE Digest

ac:f3:d4:6b:97:49:1e:4a:6c:9f:5b:ab:be:5a:08:39:0b:fc:66:fd:fb:6e:ed:10:43:29:f8:2f:90:21:12:48

Digest Algorithm

sha256

PE Digest Matches

true

43:99:f5:c9:84:fa:01:ed:99:5a:b6:32:02:a9:5d:db:f0:91:58:3b
Signer

Actual PE Digest

43:99:f5:c9:84:fa:01:ed:99:5a:b6:32:02:a9:5d:db:f0:91:58:3b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\svn\rtiolib\rtkio\src\x86\objfre_wxp_x86\i386\rtkio86.pdb

Imports

ntoskrnl.exe

IoWMIRegistrationControl
IofCompleteRequest
ObfDereferenceObject
ExRegisterCallback
ExCreateCallback
ExUnregisterCallback
IoDeleteDevice
IoDeleteSymbolicLink
IoFreeMdl
MmUnmapLockedPages
IoUnregisterShutdownNotification
RtlCompareMemory
ZwQueryValueKey
ZwOpenKey
MmMapLockedPagesSpecifyCache
MmBuildMdlForNonPagedPool
IoAllocateMdl
memmove
KeSetSystemAffinityThread
KeQueryActiveProcessors
IoRegisterShutdownNotification
IoCreateSymbolicLink
KeTickCount
KeBugCheckEx
RtlInitUnicodeString
MmGetSystemRoutineAddress
ExAllocatePoolWithTag
IoWMIWriteEvent
ExFreePoolWithTag
memcpy
MmMapIoSpace
MmUnmapIoSpace
memset
ZwClose
_vsnprintf
RtlUnwind
ZwSetSecurityObject
ObOpenObjectByPointer
IoDeviceObjectType
IoCreateDevice
RtlGetDaclSecurityDescriptor
RtlGetSaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetOwnerSecurityDescriptor
_snwprintf
RtlLengthSecurityDescriptor
SeCaptureSecurityDescriptor
SeExports
IoIsWdmVersionAvailable
_wcsnicmp
RtlAddAccessAllowedAce
RtlLengthSid
wcschr
RtlAbsoluteToSelfRelativeSD
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
ZwCreateKey
ZwSetValueKey
RtlFreeUnicodeString

hal

READ_PORT_USHORT
KeGetCurrentIrql
READ_PORT_UCHAR
WRITE_PORT_UCHAR
KeRaiseIrqlToDpcLevel
WRITE_PORT_ULONG
READ_PORT_ULONG
KeStallExecutionProcessor
KfLowerIrql
WRITE_PORT_USHORT

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 640B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/x86/rtkiow10x86.sys
.sys windows:10 windows x86 arch:x86

3c5dc389a8bd7da4aec8b8418ed9ae53

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\SVN\RTIoLib\rtkio\SRC\sysw10\Release\x86\rtkiow10x86.pdb

Imports

ntoskrnl.exe

ExCreateCallback
ExRegisterCallback
ExUnregisterCallback
MmBuildMdlForNonPagedPool
MmMapLockedPagesSpecifyCache
MmUnmapLockedPages
IoAllocateMdl
IofCompleteRequest
IoCreateSymbolicLink
IoDeleteDevice
IoDeleteSymbolicLink
ExFreePoolWithTag
IoRegisterShutdownNotification
IoUnregisterShutdownNotification
IoWMIRegistrationControl
ObfDereferenceObject
ZwClose
ZwOpenKey
ZwQueryValueKey
memmove
ZwCreateKey
RtlUnwind
_vsnprintf
ExAllocatePoolWithTag
KeQueryActiveProcessors
KeSetSystemAffinityThreadEx
MmGetSystemRoutineAddress
RtlInitUnicodeString
memcpy
MmMapIoSpaceEx
MmUnmapIoSpace
memset
IoFreeMdl
ZwSetSecurityObject
IoDeviceObjectType
IoCreateDevice
ObOpenObjectByPointer
RtlGetDaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetOwnerSecurityDescriptor
RtlGetSaclSecurityDescriptor
SeCaptureSecurityDescriptor
_snwprintf
RtlLengthSecurityDescriptor
SeExports
RtlCreateSecurityDescriptor
_wcsnicmp
wcschr
RtlAbsoluteToSelfRelativeSD
RtlAddAccessAllowedAce
RtlLengthSid
IoIsWdmVersionAvailable
RtlSetDaclSecurityDescriptor
ZwSetValueKey
RtlFreeUnicodeString

hal

KfLowerIrql
KeGetCurrentIrql
WRITE_PORT_USHORT
READ_PORT_USHORT
WRITE_PORT_UCHAR
READ_PORT_UCHAR
KeStallExecutionProcessor
WRITE_PORT_ULONG
READ_PORT_ULONG
KeRaiseIrqlToDpcLevel

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/DASH_V3/x86/rtkiow8x86.sys
.sys windows:10 windows x86 arch:x86

c04cf62851f39131f7a8419f0e0e2f59

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:df:4d:56:73:3a:e3:8d:59:8e:a0:04:dd:2d:9c:51
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09/01/2020, 00:00

Not After

15/09/2020, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:94:73:e0:01:50:bc:5e:b4:7f:29:a1:0d:cc:dd:bd
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

26/12/2018, 00:00

Not After

15/09/2020, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

46:fb:10:ff:c5:9a:db:79:f9:9d:d5:86:9d:39:ff:e3:33:de:5e:35:99:a4:8b:d8:bb:f6:db:71:ba:66:da:37
Signer

Actual PE Digest

46:fb:10:ff:c5:9a:db:79:f9:9d:d5:86:9d:39:ff:e3:33:de:5e:35:99:a4:8b:d8:bb:f6:db:71:ba:66:da:37

Digest Algorithm

sha256

PE Digest Matches

true

74:fe:7d:9d:5e:26:ec:d6:78:73:0c:fb:32:7f:f1:0a:ed:24:09:2f
Signer

Actual PE Digest

74:fe:7d:9d:5e:26:ec:d6:78:73:0c:fb:32:7f:f1:0a:ed:24:09:2f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\SVN\RTIoLib\rtkio\SRC\sysw8\Release\x86\rtkiow8x86.pdb

Imports

ntoskrnl.exe

ExCreateCallback
ExRegisterCallback
ExUnregisterCallback
MmBuildMdlForNonPagedPool
MmMapLockedPagesSpecifyCache
MmUnmapLockedPages
IoAllocateMdl
IofCompleteRequest
IoCreateSymbolicLink
IoDeleteDevice
IoDeleteSymbolicLink
ExFreePoolWithTag
IoRegisterShutdownNotification
IoUnregisterShutdownNotification
IoWMIRegistrationControl
ObfDereferenceObject
ZwClose
ZwOpenKey
ZwQueryValueKey
memmove
ZwCreateKey
RtlUnwind
_vsnprintf
ExAllocatePoolWithTag
KeQueryActiveProcessors
KeSetSystemAffinityThreadEx
MmGetSystemRoutineAddress
RtlInitUnicodeString
memcpy
MmUnmapIoSpace
MmMapIoSpace
memset
IoFreeMdl
ZwSetSecurityObject
IoDeviceObjectType
IoCreateDevice
ObOpenObjectByPointer
RtlGetDaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetOwnerSecurityDescriptor
RtlGetSaclSecurityDescriptor
SeCaptureSecurityDescriptor
_snwprintf
RtlLengthSecurityDescriptor
SeExports
RtlCreateSecurityDescriptor
_wcsnicmp
wcschr
RtlAbsoluteToSelfRelativeSD
RtlAddAccessAllowedAce
RtlLengthSid
IoIsWdmVersionAvailable
RtlSetDaclSecurityDescriptor
ZwSetValueKey
RtlFreeUnicodeString

hal

KfLowerIrql
KeGetCurrentIrql
WRITE_PORT_USHORT
READ_PORT_USHORT
WRITE_PORT_UCHAR
READ_PORT_UCHAR
KeStallExecutionProcessor
WRITE_PORT_ULONG
READ_PORT_ULONG
KeRaiseIrqlToDpcLevel

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/EngLangID.txt
REALTEKDRIVER/ICON/remove.ico
REALTEKDRIVER/IMG/1.bmp
REALTEKDRIVER/IMG/2.bmp
REALTEKDRIVER/IMG/3.bmp
REALTEKDRIVER/IMG/4.bmp
REALTEKDRIVER/IMG/5.bmp
REALTEKDRIVER/ISSetup.dll
.dll regsvr32 windows:6 windows x86 arch:x86

af93d22cb4944e6dc29e33177a19eda0

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:fc:fa:c0:8e:21:6a:1c:1f:da:a6:b7:7b:b2:d6:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

06/01/2020, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:59:58:f8:a9:0b:14:fa:25:43:6b:89:fb:30:76:60
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

03/01/2019, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c6:5c:85:3e:5b:f2:86:15:58:0d:28:dc:74:d7:b5:1a:a2:61:06:0d:00:44:e4:7f:a2:77:f5:f1:66:8b:0f:6d
Signer

Actual PE Digest

c6:5c:85:3e:5b:f2:86:15:58:0d:28:dc:74:d7:b5:1a:a2:61:06:0d:00:44:e4:7f:a2:77:f5:f1:66:8b:0f:6d

Digest Algorithm

sha256

PE Digest Matches

true

5f:03:83:bf:d8:42:b8:8f:b1:59:95:4f:a2:33:d3:31:07:38:2e:22
Signer

Actual PE Digest

5f:03:83:bf:d8:42:b8:8f:b1:59:95:4f:a2:33:d3:31:07:38:2e:22

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

rpcrt4

UuidCreate

winmm

sndPlaySoundW

user32

DestroyWindow

gdi32

CreatePalette

advapi32

IsValidSecurityDescriptor

shell32

SHGetFolderPathW

ole32

CoCreateInstance

oleaut32

GetErrorInfo

shlwapi

SHStrDupW

version

VerQueryValueW

gdiplus

GdipDeleteGraphics

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProductSKU
GetScriptEngine
InstallEngineTypelib
RemoveEngineTypelib
SuiteIsFeatureInstalled
SuiteStartupInstall

Sections

.text
Size: 640KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 131KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
REALTEKDRIVER/InstCtrl/WINVISTA/InstCtrl_Ndis6.txt
REALTEKDRIVER/InstCtrl/WINXP/InstCtrl_PCIE.txt
REALTEKDRIVER/InstOpt/WINVISTA/InstOpt.txt
REALTEKDRIVER/README/WIN7/Arabic/AdvProperties.html
.html
REALTEKDRIVER/README/WIN7/Arabic/bottom.html
REALTEKDRIVER/README/WIN7/Arabic/contactInfo.html
REALTEKDRIVER/README/WIN7/Arabic/format.css
.html
REALTEKDRIVER/README/WIN7/Arabic/images/logo.gif
.gif
REALTEKDRIVER/README/WIN7/Arabic/index.html
REALTEKDRIVER/README/WIN7/Arabic/left.html
.html
REALTEKDRIVER/README/WIN7/Arabic/setup.html
.html
REALTEKDRIVER/README/WIN7/Arabic/title.txt
REALTEKDRIVER/README/WIN7/Arabic/top.html
.html
REALTEKDRIVER/README/WIN7/Arabic/troubleshooting.html
REALTEKDRIVER/README/WIN7/Arabic/welcome.html
REALTEKDRIVER/README/WIN7/English/AdvProperties.html
REALTEKDRIVER/README/WIN7/English/bottom.html
REALTEKDRIVER/README/WIN7/English/contactInfo.html
REALTEKDRIVER/README/WIN7/English/format.css
.html
REALTEKDRIVER/README/WIN7/English/images/logo.gif
.gif
REALTEKDRIVER/README/WIN7/English/index.html
REALTEKDRIVER/README/WIN7/English/left.html
REALTEKDRIVER/README/WIN7/English/setup.html
REALTEKDRIVER/README/WIN7/English/top.html
REALTEKDRIVER/README/WIN7/English/troubleshooting.html
REALTEKDRIVER/README/WIN7/English/welcome.html
REALTEKDRIVER/README/WIN7/French/AdvProperties.html
.html
REALTEKDRIVER/README/WIN7/French/bottom.html
REALTEKDRIVER/README/WIN7/French/contactInfo.html
REALTEKDRIVER/README/WIN7/French/format.css
.html
REALTEKDRIVER/README/WIN7/French/format.css.bak
.html
REALTEKDRIVER/README/WIN7/French/images/logo.gif
.gif
REALTEKDRIVER/README/WIN7/French/index.html
REALTEKDRIVER/README/WIN7/French/left.html
.html
REALTEKDRIVER/README/WIN7/French/setup.html
.html
REALTEKDRIVER/README/WIN7/French/title.txt
REALTEKDRIVER/README/WIN7/French/top.html
.html
REALTEKDRIVER/README/WIN7/French/troubleshooting.html
REALTEKDRIVER/README/WIN7/French/welcome.html
REALTEKDRIVER/README/WIN7/German/AdvProperties.html
.html
REALTEKDRIVER/README/WIN7/German/bottom.html
REALTEKDRIVER/README/WIN7/German/contactInfo.html
REALTEKDRIVER/README/WIN7/German/format.css
.html
REALTEKDRIVER/README/WIN7/German/images/logo.gif
.gif
REALTEKDRIVER/README/WIN7/German/index.html
REALTEKDRIVER/README/WIN7/German/left.html
.html
REALTEKDRIVER/README/WIN7/German/setup.html
.html
REALTEKDRIVER/README/WIN7/German/title.txt
REALTEKDRIVER/README/WIN7/German/top.html
.html
REALTEKDRIVER/README/WIN7/German/troubleshooting.html
REALTEKDRIVER/README/WIN7/German/welcome.html
REALTEKDRIVER/README/WIN7/Hebrew/AdvProperties.html
.html
REALTEKDRIVER/README/WIN7/Hebrew/bottom.html
REALTEKDRIVER/README/WIN7/Hebrew/contactInfo.html
REALTEKDRIVER/README/WIN7/Hebrew/format.css
.html
REALTEKDRIVER/README/WIN7/Hebrew/images/logo.gif
.gif
REALTEKDRIVER/README/WIN7/Hebrew/index.html
REALTEKDRIVER/README/WIN7/Hebrew/left.html
.html
REALTEKDRIVER/README/WIN7/Hebrew/setup.html
.html
REALTEKDRIVER/README/WIN7/Hebrew/title.txt
REALTEKDRIVER/README/WIN7/Hebrew/top.html
.html
REALTEKDRIVER/README/WIN7/Hebrew/troubleshooting.html
REALTEKDRIVER/README/WIN7/Hebrew/welcome.html
REALTEKDRIVER/README/WIN7/Hungarian/AdvProperties.html
.html
REALTEKDRIVER/README/WIN7/Hungarian/bottom.html
REALTEKDRIVER/README/WIN7/Hungarian/contactInfo.html
REALTEKDRIVER/README/WIN7/Hungarian/format.css
.html
REALTEKDRIVER/README/WIN7/Hungarian/images/logo.gif
.gif
REALTEKDRIVER/README/WIN7/Hungarian/index.html
REALTEKDRIVER/README/WIN7/Hungarian/left.html
.html
REALTEKDRIVER/README/WIN7/Hungarian/setup.html
.html
REALTEKDRIVER/README/WIN7/Hungarian/title.txt
REALTEKDRIVER/README/WIN7/Hungarian/top.html
.html
REALTEKDRIVER/README/WIN7/Hungarian/troubleshooting.html
REALTEKDRIVER/README/WIN7/Hungarian/welcome.html
REALTEKDRIVER/README/WIN7/Italian/AdvProperties.html
.html
REALTEKDRIVER/README/WIN7/Italian/bottom.html
REALTEKDRIVER/README/WIN7/Italian/contactInfo.html
REALTEKDRIVER/README/WIN7/Italian/format.css
.html
REALTEKDRIVER/README/WIN7/Italian/images/logo.gif
.gif
REALTEKDRIVER/README/WIN7/Italian/index.html
REALTEKDRIVER/README/WIN7/Italian/left.html
.html
REALTEKDRIVER/README/WIN7/Italian/setup.html
.html
REALTEKDRIVER/README/WIN7/Italian/title.txt
REALTEKDRIVER/README/WIN7/Italian/top.html
.html
REALTEKDRIVER/README/WIN7/Italian/troubleshooting.html
REALTEKDRIVER/README/WIN7/Italian/welcome.html
REALTEKDRIVER/README/WIN7/Japanese/AdvProperties.html
.html
REALTEKDRIVER/README/WIN7/Japanese/bottom.html
REALTEKDRIVER/README/WIN7/Japanese/contactInfo.html
REALTEKDRIVER/README/WIN7/Japanese/format.css
.html
REALTEKDRIVER/README/WIN7/Japanese/images/logo.gif
.gif
REALTEKDRIVER/README/WIN7/Japanese/index.html
REALTEKDRIVER/README/WIN7/Japanese/left.html
.html
REALTEKDRIVER/README/WIN7/Japanese/setup.html
.html
REALTEKDRIVER/README/WIN7/Japanese/title.txt
REALTEKDRIVER/README/WIN7/Japanese/top.html
.html
REALTEKDRIVER/README/WIN7/Japanese/troubleshooting.html
REALTEKDRIVER/README/WIN7/Japanese/welcome.html
REALTEKDRIVER/README/WIN7/Korean/AdvProperties.html
.html
REALTEKDRIVER/README/WIN7/Korean/bottom.html
REALTEKDRIVER/README/WIN7/Korean/contactInfo.html
REALTEKDRIVER/README/WIN7/Korean/format.css
.html
REALTEKDRIVER/README/WIN7/Korean/format.css.bak
.html
REALTEKDRIVER/README/WIN7/Korean/images/logo.gif
.gif
REALTEKDRIVER/README/WIN7/Korean/index.html
REALTEKDRIVER/README/WIN7/Korean/left.html
.html
REALTEKDRIVER/README/WIN7/Korean/setup.html
.html
REALTEKDRIVER/README/WIN7/Korean/title.txt
REALTEKDRIVER/README/WIN7/Korean/top.html
.html
REALTEKDRIVER/README/WIN7/Korean/troubleshooting.html
REALTEKDRIVER/README/WIN7/Korean/welcome.html
REALTEKDRIVER/README/WIN7/Portuguese/AdvProperties.html
.html
REALTEKDRIVER/README/WIN7/Portuguese/bottom.html
REALTEKDRIVER/README/WIN7/Portuguese/contactInfo.html
REALTEKDRIVER/README/WIN7/Portuguese/format.css
.html
REALTEKDRIVER/README/WIN7/Portuguese/images/logo.gif
.gif
REALTEKDRIVER/README/WIN7/Portuguese/index.html
REALTEKDRIVER/README/WIN7/Portuguese/left.html
.html
REALTEKDRIVER/README/WIN7/Portuguese/setup.html
.html
REALTEKDRIVER/README/WIN7/Portuguese/title.txt
REALTEKDRIVER/README/WIN7/Portuguese/top.html
.html
REALTEKDRIVER/README/WIN7/Portuguese/troubleshooting.html
REALTEKDRIVER/README/WIN7/Portuguese/welcome.html
REALTEKDRIVER/README/WIN7/Spanish/AdvProperties.html
.html
REALTEKDRIVER/README/WIN7/Spanish/bottom.html
REALTEKDRIVER/README/WIN7/Spanish/contactInfo.html
REALTEKDRIVER/README/WIN7/Spanish/format.css
.html
REALTEKDRIVER/README/WIN7/Spanish/images/logo.gif
.gif
REALTEKDRIVER/README/WIN7/Spanish/index.html
REALTEKDRIVER/README/WIN7/Spanish/left.html
.html
REALTEKDRIVER/README/WIN7/Spanish/setup.html
.html
REALTEKDRIVER/README/WIN7/Spanish/title.txt
REALTEKDRIVER/README/WIN7/Spanish/top.html
.html
REALTEKDRIVER/README/WIN7/Spanish/troubleshooting.html
REALTEKDRIVER/README/WIN7/Spanish/welcome.html
REALTEKDRIVER/README/WIN7/Turkish/AdvProperties.html
.html
REALTEKDRIVER/README/WIN7/Turkish/bottom.html
REALTEKDRIVER/README/WIN7/Turkish/contactInfo.html
REALTEKDRIVER/README/WIN7/Turkish/format.css
.html
REALTEKDRIVER/README/WIN7/Turkish/images/logo.gif
.gif
REALTEKDRIVER/README/WIN7/Turkish/index.html
REALTEKDRIVER/README/WIN7/Turkish/left.html
.html
REALTEKDRIVER/README/WIN7/Turkish/setup.html
.html
REALTEKDRIVER/README/WIN7/Turkish/title.txt
REALTEKDRIVER/README/WIN7/Turkish/top.html
.html
REALTEKDRIVER/README/WIN7/Turkish/troubleshooting.html
REALTEKDRIVER/README/WIN7/Turkish/welcome.html
REALTEKDRIVER/README/WIN8/Arabic/AdvProperties.html
.html
REALTEKDRIVER/README/WIN8/Arabic/bottom.html
REALTEKDRIVER/README/WIN8/Arabic/contactInfo.html
REALTEKDRIVER/README/WIN8/Arabic/format.css
.html
REALTEKDRIVER/README/WIN8/Arabic/images/logo.gif
.gif
REALTEKDRIVER/README/WIN8/Arabic/index.html
REALTEKDRIVER/README/WIN8/Arabic/left.html
.html
REALTEKDRIVER/README/WIN8/Arabic/setup.html
.html
REALTEKDRIVER/README/WIN8/Arabic/title.txt
REALTEKDRIVER/README/WIN8/Arabic/top.html
.html
REALTEKDRIVER/README/WIN8/Arabic/troubleshooting.html
REALTEKDRIVER/README/WIN8/Arabic/welcome.html
.html
REALTEKDRIVER/README/WIN8/English/AdvProperties.html
REALTEKDRIVER/README/WIN8/English/bottom.html
REALTEKDRIVER/README/WIN8/English/contactInfo.html
REALTEKDRIVER/README/WIN8/English/format.css
.html
REALTEKDRIVER/README/WIN8/English/images/logo.gif
.gif
REALTEKDRIVER/README/WIN8/English/index.html
REALTEKDRIVER/README/WIN8/English/left.html
REALTEKDRIVER/README/WIN8/English/setup.html
.html
REALTEKDRIVER/README/WIN8/English/top.html
REALTEKDRIVER/README/WIN8/English/troubleshooting.html
REALTEKDRIVER/README/WIN8/English/welcome.html
REALTEKDRIVER/README/WIN8/French/AdvProperties.html
.html
REALTEKDRIVER/README/WIN8/French/bottom.html
REALTEKDRIVER/README/WIN8/French/contactInfo.html
REALTEKDRIVER/README/WIN8/French/format.css
.html
REALTEKDRIVER/README/WIN8/French/images/logo.gif
.gif
REALTEKDRIVER/README/WIN8/French/index.html
REALTEKDRIVER/README/WIN8/French/left.html
.html
REALTEKDRIVER/README/WIN8/French/setup.html
.html
REALTEKDRIVER/README/WIN8/French/title.txt
REALTEKDRIVER/README/WIN8/French/top.html
.html
REALTEKDRIVER/README/WIN8/French/troubleshooting.html
REALTEKDRIVER/README/WIN8/French/welcome.html
REALTEKDRIVER/README/WIN8/German/AdvProperties.html
.html
REALTEKDRIVER/README/WIN8/German/bottom.html
REALTEKDRIVER/README/WIN8/German/contactInfo.html
REALTEKDRIVER/README/WIN8/German/format.css
.html
REALTEKDRIVER/README/WIN8/German/images/logo.gif
.gif
REALTEKDRIVER/README/WIN8/German/index.html
REALTEKDRIVER/README/WIN8/German/left.html
.html
REALTEKDRIVER/README/WIN8/German/setup.html
.html
REALTEKDRIVER/README/WIN8/German/title.txt
REALTEKDRIVER/README/WIN8/German/top.html
.html
REALTEKDRIVER/README/WIN8/German/troubleshooting.html
REALTEKDRIVER/README/WIN8/German/welcome.html
REALTEKDRIVER/README/WIN8/Hebrew/AdvProperties.html
.html
REALTEKDRIVER/README/WIN8/Hebrew/bottom.html
REALTEKDRIVER/README/WIN8/Hebrew/contactInfo.html
REALTEKDRIVER/README/WIN8/Hebrew/format.css
.html
REALTEKDRIVER/README/WIN8/Hebrew/images/logo.gif
.gif
REALTEKDRIVER/README/WIN8/Hebrew/index.html
REALTEKDRIVER/README/WIN8/Hebrew/left.html
.html
REALTEKDRIVER/README/WIN8/Hebrew/setup.html
.html
REALTEKDRIVER/README/WIN8/Hebrew/title.txt
REALTEKDRIVER/README/WIN8/Hebrew/top.html
.html
REALTEKDRIVER/README/WIN8/Hebrew/troubleshooting.html
REALTEKDRIVER/README/WIN8/Hebrew/welcome.html
.html
REALTEKDRIVER/README/WIN8/Hungarian/AdvProperties.html
.html
REALTEKDRIVER/README/WIN8/Hungarian/bottom.html
REALTEKDRIVER/README/WIN8/Hungarian/contactInfo.html
REALTEKDRIVER/README/WIN8/Hungarian/format.css
.html
REALTEKDRIVER/README/WIN8/Hungarian/images/logo.gif
.gif
REALTEKDRIVER/README/WIN8/Hungarian/index.html
REALTEKDRIVER/README/WIN8/Hungarian/left.html
.html
REALTEKDRIVER/README/WIN8/Hungarian/setup.html
.html
REALTEKDRIVER/README/WIN8/Hungarian/title.txt
REALTEKDRIVER/README/WIN8/Hungarian/top.html
.html
REALTEKDRIVER/README/WIN8/Hungarian/troubleshooting.html
REALTEKDRIVER/README/WIN8/Hungarian/welcome.html
REALTEKDRIVER/README/WIN8/Italian/AdvProperties.html
.html
REALTEKDRIVER/README/WIN8/Italian/bottom.html
REALTEKDRIVER/README/WIN8/Italian/contactInfo.html
REALTEKDRIVER/README/WIN8/Italian/format.css
.html
REALTEKDRIVER/README/WIN8/Italian/images/logo.gif
.gif
REALTEKDRIVER/README/WIN8/Italian/index.html
REALTEKDRIVER/README/WIN8/Italian/left.html
.html
REALTEKDRIVER/README/WIN8/Italian/setup.html
.html
REALTEKDRIVER/README/WIN8/Italian/title.txt
REALTEKDRIVER/README/WIN8/Italian/top.html
.html
REALTEKDRIVER/README/WIN8/Italian/troubleshooting.html
REALTEKDRIVER/README/WIN8/Italian/welcome.html
REALTEKDRIVER/README/WIN8/Japanese/AdvProperties.html
.html
REALTEKDRIVER/README/WIN8/Japanese/bottom.html
REALTEKDRIVER/README/WIN8/Japanese/contactInfo.html
REALTEKDRIVER/README/WIN8/Japanese/format.css
.html
REALTEKDRIVER/README/WIN8/Japanese/images/logo.gif
.gif
REALTEKDRIVER/README/WIN8/Japanese/index.html
REALTEKDRIVER/README/WIN8/Japanese/left.html
.html
REALTEKDRIVER/README/WIN8/Japanese/setup.html
.html
REALTEKDRIVER/README/WIN8/Japanese/title.txt
REALTEKDRIVER/README/WIN8/Japanese/top.html
.html
REALTEKDRIVER/README/WIN8/Japanese/troubleshooting.html
REALTEKDRIVER/README/WIN8/Japanese/welcome.html
.html
REALTEKDRIVER/README/WIN8/Korean/AdvProperties.html
.html
REALTEKDRIVER/README/WIN8/Korean/bottom.html
REALTEKDRIVER/README/WIN8/Korean/contactInfo.html
REALTEKDRIVER/README/WIN8/Korean/format.css
.html
REALTEKDRIVER/README/WIN8/Korean/images/logo.gif
.gif
REALTEKDRIVER/README/WIN8/Korean/index.html
REALTEKDRIVER/README/WIN8/Korean/left.html
.html
REALTEKDRIVER/README/WIN8/Korean/setup.html
.html
REALTEKDRIVER/README/WIN8/Korean/title.txt
REALTEKDRIVER/README/WIN8/Korean/top.html
.html
REALTEKDRIVER/README/WIN8/Korean/troubleshooting.html
REALTEKDRIVER/README/WIN8/Korean/welcome.html
.html
REALTEKDRIVER/README/WIN8/Portuguese/AdvProperties.html
.html
REALTEKDRIVER/README/WIN8/Portuguese/bottom.html
REALTEKDRIVER/README/WIN8/Portuguese/contactInfo.html
REALTEKDRIVER/README/WIN8/Portuguese/format.css
.html
REALTEKDRIVER/README/WIN8/Portuguese/images/logo.gif
.gif
REALTEKDRIVER/README/WIN8/Portuguese/index.html
REALTEKDRIVER/README/WIN8/Portuguese/left.html
.html
REALTEKDRIVER/README/WIN8/Portuguese/setup.html
.html
REALTEKDRIVER/README/WIN8/Portuguese/title.txt
REALTEKDRIVER/README/WIN8/Portuguese/top.html
.html
REALTEKDRIVER/README/WIN8/Portuguese/troubleshooting.html
REALTEKDRIVER/README/WIN8/Portuguese/welcome.html
REALTEKDRIVER/README/WIN8/Simplified_Chinese/AdvProperties.html
.html
REALTEKDRIVER/README/WIN8/Simplified_Chinese/bottom.html
REALTEKDRIVER/README/WIN8/Simplified_Chinese/contactInfo.html
.html
REALTEKDRIVER/README/WIN8/Simplified_Chinese/format.css
.html
REALTEKDRIVER/README/WIN8/Simplified_Chinese/images/logo.gif
.gif
REALTEKDRIVER/README/WIN8/Simplified_Chinese/index.html
REALTEKDRIVER/README/WIN8/Simplified_Chinese/left.html
REALTEKDRIVER/README/WIN8/Simplified_Chinese/setup.html
.html
REALTEKDRIVER/README/WIN8/Simplified_Chinese/title.txt
REALTEKDRIVER/README/WIN8/Simplified_Chinese/top.html
.html
REALTEKDRIVER/README/WIN8/Simplified_Chinese/troubleshooting.html
.html
REALTEKDRIVER/README/WIN8/Simplified_Chinese/welcome.html
.html
REALTEKDRIVER/README/WIN8/Spanish/AdvProperties.html
.html
REALTEKDRIVER/README/WIN8/Spanish/bottom.html
REALTEKDRIVER/README/WIN8/Spanish/contactInfo.html
REALTEKDRIVER/README/WIN8/Spanish/format.css
.html
REALTEKDRIVER/README/WIN8/Spanish/images/logo.gif
.gif
REALTEKDRIVER/README/WIN8/Spanish/index.html
REALTEKDRIVER/README/WIN8/Spanish/left.html
.html
REALTEKDRIVER/README/WIN8/Spanish/setup.html
.html
REALTEKDRIVER/README/WIN8/Spanish/title.txt
REALTEKDRIVER/README/WIN8/Spanish/top.html
.html
REALTEKDRIVER/README/WIN8/Spanish/troubleshooting.html
REALTEKDRIVER/README/WIN8/Spanish/welcome.html
REALTEKDRIVER/README/WIN8/Traditional_Chinese/AdvProperties.html
.html
REALTEKDRIVER/README/WIN8/Traditional_Chinese/bottom.html
REALTEKDRIVER/README/WIN8/Traditional_Chinese/contactInfo.html
.html
REALTEKDRIVER/README/WIN8/Traditional_Chinese/format.css
.html
REALTEKDRIVER/README/WIN8/Traditional_Chinese/images/logo.gif
.gif
REALTEKDRIVER/README/WIN8/Traditional_Chinese/index.html
REALTEKDRIVER/README/WIN8/Traditional_Chinese/left.html
REALTEKDRIVER/README/WIN8/Traditional_Chinese/setup.html
.html
REALTEKDRIVER/README/WIN8/Traditional_Chinese/title.txt
REALTEKDRIVER/README/WIN8/Traditional_Chinese/top.html
.html
REALTEKDRIVER/README/WIN8/Traditional_Chinese/troubleshooting.html
.html
REALTEKDRIVER/README/WIN8/Traditional_Chinese/welcome.html
.html
REALTEKDRIVER/README/WIN8/Turkish/AdvProperties.html
.html
REALTEKDRIVER/README/WIN8/Turkish/bottom.html
REALTEKDRIVER/README/WIN8/Turkish/contactInfo.html
REALTEKDRIVER/README/WIN8/Turkish/format.css
.html
REALTEKDRIVER/README/WIN8/Turkish/images/logo.gif
.gif
REALTEKDRIVER/README/WIN8/Turkish/index.html
REALTEKDRIVER/README/WIN8/Turkish/left.html
.html
REALTEKDRIVER/README/WIN8/Turkish/setup.html
.html
REALTEKDRIVER/README/WIN8/Turkish/title.txt
REALTEKDRIVER/README/WIN8/Turkish/top.html
.html
REALTEKDRIVER/README/WIN8/Turkish/troubleshooting.html
REALTEKDRIVER/README/WIN8/Turkish/welcome.html
.html
REALTEKDRIVER/README/XP_VISTA/Arabic/AdvProperties.html
REALTEKDRIVER/README/XP_VISTA/Arabic/bottom.html
REALTEKDRIVER/README/XP_VISTA/Arabic/contactInfo.html
REALTEKDRIVER/README/XP_VISTA/Arabic/format.css
.html
REALTEKDRIVER/README/XP_VISTA/Arabic/images/logo.gif
.gif
REALTEKDRIVER/README/XP_VISTA/Arabic/index.html
REALTEKDRIVER/README/XP_VISTA/Arabic/left.html
.html
REALTEKDRIVER/README/XP_VISTA/Arabic/setup.html
.html
REALTEKDRIVER/README/XP_VISTA/Arabic/title.txt
REALTEKDRIVER/README/XP_VISTA/Arabic/top.html
.html
REALTEKDRIVER/README/XP_VISTA/Arabic/troubleshooting.html
REALTEKDRIVER/README/XP_VISTA/Arabic/welcome.html
REALTEKDRIVER/README/XP_VISTA/English/AdvProperties.html
REALTEKDRIVER/README/XP_VISTA/English/bottom.html
REALTEKDRIVER/README/XP_VISTA/English/contactInfo.html
REALTEKDRIVER/README/XP_VISTA/English/format.css
.html
REALTEKDRIVER/README/XP_VISTA/English/format.css.bak
.html
REALTEKDRIVER/README/XP_VISTA/English/images/logo.gif
.gif
REALTEKDRIVER/README/XP_VISTA/English/index.html
REALTEKDRIVER/README/XP_VISTA/English/left.html
REALTEKDRIVER/README/XP_VISTA/English/setup.html
REALTEKDRIVER/README/XP_VISTA/English/title.txt
REALTEKDRIVER/README/XP_VISTA/English/top.html
REALTEKDRIVER/README/XP_VISTA/English/troubleshooting.html
REALTEKDRIVER/README/XP_VISTA/English/welcome.html
REALTEKDRIVER/README/XP_VISTA/French/AdvProperties.html
REALTEKDRIVER/README/XP_VISTA/French/bottom.html
REALTEKDRIVER/README/XP_VISTA/French/contactInfo.html
REALTEKDRIVER/README/XP_VISTA/French/format.css
.html
REALTEKDRIVER/README/XP_VISTA/French/format.css.bak
.html
REALTEKDRIVER/README/XP_VISTA/French/images/logo.gif
.gif
REALTEKDRIVER/README/XP_VISTA/French/index.html
REALTEKDRIVER/README/XP_VISTA/French/left.html
.html
REALTEKDRIVER/README/XP_VISTA/French/setup.html
.html
REALTEKDRIVER/README/XP_VISTA/French/title.txt
REALTEKDRIVER/README/XP_VISTA/French/top.html
.html
REALTEKDRIVER/README/XP_VISTA/French/troubleshooting.html
REALTEKDRIVER/README/XP_VISTA/French/welcome.html
REALTEKDRIVER/README/XP_VISTA/German/AdvProperties.html
REALTEKDRIVER/README/XP_VISTA/German/bottom.html
REALTEKDRIVER/README/XP_VISTA/German/contactInfo.html
REALTEKDRIVER/README/XP_VISTA/German/format.css
.html
REALTEKDRIVER/README/XP_VISTA/German/images/logo.gif
.gif
REALTEKDRIVER/README/XP_VISTA/German/index.html
REALTEKDRIVER/README/XP_VISTA/German/left.html
.html
REALTEKDRIVER/README/XP_VISTA/German/setup.html
.html
REALTEKDRIVER/README/XP_VISTA/German/title.txt
REALTEKDRIVER/README/XP_VISTA/German/top.html
.html
REALTEKDRIVER/README/XP_VISTA/German/troubleshooting.html
REALTEKDRIVER/README/XP_VISTA/German/welcome.html
REALTEKDRIVER/README/XP_VISTA/Hebrew/AdvProperties.html
REALTEKDRIVER/README/XP_VISTA/Hebrew/bottom.html
REALTEKDRIVER/README/XP_VISTA/Hebrew/contactInfo.html
REALTEKDRIVER/README/XP_VISTA/Hebrew/format.css
.html
REALTEKDRIVER/README/XP_VISTA/Hebrew/images/logo.gif
.gif
REALTEKDRIVER/README/XP_VISTA/Hebrew/index.html
REALTEKDRIVER/README/XP_VISTA/Hebrew/left.html
.html
REALTEKDRIVER/README/XP_VISTA/Hebrew/setup.html
.html
REALTEKDRIVER/README/XP_VISTA/Hebrew/title.txt
REALTEKDRIVER/README/XP_VISTA/Hebrew/top.html
.html
REALTEKDRIVER/README/XP_VISTA/Hebrew/troubleshooting.html
REALTEKDRIVER/README/XP_VISTA/Hebrew/welcome.html
REALTEKDRIVER/README/XP_VISTA/Hungarian/AdvProperties.html
REALTEKDRIVER/README/XP_VISTA/Hungarian/bottom.html
REALTEKDRIVER/README/XP_VISTA/Hungarian/contactInfo.html
REALTEKDRIVER/README/XP_VISTA/Hungarian/format.css
.html
REALTEKDRIVER/README/XP_VISTA/Hungarian/images/logo.gif
.gif
REALTEKDRIVER/README/XP_VISTA/Hungarian/index.html
REALTEKDRIVER/README/XP_VISTA/Hungarian/left.html
.html
REALTEKDRIVER/README/XP_VISTA/Hungarian/setup.html
.html
REALTEKDRIVER/README/XP_VISTA/Hungarian/title.txt
REALTEKDRIVER/README/XP_VISTA/Hungarian/top.html
.html
REALTEKDRIVER/README/XP_VISTA/Hungarian/troubleshooting.html
REALTEKDRIVER/README/XP_VISTA/Hungarian/welcome.html
REALTEKDRIVER/README/XP_VISTA/Italian/AdvProperties.html
REALTEKDRIVER/README/XP_VISTA/Italian/bottom.html
REALTEKDRIVER/README/XP_VISTA/Italian/contactInfo.html
REALTEKDRIVER/README/XP_VISTA/Italian/format.css
.html
REALTEKDRIVER/README/XP_VISTA/Italian/images/logo.gif
.gif
REALTEKDRIVER/README/XP_VISTA/Italian/index.html
REALTEKDRIVER/README/XP_VISTA/Italian/left.html
.html
REALTEKDRIVER/README/XP_VISTA/Italian/setup.html
.html
REALTEKDRIVER/README/XP_VISTA/Italian/title.txt
REALTEKDRIVER/README/XP_VISTA/Italian/top.html
.html
REALTEKDRIVER/README/XP_VISTA/Italian/troubleshooting.html
REALTEKDRIVER/README/XP_VISTA/Italian/welcome.html
REALTEKDRIVER/README/XP_VISTA/Japanese/AdvProperties.html
REALTEKDRIVER/README/XP_VISTA/Japanese/bottom.html
REALTEKDRIVER/README/XP_VISTA/Japanese/contactInfo.html
REALTEKDRIVER/README/XP_VISTA/Japanese/format.css
.html
REALTEKDRIVER/README/XP_VISTA/Japanese/images/logo.gif
.gif
REALTEKDRIVER/README/XP_VISTA/Japanese/index.html
REALTEKDRIVER/README/XP_VISTA/Japanese/left.html
.html
REALTEKDRIVER/README/XP_VISTA/Japanese/setup.html
.html
REALTEKDRIVER/README/XP_VISTA/Japanese/title.txt
REALTEKDRIVER/README/XP_VISTA/Japanese/top.html
.html
REALTEKDRIVER/README/XP_VISTA/Japanese/troubleshooting.html
REALTEKDRIVER/README/XP_VISTA/Japanese/welcome.html
REALTEKDRIVER/README/XP_VISTA/Korean/AdvProperties.html
REALTEKDRIVER/README/XP_VISTA/Korean/bottom.html
REALTEKDRIVER/README/XP_VISTA/Korean/contactInfo.html
REALTEKDRIVER/README/XP_VISTA/Korean/format.css
.html
REALTEKDRIVER/README/XP_VISTA/Korean/format.css.bak
.html
REALTEKDRIVER/README/XP_VISTA/Korean/images/logo.gif
.gif
REALTEKDRIVER/README/XP_VISTA/Korean/index.html
REALTEKDRIVER/README/XP_VISTA/Korean/left.html
.html
REALTEKDRIVER/README/XP_VISTA/Korean/setup.html
.html
REALTEKDRIVER/README/XP_VISTA/Korean/title.txt
REALTEKDRIVER/README/XP_VISTA/Korean/top.html
.html
REALTEKDRIVER/README/XP_VISTA/Korean/troubleshooting.html
REALTEKDRIVER/README/XP_VISTA/Korean/welcome.html
REALTEKDRIVER/README/XP_VISTA/Portuguese/AdvProperties.html
REALTEKDRIVER/README/XP_VISTA/Portuguese/bottom.html
REALTEKDRIVER/README/XP_VISTA/Portuguese/contactInfo.html
REALTEKDRIVER/README/XP_VISTA/Portuguese/format.css
.html
REALTEKDRIVER/README/XP_VISTA/Portuguese/images/logo.gif
.gif
REALTEKDRIVER/README/XP_VISTA/Portuguese/index.html
REALTEKDRIVER/README/XP_VISTA/Portuguese/left.html
.html
REALTEKDRIVER/README/XP_VISTA/Portuguese/setup.html
.html
REALTEKDRIVER/README/XP_VISTA/Portuguese/title.txt
REALTEKDRIVER/README/XP_VISTA/Portuguese/top.html
.html
REALTEKDRIVER/README/XP_VISTA/Portuguese/troubleshooting.html
REALTEKDRIVER/README/XP_VISTA/Portuguese/welcome.html
REALTEKDRIVER/README/XP_VISTA/Simplified_Chinese/AdvProperties.html
REALTEKDRIVER/README/XP_VISTA/Simplified_Chinese/bottom.html
REALTEKDRIVER/README/XP_VISTA/Simplified_Chinese/contactInfo.html
REALTEKDRIVER/README/XP_VISTA/Simplified_Chinese/format.css
.html
REALTEKDRIVER/README/XP_VISTA/Simplified_Chinese/images/logo.gif
.gif
REALTEKDRIVER/README/XP_VISTA/Simplified_Chinese/index.html
REALTEKDRIVER/README/XP_VISTA/Simplified_Chinese/left.html
REALTEKDRIVER/README/XP_VISTA/Simplified_Chinese/setup.html
REALTEKDRIVER/README/XP_VISTA/Simplified_Chinese/title.txt
REALTEKDRIVER/README/XP_VISTA/Simplified_Chinese/top.html
REALTEKDRIVER/README/XP_VISTA/Simplified_Chinese/troubleshooting.html
REALTEKDRIVER/README/XP_VISTA/Simplified_Chinese/welcome.html
REALTEKDRIVER/README/XP_VISTA/Spanish/AdvProperties.html
REALTEKDRIVER/README/XP_VISTA/Spanish/bottom.html
REALTEKDRIVER/README/XP_VISTA/Spanish/contactInfo.html
REALTEKDRIVER/README/XP_VISTA/Spanish/format.css
.html
REALTEKDRIVER/README/XP_VISTA/Spanish/images/logo.gif
.gif
REALTEKDRIVER/README/XP_VISTA/Spanish/index.html
REALTEKDRIVER/README/XP_VISTA/Spanish/left.html
.html
REALTEKDRIVER/README/XP_VISTA/Spanish/setup.html
.html
REALTEKDRIVER/README/XP_VISTA/Spanish/title.txt
REALTEKDRIVER/README/XP_VISTA/Spanish/top.html
.html
REALTEKDRIVER/README/XP_VISTA/Spanish/troubleshooting.html
REALTEKDRIVER/README/XP_VISTA/Spanish/welcome.html
REALTEKDRIVER/README/XP_VISTA/Traditional_Chinese/AdvProperties.html
REALTEKDRIVER/README/XP_VISTA/Traditional_Chinese/bottom.html
REALTEKDRIVER/README/XP_VISTA/Traditional_Chinese/contactInfo.html
REALTEKDRIVER/README/XP_VISTA/Traditional_Chinese/format.css
.html
REALTEKDRIVER/README/XP_VISTA/Traditional_Chinese/images/logo.gif
.gif
REALTEKDRIVER/README/XP_VISTA/Traditional_Chinese/index.html
REALTEKDRIVER/README/XP_VISTA/Traditional_Chinese/left.html
REALTEKDRIVER/README/XP_VISTA/Traditional_Chinese/setup.html
REALTEKDRIVER/README/XP_VISTA/Traditional_Chinese/title.txt
REALTEKDRIVER/README/XP_VISTA/Traditional_Chinese/top.html
REALTEKDRIVER/README/XP_VISTA/Traditional_Chinese/troubleshooting.html
REALTEKDRIVER/README/XP_VISTA/Traditional_Chinese/welcome.html
REALTEKDRIVER/README/XP_VISTA/Turkish/AdvProperties.html
REALTEKDRIVER/README/XP_VISTA/Turkish/bottom.html
REALTEKDRIVER/README/XP_VISTA/Turkish/contactInfo.html
REALTEKDRIVER/README/XP_VISTA/Turkish/format.css
.html
REALTEKDRIVER/README/XP_VISTA/Turkish/images/logo.gif
.gif
REALTEKDRIVER/README/XP_VISTA/Turkish/index.html
REALTEKDRIVER/README/XP_VISTA/Turkish/left.html
.html
REALTEKDRIVER/README/XP_VISTA/Turkish/setup.html
.html
REALTEKDRIVER/README/XP_VISTA/Turkish/title.txt
REALTEKDRIVER/README/XP_VISTA/Turkish/top.html
.html
REALTEKDRIVER/README/XP_VISTA/Turkish/troubleshooting.html
REALTEKDRIVER/README/XP_VISTA/Turkish/welcome.html
REALTEKDRIVER/Silent_Install.bat
REALTEKDRIVER/Silent_Uninstall.bat
REALTEKDRIVER/TOOL/RTINSTCHK32.dat
.exe windows:5 windows x86 arch:x86

bbc9abb9b78c3a2c2b8d823b11fa6bf9

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/06/2016, 00:00

Not After

24/01/2019, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21/01/2016, 00:00

Not After

24/01/2019, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

11:ed:46:7f:83:f8:ec:fc:97:6c:48:1a:c6:99:6d:c8:6d:0f:bf:6e:54:d7:e0:5a:89:24:33:3b:27:42:ec:d5
Signer

Actual PE Digest

11:ed:46:7f:83:f8:ec:fc:97:6c:48:1a:c6:99:6d:c8:6d:0f:bf:6e:54:d7:e0:5a:89:24:33:3b:27:42:ec:d5

Digest Algorithm

sha256

PE Digest Matches

true

8a:98:04:53:4c:a9:1b:87:43:bc:b7:a8:25:38:9b:95:4a:18:52:dc
Signer

Actual PE Digest

8a:98:04:53:4c:a9:1b:87:43:bc:b7:a8:25:38:9b:95:4a:18:52:dc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\SVN\RTINSTCHK\Release\RTINSTCHK32.pdb

Imports

rtiolib32

UnloadPhyMemDriver
RtIoReadPCIUshort
LoadPhyMemDriver
RtIoReadPCIUchar

kernel32

HeapAlloc
RaiseException
DecodePointer
CreateFileW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
GetACP
HeapFree
CompareStringW
LCMapStringW
GetFileType
GetStringTypeW
CloseHandle
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetProcessHeap
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
SetFilePointerEx
WriteConsoleW

Sections

.text
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/TOOL/RTINSTCHK64.dat
.exe windows:5 windows x64 arch:x64

a55a6c7c7581b72932d332dfb4703e19

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/06/2016, 00:00

Not After

24/01/2019, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21/01/2016, 00:00

Not After

24/01/2019, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

56:8a:7d:85:7f:8e:dd:41:a5:2b:02:68:dd:24:c8:1f:f5:f4:7e:78:49:2c:38:10:32:30:18:fc:83:af:bd:16
Signer

Actual PE Digest

56:8a:7d:85:7f:8e:dd:41:a5:2b:02:68:dd:24:c8:1f:f5:f4:7e:78:49:2c:38:10:32:30:18:fc:83:af:bd:16

Digest Algorithm

sha256

PE Digest Matches

true

df:93:45:a0:f9:7c:c1:c7:8b:da:0a:b2:ea:c0:0a:f4:76:af:97:c5
Signer

Actual PE Digest

df:93:45:a0:f9:7c:c1:c7:8b:da:0a:b2:ea:c0:0a:f4:76:af:97:c5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\SVN\RTINSTCHK\x64\Release\RTINSTCHK64.pdb

Imports

rtiolib64

UnloadPhyMemDriver
RtIoReadPCIUshort
LoadPhyMemDriver
RtIoReadPCIUchar

kernel32

GetCommandLineW
RaiseException
CreateFileW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetACP
HeapFree
HeapAlloc
CompareStringW
LCMapStringW
GetFileType
GetStringTypeW
CloseHandle
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetProcessHeap
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
SetFilePointerEx
WriteConsoleW

Sections

.text
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/TOOL/RTInstaller2K.dat
.exe windows:5 windows x86 arch:x86

a1de5f0fbbbe85b3b0ebc3a12864225e

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:fc:fa:c0:8e:21:6a:1c:1f:da:a6:b7:7b:b2:d6:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

06/01/2020, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:59:58:f8:a9:0b:14:fa:25:43:6b:89:fb:30:76:60
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

03/01/2019, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e6:12:94:b0:1b:41:62:6b:a8:32:79:98:44:52:44:0c:df:e9:27:5a:b3:fd:5a:67:da:42:0f:a0:e6:61:7b:a0
Signer

Actual PE Digest

e6:12:94:b0:1b:41:62:6b:a8:32:79:98:44:52:44:0c:df:e9:27:5a:b3:fd:5a:67:da:42:0f:a0:e6:61:7b:a0

Digest Algorithm

sha256

PE Digest Matches

true

da:bb:df:b9:6c:71:d4:8c:24:5e:2d:2a:f7:01:be:f0:25:e7:70:e7
Signer

Actual PE Digest

da:bb:df:b9:6c:71:d4:8c:24:5e:2d:2a:f7:01:be:f0:25:e7:70:e7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\SVN\RTInstaller\SRC\W2K\Release\RTInstaller2K.pdb

Imports

setupapi

SetupGetStringFieldW
CM_Get_DevNode_Status
SetupCloseInfFile
SetupRemoveFromSourceListW
SetupCopyOEMInfW
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupFindFirstLineW
CM_Connect_MachineW
SetupDiClassGuidsFromNameW
SetupOpenInfFileW
SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
SetupDiSetClassInstallParamsW
SetupGetInfFileListW
SetupFindNextLine
CM_Locate_DevNode_ExW
CM_Disconnect_Machine
CM_Reenumerate_DevNode_Ex
SetupDiDeleteDevRegKey
SetupAddToSourceListW
SetupDiOpenDevRegKey

newdev

UpdateDriverForPlugAndPlayDevicesW

kernel32

GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindFirstFileW
SetLastError
lstrlenW
GetModuleFileNameW
FindClose
WaitForSingleObject
LocalAlloc
GetFileAttributesW
GetVersionExW
GetCommandLineA
Sleep
GetLastError
DeleteFileW
CloseHandle
GetCurrentDirectoryW
GetWindowsDirectoryW
LocalFree
CreateProcessW
GetExitCodeProcess
GetTempPathW
CreateFileW
OpenProcess
ExitProcess
GetCurrentProcessId
CopyFileW
GetTickCount
GetStringTypeW
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetProcessHeap
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
SetFilePointerEx
WriteConsoleW
SetEndOfFile
ReadFile
ReadConsoleW
RaiseException
DecodePointer
SetFileAttributesW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
GetFileType
CompareStringW
LCMapStringW

user32

MessageBoxW

advapi32

CryptAcquireContextW
RegCloseKey
RegQueryInfoKeyW
CloseServiceHandle
OpenSCManagerW
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
CryptCreateHash
CryptHashData
RegSetValueExW
CryptDestroyHash
RegOpenKeyExW
QueryServiceConfigW
RegDeleteValueW
OpenServiceW
CryptGetHashParam
RegOpenKeyW
RegEnumValueW
RegQueryValueExW
CryptReleaseContext

Sections

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/TOOL/RTInstaller32.dat
.exe windows:6 windows x86 arch:x86

6ee025dd4ba4a0002ee43d348aab5287

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:fc:fa:c0:8e:21:6a:1c:1f:da:a6:b7:7b:b2:d6:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

06/01/2020, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:59:58:f8:a9:0b:14:fa:25:43:6b:89:fb:30:76:60
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

03/01/2019, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

37:19:25:8e:27:5c:53:a3:c6:bb:24:4b:b6:05:70:0d:a1:7b:ea:05:36:1d:25:6f:85:76:cd:98:c3:bb:3d:1b
Signer

Actual PE Digest

37:19:25:8e:27:5c:53:a3:c6:bb:24:4b:b6:05:70:0d:a1:7b:ea:05:36:1d:25:6f:85:76:cd:98:c3:bb:3d:1b

Digest Algorithm

sha256

PE Digest Matches

true

95:8d:07:cd:3b:a6:08:69:cf:59:91:69:31:01:b4:95:67:1b:21:88
Signer

Actual PE Digest

95:8d:07:cd:3b:a6:08:69:cf:59:91:69:31:01:b4:95:67:1b:21:88

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\SVN\RTInstaller\SRC\Release\RTInstaller32.pdb

Imports

setupapi

SetupGetStringFieldW
CM_Get_DevNode_Status
SetupCloseInfFile
SetupDiOpenDevRegKey
SetupRemoveFromSourceListW
SetupCopyOEMInfW
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupFindFirstLineW
CM_Connect_MachineW
SetupDiClassGuidsFromNameW
SetupOpenInfFileW
SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
SetupDiSetClassInstallParamsW
SetupGetInfFileListW
SetupFindNextLine
CM_Locate_DevNode_ExW
CM_Disconnect_Machine
SetupUninstallOEMInfW
CM_Reenumerate_DevNode_Ex
SetupDiDeleteDevRegKey
SetupAddToSourceListW

newdev

UpdateDriverForPlugAndPlayDevicesW

kernel32

GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
LCMapStringW
FindFirstFileW
HeapFree
SetLastError
GetModuleFileNameW
FindClose
WaitForSingleObject
GetFileAttributesW
GetVersionExW
SetFileAttributesW
GetCommandLineA
GetLastError
DeleteFileW
CloseHandle
HeapAlloc
GetCurrentDirectoryW
GetWindowsDirectoryW
VerSetConditionMask
GetProcessHeap
CreateProcessW
VerifyVersionInfoW
GetExitCodeProcess
GetTempPathW
CreateFileW
OpenProcess
ExitProcess
GetCurrentProcessId
CopyFileW
GetTickCount
CompareStringW
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
GetConsoleCP
WriteConsoleW
GetConsoleMode
HeapSize
HeapReAlloc
ReadFile
ReadConsoleW
SetEndOfFile
DecodePointer
Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetStdHandle
WriteFile
GetModuleHandleExW
GetFileType

user32

MessageBoxW

advapi32

RegEnumKeyExW
RegCloseKey
CryptAcquireContextW
RegQueryInfoKeyW
CloseServiceHandle
OpenSCManagerW
RegDeleteKeyW
RegCreateKeyExW
CryptCreateHash
CryptHashData
RegSetValueExW
CryptDestroyHash
RegOpenKeyExW
QueryServiceConfigW
RegDeleteValueW
OpenServiceW
CryptGetHashParam
RegOpenKeyW
RegEnumValueW
RegQueryValueExW
CryptReleaseContext

Sections

.text
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/TOOL/RTInstaller64.dat
.exe windows:6 windows x64 arch:x64

3a837ac87ec6789368cd67043a35a913

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:fc:fa:c0:8e:21:6a:1c:1f:da:a6:b7:7b:b2:d6:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

06/01/2020, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:59:58:f8:a9:0b:14:fa:25:43:6b:89:fb:30:76:60
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

03/01/2019, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5e:5e:d3:e5:f7:59:9f:b1:a9:b2:be:c4:72:ec:61:f5:06:55:08:6a:ad:a9:9d:1b:7c:6a:6e:3d:0e:27:db:14
Signer

Actual PE Digest

5e:5e:d3:e5:f7:59:9f:b1:a9:b2:be:c4:72:ec:61:f5:06:55:08:6a:ad:a9:9d:1b:7c:6a:6e:3d:0e:27:db:14

Digest Algorithm

sha256

PE Digest Matches

true

fd:2f:ab:76:cc:7b:eb:c6:0c:0b:0b:b5:8e:c8:fc:73:5f:ed:d6:68
Signer

Actual PE Digest

fd:2f:ab:76:cc:7b:eb:c6:0c:0b:0b:b5:8e:c8:fc:73:5f:ed:d6:68

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\SVN\RTInstaller\SRC\x64\Release\RTInstaller64.pdb

Imports

setupapi

SetupGetStringFieldW
CM_Get_DevNode_Status
SetupCloseInfFile
SetupDiOpenDevRegKey
SetupRemoveFromSourceListW
SetupCopyOEMInfW
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupFindFirstLineW
CM_Connect_MachineW
SetupDiClassGuidsFromNameW
SetupOpenInfFileW
SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
SetupDiSetClassInstallParamsW
SetupGetInfFileListW
SetupFindNextLine
CM_Locate_DevNode_ExW
CM_Disconnect_Machine
SetupUninstallOEMInfW
CM_Reenumerate_DevNode_Ex
SetupDiDeleteDevRegKey
SetupAddToSourceListW

newdev

UpdateDriverForPlugAndPlayDevicesW

kernel32

GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
LCMapStringW
FindFirstFileW
HeapFree
SetLastError
GetModuleFileNameW
FindClose
WaitForSingleObject
GetFileAttributesW
GetVersionExW
SetFileAttributesW
GetCommandLineA
GetLastError
DeleteFileW
CloseHandle
HeapAlloc
GetCurrentDirectoryW
GetWindowsDirectoryW
VerSetConditionMask
GetProcessHeap
CreateProcessW
VerifyVersionInfoW
GetExitCodeProcess
GetTempPathW
CreateFileW
OpenProcess
ExitProcess
GetCurrentProcessId
CopyFileW
GetTickCount
CompareStringW
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
ReadFile
ReadConsoleW
SetEndOfFile
WriteConsoleW
Sleep
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetStdHandle
WriteFile
GetModuleHandleExW
GetFileType

user32

MessageBoxW

advapi32

RegDeleteKeyW
RegCloseKey
CryptAcquireContextW
RegQueryInfoKeyW
CloseServiceHandle
OpenSCManagerW
RegCreateKeyExW
RegEnumKeyExW
CryptCreateHash
CryptHashData
RegSetValueExW
CryptDestroyHash
RegOpenKeyExW
QueryServiceConfigW
RegDeleteValueW
OpenServiceW
CryptGetHashParam
RegOpenKeyW
RegEnumValueW
RegQueryValueExW
CryptReleaseContext

Sections

.text
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/TOOL/RTIoLib32.dll
.dll windows:4 windows x86 arch:x86

cbfd74732ec2a8190d1e1e7b56a943da

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/06/2016, 00:00

Not After

24/01/2019, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21/01/2016, 00:00

Not After

24/01/2019, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:c6:f4:7a:51:ad:92:02:c6:bf:09:2d:f8:37:44:43:81:4a:06:9c:1d:64:5b:69:bd:fe:7b:30:2d:0c:a1:e3
Signer

Actual PE Digest

06:c6:f4:7a:51:ad:92:02:c6:bf:09:2d:f8:37:44:43:81:4a:06:9c:1d:64:5b:69:bd:fe:7b:30:2d:0c:a1:e3

Digest Algorithm

sha256

PE Digest Matches

true

ad:a9:d9:8e:f6:b6:46:2c:c6:52:7b:90:56:2a:26:ef:bc:fb:01:8f
Signer

Actual PE Digest

ad:a9:d9:8e:f6:b6:46:2c:c6:52:7b:90:56:2a:26:ef:bc:fb:01:8f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\RTIoLib\SRC\release\RTIoLib32.pdb

Imports

kernel32

GetCurrentProcessId
CreateFileW
OpenProcess
DeviceIoControl
DuplicateHandle
GetModuleFileNameW
FreeLibrary
LoadLibraryExW
Sleep
GetLastError
GetVersionExW
GetCurrentProcess
GetProcAddress
CloseHandle
GetModuleHandleW
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
RaiseException
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
RtlUnwind
HeapSize
VirtualAlloc
HeapReAlloc
WriteFile
LoadLibraryA
InitializeCriticalSection
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA

advapi32

StartServiceW
DeleteService
OpenServiceW
CloseServiceHandle
CreateServiceW
OpenSCManagerW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
ControlService

Exports

Exports

GetIoBase
LoadPhyMemDriver
MapPhyMem
ReadPortByte
ReadPortLong
ReadPortWord
RtIoInformFWS3S4S5
RtIoReadAsfUchar
RtIoReadAsfUlong
RtIoReadAsfUshort
RtIoReadCPUUchar
RtIoReadCPUUlong
RtIoReadCPUUshort
RtIoReadCSIUchar
RtIoReadCSIUlong
RtIoReadCSIUshort
RtIoReadChannel
RtIoReadEEPROMUshort
RtIoReadEfuseByte
RtIoReadExtGMACUchar
RtIoReadExtGMACUlong
RtIoReadExtGMACUshort
RtIoReadMacByte
RtIoReadMacDword
RtIoReadMacWord
RtIoReadMcuAccessRegWord
RtIoReadOCPUchar
RtIoReadOCPUlong
RtIoReadOCPUshort
RtIoReadPCIUchar
RtIoReadPCIUlong
RtIoReadPCIUshort
RtIoReadPciEPhyUshort
RtIoReadPhyOcpRegWord
RtIoReadPhyUshort
RtIoReadUSBUchar
RtIoReadUSBUlong
RtIoReadUSBUshort
RtIoReadVPD
RtIoWriteAsfUchar
RtIoWriteAsfUlong
RtIoWriteAsfUshort
RtIoWriteCPUUchar
RtIoWriteCPUUlong
RtIoWriteCPUUshort
RtIoWriteCSIUchar
RtIoWriteCSIUlong
RtIoWriteCSIUshort
RtIoWriteChannel
RtIoWriteEEPROMUshort
RtIoWriteEfuseByte
RtIoWriteExtGMACUchar
RtIoWriteExtGMACUlong
RtIoWriteExtGMACUshort
RtIoWriteMacByte
RtIoWriteMacDword
RtIoWriteMacWord
RtIoWriteMcuAccessRegWord
RtIoWriteOCPUchar
RtIoWriteOCPUlong
RtIoWriteOCPUshort
RtIoWritePCIUchar
RtIoWritePCIUlong
RtIoWritePCIUshort
RtIoWritePciEPhyUshort
RtIoWritePhyOcpRegWord
RtIoWritePhyUshort
RtIoWriteUSBUchar
RtIoWriteUSBUlong
RtIoWriteUSBUshort
RtIoWriteVPD
SendSMI
UnloadPhyMemDriver
UnmapPhyMem
WritePortByte
WritePortLong
WritePortWord

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/TOOL/RTIoLib64.dll
.dll windows:4 windows x64 arch:x64

625a9a2139046104e37e4654c9a0a63d

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:20:be:3e:b8:66:52:69:27:f9:99:b9:7b:04:34:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/06/2016, 00:00

Not After

24/01/2019, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21/01/2016, 00:00

Not After

24/01/2019, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c2:82:ea:45:55:0a:8e:0c:92:38:11:8f:ec:50:51:24:b7:71:6a:44:11:1d:40:fa:69:be:a6:ac:38:82:c0:5b
Signer

Actual PE Digest

c2:82:ea:45:55:0a:8e:0c:92:38:11:8f:ec:50:51:24:b7:71:6a:44:11:1d:40:fa:69:be:a6:ac:38:82:c0:5b

Digest Algorithm

sha256

PE Digest Matches

true

ef:2b:de:ce:b4:8f:c7:b1:8f:cc:11:f7:7d:cc:7b:4e:71:65:3a:dd
Signer

Actual PE Digest

ef:2b:de:ce:b4:8f:c7:b1:8f:cc:11:f7:7d:cc:7b:4e:71:65:3a:dd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

e:\RTIoLib\SRC\x64\release\RTIoLib64.pdb

Imports

kernel32

GetCurrentProcessId
CreateFileW
OpenProcess
DeviceIoControl
DuplicateHandle
GetModuleFileNameW
FreeLibrary
LoadLibraryExW
Sleep
GetLastError
GetVersionExW
GetCurrentProcess
GetProcAddress
CloseHandle
GetModuleHandleW
GetCurrentThreadId
FlsSetValue
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlPcToFileHeader
GetModuleHandleA
ExitProcess
FlsGetValue
TlsFree
FlsFree
SetLastError
TlsSetValue
FlsAlloc
HeapSetInformation
HeapCreate
HeapDestroy
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
HeapSize
WriteFile
LoadLibraryA
InitializeCriticalSection
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA

advapi32

StartServiceW
DeleteService
OpenServiceW
CloseServiceHandle
CreateServiceW
OpenSCManagerW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
ControlService

Exports

Exports

GetIoBase
LoadPhyMemDriver
MapPhyMem
ReadPortByte
ReadPortLong
ReadPortWord
RtIoInformFWS3S4S5
RtIoReadAsfUchar
RtIoReadAsfUlong
RtIoReadAsfUshort
RtIoReadCPUUchar
RtIoReadCPUUlong
RtIoReadCPUUshort
RtIoReadCSIUchar
RtIoReadCSIUlong
RtIoReadCSIUshort
RtIoReadChannel
RtIoReadEEPROMUshort
RtIoReadEfuseByte
RtIoReadExtGMACUchar
RtIoReadExtGMACUlong
RtIoReadExtGMACUshort
RtIoReadMacByte
RtIoReadMacDword
RtIoReadMacWord
RtIoReadMcuAccessRegWord
RtIoReadOCPUchar
RtIoReadOCPUlong
RtIoReadOCPUshort
RtIoReadPCIUchar
RtIoReadPCIUlong
RtIoReadPCIUshort
RtIoReadPciEPhyUshort
RtIoReadPhyOcpRegWord
RtIoReadPhyUshort
RtIoReadUSBUchar
RtIoReadUSBUlong
RtIoReadUSBUshort
RtIoReadVPD
RtIoWriteAsfUchar
RtIoWriteAsfUlong
RtIoWriteAsfUshort
RtIoWriteCPUUchar
RtIoWriteCPUUlong
RtIoWriteCPUUshort
RtIoWriteCSIUchar
RtIoWriteCSIUlong
RtIoWriteCSIUshort
RtIoWriteChannel
RtIoWriteEEPROMUshort
RtIoWriteEfuseByte
RtIoWriteExtGMACUchar
RtIoWriteExtGMACUlong
RtIoWriteExtGMACUshort
RtIoWriteMacByte
RtIoWriteMacDword
RtIoWriteMacWord
RtIoWriteMcuAccessRegWord
RtIoWriteOCPUchar
RtIoWriteOCPUlong
RtIoWriteOCPUshort
RtIoWritePCIUchar
RtIoWritePCIUlong
RtIoWritePCIUshort
RtIoWritePciEPhyUshort
RtIoWritePhyOcpRegWord
RtIoWritePhyUshort
RtIoWriteUSBUchar
RtIoWriteUSBUlong
RtIoWriteUSBUshort
RtIoWriteVPD
SendSMI
UnloadPhyMemDriver
UnmapPhyMem
WritePortByte
WritePortLong
WritePortWord

Sections

.text
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Shared
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/TOOL/installExt.bat
.bat .vbs
REALTEKDRIVER/TOOL/lansetm.dat
.exe windows:5 windows x86 arch:x86

e1fc9b823e3c21525c5441ea56611f41

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:da:4c:26:c7:6e:12:55:dc:82:79:aa:9a:75:1a:cc
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

16/06/2016, 00:00

Not After

05/09/2017, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:d7:e0:27:b2:95:b6:d1:08:d8:a7:df:2c:e2:ac:05
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

31/07/2015, 00:00

Not After

05/09/2017, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

16:05:2f:56:28:08:3e:89:fb:45:26:25:f3:1e:74:f0:df:d8:5e:11:14:cc:ef:dd:27:31:49:1a:4b:7e:c5:72
Signer

Actual PE Digest

16:05:2f:56:28:08:3e:89:fb:45:26:25:f3:1e:74:f0:df:d8:5e:11:14:cc:ef:dd:27:31:49:1a:4b:7e:c5:72

Digest Algorithm

sha256

PE Digest Matches

true

11:f9:2c:aa:ff:bc:d4:c6:e8:d4:4a:5c:2b:1a:d7:91:78:b4:1e:37
Signer

Actual PE Digest

11:f9:2c:aa:ff:bc:d4:c6:e8:d4:4a:5c:2b:1a:d7:91:78:b4:1e:37

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\test\lansetup\98seme\objfre_w2K_x86\i386\lansetm.pdb

Imports

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA

kernel32

SetFileAttributesA
lstrcatA
lstrcpyA
LocalAlloc
GetLastError
GetWindowsDirectoryA
FindFirstFileA
SetLastError
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
GetProcAddress
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
ExitProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsAlloc
DeleteFileA
TlsSetValue
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
CloseHandle
Sleep
VirtualProtect
GetSystemInfo
VirtualQuery
LCMapStringA
MultiByteToWideChar
LCMapStringW
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
RtlUnwind
InterlockedExchange
CreateFileA
SetStdHandle
FlushFileBuffers
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
ReadFile
SetFilePointer
lstrlenA
LocalFree
GetVersionExA
GetCurrentDirectoryA
TlsFree

setupapi

SetupFindNextLine
SetupGetStringFieldA
SetupFindFirstLineA
SetupCloseInfFile
SetupOpenInfFileA
SetupGetInfFileListA
SetupDiDestroyDeviceInfoList
SetupDiOpenDevRegKey
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiCallClassInstaller
SetupDiRemoveDevice
SetupDiDeleteDevRegKey
SetupCopyOEMInfA
SetupAddToSourceListA
SetupRemoveFromSourceListA

newdev

UpdateDriverForPlugAndPlayDevicesA

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
REALTEKDRIVER/TOOL/uninstallExt.bat
.bat .vbs
REALTEKDRIVER/WIN10/NDIS6/32/rt640x86.cat
REALTEKDRIVER/WIN10/NDIS6/32/rt640x86.inf
REALTEKDRIVER/WIN10/NDIS6/32/rt640x86.sys
.sys windows:10 windows x86 arch:x86

7f7bf552e1384ef4abfa578c5e95975f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\SVN\ndis_6\driver\SRC\SRC\sysw10\Release\x86\rt640x86.pdb

Imports

ntoskrnl.exe

RtlRandomEx
_vsnwprintf
IoVolumeDeviceToDosName
ZwQuerySymbolicLinkObject
ZwOpenSymbolicLinkObject
ZwEnumerateValueKey
ZwEnumerateKey
ObfReferenceObject
IoWMIQueryAllData
IoWMIOpenBlock
IoGetDeviceObjectPointer
IofCompleteRequest
MmMapIoSpaceEx
MmUnmapIoSpace
KeSetEvent
_vsnprintf
ZwDeleteValueKey
ObfDereferenceObject
IoGetDeviceProperty
ExUnregisterCallback
ExRegisterCallback
ExCreateCallback
RtlAppendUnicodeToString
memmove
MmMapLockedPagesSpecifyCache
KeFlushIoBuffers
ExEventObjectType
memcmp
ObReferenceObjectByHandle
KeGetProcessorIndexFromNumber
WRITE_REGISTER_UCHAR
_allmul
RtlInitUnicodeString
ObDereferenceObjectDeferDelete
KeQuerySystemTime
RtlEqualUnicodeString
memset
memcpy
IoGetAttachedDevice
ZwPowerInformation
ZwQueryValueKey
ZwOpenKey
ZwClose
IoWMIRegistrationControl
IofCallDriver
IoBuildSynchronousFsdRequest
ExFreePoolWithTag
ExAllocatePoolWithTag
KeGetProcessorNumberFromIndex
KeWaitForSingleObject
KeInitializeEvent
WRITE_REGISTER_ULONG
RtlCopyUnicodeString
PsGetVersion
ExAllocatePoolWithQuotaTag
ZwQuerySystemInformation
RtlUnwind
WRITE_REGISTER_USHORT
RtlVerifyVersionInfo
VerSetConditionMask
MmGetSystemRoutineAddress

hal

READ_PORT_ULONG
KfRaiseIrql
KfLowerIrql
WRITE_PORT_UCHAR
READ_PORT_UCHAR
KeStallExecutionProcessor
KeGetCurrentIrql
WRITE_PORT_ULONG

ndis.sys

NdisFreeNetBufferPool
NdisAllocateNetBufferPool
NdisGetDeviceReservedExtension
NdisDeregisterDeviceEx
NdisRegisterDeviceEx
NdisMIdleNotificationComplete
NdisMIdleNotificationConfirm
NdisGetProcessorInformationEx
NdisWriteConfiguration
NdisMResetMiniport
NdisMResetComplete
NdisMIndicateReceiveNetBufferLists
NdisMFreeNetBufferSGList
NdisMAllocateNetBufferSGList
NdisAcquireRWLockRead
NdisMIndicateStatusEx
NdisReleaseRWLock
NdisAcquireRWLockWrite
NdisMSetBusData
NdisMDeregisterScatterGatherDma
NdisMRegisterScatterGatherDma
NdisMGetDeviceProperty
NdisMFreeSharedMemory
NdisAllocateNetBuffer
NdisMGetDmaAlignment
NdisMUnmapIoSpace
NdisMDeregisterIoPortRange
NdisFreeMdl
NdisAllocateMdl
NdisAllocateNetBufferAndNetBufferList
NdisFreeNetBufferList
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisOpenConfigurationEx
NdisGetSharedDataAlignment
NdisInitializeEvent
NdisReadNetworkAddress
NdisCloseConfiguration
NdisReadConfiguration
NdisFreeRWLock
NdisAllocateRWLock
NdisMGetBusData
NdisMSendNetBufferListsComplete
NdisMOidRequestComplete
NdisMPauseComplete
NdisMDeregisterMiniportDriver
NdisMRegisterMiniportDriver
NdisMRemoveMiniport
NdisFreeNetBuffer
NdisAllocateNetBufferList
NdisMDeregisterInterruptEx
NdisMSynchronizeWithInterruptEx
NdisMQueueDpcEx
NdisMSetMiniportAttributes
NdisMRegisterIoPortRange
NdisMAllocateSharedMemory
NdisSetOptionalHandlers
NdisFreeMemory
NdisSetEvent
NdisWaitEvent
NdisWriteErrorLogEntry
NdisAllocateMemoryWithTagPriority
NdisMRegisterInterruptEx
NdisMMapIoSpace

wdfldr.sys

WdfVersionUnbind
WdfVersionBindClass
WdfVersionUnbindClass
WdfVersionBind

Sections

.text
Size: 871KB - Virtual size: 871KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/WIN10/NDIS6/32/rtvdevw10x86.cat
REALTEKDRIVER/WIN10/NDIS6/32/rtvdevw10x86.inf
REALTEKDRIVER/WIN10/NDIS6/32/rtvdevw10x86.sys
.sys windows:10 windows x86 arch:x86

0047ec2d98d456534094ec72a33f31ed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\SVN\ndis_6\VirtualDevice\InfAndSys\rtvdev\SRC\sysw10\Release\rtvdevw10x86.pdb

Imports

ntoskrnl.exe

RtlCopyUnicodeString
memset
memcpy
IoWMIRegistrationControl
MmGetSystemRoutineAddress
RtlInitUnicodeString

wpprecorder.sys

WppAutoLogStop
WppAutoLogTrace
WppAutoLogStart

wdfldr.sys

WdfVersionUnbindClass
WdfVersionBindClass
WdfVersionUnbind
WdfVersionBind

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/WIN10/NDIS6/32/rtvdevx86_ext.cat
REALTEKDRIVER/WIN10/NDIS6/32/rtvdevx86_ext.inf
REALTEKDRIVER/WIN10/NDIS6/64/rt640x64.cat
REALTEKDRIVER/WIN10/NDIS6/64/rt640x64.inf
REALTEKDRIVER/WIN10/NDIS6/64/rt640x64.sys
.sys windows:10 windows x64 arch:x64

d8977eb6d3299c0bc0f2a9bbad817cbe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\SVN\ndis_6\driver\SRC\SRC\sysw10x64\Release\x64\rt640x64.pdb

Imports

ntoskrnl.exe

ObReferenceObjectByHandle
_vsnwprintf
IoVolumeDeviceToDosName
ZwQuerySymbolicLinkObject
ZwOpenSymbolicLinkObject
ZwEnumerateValueKey
ZwEnumerateKey
ObfReferenceObject
IoWMIQueryAllData
IoWMIOpenBlock
IoGetDeviceObjectPointer
IofCompleteRequest
MmMapIoSpaceEx
MmUnmapIoSpace
KeSetEvent
Mm64BitPhysicalAddress
_vsnprintf
ZwDeleteValueKey
ObfDereferenceObject
IoGetDeviceProperty
ExUnregisterCallback
ExRegisterCallback
ExCreateCallback
RtlAppendUnicodeToString
MmMapLockedPagesSpecifyCache
KfRaiseIrql
KeLowerIrql
KeFlushIoBuffers
ExEventObjectType
RtlInitUnicodeString
KeGetProcessorIndexFromNumber
RtlRandomEx
ObDereferenceObjectDeferDelete
RtlEqualUnicodeString
IoGetAttachedDevice
ZwPowerInformation
ZwQueryValueKey
ZwOpenKey
ZwClose
IoWMIRegistrationControl
IofCallDriver
IoBuildSynchronousFsdRequest
ExFreePoolWithTag
ExAllocatePoolWithTag
KeGetProcessorNumberFromIndex
KeWaitForSingleObject
RtlCopyUnicodeString
PsGetVersion
ExAllocatePoolWithQuotaTag
ZwQuerySystemInformation
KeInitializeEvent
RtlVerifyVersionInfo
VerSetConditionMask
MmGetSystemRoutineAddress

hal

KeStallExecutionProcessor

ndis.sys

NdisMPauseComplete
NdisMDeregisterMiniportDriver
NdisMRegisterMiniportDriver
NdisMRemoveMiniport
NdisAllocateNetBufferList
NdisFreeNetBuffer
NdisAllocateNetBuffer
NdisFreeNetBufferPool
NdisAllocateNetBufferPool
NdisGetDeviceReservedExtension
NdisDeregisterDeviceEx
NdisRegisterDeviceEx
NdisMIdleNotificationComplete
NdisMIdleNotificationConfirm
NdisGetProcessorInformationEx
NdisWriteConfiguration
NdisMResetMiniport
NdisMResetComplete
NdisMIndicateReceiveNetBufferLists
NdisMFreeNetBufferSGList
NdisMAllocateNetBufferSGList
NdisAcquireRWLockRead
NdisMIndicateStatusEx
NdisReleaseRWLock
NdisMOidRequestComplete
NdisMSetBusData
NdisMDeregisterScatterGatherDma
NdisMRegisterScatterGatherDma
NdisMGetDeviceProperty
NdisMFreeSharedMemory
NdisMAllocateSharedMemory
NdisMGetDmaAlignment
NdisMUnmapIoSpace
NdisMDeregisterIoPortRange
NdisFreeMdl
NdisAllocateMdl
NdisAllocateNetBufferAndNetBufferList
NdisFreeNetBufferList
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisOpenConfigurationEx
NdisGetSharedDataAlignment
NdisInitializeEvent
NdisReadNetworkAddress
NdisCloseConfiguration
NdisReadConfiguration
NdisFreeRWLock
NdisAllocateRWLock
NdisMGetBusData
NdisAcquireRWLockWrite
NdisMMapIoSpace
NdisFreeMemory
NdisSetEvent
NdisWaitEvent
NdisWriteErrorLogEntry
NdisAllocateMemoryWithTagPriority
NdisSetOptionalHandlers
NdisMRegisterInterruptEx
NdisMDeregisterInterruptEx
NdisMSynchronizeWithInterruptEx
NdisMQueueDpcEx
NdisMSetMiniportAttributes
NdisMRegisterIoPortRange
NdisMSendNetBufferListsComplete

wdfldr.sys

WdfVersionUnbind
WdfVersionBindClass
WdfVersionUnbindClass
WdfVersionBind

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/WIN10/NDIS6/64/rtvdevw10x64.cat
REALTEKDRIVER/WIN10/NDIS6/64/rtvdevw10x64.inf
REALTEKDRIVER/WIN10/NDIS6/64/rtvdevw10x64.sys
.sys windows:10 windows x64 arch:x64

c4a15910eeb6bec9c4acb1e9e5ec653a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\SVN\ndis_6\VirtualDevice\InfAndSys\rtvdev\SRC\sysw10x64\x64\Release\rtvdevw10x64.pdb

Imports

ntoskrnl.exe

RtlInitUnicodeString
IoWMIRegistrationControl
MmGetSystemRoutineAddress
RtlCopyUnicodeString

wpprecorder.sys

WppAutoLogStop
WppAutoLogTrace
WppAutoLogStart

wdfldr.sys

WdfVersionUnbindClass
WdfVersionBindClass
WdfVersionUnbind
WdfVersionBind

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/WIN10/NDIS6/64/rtvdevx64_ext.cat
REALTEKDRIVER/WIN10/NDIS6/64/rtvdevx64_ext.inf
REALTEKDRIVER/WIN7/NDIS6/32/RTNUninst32.dll
.dll windows:4 windows x86 arch:x86

9035aeae7526feecac4656371bf4762e

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21/01/2016, 00:00

Not After

24/01/2019, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:b5:21:3f:ca:1e:4a:a0:3d:e4:00:00:00:00:00:b5
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 22:15

Not After

02/12/2021, 22:15

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ea:3b:22:a0:34:ad:8d:22:f8:fc:0c:dc:48:71:7a:b0:be:90:7b:2f:13:68:43:48:11:5c:15:af:0d:1f:ec:34
Signer

Actual PE Digest

ea:3b:22:a0:34:ad:8d:22:f8:fc:0c:dc:48:71:7a:b0:be:90:7b:2f:13:68:43:48:11:5c:15:af:0d:1f:ec:34

Digest Algorithm

sha256

PE Digest Matches

true

78:75:50:9e:9f:63:30:b0:c7:b7:65:e5:d0:1e:3b:84:e5:9e:f2:cf
Signer

Actual PE Digest

78:75:50:9e:9f:63:30:b0:c7:b7:65:e5:d0:1e:3b:84:e5:9e:f2:cf

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\SVN\RTUinstall\release\RTNUninst32.pdb

Imports

setupapi

SetupQuerySourceListW
SetupDiGetClassDevsW
SetupDiOpenDevRegKey
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupFreeSourceListW

kernel32

GetSystemDirectoryW
Sleep
CopyFileW
GetVersionExW
GetExitCodeProcess
CreateProcessW
GetLastError
LocalAlloc
CloseHandle
GetWindowsDirectoryW
LocalFree
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
lstrlenW
GetStdHandle
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
RtlUnwind
LoadLibraryA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapSize
FlushFileBuffers

advapi32

RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW

Exports

Exports

RTNUninst

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/WIN7/NDIS6/32/RtNicprop32.DLL
.dll windows:6 windows x86 arch:x86

1c9375e2e60e968cade0919008ff6ab6

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:da:4c:26:c7:6e:12:55:dc:82:79:aa:9a:75:1a:cc
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

16/06/2016, 00:00

Not After

05/09/2017, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:b5:21:3f:ca:1e:4a:a0:3d:e4:00:00:00:00:00:b5
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 22:15

Not After

02/12/2021, 22:15

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b6:cd:61:39:8a:0d:cd:37:2c:0a:61:f1:6a:08:29:ea:97:7c:95:3a:13:29:01:b2:55:60:a2:63:1a:ad:86:5f
Signer

Actual PE Digest

b6:cd:61:39:8a:0d:cd:37:2c:0a:61:f1:6a:08:29:ea:97:7c:95:3a:13:29:01:b2:55:60:a2:63:1a:ad:86:5f

Digest Algorithm

sha256

PE Digest Matches

true

47:c5:e3:16:2b:86:70:ff:01:dd:12:10:17:b1:23:2e:13:fb:2e:ee
Signer

Actual PE Digest

47:c5:e3:16:2b:86:70:ff:01:dd:12:10:17:b1:23:2e:13:fb:2e:ee

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\VS2015\Release\RTNicProp32.pdb

Imports

comctl32

DestroyPropertySheetPage
CreatePropertySheetPageW

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException

Exports

Exports

RTNicPropPageProvider

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/WIN7/NDIS6/32/rt86win7.cat
REALTEKDRIVER/WIN7/NDIS6/32/rt86win7.inf
REALTEKDRIVER/WIN7/NDIS6/32/rt86win7.sys
.sys windows:10 windows x86 arch:x86

f1820dab518167d8cccda6306b3d8c28

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\SVN\ndis_6\driver\SRC\SRC\sysw7\Release\x86\rt86win7.pdb

Imports

ntoskrnl.exe

KeGetProcessorIndexFromNumber
KeBugCheckEx
_vsnwprintf
IoVolumeDeviceToDosName
ZwQuerySymbolicLinkObject
ZwOpenSymbolicLinkObject
ZwEnumerateValueKey
ZwEnumerateKey
ObfReferenceObject
IoWMIQueryAllData
IoWMIOpenBlock
IoGetDeviceObjectPointer
IofCompleteRequest
MmUnmapIoSpace
MmMapIoSpace
KeSetEvent
_vsnprintf
ZwDeleteValueKey
ObfDereferenceObject
IoGetDeviceProperty
ExUnregisterCallback
ExRegisterCallback
ExCreateCallback
RtlAppendUnicodeToString
memmove
MmMapLockedPagesSpecifyCache
ExEventObjectType
ObReferenceObjectByHandle
RtlInitUnicodeString
WRITE_REGISTER_UCHAR
_allmul
RtlRandomEx
ObDereferenceObjectDeferDelete
ExDeleteNPagedLookasideList
ExInitializeNPagedLookasideList
InterlockedPushEntrySList
InterlockedPopEntrySList
KeQuerySystemTime
RtlEqualUnicodeString
memset
memcpy
ZwQueryValueKey
ZwOpenKey
ZwClose
IoWMIRegistrationControl
MmGetSystemRoutineAddress
ExFreePoolWithTag
ExAllocatePoolWithTag
KeGetProcessorNumberFromIndex
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
WRITE_REGISTER_ULONG
WRITE_REGISTER_USHORT
RtlVerifyVersionInfo
VerSetConditionMask

hal

WRITE_PORT_ULONG
READ_PORT_ULONG
KfRaiseIrql
KfLowerIrql
WRITE_PORT_UCHAR
READ_PORT_UCHAR
KeStallExecutionProcessor
KfReleaseSpinLock
KfAcquireSpinLock
KeGetCurrentIrql

ndis.sys

NdisWriteConfiguration
NdisMResetComplete
NdisMIndicateReceiveNetBufferLists
NdisMFreeNetBufferSGList
NdisMAllocateNetBufferSGList
NdisAcquireRWLockRead
NdisMIndicateStatusEx
NdisReleaseRWLock
NdisAcquireRWLockWrite
NdisMSetBusData
NdisFreeIoWorkItem
NdisAllocateIoWorkItem
NdisMDeregisterScatterGatherDma
NdisMRegisterScatterGatherDma
NdisMGetDeviceProperty
NdisMFreeSharedMemory
NdisMAllocateSharedMemory
NdisMGetDmaAlignment
NdisMUnmapIoSpace
NdisMDeregisterIoPortRange
NdisFreeMdl
NdisAllocateMdl
NdisCancelTimerObject
NdisFreeNetBufferList
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisFreeTimerObject
NdisOpenConfigurationEx
NdisGetSharedDataAlignment
NdisInitializeEvent
NdisReadNetworkAddress
NdisCloseConfiguration
NdisReadConfiguration
NdisFreeRWLock
NdisAllocateRWLock
NdisMGetBusData
NdisQueueIoWorkItem
NdisMSendNetBufferListsComplete
NdisMOidRequestComplete
NdisMPauseComplete
NdisMDeregisterMiniportDriver
NdisMRegisterMiniportDriver
NdisMRemoveMiniport
NdisMMapIoSpace
NdisMRegisterIoPortRange
NdisGetProcessorInformationEx
NdisRegisterDeviceEx
NdisDeregisterDeviceEx
NdisGetDeviceReservedExtension
NdisAllocateNetBufferPool
NdisFreeNetBufferPool
NdisAllocateNetBuffer
NdisFreeNetBuffer
NdisAllocateNetBufferList
NdisAllocateNetBufferAndNetBufferList
NdisSetEvent
NdisFreeMemory
NdisMQueueDpcEx
NdisWaitEvent
NdisWriteErrorLogEntry
NdisAllocateMemoryWithTagPriority
NdisSetOptionalHandlers
NdisAllocateTimerObject
NdisSetTimerObject
NdisMRegisterInterruptEx
NdisMDeregisterInterruptEx
NdisMSynchronizeWithInterruptEx
NdisMSetMiniportAttributes

Sections

.text
Size: 855KB - Virtual size: 855KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/WIN7/NDIS6/32/rtvdevw7x86.cat
REALTEKDRIVER/WIN7/NDIS6/32/rtvdevw7x86.inf
REALTEKDRIVER/WIN7/NDIS6/32/rtvdevw7x86.sys
.sys windows:10 windows x86 arch:x86

84bcf473502279a1274466afe23f6d5d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\SVN\ndis_6\VirtualDevice\InfAndSys\rtvdev\SRC\sysw7\Release\rtvdevw7x86.pdb

Imports

ntoskrnl.exe

memset
RtlCopyUnicodeString
memcpy
IoWMIRegistrationControl
MmGetSystemRoutineAddress
RtlInitUnicodeString
KeBugCheckEx

wdfldr.sys

WdfVersionBindClass
WdfVersionBind
WdfVersionUnbind
WdfVersionUnbindClass

Sections

.text
Size: 1024B - Virtual size: 1014B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 742B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/WIN7/NDIS6/64/RTNUninst64.dll
.dll windows:4 windows x64 arch:x64

2955cc8f4a95c41b38b4d52bb0ab15f9

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:99:97:ac:cb:4b:38:4c:80:e3:13:dd:28:54:40:7b
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21/01/2016, 00:00

Not After

24/01/2019, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:b5:21:3f:ca:1e:4a:a0:3d:e4:00:00:00:00:00:b5
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 22:15

Not After

02/12/2021, 22:15

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

85:13:ae:38:1a:5f:1b:23:d1:82:d6:5c:41:a8:95:92:45:84:cb:0e:43:25:bf:c3:87:1b:6e:80:63:9e:f9:30
Signer

Actual PE Digest

85:13:ae:38:1a:5f:1b:23:d1:82:d6:5c:41:a8:95:92:45:84:cb:0e:43:25:bf:c3:87:1b:6e:80:63:9e:f9:30

Digest Algorithm

sha256

PE Digest Matches

true

70:23:00:c2:77:58:e5:91:73:c4:0e:13:25:f0:85:af:fb:79:51:81
Signer

Actual PE Digest

70:23:00:c2:77:58:e5:91:73:c4:0e:13:25:f0:85:af:fb:79:51:81

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

e:\SVN\RTUinstall\x64\release\RTNUninst64.pdb

Imports

setupapi

SetupQuerySourceListW
SetupDiGetClassDevsW
SetupDiOpenDevRegKey
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupFreeSourceListW

kernel32

GetSystemDirectoryW
Sleep
CopyFileW
GetVersionExW
GetExitCodeProcess
CreateProcessW
GetLastError
LocalAlloc
CloseHandle
GetWindowsDirectoryW
LocalFree
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
lstrlenW
GetACP
HeapFree
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
GetVersionExA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapSetInformation
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetOEMCP
FlsGetValue
TlsFree
FlsFree
SetLastError
TlsSetValue
FlsAlloc
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
LCMapStringW
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
InitializeCriticalSection
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapReAlloc
HeapSize
FlushFileBuffers

advapi32

RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW

Exports

Exports

RTNUninst

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 990B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/WIN7/NDIS6/64/RtNicprop64.DLL
.dll windows:6 windows x64 arch:x64

5db02add0a575d6165194230eb4d3aaf

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:da:4c:26:c7:6e:12:55:dc:82:79:aa:9a:75:1a:cc
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

16/06/2016, 00:00

Not After

05/09/2017, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:b5:21:3f:ca:1e:4a:a0:3d:e4:00:00:00:00:00:b5
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 22:15

Not After

02/12/2021, 22:15

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

91:d1:d7:a1:7c:53:ee:c4:c2:06:c3:7d:99:fd:2e:90:d2:74:ca:2b:97:bb:ef:7c:47:05:1f:c9:59:bc:99:21
Signer

Actual PE Digest

91:d1:d7:a1:7c:53:ee:c4:c2:06:c3:7d:99:fd:2e:90:d2:74:ca:2b:97:bb:ef:7c:47:05:1f:c9:59:bc:99:21

Digest Algorithm

sha256

PE Digest Matches

true

fd:83:ae:6d:2f:71:ad:6c:15:25:ab:64:89:12:1e:6d:51:c1:14:79
Signer

Actual PE Digest

fd:83:ae:6d:2f:71:ad:6c:15:25:ab:64:89:12:1e:6d:51:c1:14:79

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\VS2015\x64\Release\RTNicProp64.pdb

Imports

comctl32

DestroyPropertySheetPage
CreatePropertySheetPageW

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CloseHandle
WriteConsoleW
CreateFileW
RaiseException

Exports

Exports

RTNicPropPageProvider

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/WIN7/NDIS6/64/rt64win7.cat
REALTEKDRIVER/WIN7/NDIS6/64/rt64win7.inf
REALTEKDRIVER/WIN7/NDIS6/64/rt64win7.sys
.sys windows:10 windows x64 arch:x64

e0171f8d274b2652c5a4f4a184714235

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\SVN\ndis_6\driver\SRC\SRC\sysw7x64\Release\x64\rt64win7.pdb

Imports

ntoskrnl.exe

ExEventObjectType
KeBugCheckEx
_vsnwprintf
IoVolumeDeviceToDosName
ZwQuerySymbolicLinkObject
ZwOpenSymbolicLinkObject
ZwEnumerateValueKey
ZwEnumerateKey
ObfReferenceObject
IoWMIQueryAllData
IoWMIOpenBlock
IoGetDeviceObjectPointer
IofCompleteRequest
MmUnmapIoSpace
MmMapIoSpace
KeSetEvent
Mm64BitPhysicalAddress
_vsnprintf
ZwDeleteValueKey
ObfDereferenceObject
IoGetDeviceProperty
ExUnregisterCallback
ExRegisterCallback
ExCreateCallback
RtlAppendUnicodeToString
MmMapLockedPagesSpecifyCache
RtlInitUnicodeString
ObReferenceObjectByHandle
KeGetProcessorIndexFromNumber
RtlRandomEx
ObDereferenceObjectDeferDelete
ExDeleteNPagedLookasideList
ExInitializeNPagedLookasideList
ExpInterlockedPushEntrySList
ExpInterlockedPopEntrySList
ExQueryDepthSList
RtlEqualUnicodeString
ZwQueryValueKey
ZwOpenKey
ZwClose
IoWMIRegistrationControl
MmGetSystemRoutineAddress
ExFreePoolWithTag
ExAllocatePoolWithTag
KeGetProcessorNumberFromIndex
KeReleaseSpinLockFromDpcLevel
KeReleaseSpinLock
KeAcquireSpinLockRaiseToDpc
KeAcquireSpinLockAtDpcLevel
RtlVerifyVersionInfo
VerSetConditionMask

hal

KeStallExecutionProcessor

ndis.sys

NdisFreeNetBuffer
NdisAllocateNetBuffer
NdisFreeNetBufferPool
NdisAllocateNetBufferPool
NdisGetDeviceReservedExtension
NdisDeregisterDeviceEx
NdisRegisterDeviceEx
NdisGetProcessorInformationEx
NdisCancelTimerObject
NdisWriteConfiguration
NdisMResetComplete
NdisMIndicateReceiveNetBufferLists
NdisMFreeNetBufferSGList
NdisMAllocateNetBufferSGList
NdisAcquireRWLockRead
NdisMIndicateStatusEx
NdisReleaseRWLock
NdisAcquireRWLockWrite
NdisMSetBusData
NdisFreeIoWorkItem
NdisAllocateIoWorkItem
NdisMDeregisterScatterGatherDma
NdisMRegisterScatterGatherDma
NdisMGetDeviceProperty
NdisAllocateNetBufferList
NdisMAllocateSharedMemory
NdisMGetDmaAlignment
NdisMUnmapIoSpace
NdisMDeregisterIoPortRange
NdisFreeMdl
NdisAllocateMdl
NdisAllocateNetBufferAndNetBufferList
NdisFreeNetBufferList
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisFreeTimerObject
NdisOpenConfigurationEx
NdisGetSharedDataAlignment
NdisInitializeEvent
NdisReadNetworkAddress
NdisCloseConfiguration
NdisReadConfiguration
NdisFreeRWLock
NdisAllocateRWLock
NdisMGetBusData
NdisQueueIoWorkItem
NdisMSendNetBufferListsComplete
NdisMOidRequestComplete
NdisMPauseComplete
NdisMDeregisterMiniportDriver
NdisMFreeSharedMemory
NdisSetTimerObject
NdisFreeMemory
NdisSetEvent
NdisWaitEvent
NdisWriteErrorLogEntry
NdisAllocateMemoryWithTagPriority
NdisSetOptionalHandlers
NdisAllocateTimerObject
NdisMRemoveMiniport
NdisMRegisterInterruptEx
NdisMDeregisterInterruptEx
NdisMSynchronizeWithInterruptEx
NdisMQueueDpcEx
NdisMSetMiniportAttributes
NdisMRegisterIoPortRange
NdisMMapIoSpace
NdisMRegisterMiniportDriver

Sections

.text
Size: 1019KB - Virtual size: 1019KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/WIN7/NDIS6/64/rtvdevw7x64.cat
REALTEKDRIVER/WIN7/NDIS6/64/rtvdevw7x64.inf
REALTEKDRIVER/WIN7/NDIS6/64/rtvdevw7x64.sys
.sys windows:10 windows x64 arch:x64

9997a238c47968c1266f85c06779008d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\SVN\ndis_6\VirtualDevice\InfAndSys\rtvdev\SRC\sysw7x64\x64\Release\rtvdevw7x64.pdb

Imports

ntoskrnl.exe

IoWMIRegistrationControl
MmGetSystemRoutineAddress
RtlCopyUnicodeString
KeBugCheckEx
RtlInitUnicodeString

wdfldr.sys

WdfVersionUnbindClass
WdfVersionBind
WdfVersionUnbind
WdfVersionBindClass

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 910B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/WIN8/NDIS6/32/RtNicprop32.DLL
.dll windows:6 windows x86 arch:x86

1c9375e2e60e968cade0919008ff6ab6

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:da:4c:26:c7:6e:12:55:dc:82:79:aa:9a:75:1a:cc
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

16/06/2016, 00:00

Not After

05/09/2017, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:b5:21:3f:ca:1e:4a:a0:3d:e4:00:00:00:00:00:b5
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 22:15

Not After

02/12/2021, 22:15

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b6:cd:61:39:8a:0d:cd:37:2c:0a:61:f1:6a:08:29:ea:97:7c:95:3a:13:29:01:b2:55:60:a2:63:1a:ad:86:5f
Signer

Actual PE Digest

b6:cd:61:39:8a:0d:cd:37:2c:0a:61:f1:6a:08:29:ea:97:7c:95:3a:13:29:01:b2:55:60:a2:63:1a:ad:86:5f

Digest Algorithm

sha256

PE Digest Matches

true

47:c5:e3:16:2b:86:70:ff:01:dd:12:10:17:b1:23:2e:13:fb:2e:ee
Signer

Actual PE Digest

47:c5:e3:16:2b:86:70:ff:01:dd:12:10:17:b1:23:2e:13:fb:2e:ee

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\VS2015\Release\RTNicProp32.pdb

Imports

comctl32

DestroyPropertySheetPage
CreatePropertySheetPageW

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException

Exports

Exports

RTNicPropPageProvider

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/WIN8/NDIS6/32/rt630x86.cat
REALTEKDRIVER/WIN8/NDIS6/32/rt630x86.inf
REALTEKDRIVER/WIN8/NDIS6/32/rt630x86.sys
.sys windows:10 windows x86 arch:x86

a606790ece9f129940490e7d70ee8462

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\SVN\ndis_6\driver\SRC\SRC\sysw8\Release\x86\rt630x86.pdb

Imports

ntoskrnl.exe

_vsnwprintf
IoVolumeDeviceToDosName
ZwQuerySymbolicLinkObject
ZwOpenSymbolicLinkObject
ZwEnumerateValueKey
ZwEnumerateKey
ObfReferenceObject
IoWMIQueryAllData
IoWMIOpenBlock
IoGetDeviceObjectPointer
IofCompleteRequest
MmUnmapIoSpace
MmMapIoSpace
KeSetEvent
_vsnprintf
ZwDeleteValueKey
ObfDereferenceObject
IoGetDeviceProperty
ExUnregisterCallback
ExRegisterCallback
ExCreateCallback
RtlAppendUnicodeToString
memmove
MmMapLockedPagesSpecifyCache
ExEventObjectType
memcmp
ObReferenceObjectByHandle
KeGetProcessorIndexFromNumber
WRITE_REGISTER_UCHAR
_allmul
RtlRandomEx
ObDereferenceObjectDeferDelete
ExDeleteNPagedLookasideList
ExInitializeNPagedLookasideList
InterlockedPushEntrySList
InterlockedPopEntrySList
KeQuerySystemTime
KeInitializeSpinLock
RtlEqualUnicodeString
memset
memcpy
IoGetAttachedDevice
ZwPowerInformation
ZwQueryValueKey
ZwOpenKey
ZwClose
IoWMIRegistrationControl
IofCallDriver
IoBuildSynchronousFsdRequest
ExFreePoolWithTag
ExAllocatePoolWithTag
KeGetProcessorNumberFromIndex
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
KeWaitForSingleObject
KeInitializeEvent
WRITE_REGISTER_ULONG
WRITE_REGISTER_USHORT
RtlVerifyVersionInfo
VerSetConditionMask
MmGetSystemRoutineAddress
RtlInitUnicodeString
PsGetVersion
ExAllocatePoolWithQuotaTag
ZwQuerySystemInformation
RtlUnwind

hal

WRITE_PORT_ULONG
READ_PORT_ULONG
KfRaiseIrql
KfLowerIrql
WRITE_PORT_UCHAR
READ_PORT_UCHAR
KeStallExecutionProcessor
KfReleaseSpinLock
KfAcquireSpinLock
KeGetCurrentIrql

ndis.sys

NdisGetProcessorInformationEx
NdisCancelTimerObject
NdisWriteConfiguration
NdisMResetMiniport
NdisMResetComplete
NdisMIndicateReceiveNetBufferLists
NdisMFreeNetBufferSGList
NdisMAllocateNetBufferSGList
NdisAcquireRWLockRead
NdisMIndicateStatusEx
NdisReleaseRWLock
NdisAcquireRWLockWrite
NdisMSetBusData
NdisFreeIoWorkItem
NdisAllocateIoWorkItem
NdisMDeregisterScatterGatherDma
NdisMRegisterScatterGatherDma
NdisMGetDeviceProperty
NdisMFreeSharedMemory
NdisMAllocateSharedMemory
NdisMGetDmaAlignment
NdisMUnmapIoSpace
NdisMDeregisterIoPortRange
NdisFreeMdl
NdisAllocateMdl
NdisMIdleNotificationConfirm
NdisFreeNetBufferList
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisFreeTimerObject
NdisOpenConfigurationEx
NdisGetVersion
NdisGetSharedDataAlignment
NdisInitializeEvent
NdisReadNetworkAddress
NdisCloseConfiguration
NdisReadConfiguration
NdisFreeRWLock
NdisAllocateRWLock
NdisMGetBusData
NdisQueueIoWorkItem
NdisMSendNetBufferListsComplete
NdisMOidRequestComplete
NdisMPauseComplete
NdisMDeregisterMiniportDriver
NdisMRegisterMiniportDriver
NdisMRemoveMiniport
NdisMMapIoSpace
NdisMRegisterIoPortRange
NdisMSetMiniportAttributes
NdisMQueueDpcEx
NdisMSynchronizeWithInterruptEx
NdisMIdleNotificationComplete
NdisRegisterDeviceEx
NdisDeregisterDeviceEx
NdisGetDeviceReservedExtension
NdisAllocateNetBufferPool
NdisFreeNetBufferPool
NdisAllocateNetBuffer
NdisFreeNetBuffer
NdisAllocateNetBufferList
NdisAllocateNetBufferAndNetBufferList
NdisWaitEvent
NdisFreeMemory
NdisSetEvent
NdisMDeregisterInterruptEx
NdisWriteErrorLogEntry
NdisAllocateMemoryWithTagPriority
NdisSetOptionalHandlers
NdisAllocateTimerObject
NdisSetTimerObject
NdisMRegisterInterruptEx

Sections

.text
Size: 864KB - Virtual size: 863KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/WIN8/NDIS6/32/rtvdevw7x86.cat
REALTEKDRIVER/WIN8/NDIS6/32/rtvdevw7x86.inf
REALTEKDRIVER/WIN8/NDIS6/32/rtvdevw7x86.sys
.sys windows:10 windows x86 arch:x86

84bcf473502279a1274466afe23f6d5d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\SVN\ndis_6\VirtualDevice\InfAndSys\rtvdev\SRC\sysw7\Release\rtvdevw7x86.pdb

Imports

ntoskrnl.exe

memset
RtlCopyUnicodeString
memcpy
IoWMIRegistrationControl
MmGetSystemRoutineAddress
RtlInitUnicodeString
KeBugCheckEx

wdfldr.sys

WdfVersionBindClass
WdfVersionBind
WdfVersionUnbind
WdfVersionUnbindClass

Sections

.text
Size: 1024B - Virtual size: 1014B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 742B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/WIN8/NDIS6/64/RtNicprop64.DLL
.dll windows:6 windows x64 arch:x64

5db02add0a575d6165194230eb4d3aaf

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:da:4c:26:c7:6e:12:55:dc:82:79:aa:9a:75:1a:cc
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

16/06/2016, 00:00

Not After

05/09/2017, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,POSTALCODE=300,STREET=No. 2\, Innovation Road II\, Hsinchu Science Park,L=Hsinchu,ST=Taiwan,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:b5:21:3f:ca:1e:4a:a0:3d:e4:00:00:00:00:00:b5
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 22:15

Not After

02/12/2021, 22:15

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

91:d1:d7:a1:7c:53:ee:c4:c2:06:c3:7d:99:fd:2e:90:d2:74:ca:2b:97:bb:ef:7c:47:05:1f:c9:59:bc:99:21
Signer

Actual PE Digest

91:d1:d7:a1:7c:53:ee:c4:c2:06:c3:7d:99:fd:2e:90:d2:74:ca:2b:97:bb:ef:7c:47:05:1f:c9:59:bc:99:21

Digest Algorithm

sha256

PE Digest Matches

true

fd:83:ae:6d:2f:71:ad:6c:15:25:ab:64:89:12:1e:6d:51:c1:14:79
Signer

Actual PE Digest

fd:83:ae:6d:2f:71:ad:6c:15:25:ab:64:89:12:1e:6d:51:c1:14:79

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\VS2015\x64\Release\RTNicProp64.pdb

Imports

comctl32

DestroyPropertySheetPage
CreatePropertySheetPageW

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CloseHandle
WriteConsoleW
CreateFileW
RaiseException

Exports

Exports

RTNicPropPageProvider

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/WIN8/NDIS6/64/rt630x64.cat
REALTEKDRIVER/WIN8/NDIS6/64/rt630x64.inf
REALTEKDRIVER/WIN8/NDIS6/64/rt630x64.sys
.sys windows:10 windows x64 arch:x64

b1365c53ebd138fb8d0bd71a524fbe9a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\SVN\ndis_6\driver\SRC\SRC\sysw8x64\Release\x64\rt630x64.pdb

Imports

ntoskrnl.exe

_vsnwprintf
IoVolumeDeviceToDosName
ZwQuerySymbolicLinkObject
ZwOpenSymbolicLinkObject
ZwEnumerateValueKey
ZwEnumerateKey
ObfReferenceObject
IoWMIQueryAllData
IoWMIOpenBlock
IoGetDeviceObjectPointer
IofCompleteRequest
MmUnmapIoSpace
MmMapIoSpace
KeSetEvent
Mm64BitPhysicalAddress
_vsnprintf
ZwDeleteValueKey
ObfDereferenceObject
IoGetDeviceProperty
ExUnregisterCallback
ExRegisterCallback
ExCreateCallback
RtlAppendUnicodeToString
MmMapLockedPagesSpecifyCache
KfRaiseIrql
KeLowerIrql
ExEventObjectType
ObReferenceObjectByHandle
KeGetProcessorIndexFromNumber
RtlRandomEx
ObDereferenceObjectDeferDelete
ExDeleteNPagedLookasideList
ExInitializeNPagedLookasideList
ExpInterlockedPushEntrySList
ExpInterlockedPopEntrySList
ExQueryDepthSList
KeInitializeSpinLock
RtlEqualUnicodeString
IoGetAttachedDevice
ZwPowerInformation
ZwQueryValueKey
ZwOpenKey
ZwClose
IoWMIRegistrationControl
IofCallDriver
IoBuildSynchronousFsdRequest
ExFreePoolWithTag
ExAllocatePoolWithTag
KeGetProcessorNumberFromIndex
KeReleaseSpinLockFromDpcLevel
KeReleaseSpinLock
KeAcquireSpinLockRaiseToDpc
KeAcquireSpinLockAtDpcLevel
KeWaitForSingleObject
KeInitializeEvent
RtlVerifyVersionInfo
VerSetConditionMask
MmGetSystemRoutineAddress
RtlInitUnicodeString
PsGetVersion
ExAllocatePoolWithQuotaTag
ZwQuerySystemInformation

hal

KeStallExecutionProcessor

ndis.sys

NdisFreeNetBuffer
NdisAllocateNetBuffer
NdisFreeNetBufferPool
NdisAllocateNetBufferPool
NdisGetDeviceReservedExtension
NdisDeregisterDeviceEx
NdisRegisterDeviceEx
NdisMIdleNotificationComplete
NdisMIdleNotificationConfirm
NdisGetProcessorInformationEx
NdisCancelTimerObject
NdisWriteConfiguration
NdisMResetMiniport
NdisMResetComplete
NdisMIndicateReceiveNetBufferLists
NdisMFreeNetBufferSGList
NdisMAllocateNetBufferSGList
NdisAcquireRWLockRead
NdisMIndicateStatusEx
NdisReleaseRWLock
NdisAcquireRWLockWrite
NdisMSetBusData
NdisFreeIoWorkItem
NdisAllocateIoWorkItem
NdisMDeregisterScatterGatherDma
NdisMRegisterScatterGatherDma
NdisMGetDeviceProperty
NdisMFreeSharedMemory
NdisAllocateNetBufferList
NdisMGetDmaAlignment
NdisMUnmapIoSpace
NdisMDeregisterIoPortRange
NdisFreeMdl
NdisAllocateMdl
NdisAllocateNetBufferAndNetBufferList
NdisFreeNetBufferList
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisFreeTimerObject
NdisOpenConfigurationEx
NdisGetVersion
NdisGetSharedDataAlignment
NdisInitializeEvent
NdisReadNetworkAddress
NdisCloseConfiguration
NdisReadConfiguration
NdisFreeRWLock
NdisAllocateRWLock
NdisMGetBusData
NdisQueueIoWorkItem
NdisMSendNetBufferListsComplete
NdisMOidRequestComplete
NdisMPauseComplete
NdisMDeregisterMiniportDriver
NdisMRegisterMiniportDriver
NdisMRemoveMiniport
NdisMMapIoSpace
NdisMRegisterIoPortRange
NdisMAllocateSharedMemory
NdisMRegisterInterruptEx
NdisFreeMemory
NdisSetEvent
NdisWaitEvent
NdisWriteErrorLogEntry
NdisAllocateMemoryWithTagPriority
NdisSetOptionalHandlers
NdisAllocateTimerObject
NdisSetTimerObject
NdisMSetMiniportAttributes
NdisMDeregisterInterruptEx
NdisMSynchronizeWithInterruptEx
NdisMQueueDpcEx

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/WIN8/NDIS6/64/rtvdevw7x64.cat
REALTEKDRIVER/WIN8/NDIS6/64/rtvdevw7x64.inf
REALTEKDRIVER/WIN8/NDIS6/64/rtvdevw7x64.sys
.sys windows:10 windows x64 arch:x64

9997a238c47968c1266f85c06779008d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\SVN\ndis_6\VirtualDevice\InfAndSys\rtvdev\SRC\sysw7x64\x64\Release\rtvdevw7x64.pdb

Imports

ntoskrnl.exe

IoWMIRegistrationControl
MmGetSystemRoutineAddress
RtlCopyUnicodeString
KeBugCheckEx
RtlInitUnicodeString

wdfldr.sys

WdfVersionUnbindClass
WdfVersionBind
WdfVersionUnbind
WdfVersionBindClass

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 910B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
REALTEKDRIVER/all_in_one_pkg_note.txt
REALTEKDRIVER/data1.cab
REALTEKDRIVER/data1.hdr
REALTEKDRIVER/data2.cab
REALTEKDRIVER/layout.bin
REALTEKDRIVER/setup.exe
.exe windows:5 windows x86 arch:x86

c56467cb733da5d0dc212a96a41dcb6c

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:fc:fa:c0:8e:21:6a:1c:1f:da:a6:b7:7b:b2:d6:6e
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

06/01/2020, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:59:58:f8:a9:0b:14:fa:25:43:6b:89:fb:30:76:60
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

03/01/2019, 00:00

Not After

06/01/2022, 12:00

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

73:c4:44:90:01:29:29:94:c0:b9:a3:a1:44:27:05:26:b8:ba:21:2b:a6:f9:1d:8e:9b:a6:47:cc:0d:fe:0f:05
Signer

Actual PE Digest

73:c4:44:90:01:29:29:94:c0:b9:a3:a1:44:27:05:26:b8:ba:21:2b:a6:f9:1d:8e:9b:a6:47:cc:0d:fe:0f:05

Digest Algorithm

sha256

PE Digest Matches

true

d5:eb:48:50:3b:98:2f:25:57:0c:e8:92:45:2f:b5:e3:32:65:42:44
Signer

Actual PE Digest

d5:eb:48:50:3b:98:2f:25:57:0c:e8:92:45:2f:b5:e3:32:65:42:44

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\CodeBases\isdev\redist\Language Independent\i386\ISP\setup.pdb

Imports

comctl32

ord17

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

lz32

LZOpenFileW
LZCopy
LZClose

msi

ord88
ord17
ord137
ord141
ord8
ord125
ord171
ord169

kernel32

CreateDirectoryW
FindClose
FindFirstFileW
GetDiskFreeSpaceW
GetDriveTypeW
GetFileAttributesW
GetFileSize
SetFilePointer
WriteFile
RaiseException
SetErrorMode
QueryPerformanceFrequency
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
ReleaseMutex
CreateMutexW
CreateEventW
GetSystemTimeAsFileTime
GetSystemInfo
VirtualQuery
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
FindResourceExW
FreeLibrary
LoadLibraryExW
lstrcmpiW
lstrcpynW
lstrcatW
LoadLibraryW
GetPrivateProfileIntW
IsBadReadPtr
CompareStringW
CompareStringA
GetSystemDefaultLangID
GetUserDefaultLangID
ExpandEnvironmentStringsW
GetCurrentDirectoryW
FileTimeToLocalFileTime
GetFileTime
SetFileAttributesW
HeapAlloc
VerLanguageNameW
GetProcessHeap
CopyFileW
IsValidLocale
GetLocaleInfoW
WideCharToMultiByte
lstrcpyA
GetTickCount
ExitThread
CreateThread
GetExitCodeProcess
ReadFile
GetCommandLineW
FormatMessageW
LocalFree
GetVersionExW
GetWindowsDirectoryW
InterlockedDecrement
InterlockedIncrement
GetTempPathW
CreateFileW
FindResourceW
GlobalFree
GlobalUnlock
FreeResource
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcatA
lstrcmpiA
MulDiv
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
SetConsoleCtrlHandler
OutputDebugStringW
EnumSystemLocalesW
GetUserDefaultLCID
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetFileType
HeapReAlloc
GetStringTypeW
GetCurrentThreadId
GetCPInfo
GetOEMCP
IsValidCodePage
HeapSize
AreFileApisANSI
GetModuleHandleExW
GetStdHandle
CreateSemaphoreW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FatalAppExitA
GlobalLock
GlobalAlloc
SizeofResource
LockResource
LoadResource
MultiByteToWideChar
MoveFileExW
WriteProcessMemory
VirtualProtectEx
GetSystemDirectoryW
FlushInstructionCache
SetThreadContext
GetThreadContext
ResumeThread
TerminateProcess
ExitProcess
GetCurrentProcess
WaitForSingleObject
SetLastError
GetLastError
DuplicateHandle
RemoveDirectoryW
HeapFree
DeleteFileW
SetCurrentDirectoryW
lstrlenW
lstrcpyW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
CreateProcessW
Sleep
CloseHandle
GetACP
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
InterlockedExchange
lstrcpynA
ReadConsoleW
LocalAlloc
FindNextFileW
WritePrivateProfileSectionW
GetPrivateProfileSectionW
lstrcmpW
GetShortPathNameW
GetCurrentThread
QueryPerformanceCounter
SearchPathW
lstrcmpA
SystemTimeToFileTime
ResetEvent
SetEvent
VirtualProtect
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetDateFormatW
GetTimeFormatW
GetTempFileNameW
GetEnvironmentVariableW
CompareFileTime
SetFileTime
OpenProcess
GetProcessTimes
lstrlenA
GetLocalTime
GetCurrentProcessId
GetVersion
LCMapStringW
DecodePointer
EncodePointer
LeaveCriticalSection
EnterCriticalSection

user32

wsprintfW
CharUpperBuffW
SendMessageW
MoveWindow
DialogBoxIndirectParamW
EndDialog
GetDlgItem
SetDlgItemTextW
SetActiveWindow
SetForegroundWindow
SetWindowTextW
GetWindowRect
MessageBoxW
GetWindowLongW
WaitForInputIdle
SetWindowLongW
LoadIconW
TranslateMessage
DispatchMessageW
PeekMessageW
PostMessageW
SystemParametersInfoW
GetWindow
FillRect
GetSysColor
MapWindowPoints
RemovePropW
GetPropW
SetPropW
EndPaint
BeginPaint
EnableMenuItem
GetSystemMetrics
SetFocus
DefWindowProcW
GetMessageW
LoadStringW
LoadImageW
ReleaseDC
GetDC
CreateDialogParamW
GetParent
GetWindowTextW
CharNextW
GetDesktopWindow
GetClientRect
IsWindowEnabled
CreateDialogIndirectParamW
IsWindowVisible
IsDialogMessageW
FindWindowExW
ScreenToClient
EnableWindow
MsgWaitForMultipleObjects
SendDlgItemMessageW
SetWindowPos
ShowWindow
DestroyWindow
IsWindow
ExitWindowsEx
CharUpperW
wsprintfA
CallWindowProcW
CreateWindowExW
DrawIcon
DrawTextW
UpdateWindow
GetWindowDC
InvalidateRect
DrawFocusRect
CopyRect
InflateRect
EnumChildWindows
GetClassNameW
MapDialogRect
RegisterClassExW
GetDlgItemTextW
IntersectRect
MonitorFromPoint

gdi32

SetTextColor
SetBkMode
SetBkColor
SaveDC
RestoreDC
CreateSolidBrush
UnrealizeObject
CreateHalftonePalette
GetDIBColorTable
SelectPalette
SelectObject
RealizePalette
GetSystemPaletteEntries
GetDeviceCaps
DeleteDC
CreatePalette
CreateCompatibleDC
BitBlt
GetObjectW
TranslateCharsetInfo
DeleteObject
CreateFontIndirectW
CreateCompatibleBitmap
CreateDCW
CreatePatternBrush
GetStockObject
GetTextExtentPoint32W
DeleteMetaFile
CreateDIBitmap
CreateBitmap
CreateRectRgn
PatBlt
PlayMetaFile
SelectClipRgn
SetMapMode
SetMetaFileBitsEx
SetPixel
StretchBlt
SetStretchBltMode
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
TextOutW

advapi32

RegCreateKeyExW
RegOpenKeyExW
FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenThreadToken
RegEnumKeyW
RegCreateKeyW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
RegOpenKeyW
RegEnumValueW
RegQueryValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegCloseKey

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetMalloc
ShellExecuteExW

ole32

CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoInitializeSecurity
CoInitializeEx
CoUninitialize
ProgIDFromCLSID
CreateStreamOnHGlobal
GetRunningObjectTable
CreateItemMoniker
CoLoadLibrary
CoCreateGuid
StringFromGUID2

oleaut32

LoadTypeLi
SetErrorInfo
SysReAllocStringLen
GetErrorInfo
CreateErrorInfo
VarBstrCmp
SysAllocStringLen
RegisterTypeLi
VariantClear
SysAllocString
SysFreeString
SysStringByteLen
SysStringLen
SysAllocStringByteLen
VariantInit
VariantChangeType
VarBstrCat
VarUI4FromStr

rpcrt4

RpcStringFreeW
UuidCreate
UuidToStringW
UuidFromStringW

gdiplus

GdipGetImageWidth
GdipCreateFromHDC
GdipAlloc
GdipFree
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromResource
GdipDrawImageRectI
GdipSetInterpolationMode
GdiplusStartup
GdipGetImageHeight
GdipDeleteGraphics

Sections

.text
Size: 682KB - Virtual size: 682KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 305KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
REALTEKDRIVER/setup.ini
REALTEKDRIVER/setup.inx
REALTEKDRIVER/setup.isn
REALTEKDRIVER/setup.iss
REALTEKDRIVER/setup.log
REALTEKDRIVER/setupctrl.txt
REALTEKDRIVER/uninstall.iss
REALTEKDRIVER/uninstall_DASHClient.cmd
REALTEKDRIVER/uninstall_vista_39.iss
REALTEKDRIVER/uninstall_vista_69.iss
REALTEKDRIVER/uninstall_xp_pci.iss
REALTEKDRIVER/uninstall_xp_pcie.iss
Network Unflagging/Wired_driver_29.1_x64.exe
.exe windows:4 windows x86 arch:x86

cc000e0a56358759c95f653af1246259

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:77:36:9f:6c:45:e9:f2:9d:ce:79:4b:5f:d5:db:31
Certificate

Issuer

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Not Before

16/01/2024, 00:00

Not After

15/01/2025, 23:59

Subject

SERIALNUMBER=2189074,CN=Intel Corporation,O=Intel Corporation,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7f:f7:a7:35:43:9b:09:eb:08:f9:fd:42:0e:45:23:b4:19:26:33:5e:84:36:e3:2b:66:eb:ef:27:5b:98:3d:14
Signer

Actual PE Digest

7f:f7:a7:35:43:9b:09:eb:08:f9:fd:42:0e:45:23:b4:19:26:33:5e:84:36:e3:2b:66:eb:ef:27:5b:98:3d:14

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesA
RemoveDirectoryA
SetEndOfFile
SetFilePointer
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
GetWindowsDirectoryA
MoveFileExA
GlobalFree
GlobalUnlock
GlobalHandle
_lclose
_llseek
_lread
_lopen
GlobalLock
GlobalAlloc
GlobalMemoryStatus
GetVersion
GetModuleFileNameA
WriteFile
GetSystemTime
CreateProcessA
LocalFree
ExitProcess
FormatMessageA
DeleteFileA
GetModuleHandleA
GetVolumeInformationA
FindNextFileA
GetTickCount
WideCharToMultiByte
WaitForSingleObject
GetLongPathNameA
GetTempPathA
GetCommandLineA
CopyFileA
GetFileAttributesA
LoadLibraryExA
GetSystemDirectoryA
SetErrorMode
MultiByteToWideChar
GetLocalTime
lstrlenA
CreateFileW
ReadFile
GetEnvironmentVariableA
GetDriveTypeA
LocalAlloc
DosDateTimeToFileTime
LocalFileTimeToFileTime
GetVersionExA
SetFileTime
CreateDirectoryA
SetCurrentDirectoryA
FindFirstFileA
FindClose
GetLastError
GetProcAddress
FreeLibrary
InterlockedExchange
LoadLibraryA
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
HeapReAlloc
GetProcessHeap
GetStartupInfoA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
Sleep
HeapSize
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
GetStdHandle
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
InitializeCriticalSection
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers

gdi32

CreateDCA
SetBkColor
SetTextColor
SetTextAlign
GetBkColor
GetTextExtentPoint32A
ExtTextOutA
GetDeviceCaps
CreateFontIndirectA
DeleteDC
SelectObject
DeleteObject

Sections

.text
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_winzip_
Size: 24.3MB - Virtual size: 24.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Network Unflagging/devcon.exe
.exe windows:10 windows x64 arch:x64

a0225eb3236ea941773b705076ada2af

Code Sign

33:00:00:05:57:cf:90:dd:c7:d1:c0:88:8c:00:00:00:00:05:57
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

15:1b:ee:59:cd:e4:3e:e9:a1:b1:a5:56:6e:b8:58:e7:7a:8f:35:81:02:58:88:19:12:6e:f9:b6:02:49:77:ab
Signer

Actual PE Digest

15:1b:ee:59:cd:e4:3e:e9:a1:b1:a5:56:6e:b8:58:e7:7a:8f:35:81:02:58:88:19:12:6e:f9:b6:02:49:77:ab

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

devcon.pdb

Imports

advapi32

RegQueryValueExW
InitiateSystemShutdownExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegCloseKey
OpenServiceW
RegDeleteValueW
RegSetValueExW
OpenSCManagerW
CloseServiceHandle

kernel32

GetCurrentProcess
FormatMessageW
GetLastError
CloseHandle
LocalFree
FileTimeToSystemTime
LoadLibraryW
GetProcAddress
FreeLibrary
GetDateFormatW
FindFirstFileW
GetFullPathNameW
FindNextFileW
FindClose
GetFileAttributesW
GetWindowsDirectoryW
RtlCaptureContext
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
Sleep

msvcrt

?terminate@@YAXXZ
_commode
_fmode
__C_specific_handler
_initterm
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
_XcptFilter
memset
towlower
__iob_func
__setusermatherr
free
_callnewh
malloc
wprintf
towupper
wcsrchr
_wcsnicmp
fputs
wcschr
iswalpha
fputws
_wcsicmp

ole32

CLSIDFromString

setupapi

SetupDiClassNameFromGuidExW
SetupCopyOEMInfW
SetupDiCreateDeviceInfoList
SetupDiGetINFClassW
CM_Connect_MachineW
SetupDiSetClassInstallParamsW
CM_Locate_DevNode_ExW
CM_Disconnect_Machine
CM_Reenumerate_DevNode_Ex
SetupDiSetDeviceRegistryPropertyW
SetupDiBuildClassInfoListExW
SetupDiCreateDeviceInfoW
SetupDiGetDriverInstallParamsW
SetupDiOpenClassRegKeyExW
CM_Free_Log_Conf_Handle
SetupFindFirstLineW
SetupDiSetDeviceInstallParamsW
CM_Free_Res_Des_Handle
SetupOpenInfFileW
SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
SetupDiClassGuidsFromNameExW
CM_Get_Device_ID_ExW
SetupDiGetClassDevsExW
SetupDiGetDeviceInfoListDetailW
SetupDiCreateDeviceInfoListExW
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyW
SetupDiOpenDeviceInfoW
SetupScanFileQueueW
SetupDiGetClassDescriptionExW
SetupOpenFileQueue
CM_Get_Next_Res_Des_Ex
CM_Get_DevNode_Status_Ex
SetupCloseInfFile
CM_Get_Res_Des_Data_Ex
SetupDiOpenDevRegKey
SetupDiDestroyDriverInfoList
SetupCloseFileQueue
SetupDiGetDeviceInstallParamsW
SetupDiEnumDriverInfoW
SetupDiSetSelectedDriverW
CM_Get_First_Log_Conf_Ex
SetupDiGetDriverInfoDetailW
CM_Get_Res_Des_Data_Size_Ex
SetupDiBuildDriverInfoList
SetupGetStringFieldW

user32

CharPrevW
CharNextW
LoadStringW

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

fothk
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Network Unflagging/network.bat

Sharing

General

Malware Config

Signatures

Files

e865c201423cde4808175edf07c06249

Code Sign

61:20:4d:b4:00:00:00:00:00:27Certificate

Key Usages

03:da:4c:26:c7:6e:12:55:dc:82:79:aa:9a:75:1a:ccCertificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

61:20:4d:b4:00:00:00:00:00:27Certificate

Key Usages

08:d7:e0:27:b2:95:b6:d1:08:d8:a7:df:2c:e2:ac:05Certificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41Certificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

fb:98:f7:b8:b0:36:e2:8f:18:14:c0:89:d1:6c:81:46:30:8f:ae:98:02:60:2a:79:c7:59:90:fa:67:4e:af:aeSigner

c7:cb:a6:ef:f4:c2:9c:78:7d:83:35:d6:e6:68:b5:46:05:bb:72:d7Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

Sections

.text Size: 52KB - Virtual size: 51KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 8KB - Virtual size: 11KB

.rsrc Size: 4KB - Virtual size: 1KB

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

61:20:4d:b4:00:00:00:00:00:27Certificate

Key Usages

0b:fc:fa:c0:8e:21:6a:1c:1f:da:a6:b7:7b:b2:d6:6eCertificate

Extended Key Usages

Key Usages

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06Certificate

Extended Key Usages

Key Usages

61:20:4d:b4:00:00:00:00:00:27Certificate

Key Usages

05:59:58:f8:a9:0b:14:fa:25:43:6b:89:fb:30:76:60Certificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

e7:11:99:30:69:33:40:ef:dc:9f:41:5d:1b:24:66:c5:0f:a7:e4:f4:76:81:2d:34:bb:a0:40:8a:58:bb:d6:a8Signer

61:20:4d:b4:00:00:00:00:00:27
Certificate

03:da:4c:26:c7:6e:12:55:dc:82:79:aa:9a:75:1a:cc
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

61:20:4d:b4:00:00:00:00:00:27
Certificate

08:d7:e0:27:b2:95:b6:d1:08:d8:a7:df:2c:e2:ac:05
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

fb:98:f7:b8:b0:36:e2:8f:18:14:c0:89:d1:6c:81:46:30:8f:ae:98:02:60:2a:79:c7:59:90:fa:67:4e:af:ae
Signer

c7:cb:a6:ef:f4:c2:9c:78:7d:83:35:d6:e6:68:b5:46:05:bb:72:d7
Signer

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 1KB

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

61:20:4d:b4:00:00:00:00:00:27
Certificate

0b:fc:fa:c0:8e:21:6a:1c:1f:da:a6:b7:7b:b2:d6:6e
Certificate

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

61:20:4d:b4:00:00:00:00:00:27
Certificate

05:59:58:f8:a9:0b:14:fa:25:43:6b:89:fb:30:76:60
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

e7:11:99:30:69:33:40:ef:dc:9f:41:5d:1b:24:66:c5:0f:a7:e4:f4:76:81:2d:34:bb:a0:40:8a:58:bb:d6:a8
Signer

7e:d6:17:9c:2f:31:79:1c:af:25:7a:ea:7e:12:75:c5:c2:f5:f4:a1
Signer

.text
Size: 205KB - Virtual size: 205KB

.rsrc
Size: 136KB - Virtual size: 136KB

.reloc
Size: 512B - Virtual size: 12B

61:20:4d:b4:00:00:00:00:00:27
Certificate

0b:fc:fa:c0:8e:21:6a:1c:1f:da:a6:b7:7b:b2:d6:6e
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

61:20:4d:b4:00:00:00:00:00:27
Certificate

05:59:58:f8:a9:0b:14:fa:25:43:6b:89:fb:30:76:60
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

e6:03:fd:34:94:d3:b4:aa:15:28:36:b5:05:6a:d2:ce:c2:79:ac:a3:4b:39:e5:9d:13:35:aa:67:5f:bc:58:27
Signer

e1:7a:e3:b8:5c:e5:f0:fe:91:d1:c5:64:7d:6a:8c:34:53:3b:af:70
Signer

.text
Size: 272KB - Virtual size: 271KB

.rdata
Size: 62KB - Virtual size: 61KB

.data
Size: 10KB - Virtual size: 24KB

.rsrc
Size: 86KB - Virtual size: 85KB

61:20:4d:b4:00:00:00:00:00:27
Certificate