7ce89f3cbc797d9a0769d11208a587f5e6444fba6e7a4a234b4fc72f8c96cc78

Sharing

Copy URL

Twitter E-mail

General

Target

7ce89f3cbc797d9a0769d11208a587f5e6444fba6e7a4a234b4fc72f8c96cc78
Size

13.4MB
MD5

6fd141d7ecd63b4336a36558d90b00ca
SHA1

b53ce13cd48bf445dfde6e0c61ce2876ffe6e828
SHA256

7ce89f3cbc797d9a0769d11208a587f5e6444fba6e7a4a234b4fc72f8c96cc78
SHA512

1880797c08dfa1fb74f3b02fabcad02fcdd9675f2ba7e3f1c2f8e52f504ace7ad85189201f0a9d788f959744f37d183a854849566b848ac55fad619a552152df
SSDEEP

196608:YdHZLVACzvHPZpAL26i2ix3vF1pZfvMCVVyDndwP+RuVuea1M/muUw0ar6sk5KL2:YdgCzQi5F1fHLX8dhIVCOmVTa+bbbyU

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/360DrvMgr.exe
unpack001/360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/atiags32.dll

Files

7ce89f3cbc797d9a0769d11208a587f5e6444fba6e7a4a234b4fc72f8c96cc78
.zip
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/360Base.dll
.dll windows:5 windows x86 arch:x86

04a116d242e299d4ddbfcdcde9080a8f

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

26:27:9f:0f:2f:11:97:0d:cc:f6:3e:ba:88:f2:d4:c4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

06-01-2016 00:00

Not After

28-03-2019 23:59

Subject

CN=Qihoo 360 Software (Beijing) Company Limited,OU=Tech. Dev. Dept.,O=Qihoo 360 Software (Beijing) Company Limited,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

23:38:91:61:e4:5a:21:8b:d2:4e:6e:85:9a:e1:11:53
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28-12-2015 00:00

Not After

28-03-2019 23:59

Subject

CN=Qihoo 360 Software (Beijing) Company Limited,OU=Tech. Dev. Dept.,O=Qihoo 360 Software (Beijing) Company Limited,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10-12-2013 00:00

Not After

09-12-2023 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11-06-2015 00:00

Not After

29-12-2020 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 3,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01-01-1997 00:00

Not After

31-12-2020 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

9c:57:83:91:29:74:c3:40:38:38:02:24:0e:59:f9:8b:da:71:4d:ed:ad:b4:1d:67:3d:c8:75:3f:8f:cc:95:a3
Signer

Actual PE Digest

9c:57:83:91:29:74:c3:40:38:38:02:24:0e:59:f9:8b:da:71:4d:ed:ad:b4:1d:67:3d:c8:75:3f:8f:cc:95:a3

Digest Algorithm

sha256

PE Digest Matches

true

23:d1:a0:5a:0e:e2:46:7a:a1:6f:06:e1:06:8b:58:cb:07:bc:c1:4d
Signer

Actual PE Digest

23:d1:a0:5a:0e:e2:46:7a:a1:6f:06:e1:06:8b:58:cb:07:bc:c1:4d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\vmagent_new\bin\joblist\139308\out\Release\360Base.pdb

Imports

kernel32

WaitForSingleObject
InitializeCriticalSectionAndSpinCount
ReleaseMutex
LocalFree
lstrlenA
HeapAlloc
GetACP
LocalFileTimeToFileTime
FreeResource
GetCurrentProcess
GetSystemWindowsDirectoryW
GetSystemInfo
MapViewOfFileEx
IsBadReadPtr
VirtualFree
VirtualAlloc
GetFileSize
GetLocalTime
FindResourceExW
GetStdHandle
GetVersion
GlobalMemoryStatus
GetTickCount
ExitProcess
SetFilePointerEx
ReadFile
GetCurrentProcessId
lstrcmpiA
DeleteAtom
FindAtomW
CreateMutexW
HeapFree
GetProcessHeap
lstrcmpA
GetVersionExW
GetFileType
SetLastError
UnmapViewOfFile
LockResource
MapViewOfFile
CreateFileMappingW
CloseHandle
DeviceIoControl
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
GetLastError
RaiseException
lstrcmpiW
GetModuleHandleW
GetProcAddress
lstrlenW
InterlockedCompareExchange
Sleep
FreeLibrary
CreateFileW
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
AddAtomW
OpenThread
GetAtomNameW
GetSystemTime
FormatMessageW
OutputDebugStringW
SetEndOfFile
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
LoadLibraryA
SetStdHandle
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetErrorMode
LoadLibraryW
GetFileAttributesW
UnlockFileEx
LockFileEx
QueryPerformanceCounter
FindClose
FindNextFileW
FindFirstFileW
MoveFileExW
SetFilePointer
DeleteFileW
GetFileAttributesExW
FlushFileBuffers
FileTimeToSystemTime
FileTimeToLocalFileTime
SystemTimeToFileTime
WriteFile
GetCurrentThreadId
WideCharToMultiByte
GetFileSizeEx
HeapDestroy
HeapReAlloc
HeapSize
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapCreate
GetModuleFileNameA
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
SetHandleCount
GetStartupInfoA
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
GetModuleHandleA

user32

GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
CharNextW
GetDesktopWindow

advapi32

ReportEventW
DeregisterEventSource
RegisterEventSourceW
RegQueryValueExW
GetTokenInformation
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA

ole32

CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoCreateGuid

oleaut32

SysAllocString
VarUI4FromStr

shlwapi

StrCmpNIW
StrTrimA
PathFindFileNameW
StrStrIW
PathCombineW
PathAppendW
PathFileExistsW
StrCmpIW
SHSetValueA
StrStrIA
SHGetValueA
StrRChrW

version

GetFileVersionInfoSizeW
VerQueryValueW

netapi32

Netbios

crypt32

CertGetCertificateChain
CertFreeCertificateContext
CryptDecodeObject
CryptMsgControl
CertFindCertificateInStore
CryptQueryObject
CryptDecodeObjectEx
CertAddStoreToCollection
CertOpenStore
CertCloseStore
CertOpenSystemStoreW
CryptMsgGetParam
CryptMsgUpdate
CryptMsgOpenToDecode
CertGetCertificateContextProperty
CertGetNameStringW
CertFreeCertificateChain
CryptMsgClose

iphlpapi

GetAdaptersInfo

Exports

Exports

CreateObject
InitLibs

Sections

.text
Size: 601KB - Virtual size: 601KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 186KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/360DrvMgr.exe
.exe windows:5 windows x86 arch:x86

25df8d6894c0a282a643ee848f478a06

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\vmagent_new\bin\joblist\830080\out\Release\360DrvMgr.pdb

Imports

kernel32

LocalAlloc
GetSystemPowerStatus
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
ExpandEnvironmentStringsW
SetFilePointer
ReadFile
GetFileSizeEx
GetCurrentThread
VirtualAlloc
VirtualQuery
ResumeThread
GetThreadContext
SuspendThread
OpenThread
SetThreadPriority
GetThreadPriority
VirtualProtect
InterlockedIncrement
InterlockedDecrement
GetTempFileNameW
GetTempPathW
GetPrivateProfileStringW
GetWindowsDirectoryW
lstrcmpiW
GetLocalTime
SetEvent
CreateEventW
GetExitCodeThread
WaitForMultipleObjects
WriteFile
lstrcmpiA
ResetEvent
OpenEventW
ExitProcess
CreateFileA
GetACP
FormatMessageW
QueryPerformanceCounter
lstrcmpA
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetStdHandle
GetConsoleOutputCP
GetTickCount
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetLocaleInfoA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetTimeZoneInformation
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetStartupInfoA
SetHandleCount
InitializeCriticalSectionAndSpinCount
HeapCreate
IsValidCodePage
GetOEMCP
GetStringTypeW
GetCPInfo
LCMapStringW
LCMapStringA
GetStdHandle
GetFileType
WriteConsoleW
CreateThread
ExitThread
GetDateFormatA
GetTimeFormatA
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
TlsFree
TlsAlloc
ReleaseMutex
HeapWalk
HeapLock
HeapUnlock
TlsSetValue
OutputDebugStringW
TlsGetValue
SetFilePointerEx
SetEndOfFile
LocalFileTimeToFileTime
GetSystemTimeAsFileTime
SystemTimeToFileTime
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapSize
HeapReAlloc
HeapDestroy
OpenMutexW
GetModuleFileNameA
SetFileAttributesW
DeviceIoControl
GetProcessHeap
HeapAlloc
HeapFree
DeleteFileW
GetCurrentThreadId
GetLastError
CreateMutexW
QueryDosDeviceW
GetLongPathNameW
SetLastError
WideCharToMultiByte
DeleteCriticalSection
InitializeCriticalSection
GetDiskFreeSpaceExW
GetStartupInfoW
CreateProcessW
GetCurrentProcessId
WaitForSingleObject
GetExitCodeProcess
OpenProcess
WritePrivateProfileStringW
GetCommandLineW
GetPrivateProfileIntW
InterlockedExchange
InterlockedCompareExchange
Sleep
lstrlenW
FreeResource
GetSystemWindowsDirectoryW
GetModuleHandleA
GetSystemInfo
LoadLibraryExW
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
LoadLibraryW
MulDiv
GetCurrentProcess
FlushInstructionCache
GetVersionExW
LocalFree
lstrlenA
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
MultiByteToWideChar
FindResourceExW
CloseHandle
FindResourceW
LoadResource
LockResource
SizeofResource
RaiseException
GetSystemDirectoryW
GetModuleHandleW
GetProcAddress
GetModuleFileNameW
FindFirstFileW
FindNextFileW
FindClose
CreateFileW
WriteConsoleA

user32

SetTimer
KillTimer
SetDlgItemTextW
LoadMenuW
DeleteMenu
EnableMenuItem
ModifyMenuW
DestroyMenu
MonitorFromPoint
TrackPopupMenu
GetSubMenu
LoadCursorW
UnregisterClassA
SetCursor
IsWindowEnabled
GetWindowPlacement
InflateRect
IsDlgButtonChecked
ExitWindowsEx
GetShellWindow
WaitForInputIdle
RegisterClassW
GetClassInfoW
SendMessageTimeoutW
BringWindowToTop
IsIconic
wsprintfW
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
CharNextW
SetForegroundWindow
AttachThreadInput
GetForegroundWindow
LockSetForegroundWindow
GetLastInputInfo
LoadImageW
GetSystemMetrics
EndDialog
DestroyIcon
IsWindow
IsDialogMessageW
RegisterClassExW
GetClassInfoExW
DefWindowProcW
DrawFocusRect
SendMessageW
DrawIconEx
SystemParametersInfoW
SetWindowLongW
CreateWindowExW
DestroyWindow
GetWindowLongW
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
MoveWindow
GetClientRect
ScreenToClient
UpdateWindow
CreateDialogParamW
DialogBoxParamW
PostQuitMessage
GetMonitorInfoW
MonitorFromWindow
InvalidateRect
ShowWindow
IsWindowVisible
UpdateLayeredWindow
SetWindowRgn
ScrollWindow
DrawTextW
CheckDlgButton
GetWindowThreadProcessId
FindWindowExW
PostMessageW
RegisterWindowMessageW
FindWindowW
GetDlgItem
GetActiveWindow
MessageBoxW
ReleaseDC
GetDC
EndPaint
BeginPaint
FillRect
GetWindow
GetWindowRect
MapWindowPoints
SetWindowPos
GetCursorPos
ReleaseCapture
CallWindowProcW
UnionRect
OffsetRect
SetRectEmpty
SetRect
PtInRect
CopyRect
SetScrollInfo
GetScrollInfo
GetParent
SetScrollPos
ScrollWindowEx
SetFocus
SetCapture
EnableWindow
RedrawWindow

gdi32

SetBkMode
CreatePen
EnumFontFamiliesW
CreateFontW
CreateDIBSection
StretchBlt
SetStretchBltMode
FillRgn
BitBlt
SelectObject
GetStockObject
SetTextColor
LineTo
SetBkColor
SetDCPenColor
CreateSolidBrush
CreateRoundRectRgn
CombineRgn
DeleteObject
SetViewportOrgEx
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectW
DeleteDC
CreateRectRgn
SelectClipRgn
MoveToEx
RectVisible
ExtTextOutW

advapi32

GetTokenInformation
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
DuplicateTokenEx
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
RegEnumKeyExA
RegCloseKey
RegQueryValueExW
RegOpenKeyExW

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFolderPathW
ShellExecuteExW
ord165
ShellExecuteW
SHGetSpecialFolderPathA
CommandLineToArgvW
SHGetSpecialFolderPathW
Shell_NotifyIconW

ole32

CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

VariantInit
SysAllocString
SysStringLen
VarUI4FromStr
SysStringByteLen
SysAllocStringByteLen
VariantClear
SysFreeString

shlwapi

SHSetValueW
PathIsDirectoryW
StrCmpW
PathStripPathW
PathAppendA
SHGetValueW
PathUnquoteSpacesW
PathAppendW
PathFileExistsW
AssocQueryStringW
PathIsRelativeW
StrStrIA
PathAddBackslashW
PathFindFileNameW
PathFindExtensionW
PathRemoveExtensionW
PathFileExistsA
StrCmpIW
PathCombineA
SHGetValueA
SHSetValueA
PathRemoveFileSpecW
PathCombineW
StrStrIW

gdiplus

GdiplusStartup
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipDrawImageRectRectI
GdipDrawImagePointRectI
GdipCloneImage
GdipDrawImageRectRect
GdipCreateFromHDC
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipFree
GdipLoadImageFromFile
GdipDeleteGraphics
GdipAlloc

psapi

GetModuleBaseNameW
GetProcessImageFileNameW

wintrust

WinVerifyTrust

Sections

.text
Size: 738KB - Virtual size: 737KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 184KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 335KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/360LibDrvmgr.dat
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/360NetBase.dll
.dll windows:5 windows x86 arch:x86

21312c342dfe15c1768ec19a879c07b1

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

28-01-2028 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24-05-2016 00:00

Not After

24-06-2027 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:33:bb:60:89:e3:2f:cd:22:4d:0e:49:de:b6:63:da
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28-09-2018 00:00

Not After

01-02-2020 23:59

Subject

CN=Beijing Qihu Technology Co.\, Ltd.,OU=研发部,O=Beijing Qihu Technology Co.\, Ltd.,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5b:21:3a:c4:69:7a:65:f6:b7:82:7d:9e:48:92:64:dc
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28-09-2018 00:00

Not After

01-02-2020 23:59

Subject

CN=Beijing Qihu Technology Co.\, Ltd.,OU=研发部,O=Beijing Qihu Technology Co.\, Ltd.,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10-12-2013 00:00

Not After

09-12-2023 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

50:67:fa:46:ce:6c:fe:95:15:a6:9e:b2
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

14-06-2018 10:00

Not After

18-03-2029 10:00

Subject

CN=GlobalSign TSA for Advanced - G3 - 003-02,O=GMO GlobalSign K.K.,C=JP

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:31:89:c6:50:04
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02-08-2011 10:00

Not After

29-03-2029 10:00

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18-03-2009 10:00

Not After

18-03-2029 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ee:ee:ed:e7:f3:2e:83:8a:e9:c1:8b:f6:59:a7:c6:d9:62:13:63:c5:01:22:ba:96:f2:c6:1b:6f:bb:9a:6f:ca
Signer

Actual PE Digest

ee:ee:ed:e7:f3:2e:83:8a:e9:c1:8b:f6:59:a7:c6:d9:62:13:63:c5:01:22:ba:96:f2:c6:1b:6f:bb:9a:6f:ca

Digest Algorithm

sha256

PE Digest Matches

true

71:62:86:09:fa:ff:91:9c:39:e2:02:5e:52:8b:e3:48:1f:6d:00:ca
Signer

Actual PE Digest

71:62:86:09:fa:ff:91:9c:39:e2:02:5e:52:8b:e3:48:1f:6d:00:ca

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\vmagent_new\bin\joblist\344211\out\Release\360NetBase.pdb

Imports

ws2_32

htons
getsockopt
recv
closesocket
socket
connect
WSASetLastError
freeaddrinfo
getaddrinfo
WSACleanup
WSAStartup
ioctlsocket
__WSAFDIsSet
select
send
getpeername
bind
ntohs
getsockname
setsockopt
WSAGetLastError
shutdown

user32

MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW

kernel32

WriteConsoleW
TlsFree
GetConsoleOutputCP
WriteConsoleA
SetEnvironmentVariableA
CompareStringW
CompareStringA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetLastError
GetLastError
SleepEx
CloseHandle
WaitForSingleObject
ReleaseMutex
CreateMutexA
ExpandEnvironmentStringsA
Sleep
FormatMessageA
GetTickCount
MultiByteToWideChar
DeviceIoControl
CreateFileA
GetCurrentProcessId
WideCharToMultiByte
FreeLibrary
InterlockedCompareExchange
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadLibraryA
lstrlenA
LoadLibraryW
lstrlenW
FindClose
lstrcmpW
GetLongPathNameW
FindFirstFileW
ReadDirectoryChangesW
CreateFileW
CreateEventA
GetPrivateProfileStringW
lstrcmpiW
GetOverlappedResult
lstrcatW
lstrcpyW
GetSystemDirectoryW
WriteFile
SetEvent
GetCurrentProcess
GetModuleHandleA
GetVersionExA
GetSystemDirectoryA
InterlockedExchange
GetModuleFileNameA
WaitForMultipleObjects
FreeLibraryAndExitThread
CreateThread
GetModuleHandleExA
SystemTimeToFileTime
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
SetEndOfFile
SetFilePointerEx
ReadFile
GetFileSizeEx
CreateMutexW
TlsGetValue
HeapAlloc
HeapFree
OutputDebugStringW
GetProcessHeap
TlsSetValue
HeapUnlock
OpenThread
HeapLock
HeapWalk
GetCurrentThreadId
TlsAlloc
GetVersion
GetFileType
GetStdHandle
QueryPerformanceCounter
GlobalMemoryStatus
FlushConsoleInputBuffer
GetSystemTime
ExitThread
HeapReAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
RaiseException
RtlUnwind
GetCommandLineA
ExitProcess
SetConsoleCtrlHandler
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
InterlockedIncrement
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetStartupInfoA
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
GetFullPathNameA
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryA
LCMapStringA
LCMapStringW
GetConsoleCP
FlushFileBuffers
SetFilePointer
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

advapi32

RegQueryValueExW
RegOpenKeyExW
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegEnumKeyExW
RegQueryValueExA
RegNotifyChangeKeyValue
RegEnumKeyExA
RegCloseKey

oleaut32

SysFreeString
VarBstrCmp
VariantClear
SysAllocStringLen
SysAllocString
SysAllocStringByteLen
SysStringByteLen

shlwapi

PathCombineA
StrStrIW
SHGetValueW
PathFileExistsW
PathAppendW
StrCmpIW
PathFileExistsA
PathFindFileNameA
PathRemoveFileSpecW

crypt32

CertEnumCertificatesInStore
CertOpenSystemStoreA
CertCloseStore

Exports

Exports

InitLibs

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 271KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/360NetUL.dll
.dll windows:5 windows x86 arch:x86

4bf233f0c7bf7a261a3bca45f41176a1

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

26:27:9f:0f:2f:11:97:0d:cc:f6:3e:ba:88:f2:d4:c4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

06-01-2016 00:00

Not After

28-03-2019 23:59

Subject

CN=Qihoo 360 Software (Beijing) Company Limited,OU=Tech. Dev. Dept.,O=Qihoo 360 Software (Beijing) Company Limited,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

23:38:91:61:e4:5a:21:8b:d2:4e:6e:85:9a:e1:11:53
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28-12-2015 00:00

Not After

28-03-2019 23:59

Subject

CN=Qihoo 360 Software (Beijing) Company Limited,OU=Tech. Dev. Dept.,O=Qihoo 360 Software (Beijing) Company Limited,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10-12-2013 00:00

Not After

09-12-2023 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5f:d6:93:fa:b0:98:e3:f4:67:7b:b8:cb:67:2c:22:9e
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11-06-2015 00:00

Not After

29-12-2020 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 1,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01-01-1997 00:00

Not After

31-12-2020 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c0:fc:69:4f:86:19:3a:9f:7c:52:7d:0a:59:e4:45:11:34:e7:7c:45:5b:49:40:1b:3c:76:5f:31:e3:55:f5:3b
Signer

Actual PE Digest

c0:fc:69:4f:86:19:3a:9f:7c:52:7d:0a:59:e4:45:11:34:e7:7c:45:5b:49:40:1b:3c:76:5f:31:e3:55:f5:3b

Digest Algorithm

sha256

PE Digest Matches

true

cc:cf:5c:11:85:e6:18:99:6b:25:b0:db:da:a2:ea:61:55:00:ab:c2
Signer

Actual PE Digest

cc:cf:5c:11:85:e6:18:99:6b:25:b0:db:da:a2:ea:61:55:00:ab:c2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\vmagent_new\bin\joblist\69705\out\Release\360NetUL.pdb

Imports

kernel32

GetProcAddress
LeaveCriticalSection
EnterCriticalSection
GetUserDefaultLangID
Sleep
GetCurrentThreadId
GetLastError
CreateThread
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
SetFilePointer
WriteFile
GetFileSize
SetEndOfFile
GetFileSizeEx
lstrlenW
GetLocalTime
GetTickCount
RaiseException
FormatMessageA
WaitForSingleObject
CreateEventW
SetEvent
ResetEvent
SetLastError
WaitForMultipleObjects
CreateDirectoryW
DisableThreadLibraryCalls
GetModuleHandleW
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
QueryPerformanceCounter
FreeLibrary
InitializeCriticalSection
LoadLibraryW
GetModuleFileNameW
GetCurrentProcessId
CreateFileW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetModuleHandleA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetModuleFileNameA
GetStdHandle
VirtualAlloc
VirtualFree
HeapCreate
ExitProcess
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
CloseHandle
GetCPInfo
GetCommandLineA
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
TlsFree
DeleteAtom
FindAtomW
TlsAlloc
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
CreateFileA
GetSystemTimeAsFileTime
ReadFile
CreateMutexW
TlsGetValue
TlsSetValue
GetAtomNameW
AddAtomW
ReleaseMutex

user32

SetWindowTextW
SetWindowsHookExW
IsDlgButtonChecked
GetDlgItemTextW
DestroyWindow
DispatchMessageW
TranslateMessage
SetDlgItemTextW
SetWindowLongW
GetWindowLongW
ShowWindow
CreateDialogParamW
PostMessageW
SendMessageW
CheckDlgButton
SetFocus
GetDlgItem
SetForegroundWindow
PostQuitMessage
UnhookWindowsHookEx
IsDialogMessageW
CallNextHookEx
GetMessageW

advapi32

RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW

shell32

SHGetFolderPathW

shlwapi

PathIsDirectoryW
PathCombineW

wininet

InternetWriteFile
HttpSendRequestExA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
HttpEndRequestA
InternetSetStatusCallbackA
InternetOpenW
InternetCloseHandle
InternetReadFileExA
HttpQueryInfoA
InternetSetOptionW
InternetGetConnectedState
InternetConnectA
InternetQueryOptionW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

winmm

timeGetTime

ws2_32

getpeername
inet_addr

Exports

Exports

HttpInit
HttpUninit
zlib_compress
zlib_compressBound
zlib_uncompress

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/360P2SP.dll
.dll windows:5 windows x86 arch:x86

d42e4a8b9fd7913a155c8be974123d68

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

26:27:9f:0f:2f:11:97:0d:cc:f6:3e:ba:88:f2:d4:c4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

06-01-2016 00:00

Not After

28-03-2019 23:59

Subject

CN=Qihoo 360 Software (Beijing) Company Limited,OU=Tech. Dev. Dept.,O=Qihoo 360 Software (Beijing) Company Limited,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

23:38:91:61:e4:5a:21:8b:d2:4e:6e:85:9a:e1:11:53
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28-12-2015 00:00

Not After

28-03-2019 23:59

Subject

CN=Qihoo 360 Software (Beijing) Company Limited,OU=Tech. Dev. Dept.,O=Qihoo 360 Software (Beijing) Company Limited,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10-12-2013 00:00

Not After

09-12-2023 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11-06-2015 00:00

Not After

29-12-2020 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 3,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01-01-1997 00:00

Not After

31-12-2020 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:78:b2:16:6b:84:e7:cf:21:a3:41:ed:97:01:11:2b:6c:3b:b6:f2:37:d3:b4:4d:f0:e4:8f:80:ae:00:b7:64
Signer

Actual PE Digest

59:78:b2:16:6b:84:e7:cf:21:a3:41:ed:97:01:11:2b:6c:3b:b6:f2:37:d3:b4:4d:f0:e4:8f:80:ae:00:b7:64

Digest Algorithm

sha256

PE Digest Matches

true

6e:a2:7c:be:75:4f:b9:00:8e:72:c7:62:cb:2e:b1:b8:fc:88:fa:6d
Signer

Actual PE Digest

6e:a2:7c:be:75:4f:b9:00:8e:72:c7:62:cb:2e:b1:b8:fc:88:fa:6d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\vmagent_new\bin\joblist\93092\out\Release\360P2SP.pdb

Imports

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

ws2_32

WSAStartup
gethostbyname
accept
WSAAsyncSelect
WSACancelAsyncRequest
WSAAsyncGetHostByName
listen
shutdown
getpeername
bind
WSASetLastError
sendto
recvfrom
ioctlsocket
select
__WSAFDIsSet
WSAGetLastError
gethostname
WSACleanup
htonl
WSCEnumProtocols
ntohs
ntohl
inet_ntoa
socket
htons
connect
closesocket
setsockopt
send
recv
inet_addr

kernel32

GetStringTypeW
GetStringTypeA
GetTimeZoneInformation
SetStdHandle
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetTickCount
WriteFile
GetLastError
SetFilePointer
ReadFile
CloseHandle
FreeLibrary
GetProcAddress
LoadLibraryW
GetCurrentProcess
ReleaseMutex
ReleaseSemaphore
WaitForMultipleObjects
WaitForSingleObject
SetEndOfFile
GetFileSizeEx
CreateFileW
CreateEventW
CreateSemaphoreW
CreateMutexW
SetWaitableTimer
CreateWaitableTimerW
DeleteFileW
MoveFileW
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
GetModuleHandleExW
FreeLibraryAndExitThread
GetFileSize
GlobalAlloc
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceCounter
RaiseException
GetFileAttributesW
lstrlenA
lstrlenW
GetModuleHandleW
GetUserDefaultLangID
SetEvent
InterlockedDecrement
ResetEvent
DeviceIoControl
GetModuleFileNameW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetTempPathW
QueryPerformanceFrequency
GetModuleHandleA
GetSystemDirectoryA
GetLocalTime
InterlockedExchangeAdd
CreateThread
SetHandleCount
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
GetCurrentDirectoryA
GetFileType
PeekNamedPipe
GetFileInformationByHandle
GetFullPathNameW
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapDestroy
HeapCreate
VirtualAlloc
VirtualFree
InterlockedIncrement
HeapReAlloc
GetCommandLineA
ExitThread
FindFirstFileW
GetDriveTypeW
GetLocaleInfoA
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetDriveTypeA
CompareStringA
CompareStringW
SetEnvironmentVariableA
lstrcmpA
HeapAlloc
TlsGetValue
GetSystemTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
RtlUnwind
IsDebuggerPresent
LocalFree
SetLastError
FormatMessageW
OutputDebugStringW
SetFilePointerEx
LocalFileTimeToFileTime
GetSystemTimeAsFileTime
SystemTimeToFileTime
CreateFileA
TlsAlloc
FindAtomW
DeleteAtom
TlsFree
lstrcmpiA
HeapFree
GetProcessHeap
TlsSetValue
TerminateProcess
UnhandledExceptionFilter
GetAtomNameW
OpenThread
GetCurrentProcessId
SetUnhandledExceptionFilter
AddAtomW

user32

UnhookWindowsHookEx
SetForegroundWindow
ShowWindow
CheckDlgButton
UnregisterClassW
PostMessageW
CallNextHookEx
IsDialogMessageW
SetWindowLongW
GetWindowLongW
RegisterClassExW
CreateWindowExW
DefWindowProcW
SendMessageW
SetTimer
CreateDialogParamW
SetWindowPos
GetMessageW
TranslateMessage
DispatchMessageW
DestroyWindow
GetDlgItemTextW
wsprintfW
IsDlgButtonChecked
SetWindowsHookExW
SetWindowTextW
SetDlgItemTextW
PostQuitMessage

advapi32

LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
RegQueryValueExW
RegEnumKeyExW
RegEnumKeyExA
RegNotifyChangeKeyValue
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
RegOpenKeyExW
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyW
AdjustTokenPrivileges

shell32

SHGetSpecialFolderPathW

ole32

CoInitialize
CoUninitialize
CoCreateInstance
OleRun

oleaut32

VariantChangeType
GetErrorInfo
SysFreeString
SysAllocString
VariantInit
SafeArrayDestroy
SafeArrayCreate
SafeArrayPutElement
VariantClear

shlwapi

StrStrIW
PathCombineW
SHSetValueA
UrlCanonicalizeA
UrlCanonicalizeW
PathCombineA
SHGetValueA
wvnsprintfW

netapi32

Netbios

iphlpapi

GetNetworkParams
GetAdaptersInfo

secur32

AcquireCredentialsHandleA
InitializeSecurityContextA
FreeCredentialsHandle

rasapi32

RasEnumConnectionsW
RasGetConnectStatusW

Exports

Exports

CancelCheckProxy
CheckProxy
CheckProxyEx
CreateP2SPTask
GetFinishMessage
GetServerInfo
GetUploadInfo
Init
Login
QueryTask
QueryTask2
QueryTaskPeer
RemoveTask
SetConfigInfo
SetP2spOption
StartTask
StopSeed
StopTask
Uninit
UpdateRegInfo

Sections

.text
Size: 502KB - Virtual size: 501KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 322KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/360bps.dat
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/360net.dll
.dll windows:5 windows x86 arch:x86

58b5d10a230e71dee29ddba8e53862ff

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

28-01-2028 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24-05-2016 00:00

Not After

24-06-2027 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

26:27:9f:0f:2f:11:97:0d:cc:f6:3e:ba:88:f2:d4:c4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

06-01-2016 00:00

Not After

28-03-2019 23:59

Subject

CN=Qihoo 360 Software (Beijing) Company Limited,OU=Tech. Dev. Dept.,O=Qihoo 360 Software (Beijing) Company Limited,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

23:38:91:61:e4:5a:21:8b:d2:4e:6e:85:9a:e1:11:53
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28-12-2015 00:00

Not After

28-03-2019 23:59

Subject

CN=Qihoo 360 Software (Beijing) Company Limited,OU=Tech. Dev. Dept.,O=Qihoo 360 Software (Beijing) Company Limited,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10-12-2013 00:00

Not After

09-12-2023 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02-01-2017 00:00

Not After

01-04-2028 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

31:b6:ca:30:02:ca:cb:d3:9e:1c:31:ac:31:14:72:54:f4:ec:32:54:db:73:2e:61:54:0e:f3:ab:d7:73:d3:36
Signer

Actual PE Digest

31:b6:ca:30:02:ca:cb:d3:9e:1c:31:ac:31:14:72:54:f4:ec:32:54:db:73:2e:61:54:0e:f3:ab:d7:73:d3:36

Digest Algorithm

sha256

PE Digest Matches

true

07:1d:c6:ef:18:81:0b:2d:c6:00:01:18:ef:82:c3:6b:98:7b:68:c6
Signer

Actual PE Digest

07:1d:c6:ef:18:81:0b:2d:c6:00:01:18:ef:82:c3:6b:98:7b:68:c6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\vmagent_new\bin\joblist\178386\out\Release\bin\360net.pdb

Imports

kernel32

WriteFile
SetEndOfFile
SetFilePointerEx
GetSystemTime
GetCurrentProcess
ReleaseSemaphore
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
ReadFile
lstrlenW
SystemTimeToFileTime
GetFileAttributesExW
CreateMutexW
CreateSemaphoreW
SetFilePointer
GetFileSizeEx
GetFileSize
MoveFileW
CreateThread
GlobalAlloc
GlobalFree
GetLocalTime
GetCurrentProcessId
GetCurrentThreadId
GetOEMCP
GetUserDefaultLangID
GetModuleHandleExW
FreeLibraryAndExitThread
InterlockedDecrement
ResetEvent
DeviceIoControl
GetModuleHandleW
UnhandledExceptionFilter
TerminateProcess
SetEvent
Sleep
CloseHandle
GetLastError
DeleteFileW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetTimeZoneInformation
GetLocaleInfoA
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
FlushFileBuffers
GetConsoleMode
CreateEventW
lstrlenA
GetFileAttributesW
GetPrivateProfileStringW
WideCharToMultiByte
GetVersionExW
GetModuleFileNameW
GetProcAddress
FreeLibrary
LoadLibraryW
LeaveCriticalSection
MultiByteToWideChar
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetConsoleCP
GetFullPathNameA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
RtlUnwind
SleepEx
GetVersionExA
ExpandEnvironmentStringsA
FormatMessageA
GetSystemDirectoryW
GetSystemDirectoryA
GetCurrentDirectoryA
PeekNamedPipe
GetFileInformationByHandle
GetFullPathNameW
GetStartupInfoA
SetHandleCount
GetFileType
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsValidCodePage
LoadLibraryA
GetACP
GetCPInfo
InterlockedIncrement
GetModuleFileNameA
GetStdHandle
ExitProcess
VirtualAlloc
VirtualFree
HeapCreate
ExitThread
FindFirstFileA
GetDriveTypeA
GetCommandLineA
FindFirstFileW
GetDriveTypeW
FileTimeToLocalFileTime
ReleaseMutex
CreateFileW
FileTimeToSystemTime
FindClose
IsDebuggerPresent
GetTickCount
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
CreateFileA
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
OutputDebugStringW
FormatMessageW
SetLastError
LocalFree
TlsGetValue
TlsSetValue
GetAtomNameW
OpenThread
AddAtomW
TlsAlloc
FindAtomW
DeleteAtom
TlsFree
GetModuleHandleA
SetUnhandledExceptionFilter

user32

PostQuitMessage
SetForegroundWindow
SetFocus
CheckDlgButton
SendMessageW
GetDlgItem
SetDlgItemTextW
SetWindowTextW
SetWindowsHookExW
UnhookWindowsHookEx
DestroyWindow
DispatchMessageW
TranslateMessage
GetMessageW
SetWindowLongW
GetWindowLongW
ShowWindow
IsDialogMessageW
CallNextHookEx
GetDesktopWindow
PostMessageW
PostThreadMessageW
wsprintfW
CreateDialogParamW
GetDlgItemTextW

advapi32

RegSetValueExA
RegNotifyChangeKeyValue
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegOpenKeyW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegEnumKeyExW

shell32

SHGetSpecialFolderPathW

ole32

CoInitialize
CoUninitialize
CoCreateInstance
OleRun

oleaut32

SafeArrayCreate
SafeArrayPutElement
SafeArrayDestroy
VariantClear
VariantChangeType
VariantInit
SysAllocString
SysFreeString
GetErrorInfo

shlwapi

PathRemoveFileSpecW
PathCombineW
StrStrIW
PathFileExistsW

rasapi32

RasGetConnectStatusW
RasEnumConnectionsW

ws2_32

ntohs
ioctlsocket
getaddrinfo
freeaddrinfo
select
inet_ntoa
gethostbyname
gethostname
WSACleanup
WSAStartup
recv
send
setsockopt
getsockname
WSAGetLastError
bind
htons
getsockopt
getpeername
closesocket
socket
connect
WSASetLastError
__WSAFDIsSet

iphlpapi

GetNetworkParams

Exports

Exports

HttpCancel
HttpCreateDownloadObj
HttpDeleteDownloadObj
HttpDownload
HttpDownloadExA
HttpDownloadExW
HttpGetAllPeer
HttpGetConnectState
HttpGetContentLength
HttpGetCurrentSpeed
HttpGetLastError
HttpGetLastErrorA
HttpGetLastErrorW
HttpGetMD5
HttpGetReceivedLength
HttpGetResumedLength
HttpGetState
HttpGetStateA
HttpGetStateW
HttpInitDownPara
HttpResetAll
HttpSetOption
HttpWait
InitHttp
UnInitHttp

Sections

.text
Size: 370KB - Virtual size: 370KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/7za.dll
.dll windows:5 windows x86 arch:x86

cabe2cf79743f3d457d3373c7a9b84a7

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10-05-2010 00:00

Not After

10-05-2015 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08-11-2006 00:00

Not After

07-11-2021 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

51:bd:5d:8e:45:b8:2a:02:10:f1:7f:e4:c5:23:34:68
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

11-03-2013 00:00

Not After

10-03-2016 23:59

Subject

CN=Qihoo 360 Software (Beijing) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Tech. Dev. Dept.,O=Qihoo 360 Software (Beijing) Company Limited,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

8a:f7:94:92:d9:75:4a:cc:de:58:08:c8:ba:2a:f5:7a:1f:f8:ed:63
Signer

Actual PE Digest

8a:f7:94:92:d9:75:4a:cc:de:58:08:c8:ba:2a:f5:7a:1f:f8:ed:63

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\vmagent_new\bin\joblist\28098\out\Release\7za.pdb

Imports

kernel32

VirtualAlloc
GetVersionExW
WaitForSingleObject
SetEvent
InitializeCriticalSection
ReleaseSemaphore
ResetEvent
CreateSemaphoreW
CreateEventW
CloseHandle
MultiByteToWideChar
WideCharToMultiByte
SetConsoleCtrlHandler
SetFileApisToOEM
GetConsoleMode
SetConsoleMode
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
OpenEventW
GetProcessTimes
GetCurrentProcess
GetProcAddress
SetCurrentDirectoryW
CompareFileTime
FreeLibrary
LoadLibraryW
FormatMessageW
LocalFree
GetWindowsDirectoryW
VirtualFree
SetFileTime
SetFileAttributesW
RemoveDirectoryW
MoveFileW
CreateDirectoryW
DeleteFileW
GetFullPathNameW
lstrlenW
GetCurrentDirectoryW
SearchPathW
GetTempPathW
GetTempFileNameW
FindClose
FindFirstFileW
FindNextFileW
GetFileSize
SetFilePointer
SetEndOfFile
FileTimeToSystemTime
GetSystemInfo
GetModuleHandleW
GlobalMemoryStatus
DosDateTimeToFileTime
FileTimeToDosDateTime
GetSystemTime
SystemTimeToFileTime
RaiseException
LCMapStringW
DisableThreadLibraryCalls
FileTimeToLocalFileTime
LocalFileTimeToFileTime
WaitForMultipleObjects
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
WriteFile
GetStdHandle
ReadFile
CreateFileW
GetLastError
LCMapStringA
GetStringTypeW
GetStringTypeA
HeapFree
HeapReAlloc
HeapAlloc
ExitThread
CreateThread
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapCreate
HeapDestroy
Sleep
ExitProcess
HeapSize
RtlUnwind
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
FlushFileBuffers
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
SetStdHandle
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW

user32

CharUpperA
CharNextA
CharPrevExA
CharLowerW
CharUpperW

oleaut32

VariantCopy
VariantClear
SysAllocStringByteLen
SysAllocString
SysFreeString

Exports

Exports

X7za

Sections

.text
Size: 617KB - Virtual size: 617KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/ComputerZ1.dll
.dll windows:4 windows x86 arch:x86

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:33:bb:60:89:e3:2f:cd:22:4d:0e:49:de:b6:63:da
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28-09-2018 00:00

Not After

01-02-2020 23:59

Subject

CN=Beijing Qihu Technology Co.\, Ltd.,OU=研发部,O=Beijing Qihu Technology Co.\, Ltd.,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5b:21:3a:c4:69:7a:65:f6:b7:82:7d:9e:48:92:64:dc
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28-09-2018 00:00

Not After

01-02-2020 23:59

Subject

CN=Beijing Qihu Technology Co.\, Ltd.,OU=研发部,O=Beijing Qihu Technology Co.\, Ltd.,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10-12-2013 00:00

Not After

09-12-2023 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

50:67:fa:46:ce:6c:fe:95:15:a6:9e:b2
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

14-06-2018 10:00

Not After

18-03-2029 10:00

Subject

CN=GlobalSign TSA for Advanced - G3 - 003-02,O=GMO GlobalSign K.K.,C=JP

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:31:89:c6:50:04
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02-08-2011 10:00

Not After

29-03-2029 10:00

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18-03-2009 10:00

Not After

18-03-2029 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a7:ca:19:a6:85:c1:34:5a:59:55:9e:d8:20:00:08:d1:a3:8c:32:d2:0b:c5:5a:c2:35:3e:f5:44:d4:a3:a4:93
Signer

Actual PE Digest

a7:ca:19:a6:85:c1:34:5a:59:55:9e:d8:20:00:08:d1:a3:8c:32:d2:0b:c5:5a:c2:35:3e:f5:44:d4:a3:a4:93

Digest Algorithm

sha256

PE Digest Matches

true

3f:f0:60:c0:ce:51:75:b3:e8:7b:c0:b4:d8:38:ce:77:7b:5e:e7:de
Signer

Actual PE Digest

3f:f0:60:c0:ce:51:75:b3:e8:7b:c0:b4:d8:38:ce:77:7b:5e:e7:de

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 10KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/ComputerZ2.dll
.dll windows:5 windows x86 arch:x86

c95133b8a79513c396ef1a16972f12dd

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:33:bb:60:89:e3:2f:cd:22:4d:0e:49:de:b6:63:da
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28-09-2018 00:00

Not After

01-02-2020 23:59

Subject

CN=Beijing Qihu Technology Co.\, Ltd.,OU=研发部,O=Beijing Qihu Technology Co.\, Ltd.,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5b:21:3a:c4:69:7a:65:f6:b7:82:7d:9e:48:92:64:dc
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28-09-2018 00:00

Not After

01-02-2020 23:59

Subject

CN=Beijing Qihu Technology Co.\, Ltd.,OU=研发部,O=Beijing Qihu Technology Co.\, Ltd.,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10-12-2013 00:00

Not After

09-12-2023 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

33:90:20:77:61:c4:26:dd:94:50:03:0d
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

14-06-2018 10:00

Not After

18-03-2029 10:00

Subject

CN=GlobalSign TSA for Advanced - G3 - 003-01,O=GMO GlobalSign K.K.,C=JP

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:31:89:c6:50:04
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02-08-2011 10:00

Not After

29-03-2029 10:00

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18-03-2009 10:00

Not After

18-03-2029 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

00:f9:c3:e6:54:10:cb:e6:94:01:b7:db:8c:14:58:41:c7:1f:24:a6:fd:de:7a:de:b3:39:3d:06:f3:70:0c:3c
Signer

Actual PE Digest

00:f9:c3:e6:54:10:cb:e6:94:01:b7:db:8c:14:58:41:c7:1f:24:a6:fd:de:7a:de:b3:39:3d:06:f3:70:0c:3c

Digest Algorithm

sha256

PE Digest Matches

true

97:c0:68:64:44:ff:44:b9:57:6b:2c:2b:2f:a2:b2:70:73:ab:4d:4f
Signer

Actual PE Digest

97:c0:68:64:44:ff:44:b9:57:6b:2c:2b:2f:a2:b2:70:73:ab:4d:4f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\vmagent_new\bin\joblist\369317\out\Release\ComputerZ2.pdb

Imports

kernel32

InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
GetProcAddress
ExitProcess
HeapReAlloc
HeapAlloc
GetCurrentThreadId
GetCommandLineA
RtlUnwind
RaiseException
GetCPInfo
CompareStringW
LCMapStringA
LCMapStringW
GetStringTypeW
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetACP
GetOEMCP
IsValidCodePage
WriteFile
GetStdHandle
GetModuleFileNameA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetLocaleInfoW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA

Exports

Exports

GetPCVendor_Cn
GetPCVendor_En
GetVendorPic
GetVendorURL

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/ComputerZ5.dll
.dll windows:4 windows x86 arch:x86

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

28-01-2028 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24-05-2016 00:00

Not After

24-06-2027 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

26:27:9f:0f:2f:11:97:0d:cc:f6:3e:ba:88:f2:d4:c4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

06-01-2016 00:00

Not After

28-03-2019 23:59

Subject

CN=Qihoo 360 Software (Beijing) Company Limited,OU=Tech. Dev. Dept.,O=Qihoo 360 Software (Beijing) Company Limited,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

23:38:91:61:e4:5a:21:8b:d2:4e:6e:85:9a:e1:11:53
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28-12-2015 00:00

Not After

28-03-2019 23:59

Subject

CN=Qihoo 360 Software (Beijing) Company Limited,OU=Tech. Dev. Dept.,O=Qihoo 360 Software (Beijing) Company Limited,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10-12-2013 00:00

Not After

09-12-2023 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02-01-2017 00:00

Not After

01-04-2028 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

5f:0f:05:e7:3c:32:f9:59:90:3d:86:fd:93:37:2b:07:aa:7e:4b:87:6d:ec:c1:82:d2:7c:11:b7:a1:f6:28:4c
Signer

Actual PE Digest

5f:0f:05:e7:3c:32:f9:59:90:3d:86:fd:93:37:2b:07:aa:7e:4b:87:6d:ec:c1:82:d2:7c:11:b7:a1:f6:28:4c

Digest Algorithm

sha256

PE Digest Matches

true

bb:ef:69:12:69:39:10:a5:74:82:87:9c:82:47:6d:f3:e4:20:3e:28
Signer

Actual PE Digest

bb:ef:69:12:69:39:10:a5:74:82:87:9c:82:47:6d:f3:e4:20:3e:28

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

FinitPowerData
FinitSsdData
GetPowerItemName
GetPowerItemNameCount
GetPowerItemValue
GetSsdController
GetSsdSata
GetSsdType
GetSsdVendor
InitPowerData
InitSsdData

Sections

CODE
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 17KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/ComputerZService.exe
.exe windows:5 windows x86 arch:x86

8c5f57e542babd690a198dbbdd6ffdde

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:de:6c:1e:6d:cb:34:df:98:69:ae:dc:15:7f:07:25
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-05-2021 00:00

Not After

28-05-2024 23:59

Subject

CN=Chengdu Qilu Technology Co. Ltd.,O=Chengdu Qilu Technology Co. Ltd.,L=成都市,ST=四川省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

60:51:65:a9:ff:4d:a1:47:33:d9:8a:f3:18:99:4d:30:81:78:1c:bc:72:20:0b:ea:8e:30:2d:e2:fe:ab:44:d1
Signer

Actual PE Digest

60:51:65:a9:ff:4d:a1:47:33:d9:8a:f3:18:99:4d:30:81:78:1c:bc:72:20:0b:ea:8e:30:2d:e2:fe:ab:44:d1

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Jenkins\.jenkins\workspace\hardware_info\ComputerZService\computerz_service\ComputerZService\Release\ComputerZService.pdb

Imports

kernel32

InterlockedExchange
InterlockedCompareExchange
GetCurrentThreadId
WaitForSingleObject
CloseHandle
GetLastError
SetLastError
LockResource
FreeLibrary
GetProcAddress
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
GetCurrentProcess
GetExitCodeProcess
InitializeCriticalSectionAndSpinCount
LoadResource
SizeofResource
LoadLibraryW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
FindResourceExW
WideCharToMultiByte
DecodePointer
InterlockedIncrement
InterlockedDecrement
VirtualProtect
GetCurrentProcessId
RaiseException
SetUnhandledExceptionFilter
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
lstrcmpiW
LoadLibraryExW
IsBadReadPtr
MultiByteToWideChar
GetFileSizeEx
WriteFile
ReadFile
WritePrivateProfileStringW
CreateFileW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
GetShortPathNameW
GetLongPathNameW
OpenProcess
CreateMutexW
GetCommandLineW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
Sleep
GetTickCount
FlushFileBuffers
ConnectNamedPipe
DisconnectNamedPipe
SetNamedPipeHandleState
GetNamedPipeInfo
CreateNamedPipeW
GetNamedPipeHandleStateW
SetEvent
ResetEvent
WaitForMultipleObjects
CreateEventW
GetOverlappedResult
PeekNamedPipe
CancelIo
GetTimeZoneInformation
GetModuleFileNameA
ExitProcess
GetSystemWindowsDirectoryW
FreeResource
WaitForSingleObjectEx
OutputDebugStringA
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
FindFirstFileExA
ReadConsoleW
SetEndOfFile
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
WriteConsoleW
GetACP
GetConsoleMode
GetConsoleCP
SetFilePointerEx
GetFileType
GetSystemInfo
VirtualQuery
LoadLibraryExA
IsDebuggerPresent
OutputDebugStringW
EncodePointer
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
FormatMessageW
GetStringTypeW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
LocalFree
ReleaseMutex
GetVersionExW
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
SetFilePointer
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
QueryPerformanceCounter
FindClose
GetSystemDirectoryW
GetWindowsDirectoryW
FindFirstFileW
FindNextFileW
GetCurrentThread
OpenThread
SetThreadPriority
GetThreadPriority
GetThreadContext
SuspendThread
ResumeThread
GetThreadSelectorEntry
InterlockedExchangeAdd
DeviceIoControl
lstrcmpA
lstrcmpiA
CreateFileA
CopyFileW
FindFirstFileA
FindNextFileA
GetTempPathW
GetFileSize
RtlUnwind
InterlockedFlushSList
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetFileAttributesExW
SetConsoleCtrlHandler
GetStdHandle

user32

PostQuitMessage
LoadCursorW
SetWindowLongW
GetWindowLongW
KillTimer
SetTimer
CreateWindowExW
GetClassInfoExW
RegisterClassExW
CallWindowProcW
PostMessageW
GetWindowThreadProcessId
FindWindowExW
IsWindow
SendMessageTimeoutW
CharNextW
DestroyWindow
UnregisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
TranslateMessage
wsprintfW
UnregisterClassA
GetMessageW

oleaut32

VarUI4FromStr
VariantInit
SysAllocString
SysFreeString
VariantClear

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 167KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/ComputerZ_HardwareDll.dll
.dll windows:6 windows x86 arch:x86

3f4cfd105eed866186b8b6093fa6318a

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:07:8e:70:ea:ee:48:ff:eb:95:76:bd:d4:00:be:98
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

21-05-2024 00:00

Not After

20-05-2027 23:59

Subject

SERIALNUMBER=91510100394487762T,CN=成都奇鲁科技有限公司,O=成都奇鲁科技有限公司,L=成都市,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c21e68890e983bde9ab98e696b0e68a80e69cafe4baa7e4b89ae5bc80e58f91e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e59b9be5b79de79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

eb:ca:57:f8:65:a5:d7:ac:04:47:e8:97:5d:67:3c:5a:1e:94:e4:4a:a6:87:ee:bb:19:e0:a6:d2:f4:41:4e:b8
Signer

Actual PE Digest

eb:ca:57:f8:65:a5:d7:ac:04:47:e8:97:5d:67:3c:5a:1e:94:e4:4a:a6:87:ee:bb:19:e0:a6:d2:f4:41:4e:b8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Jenkins\.jenkins\workspace\hardware_info\ComputerZ_HardwareDll\Release\ComputerZ_HardwareDll.pdb

Imports

ole32

CoInitializeSecurity
CoCreateInstance
CoInitialize
CoInitializeEx
CoSetProxyBlanket
StringFromCLSID
CLSIDFromString
CoTaskMemFree
CoCreateGuid
StringFromGUID2
CoUninitialize

kernel32

GetTickCount
GetSystemTimeAsFileTime
ResetEvent
GetDriveTypeA
GetLogicalDriveStringsW
lstrlenW
CreateFileA
CreateFileW
GetDriveTypeW
GetLogicalDrives
DeviceIoControl
GetLogicalDriveStringsA
Sleep
SizeofResource
LockResource
LoadResource
FindResourceExW
GetCurrentThreadId
CreateEventW
WaitForSingleObject
SetEvent
LeaveCriticalSection
EnterCriticalSection
SetLastError
CloseHandle
DisableThreadLibraryCalls
DecodePointer
MultiByteToWideChar
GetPrivateProfileSectionNamesW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetModuleFileNameW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
WideCharToMultiByte
WaitForMultipleObjects
GetTempPathW
CreateDirectoryW
OpenSemaphoreW
CancelIo
GetOverlappedResult
TryEnterCriticalSection
AreFileApisANSI
HeapCreate
GetDiskFreeSpaceW
GetModuleHandleW
GetFullPathNameA
UnlockFileEx
HeapValidate
GetTempPathA
GetDiskFreeSpaceA
GetFileAttributesA
FlushViewOfFile
GetVersionExA
DeleteFileA
HeapCompact
UnlockFile
CreateFileMappingA
LockFileEx
GetCurrentProcess
CreateMutexW
ExpandEnvironmentStringsW
CreateProcessW
InitializeCriticalSection
LoadLibraryW
GetSystemTime
lstrcmpiA
GetSystemWindowsDirectoryW
FreeResource
InterlockedCompareExchange
MoveFileExW
CreatePipe
GetExitCodeProcess
OutputDebugStringA
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
FindFirstFileExA
ReadConsoleW
SetEndOfFile
SetStdHandle
SetConsoleCtrlHandler
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
DuplicateHandle
WriteConsoleW
GetStdHandle
ExitProcess
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
SetFilePointerEx
GetFileType
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
ExitThread
CreateThread
InterlockedFlushSList
RtlUnwind
FileTimeToLocalFileTime
SystemTimeToFileTime
GetProcAddress
FreeLibrary
GetSystemDirectoryW
SetErrorMode
LockFile
FindResourceW
FindNextFileA
FindFirstFileA
CopyFileW
LoadLibraryA
FormatMessageA
CreateSemaphoreW
GetExitCodeThread
DeleteFileW
GetCurrentProcessId
TerminateThread
ReleaseSemaphore
PostQueuedCompletionStatus
GetQueuedCompletionStatus
CreateIoCompletionPort
GetLocalTime
SetProcessWorkingSetSize
GetStringTypeW
FormatMessageW
EncodePointer
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCPInfo
CompareStringW
LCMapStringW
GetLocaleInfoW
IsDebuggerPresent
OutputDebugStringW
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
LoadLibraryExA
LoadLibraryExW
GetVersionExW
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetFileSizeEx
ReadFile
SetFilePointer
InitializeCriticalSectionEx
ReleaseMutex
GlobalMemoryStatusEx
LocalFree
GlobalAlloc
GlobalFree
GetWindowsDirectoryW
FindClose
lstrcmpA
lstrcmpiW
FindFirstFileW
FindNextFileW
lstrcpynW
GetACP
GetFileSize
WriteFile
FlushFileBuffers
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
WaitForSingleObjectEx
GetStartupInfoW
QueryPerformanceCounter
InterlockedIncrement
InterlockedDecrement
InterlockedExchangeAdd
GetFileAttributesExW
GetTempFileNameW
QueryPerformanceFrequency
OpenProcess
K32GetModuleFileNameExW
K32GetProcessMemoryInfo
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
VerSetConditionMask
VerifyVersionInfoW
FileTimeToSystemTime
GetCurrentThread
SetThreadPriority
GetThreadPriority
SetPriorityClass
GetPriorityClass
GetSystemInfo
GetProcessAffinityMask
SetThreadAffinityMask
GetLongPathNameW
QueryDosDeviceW
K32GetProcessImageFileNameW
DefineDosDeviceW
LocalAlloc
GetFileAttributesW
GetModuleHandleA
GetModuleFileNameA
lstrcmpW
GetFullPathNameW
CreateProcessA

user32

wsprintfW
GetWindowThreadProcessId
LoadCursorW
SetWindowLongW
GetWindowLongW
KillTimer
SetTimer
DestroyWindow
IsWindow
CreateWindowExW
GetClassInfoExW
GetLastInputInfo
CallWindowProcW
PostQuitMessage
DefWindowProcW
PostMessageW
SendMessageTimeoutW
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
UnregisterClassW
PostThreadMessageW
RegisterWindowMessageW
RegisterClassExW
UnregisterClassA
FindWindowW
EnumDisplaySettingsW
EnumDisplayDevicesW
SendMessageW
GetSystemMetrics
FindWindowExW

advapi32

CryptAcquireContextW
SetKernelObjectSecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExA
RegEnumKeyExA
RegSetValueExW
RegCreateKeyExW
GetTokenInformation
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
CryptReleaseContext
CryptDestroyKey
CryptSetKeyParam
CryptGenRandom
CryptImportKey
CryptEncrypt
CryptDecrypt
CryptContextAddRef
RegEnumKeyExW
CloseServiceHandle
ControlService
CreateServiceW
DeleteService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
StartServiceW
RegGetValueW
RegEnumValueW
OpenProcessToken
RegOpenKeyExA

oleaut32

VariantClear
SafeArrayAccessData
SysAllocString
SysFreeString
VariantInit
SysStringLen
SysAllocStringLen
CreateErrorInfo
SetErrorInfo
VariantChangeType
GetErrorInfo
SafeArrayGetVartype
SafeArrayUnlock
SafeArrayLock
SafeArrayDestroy
SafeArrayGetElement
SafeArrayUnaccessData
VarBstrCat
SafeArrayGetLBound
SafeArrayGetUBound

shlwapi

StrStrIA
SHGetValueA
StrToIntExW
StrCmpNIW
PathIsDirectoryW
StrToIntW
StrStrIW
PathAddBackslashW
SHGetValueW
PathFileExistsW
PathAppendW
PathRemoveFileSpecA
PathAppendA
PathMatchSpecW
PathIsPrefixW
PathCombineW
StrTrimA
SHSetValueA
StrCmpIW
PathFindExtensionW
PathFindFileNameW
StrStrW
PathIsRelativeW
PathIsRootW
PathRemoveFileSpecW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

urlmon

URLDownloadToFileW
URLDownloadToCacheFileW

pdh

PdhCloseQuery
PdhOpenQueryW
PdhGetFormattedCounterArrayW
PdhValidatePathW
PdhGetFormattedCounterValue
PdhAddCounterW
PdhRemoveCounter
PdhCollectQueryData

crypt32

CryptStringToBinaryW
CryptBinaryToStringA
CryptBinaryToStringW
CryptStringToBinaryA
CertGetNameStringW

wintrust

WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain
WinVerifyTrust

setupapi

SetupVerifyInfFileW
SetupEnumInfSectionsW
SetupGetSourceInfoW
SetupGetTargetPathW
SetupGetSourceFileLocationW
SetupIterateCabinetW
SetupGetFieldCount
SetupGetLineCountW
SetupGetLineByIndexW
SetupFindNextMatchLineW
SetupFindNextLine
SetupFindFirstLineW
SetupCloseInfFile
SetupOpenAppendInfFileW
SetupDiGetDeviceRegistryPropertyA
CM_Reenumerate_DevNode
CM_Locate_DevNodeW
CM_Get_DevNode_Status
CM_Get_Device_IDW
SetupDiClassNameFromGuidW
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupDiGetDeviceRegistryPropertyW
SetupDiOpenDevRegKey
SetupDiGetClassDescriptionW
SetupDiGetClassDevsW
SetupDiEnumDriverInfoW
SetupDiBuildDriverInfoList
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdW
SetupDiEnumDeviceInterfaces
SetupOpenInfFileW
SetupDiGetDeviceInterfaceDetailW
SetupGetStringFieldW

rpcrt4

UuidToStringW
UuidFromStringW

wininet

InternetGetConnectedState

iphlpapi

GetPerAdapterInfo
GetIfEntry
GetInterfaceInfo
GetNetworkParams
GetAdaptersInfo

winmm

timeGetTime
timeBeginPeriod
timeEndPeriod
timeGetDevCaps

sensapi

IsNetworkAlive

avicap32

capGetDriverDescriptionW

gdi32

GetDeviceCaps
DeleteDC
CreateDCW

shell32

ShellExecuteExW
SHFileOperationW
SHGetPathFromIDListW
SHCreateDirectoryExW
SHGetSpecialFolderLocation
CommandLineToArgvW
ord165
SHGetSpecialFolderPathW
ShellExecuteW

Exports

Exports

CreateHdwInfo
DirectXVersionProcess
DiskInfo
NvidiaMonitorSizeOfProcess
OpenCLTestProcess
ReleaseHdwInfo
UsbDeviceProcess
WMITestProcess

Sections

.text
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 203KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 342KB - Virtual size: 341KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/DIFxAPI_x86.dll
.dll windows:6 windows x86 arch:x86

c8bb176aa316a8a34b7e7e1439c67e13

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04-12-2003 00:00

Not After

03-12-2008 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1b:ab:11:da:3a:a1:b6:df:ec:88
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

11-10-2005 21:55

Not After

26-04-2010 07:00

Subject

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:10:c3:52:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-10-2005 23:24

Not After

11-01-2007 23:34

Subject

CN=Microsoft Windows Component Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

26:98:6b:1f:23:b8:07:df:c1:05:57:1b:9c:b8:b1:59:1a:1f:7c:a1
Signer

Actual PE Digest

26:98:6b:1f:23:b8:07:df:c1:05:57:1b:9c:b8:b1:59:1a:1f:7c:a1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

DIFXAPI.pdb

Imports

ntdll

RtlUnwind
RtlNtStatusToDosError
VerSetConditionMask

kernel32

VerifyVersionInfoW
GetVersionExW
lstrlenW
FreeLibrary
GetProcAddress
LoadLibraryW
DeleteFileW
SetFileAttributesW
GetEnvironmentVariableW
CompareStringW
GetFileAttributesW
MoveFileExW
GetTempFileNameW
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileSize
CreateFileW
GetSystemWindowsDirectoryW
MultiByteToWideChar
WideCharToMultiByte
GetFullPathNameW
CopyFileW
LocalFree
RemoveDirectoryW
FindClose
FindNextFileW
lstrcmpW
FindFirstFileW
CreateDirectoryW
LocalReAlloc
LocalAlloc
GetProcessHeap
ReleaseMutex
GetSystemDirectoryW
DeviceIoControl
WaitForSingleObject
CreateMutexW
GetSystemTimeAsFileTime
Sleep
RaiseException
GetVersionExA
HeapSize
GetCommandLineA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetModuleHandleA
ExitProcess
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WriteFile
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
LoadLibraryA
SetFilePointer
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
CreateFileA
GetThreadLocale
WaitForMultipleObjects
InterlockedCompareExchange
SetEvent
CreateEventW
SetEndOfFile
SetLastError
InterlockedExchange
lstrcmpiW
InterlockedDecrement
GetLastError
InterlockedIncrement
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
HeapFree
HeapReAlloc
EnterCriticalSection
HeapAlloc
LeaveCriticalSection
HeapDestroy
GetModuleHandleW
DeleteCriticalSection
GetModuleFileNameA
OutputDebugStringA
HeapCreate
InitializeCriticalSection
TlsGetValue

user32

UnregisterClassA
CharLowerW
CharPrevW

setupapi

CM_Query_And_Remove_SubTreeW
SetupDiSetDeviceRegistryPropertyW
SetupQueueCopyIndirectW
SetupDiCallClassInstaller
SetupDiBuildDriverInfoList
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupDiSetSelectedDevice
SetupDiOpenDeviceInfoW
SetupDiOpenDevRegKey
SetupDiGetDeviceInstanceIdW
SetupDiCreateDeviceInfoList
SetupDiGetDriverInfoDetailW
SetupDiGetSelectedDriverW
SetupDiSetClassInstallParamsW
SetupDiClassNameFromGuidW
CM_Get_Device_ID_ListW
CM_Get_Device_ID_List_SizeW
CM_Locate_DevNodeW
CM_Get_DevNode_Status
CM_Setup_DevNode
SetupDiGetDeviceRegistryPropertyW
SetupGetTargetPathW
SetupInstallFilesFromInfSectionW
SetupPromptReboot
SetupInstallFromInfSectionW
SetupInstallServicesFromInfSectionW
SetupDiGetActualSectionToInstallW
SetupFindNextLine
SetupFindNextMatchLineW
SetupOpenInfFileW
SetupOpenFileQueue
SetupCommitFileQueueW
SetupQueueCopyW
SetupCloseFileQueue
SetupGetLineCountW
SetupCloseInfFile
SetupFindFirstLineW
SetupGetFieldCount
SetupGetIntField
CM_Enumerate_Classes
SetupDiEnumDeviceInfo
SetupInitDefaultQueueCallbackEx
SetupDefaultQueueCallbackW
SetupDiGetClassDevsW
SetupDiOpenClassRegKey
CM_Get_Device_IDW
SetupDiDestroyDeviceInfoList
SetupGetStringFieldW
pSetupGetGlobalFlags
pSetupSetGlobalFlags
SetupOpenAppendInfFileW
SetupCopyOEMInfW
SetupTermDefaultQueueCallback

advapi32

FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
GetLengthSid
SetEntriesInAclW
QueryServiceStatus
DeleteService
ControlService
CloseServiceHandle
OpenServiceW
OpenSCManagerW
StartServiceW
RegCloseKey

ole32

StringFromCLSID
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance

wintrust

CryptCATAdminCalcHashFromFileHandle
WinVerifyTrust

crypt32

CertFreeCertificateContext
CertGetCTLContextProperty
CryptQueryObject
CertFreeCTLContext

Exports

Exports

DIFXAPISetLogCallbackA
DIFXAPISetLogCallbackW
DriverPackageGetPathA
DriverPackageGetPathW
DriverPackageInstallA
DriverPackageInstallW
DriverPackagePreinstallA
DriverPackagePreinstallW
DriverPackageUninstallA
DriverPackageUninstallW
SetDifxLogCallbackA
SetDifxLogCallbackW

Sections

.text
Size: 280KB - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/DataMgr.dll
.dll regsvr32 windows:5 windows x86 arch:x86

bcb8064f72ab4c49284e7085d7ae5b2e

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:de:6c:1e:6d:cb:34:df:98:69:ae:dc:15:7f:07:25
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-05-2021 00:00

Not After

28-05-2024 23:59

Subject

CN=Chengdu Qilu Technology Co. Ltd.,O=Chengdu Qilu Technology Co. Ltd.,L=成都市,ST=四川省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0e:e7:77:e1:2b:5f:0f:d1:55:59:c0:8e:a7:e3:d4:33:bf:98:8a:c9:89:6e:c9:a0:83:80:b2:da:94:b8:8f:71
Signer

Actual PE Digest

0e:e7:77:e1:2b:5f:0f:d1:55:59:c0:8e:a7:e3:d4:33:bf:98:8a:c9:89:6e:c9:a0:83:80:b2:da:94:b8:8f:71

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Jenkins\.jenkins\workspace\master_lu\DataMgr\datamgr\DataMgr\Release\DataMgr.pdb

Imports

kernel32

FindResourceExW
GetTickCount
WriteFile
ReadFile
FlushFileBuffers
CloseHandle
SetNamedPipeHandleState
CreateFileW
GetOverlappedResult
WaitForMultipleObjects
CancelIo
GetLongPathNameW
OpenProcess
GetCurrentProcess
TerminateProcess
ReleaseMutex
WinExec
CreateMutexW
OpenMutexW
WideCharToMultiByte
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
WaitForSingleObject
RaiseException
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InitializeCriticalSection
SetEvent
ResetEvent
CreateEventW
EncodePointer
DecodePointer
InterlockedIncrement
InterlockedDecrement
FreeLibrary
GetProcAddress
LoadResource
CreateFileA
GetSystemDirectoryW
lstrcmpiA
lstrcmpA
GetProcessHeap
HeapAlloc
HeapDestroy
LockResource
SetThreadLocale
GetThreadLocale
MultiByteToWideChar
FindResourceW
GetModuleHandleW
GetModuleFileNameW
LoadLibraryExW
lstrcmpiW
DeviceIoControl
GetSystemWindowsDirectoryW
FreeResource
Sleep
InterlockedCompareExchange
CopyFileW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
WriteConsoleW
ReadConsoleW
SetEndOfFile
SetStdHandle
GetStdHandle
GetACP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetModuleFileNameA
ExitProcess
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
HeapSize
HeapReAlloc
SizeofResource
HeapFree
SetFilePointerEx
GetFileType
VirtualQuery
IsDebuggerPresent
OutputDebugStringW
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
LoadLibraryExA
GetStringTypeW
FormatMessageW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
LocalFree
GetCurrentProcessId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
QueryPerformanceCounter
LoadLibraryW
DeleteFileW
GetVersionExW
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetFileSizeEx
RtlUnwind
InterlockedFlushSList
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetSystemInfo
VirtualProtect
GetCurrentThreadId

user32

FindWindowExW
GetWindowThreadProcessId
PostMessageW
wsprintfW
FindWindowW
KillTimer
SetTimer
SendMessageTimeoutW
CharNextW
LoadCursorW
SetWindowLongW
GetWindowLongW
DestroyWindow
IsWindow
CreateWindowExW
GetClassInfoExW
RegisterClassExW
UnregisterClassW
CallWindowProcW
DefWindowProcW
SendMessageW
GetWindowTextW

advapi32

GetTokenInformation
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegGetValueW
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyExW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
RegSetValueExW
RegQueryInfoKeyW

shell32

ord680
ShellExecuteExW
SHGetSpecialFolderPathW

ole32

CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
StringFromGUID2
CoCreateInstance
CoInitializeEx
CoCreateGuid

oleaut32

VariantInit
VariantClear
SafeArrayCreate
SafeArrayLock
SafeArrayUnlock
SafeArrayPutElement
SysAllocString
SysFreeString
SysStringLen
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
SafeArrayCopy
SafeArrayGetVartype
UnRegisterTypeLi

shlwapi

PathFileExistsW
PathFindFileNameW
PathRemoveFileSpecW
StrCmpNIW
StrTrimA
PathCombineW
PathIsDirectoryW
StrCmpIW
StrStrIA
PathAppendW
SHGetValueA
SHSetValueA
StrStrIW

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

psapi

GetModuleFileNameExW

wininet

InternetGetConnectedState

iphlpapi

GetAdaptersInfo

crypt32

CertGetNameStringW

wintrust

WTHelperProvDataFromStateData
WinVerifyTrust

urlmon

URLDownloadToCacheFileW
URLDownloadToFileW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
GetDataMgrProxy2
GetDataMgrProxy3
GetDataMgrProxy4
GetDataMgrProxyEx

Sections

.text
Size: 620KB - Virtual size: 619KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/DownloadMgr.dll
.dll windows:5 windows x86 arch:x86

3906b7139ebe4989679b89abfaffcd96

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:1f:3a:05:7a:1d:ce:4b:f7:d7:6d:0c:7a:df:83:7e
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-11-2019 00:00

Not After

04-02-2023 12:00

Subject

CN=Beijing Qihu Technology Co.\, Ltd.,O=Beijing Qihu Technology Co.\, Ltd.,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:83:09:ba:16:54:68:50:e6:05:e7:5d:77:3e:56:de
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-11-2019 00:00

Not After

04-02-2023 12:00

Subject

CN=Beijing Qihu Technology Co.\, Ltd.,O=Beijing Qihu Technology Co.\, Ltd.,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:a8:f7:25:76:dc:7b:14:7a:18:63:9e:8d:4d:eb:37
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

28-01-2021 11:08

Not After

01-03-2032 11:08

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20-06-2018 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10-12-2014 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:de:be:ca:e5:ce:fc:32:a7:9c:0d:5a:ff:8f:f7:08:c6:1a:1b:38:74:c6:b4:24:c2:77:22:a1:0b:6c:53:e0
Signer

Actual PE Digest

54:de:be:ca:e5:ce:fc:32:a7:9c:0d:5a:ff:8f:f7:08:c6:1a:1b:38:74:c6:b4:24:c2:77:22:a1:0b:6c:53:e0

Digest Algorithm

sha256

PE Digest Matches

true

f7:06:fd:4d:63:f9:98:fe:f9:1c:5d:20:42:c5:74:83:75:f1:b8:03
Signer

Actual PE Digest

f7:06:fd:4d:63:f9:98:fe:f9:1c:5d:20:42:c5:74:83:75:f1:b8:03

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\vmagent_new\bin\joblist\580049\out\Release\DownloadMgr.pdb

Imports

kernel32

WideCharToMultiByte
GetLastError
ReadFile
FlushFileBuffers
GetFileAttributesExW
CreateDirectoryW
RemoveDirectoryW
SetFileAttributesW
CreateEventW
ResetEvent
MultiByteToWideChar
HeapAlloc
GetProcessHeap
HeapFree
lstrlenA
DeviceIoControl
GetModuleFileNameA
GetStartupInfoW
CreateProcessW
GetExitCodeProcess
SetLastError
GetTickCount
QueryPerformanceCounter
LocalAlloc
SetEvent
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
WaitForMultipleObjects
ExpandEnvironmentStringsW
GetProcessId
GetCurrentProcessId
InterlockedIncrement
InterlockedDecrement
CreateFileA
lstrcmpiA
lstrcmpA
GetSystemDirectoryW
SetEnvironmentVariableA
CompareStringW
GetCurrentThreadId
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetFileSizeEx
SetFilePointer
WriteFile
CreateFileW
DeleteCriticalSection
InitializeCriticalSection
WritePrivateProfileStringW
InterlockedExchange
GetPrivateProfileIntW
GetVersionExW
GetSystemWindowsDirectoryW
GetCurrentProcess
FreeResource
GetCommandLineW
Sleep
InterlockedCompareExchange
GetSystemInfo
GetModuleHandleA
LocalFree
lstrlenW
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
CloseHandle
WaitForSingleObject
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryW
FreeLibrary
GetProcAddress
GetModuleHandleW
DeleteFileW
GetUserDefaultLCID
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
HeapCreate
VirtualAlloc
VirtualFree
IsValidCodePage
GetOEMCP
GetACP
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetStdHandle
GetCPInfo
LCMapStringW
LCMapStringA
RtlUnwind
GetCommandLineA
GetDateFormatA
GetTimeFormatA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CreateThread
LoadLibraryExW
CompareStringA
ExitThread
ExitProcess
TlsFree
HeapDestroy
HeapReAlloc
HeapSize
RaiseException
SystemTimeToFileTime
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
SetEndOfFile
SetFilePointerEx
CreateMutexW
TlsGetValue
OutputDebugStringW
TlsSetValue
HeapUnlock
OpenThread
HeapLock
HeapWalk
ReleaseMutex
TlsAlloc

user32

GetActiveWindow
MessageBoxW
PostMessageW
GetClassInfoExW
RegisterClassExW
CreateWindowExW
DefWindowProcW

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
RegEnumKeyExW
CloseServiceHandle
ChangeServiceConfigW
UnlockServiceDatabase
QueryServiceLockStatusW
LockServiceDatabase
QueryServiceConfigW
OpenServiceW
OpenSCManagerW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExA

shell32

ShellExecuteExW
ord165
SHGetSpecialFolderPathW
CommandLineToArgvW
ShellExecuteW
SHGetDiskFreeSpaceExW

shlwapi

StrCatW
StrCmpNIW
PathIsDirectoryW
SHDeleteKeyW
PathFindFileNameW
SHDeleteValueW
StrStrIW
StrStrW
SHGetValueW
PathCombineW
PathRemoveFileSpecW
PathAppendW
PathFileExistsW
PathAddBackslashW
StrStrIA
SHSetValueA
SHGetValueA

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

Exports

Exports

Create360DownloadMgrInterface
Create360DownloadMgrInterface2

Sections

.text
Size: 338KB - Virtual size: 338KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/DrvInst64.exe
.exe windows:5 windows x64 arch:x64

79f0d93a87087b5e6281e9ec47c35f19

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

28-01-2028 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24-05-2016 00:00

Not After

24-06-2027 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

26:27:9f:0f:2f:11:97:0d:cc:f6:3e:ba:88:f2:d4:c4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

06-01-2016 00:00

Not After

28-03-2019 23:59

Subject

CN=Qihoo 360 Software (Beijing) Company Limited,OU=Tech. Dev. Dept.,O=Qihoo 360 Software (Beijing) Company Limited,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

23:38:91:61:e4:5a:21:8b:d2:4e:6e:85:9a:e1:11:53
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28-12-2015 00:00

Not After

28-03-2019 23:59

Subject

CN=Qihoo 360 Software (Beijing) Company Limited,OU=Tech. Dev. Dept.,O=Qihoo 360 Software (Beijing) Company Limited,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10-12-2013 00:00

Not After

09-12-2023 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

51:01:fe:98:6b:c2:13:34:9d:df:9c:dd:65:6c:ac:20:41:12:0f:5d:5c:7b:16:32:2a:d8:d4:eb:08:0c:3f:e9
Signer

Actual PE Digest

51:01:fe:98:6b:c2:13:34:9d:df:9c:dd:65:6c:ac:20:41:12:0f:5d:5c:7b:16:32:2a:d8:d4:eb:08:0c:3f:e9

Digest Algorithm

sha256

PE Digest Matches

true

71:22:68:0f:47:1c:bc:92:8c:a5:1b:11:8f:65:99:bd:e4:b2:b7:5a
Signer

Actual PE Digest

71:22:68:0f:47:1c:bc:92:8c:a5:1b:11:8f:65:99:bd:e4:b2:b7:5a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\vmagent_new\bin\joblist\253800\out\Release\DrvInst64.pdb

Imports

kernel32

LoadLibraryW
GetProcAddress
FreeLibrary
LocalFree
CreateFileW
WideCharToMultiByte
WriteFile
FindResourceExW
FindResourceW
LoadResource
GetModuleHandleW
SizeofResource
GetVersionExW
LockResource
GetVersion
lstrcpynW
GetModuleHandleA
GetSystemInfo
GetModuleFileNameW
GetCommandLineW
lstrlenW
GetCurrentThreadId
MultiByteToWideChar
HeapAlloc
GetProcessHeap
HeapFree
GetSystemDirectoryW
CloseHandle
CreateMutexW
FindClose
FindNextFileW
SetEndOfFile
SetEnvironmentVariableA
CompareStringW
CompareStringA
FindFirstFileW
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
SetFilePointer
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleMode
GetConsoleCP
LCMapStringW
HeapCreate
HeapSetInformation
GetModuleFileNameA
GetStdHandle
ExitProcess
Sleep
FlsAlloc
ReadFile
SetLastError
FlsFree
FlsSetValue
FlsGetValue
GetWindowsDirectoryW
GetLastError
GetFullPathNameW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
HeapReAlloc
HeapSize
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
RtlUnwindEx
RtlPcToFileHeader
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer

advapi32

GetAclInformation
GetAce
SetNamedSecurityInfoW
GetNamedSecurityInfoW

shell32

SHGetSpecialFolderPathW
ord165
CommandLineToArgvW

shlwapi

SHGetValueW
PathFindFileNameW
PathFileExistsW
PathAppendW
StrCmpIW
PathRemoveFileSpecW

setupapi

SetupGetLineByIndexW
SetupGetTargetPathW
SetupGetSourceInfoW
SetupGetSourceFileLocationW
SetupFindNextLine
SetupFindNextMatchLineW
SetupGetStringFieldW
SetupGetFieldCount
SetupFindFirstLineW
SetupEnumInfSectionsW
SetupCloseInfFile
SetupOpenAppendInfFileW
SetupOpenInfFileW
SetupDiGetSelectedDriverW
SetupDiBuildDriverInfoList
SetupDiSetDeviceInstallParamsW
SetupDiSetSelectedDevice
SetupDiCreateDeviceInfoList
CM_Reenumerate_DevNode_Ex
CM_Locate_DevNode_ExW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstallParamsW
SetupDiCallClassInstaller
SetupDiSetClassInstallParamsW
CM_Get_Device_IDW
SetupDiGetDeviceInfoListDetailW
SetupDiOpenDeviceInfoW
SetupDiGetClassDevsW
SetupUninstallOEMInfW
SetupGetLineCountW

rpcrt4

UuidFromStringW

difxapi

DIFXAPISetLogCallbackW
DriverPackagePreinstallW
DriverPackageInstallW

Sections

.text
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/DrvMgrUI.dll
.dll windows:5 windows x86 arch:x86

3ea3af27eeacca8c5239cb5906c945b7

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28-07-2020 00:00

Not After

28-07-2030 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

29:5b:f8:6e:85:26:53:40:33:13:83:7b
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

26-04-2023 03:04

Not After

26-04-2026 03:04

Subject

SERIALNUMBER=911101026662879416,CN=Beijing Qihu Technology Co.\, Ltd.,O=Beijing Qihu Technology Co.\, Ltd.,STREET=朝阳区酒仙桥路6号院2号楼1至19层104号内8层801,L=Beijing,ST=Beijing,C=CN,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

02-11-2023 10:30

Not After

04-12-2034 10:30

Subject

CN=Globalsign TSA for Advanced - G4 - 202311,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20-06-2018 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10-12-2014 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3d:14:5f:12:8b:de:3a:15:8e:bb:8d:cb:72:fc:55:62:5b:d6:2f:6d:ca:15:e6:4d:19:af:ca:82:d3:b8:b4:2d
Signer

Actual PE Digest

3d:14:5f:12:8b:de:3a:15:8e:bb:8d:cb:72:fc:55:62:5b:d6:2f:6d:ca:15:e6:4d:19:af:ca:82:d3:b8:b4:2d

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\vmagent_new\bin\joblist\830358\out\Release\DrvMgrUI.pdb

Imports

kernel32

InterlockedIncrement
InterlockedDecrement
lstrcmpW
GetTempPathW
MoveFileExW
GetNativeSystemInfo
WaitForMultipleObjects
GetProcessId
lstrcmpiW
GetTempFileNameW
CreateFileA
OutputDebugStringW
DeleteFileA
GetFileSizeEx
GetDriveTypeW
GetShortPathNameW
GetCurrentDirectoryW
SetVolumeLabelW
SetFileTime
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
lstrcmpiA
lstrcmpA
GetSystemTime
FormatMessageW
FormatMessageA
GetDiskFreeSpaceW
GetDiskFreeSpaceA
GetFileAttributesA
GetTempPathA
GetVersionExA
LockFileEx
LockFile
UnlockFile
AreFileApisANSI
SetEnvironmentVariableA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemDirectoryW
GetFullPathNameA
GetCurrentThreadId
SetHandleCount
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
HeapCreate
IsValidCodePage
GetOEMCP
GetACP
InitializeCriticalSectionAndSpinCount
GetStdHandle
CompareStringA
CompareStringW
GetStringTypeW
GetCPInfo
LCMapStringW
LCMapStringA
RtlUnwind
GetCommandLineA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatA
GetTimeFormatA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CreateThread
ExitThread
ExitProcess
TlsFree
TlsAlloc
ReleaseMutex
HeapWalk
HeapLock
OpenThread
HeapUnlock
TlsSetValue
TlsGetValue
SetFilePointerEx
SetEndOfFile
LocalFileTimeToFileTime
GetSystemTimeAsFileTime
SystemTimeToFileTime
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapSize
HeapReAlloc
HeapDestroy
MoveFileW
FlushFileBuffers
SetLastError
DeviceIoControl
CreateProcessW
GetStartupInfoW
GetDiskFreeSpaceExW
WriteFile
ReadFile
SetFilePointer
GetFileSize
MulDiv
CancelWaitableTimer
SetWaitableTimer
CreateWaitableTimerW
GetFileAttributesW
GetFullPathNameW
CreateMutexW
GetWindowsDirectoryW
SetEvent
ExpandEnvironmentStringsW
GetLongPathNameW
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GetSystemPowerStatus
QueryPerformanceCounter
GetTickCount
GetModuleFileNameA
GetFileAttributesExW
SetFileAttributesW
lstrlenA
GetPrivateProfileStringW
HeapFree
GetProcessHeap
HeapAlloc
MultiByteToWideChar
FlushInstructionCache
RaiseException
ResetEvent
CreateEventW
LocalAlloc
GetFileType
GetLastError
CreateFileW
GetStartupInfoA
FindClose
FindNextFileW
FindFirstFileW
GetCurrentProcessId
GetExitCodeProcess
OpenProcess
WritePrivateProfileStringW
InterlockedExchange
GetPrivateProfileIntW
GetVersionExW
GetSystemWindowsDirectoryW
GetCurrentProcess
FreeResource
GetCommandLineW
Sleep
InterlockedCompareExchange
GetSystemInfo
GetModuleHandleA
LocalFree
lstrlenW
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
CloseHandle
WaitForSingleObject
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryW
FreeLibrary
GetProcAddress
GetModuleHandleW
LoadLibraryExW
DeleteFileW

user32

UnregisterClassA
MessageBoxW
MsgWaitForMultipleObjects
PeekMessageW
TranslateMessage
GetActiveWindow
GetClassNameW
GetDlgItem
GetWindowRect
ScreenToClient
CreateWindowExW
CopyRect
GetParent
InvalidateRect
SetWindowTextW
MoveWindow
FindWindowW
PostMessageW
RegisterWindowMessageW
FindWindowExW
IsWindowVisible
DefWindowProcW
SetWindowPos
IsWindow
BeginPaint
EndPaint
GetDC
ReleaseDC
GetClientRect
UpdateLayeredWindow
ShowWindow
SetWindowRgn
SetTimer
KillTimer
RegisterClassExW
GetClassInfoExW
GetFocus
CreateAcceleratorTableW
IsChild
CharNextW
PostQuitMessage
LoadCursorW
SetWindowLongW
GetWindowLongW
InvalidateRgn
GetDesktopWindow
DispatchMessageW
InflateRect
GetSysColor
DestroyAcceleratorTable
DialogBoxParamW
GetSystemMetrics
WindowFromPoint
GetCapture
GetClassLongW
EndDialog
IsIconic
MonitorFromWindow
GetMonitorInfoW
DrawTextW
IntersectRect
GetDlgCtrlID
ClientToScreen
RedrawWindow
DrawIconEx
DestroyIcon
FillRect
GetCursorPos
ReleaseCapture
SetCapture
SetFocus
UpdateWindow
SetScrollInfo
GetWindow
MapWindowPoints
GetScrollInfo
SetScrollPos
ScrollWindowEx
SendMessageW
DestroyWindow
IsDialogMessageW
IsRectEmpty
GetWindowTextLengthW
GetWindowTextW
EnableWindow
SetRectEmpty
OffsetRect
SetCursor
DrawFocusRect
PtInRect
SetRect
UnionRect
SendMessageTimeoutW
PostThreadMessageW
GetWindowThreadProcessId
GetShellWindow
LoadImageW
SystemParametersInfoW
CallWindowProcW

gdi32

CreateRectRgnIndirect
ExcludeClipRect
GetTextColor
TextOutW
CreatePen
SetTextColor
OffsetViewportOrgEx
GetClipBox
GetBitmapBits
RestoreDC
SaveDC
CreateFontW
SetBkMode
CreateRoundRectRgn
SetDCPenColor
LineTo
MoveToEx
FillRgn
CreateSolidBrush
IntersectClipRect
SetBkColor
SelectClipRgn
RectVisible
GetTextExtentPoint32W
CreateDIBSection
SetStretchBltMode
StretchBlt
GetObjectW
GetStockObject
CombineRgn
CreateRectRgn
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetViewportOrgEx
DeleteDC
CreateFontIndirectW
DeleteObject
ExtTextOutW
GetDeviceCaps

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegEnumKeyExW
CloseServiceHandle
CreateServiceW
ChangeServiceConfig2W
ChangeServiceConfigW
UnlockServiceDatabase
QueryServiceLockStatusW
LockServiceDatabase
StartServiceW
QueryServiceStatus
QueryServiceConfigW
OpenServiceW
OpenSCManagerW
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
DuplicateTokenEx
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegQueryInfoKeyW
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyW
RegEnumKeyExA

shell32

ShellExecuteW
SHGetSpecialFolderPathW
ord165
ShellExecuteExW
SHFileOperationW
CommandLineToArgvW

ole32

OleUninitialize
CreateStreamOnHGlobal
CoTaskMemFree
StringFromCLSID
CoUninitialize
CoCreateInstance
CoInitialize
CoTaskMemAlloc
StringFromGUID2
OleLockRunning
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
OleInitialize
CoTaskMemRealloc

oleaut32

SysAllocStringLen
SysAllocString
VariantCopy
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
DispCallFunc
LoadTypeLi
LoadRegTypeLi
SysFreeString
SysStringLen
VariantClear
VariantInit
SystemTimeToVariantTime
OleCreateFontIndirect
VariantTimeToSystemTime
SafeArrayGetLBound
SysStringByteLen
VarUI4FromStr
SysAllocStringByteLen

shlwapi

PathCombineW
SHGetValueW
StrCmpIW
SHGetValueA
PathIsDirectoryW
PathIsRootW
PathUnquoteSpacesW
StrStrW
StrStrIW
AssocQueryStringW
SHDeleteValueW
SHSetValueW
PathIsRelativeW
PathStripPathW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
StrStrIA
PathFileExistsW
PathAppendW
SHSetValueA
PathRemoveFileSpecW

comctl32

_TrackMouseEvent

msimg32

AlphaBlend

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

gdiplus

GdipGetImageHeight
GdipGetImageWidth
GdipDrawImagePointRectI
GdipDisposeImage
GdipCloneImage
GdipAlloc
GdipFree
GdipLoadImageFromStream
GdiplusStartup
GdipDeleteGraphics
GdipCreateFromHDC
GdipDrawImageRectRectI

setupapi

CM_Get_DevNode_Status
SetupDiDestroyDeviceInfoList
SetupOpenInfFileW
SetupEnumInfSectionsW
SetupDiGetDeviceRegistryPropertyW
SetupGetFieldCount
SetupGetStringFieldW
SetupFindNextMatchLineW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupFindFirstLineW

Exports

Exports

CreateNsItemPanel
CreatePage

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 241KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/DrvmgrCore.dll
.dll windows:5 windows x86 arch:x86

85405722a134d829fd1ba56f644beefa

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28-07-2020 00:00

Not After

28-07-2030 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

29:5b:f8:6e:85:26:53:40:33:13:83:7b
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

26-04-2023 03:04

Not After

26-04-2026 03:04

Subject

SERIALNUMBER=911101026662879416,CN=Beijing Qihu Technology Co.\, Ltd.,O=Beijing Qihu Technology Co.\, Ltd.,STREET=朝阳区酒仙桥路6号院2号楼1至19层104号内8层801,L=Beijing,ST=Beijing,C=CN,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

02-11-2023 10:30

Not After

04-12-2034 10:30

Subject

CN=Globalsign TSA for Advanced - G4 - 202311,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20-06-2018 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10-12-2014 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

de:67:11:b4:43:86:74:6a:ba:aa:5a:b2:e4:62:a7:52:b6:f3:e3:48:d0:fc:e0:b8:36:cc:0e:8f:ff:ba:57:ba
Signer

Actual PE Digest

de:67:11:b4:43:86:74:6a:ba:aa:5a:b2:e4:62:a7:52:b6:f3:e3:48:d0:fc:e0:b8:36:cc:0e:8f:ff:ba:57:ba

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\vmagent_new\bin\joblist\826795\out\Release\DrvmgrCore.pdb

Imports

kernel32

GetFileSize
WriteFile
SetFilePointer
GetFileSizeEx
MoveFileW
GetLocalTime
GetCurrentThreadId
FindFirstFileW
FindNextFileW
FindClose
CreateEventW
ResetEvent
MultiByteToWideChar
HeapAlloc
GetProcessHeap
HeapFree
GetPrivateProfileStringW
lstrlenA
GetLastError
OpenProcess
SetFileAttributesW
GetFileAttributesExW
GetModuleFileNameA
GetStartupInfoW
CreateProcessW
GetExitCodeProcess
OpenMutexW
SetLastError
GetTickCount
QueryPerformanceFrequency
QueryPerformanceCounter
GetSystemPowerStatus
ExpandEnvironmentStringsW
CreateDirectoryW
SetEvent
WaitForMultipleObjects
GetTempFileNameW
ReadFile
MoveFileExW
SetEndOfFile
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
FileTimeToSystemTime
FileTimeToLocalFileTime
lstrcmpiW
InterlockedIncrement
DeleteCriticalSection
GetTempPathW
SystemTimeToFileTime
RemoveDirectoryW
FormatMessageW
GetACP
GetWindowsDirectoryW
GetSystemDefaultLangID
GetFullPathNameW
CreateMutexW
TerminateProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetProcessId
SetWaitableTimer
CancelWaitableTimer
lstrcmpiA
CreateWaitableTimerW
CreateIoCompletionPort
GetExitCodeThread
TerminateThread
PostQueuedCompletionStatus
GetQueuedCompletionStatus
GetVolumeNameForVolumeMountPointW
GetDiskFreeSpaceW
CreateFileA
GetCurrentProcessId
CopyFileW
GetFileAttributesW
lstrcpynW
DeleteFileA
DeviceIoControl
CreateFileW
GetShortPathNameW
GetCurrentDirectoryW
SetVolumeLabelW
SetFileTime
lstrcmpA
GetSystemTime
FormatMessageA
GetDiskFreeSpaceA
GetFullPathNameA
GetFileAttributesA
GetTempPathA
GetVersionExA
LockFileEx
LockFile
UnlockFile
AreFileApisANSI
SetEnvironmentVariableA
SetStdHandle
WriteConsoleW
SetFileAttributesA
InterlockedDecrement
InitializeCriticalSection
QueryDosDeviceW
GetDriveTypeW
GetSystemDirectoryW
GetLogicalDriveStringsW
GetDiskFreeSpaceExW
GetVolumeInformationW
WritePrivateProfileStringW
InterlockedExchange
GetPrivateProfileIntW
GetVersionExW
GetSystemWindowsDirectoryW
GetCurrentProcess
FreeResource
GetCommandLineW
Sleep
InterlockedCompareExchange
GetSystemInfo
GetModuleHandleA
LocalFree
lstrlenW
WideCharToMultiByte
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
CloseHandle
WaitForSingleObject
RaiseException
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryW
FreeLibrary
GetProcAddress
GetModuleHandleW
LoadLibraryExW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeA
GetTimeZoneInformation
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetStartupInfoA
GetFileType
SetHandleCount
HeapCreate
VirtualAlloc
VirtualFree
IsValidCodePage
GetOEMCP
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetStdHandle
CompareStringA
CompareStringW
GetStringTypeW
LCMapStringW
LCMapStringA
RtlUnwind
GetCommandLineA
GetCPInfo
GetDateFormatA
GetTimeFormatA
FindNextFileA
FindFirstFileA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateThread
ExitThread
ExitProcess
TlsFree
TlsAlloc
ReleaseMutex
HeapWalk
HeapLock
OpenThread
HeapUnlock
TlsSetValue
OutputDebugStringW
TlsGetValue
SetFilePointerEx
LocalFileTimeToFileTime
GetSystemTimeAsFileTime
HeapSize
HeapReAlloc
HeapDestroy
DeleteFileW

user32

GetActiveWindow
MessageBoxW
MsgWaitForMultipleObjects
PeekMessageW
FindWindowW
IsWindow
SendMessageTimeoutW
FindWindowExW
PostMessageW
PostThreadMessageW
DefWindowProcW
CreateWindowExW
RegisterClassExW
GetClassInfoExW

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCreateKeyW
RegEnumKeyExA
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegEnumKeyExW

shell32

CommandLineToArgvW
ShellExecuteExW
SHGetDiskFreeSpaceExW
SHGetSpecialFolderPathW
ord165
SHCreateDirectoryExA
SHFileOperationW
SHCreateDirectoryExW
ShellExecuteW

ole32

CoInitializeSecurity
CoInitializeEx
CoSetProxyBlanket
CoTaskMemFree
StringFromCLSID
CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

VariantInit
VariantClear
DispCallFunc
SysAllocString
SysAllocStringLen
VariantChangeType
GetErrorInfo
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetLBound
SafeArrayGetUBound
VarBstrCat
SysStringLen
SysFreeString

shlwapi

PathRemoveBackslashW
PathRemoveExtensionW
PathStripPathW
PathIsRelativeW
PathIsDirectoryW
PathFindFileNameW
SHDeleteValueW
PathIsRootW
StrStrIW
StrStrW
StrStrA
PathFileExistsA
SHGetValueW
PathCombineW
PathRemoveFileSpecW
PathAppendW
PathFileExistsW
PathFindExtensionW
StrFormatByteSizeW
PathStripToRootW
PathGetDriveNumberW
PathAddBackslashW
StrCmpIW
SHSetValueW
SHGetValueA
SHSetValueA
StrStrIA
PathFindExtensionA
PathSkipRootA

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

setupapi

SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiBuildDriverInfoList
SetupDiSetSelectedDevice
SetupDiCallClassInstaller
SetupDiGetSelectedDriverW
SetupDiOpenDeviceInfoW
SetupDiGetDeviceInfoListDetailW
CM_Get_Device_IDW
SetupDiSetClassInstallParamsW
SetupDiDestroyDeviceInfoList
SetupUninstallOEMInfW
CM_Locate_DevNode_ExW
CM_Reenumerate_DevNode_Ex
CM_Get_Parent
CM_Get_Device_ID_Size
SetupOpenInfFileW
SetupEnumInfSectionsW
SetupFindFirstLineW
SetupGetFieldCount
SetupGetStringFieldW
SetupFindNextMatchLineW
SetupOpenAppendInfFileW
SetupCloseInfFile
SetupFindNextLine
SetupDiGetClassDescriptionW
SetupGetSourceInfoW
SetupGetTargetPathW
SetupVerifyInfFileW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiClassNameFromGuidW
SetupIterateCabinetW
CM_Get_DevNode_Status
SetupDiGetDeviceInstanceIdW
SetupDiCreateDeviceInfoList
SetupDiOpenDevRegKey
SetupDiGetDeviceRegistryPropertyW
SetupGetSourceFileLocationW

rpcrt4

UuidFromStringW
UuidToStringW

msi

ord248
ord246

wintrust

WinVerifyTrust

Exports

Exports

CompressFileToZip
CompressFileToZipWithPath
Create360BackupMgrInterface
Create360BackupMgrInterface2
Create360ScanMgrInterface
CreateCloudBackupMgrInterface
CreateInstallAndUnstallManager
CreateScanAndUploadMgrInterface
DrvInterfaceManger_Query
GetDevTypeDisplayName
GetDeviceStatusFullInfo
GetDeviceStatusInfo
GetGlobalInfo
GetGlobalInfo_2
GetMidString
InstallDriver
InstallDriver2
InstallNetDriver
IsHaveSSD
SharedConfigMgr
UninstallAmdDisplay
UninstallDriver
UninstallIntelDisplay
UninstallNvidiaDisplay
_GetDevType

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/LiveUpd360.dll
.dll windows:5 windows x86 arch:x86

101959e525107cf2128f554199ed85c4

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

28-01-2028 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24-05-2016 00:00

Not After

24-06-2027 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

26:27:9f:0f:2f:11:97:0d:cc:f6:3e:ba:88:f2:d4:c4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

06-01-2016 00:00

Not After

28-03-2019 23:59

Subject

CN=Qihoo 360 Software (Beijing) Company Limited,OU=Tech. Dev. Dept.,O=Qihoo 360 Software (Beijing) Company Limited,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

23:38:91:61:e4:5a:21:8b:d2:4e:6e:85:9a:e1:11:53
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28-12-2015 00:00

Not After

28-03-2019 23:59

Subject

CN=Qihoo 360 Software (Beijing) Company Limited,OU=Tech. Dev. Dept.,O=Qihoo 360 Software (Beijing) Company Limited,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10-12-2013 00:00

Not After

09-12-2023 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02-01-2017 00:00

Not After

01-04-2028 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:ce:60:ad:c8:39:58:38:74:61:1e:09:3e:58:f9:a2:f4:19:d3:97:2e:dc:9b:c1:b6:44:18:75:9f:6c:6b:8b
Signer

Actual PE Digest

25:ce:60:ad:c8:39:58:38:74:61:1e:09:3e:58:f9:a2:f4:19:d3:97:2e:dc:9b:c1:b6:44:18:75:9f:6c:6b:8b

Digest Algorithm

sha256

PE Digest Matches

true

63:a9:45:3e:24:6a:03:05:a5:ac:4e:ea:a5:90:06:8f:e3:5a:a9:df
Signer

Actual PE Digest

63:a9:45:3e:24:6a:03:05:a5:ac:4e:ea:a5:90:06:8f:e3:5a:a9:df

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\vmagent_new\bin\joblist\177689\out\Release\release\LiveUpd360.pdb

Imports

kernel32

GetFileInformationByHandle
GetFullPathNameA
GetDriveTypeA
PeekNamedPipe
FileTimeToSystemTime
EnterCriticalSection
LeaveCriticalSection
FileTimeToLocalFileTime
GetCurrentDirectoryA
GetProcAddress
GetModuleHandleW
DeleteCriticalSection
FreeLibrary
InitializeCriticalSection
LoadLibraryW
GetCurrentProcessId
CreateFileW
DeviceIoControl
CloseHandle
FindFirstFileA
GetModuleFileNameW
lstrcmpiA
lstrcmpA
SleepEx
GetVersionExA
ExpandEnvironmentStringsA
FormatMessageA
GetSystemDirectoryW
lstrlenA
GetSystemDirectoryA
Sleep
WaitForSingleObject
GetFileAttributesW
RaiseException
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
GetLastError
GetTickCount
SetEvent
CreateEventW
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetModuleHandleExW
FreeLibraryAndExitThread
ReleaseMutex
ReleaseSemaphore
WaitForMultipleObjects
CreateSemaphoreW
CreateMutexW
SetWaitableTimer
CreateWaitableTimerW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetLocalTime
CreateThread
DeleteFileW
SetFilePointer
SetEndOfFile
WriteFile
GetFileSizeEx
FindClose
FindFirstFileW
MoveFileW
MoveFileExW
ReadFile
InterlockedIncrement
InterlockedDecrement
CopyFileW
GetLongPathNameW
GetVersionExW
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
GetFileSize
FlushFileBuffers
GetFileAttributesExW
MulDiv
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
CreateFileA
SystemTimeToFileTime
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
SetFilePointerEx
OutputDebugStringW
FormatMessageW
SetLastError
LocalFree
GetSystemTime
TlsGetValue
TlsSetValue
GetAtomNameW
OpenThread
AddAtomW
TlsAlloc
FindAtomW
DeleteAtom
TlsFree
RtlUnwind
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
LCMapStringW
VirtualAlloc
LCMapStringA
GetModuleHandleA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
SetEnvironmentVariableA

user32

CreateWindowExW
MessageBoxW
TranslateMessage
GetMessageW
DispatchMessageW
IsWindow
FindWindowExW
SendMessageTimeoutW
DestroyWindow
PostThreadMessageW
RegisterClassW
UnregisterClassW
DefWindowProcW

shlwapi

wvnsprintfW
SHSetValueA
PathCombineW
PathRemoveFileSpecW
SHGetValueA
PathFileExistsW
SHGetValueW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

ws2_32

gethostbyname
socket
WSAIoctl
setsockopt
htonl
bind
WSAEventSelect
closesocket
WSAGetLastError
gethostname
inet_addr
WSACleanup
WSAStartup
sendto
htons
recvfrom
recv
send
getsockname
getsockopt
getpeername
connect
WSASetLastError
__WSAFDIsSet
select
freeaddrinfo
getaddrinfo
ioctlsocket
WSAWaitForMultipleEvents
ntohs

netapi32

Netbios

advapi32

RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExA
RegEnumKeyExW
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExW

shell32

SHGetSpecialFolderPathW

ole32

CLSIDFromString

Exports

Exports

PPClose
PPCloseHandle
PPDownload
PPGetConfig
PPInit
PPQueryTask
PPQueryTaskEx
PPRemoveTask
PPRestart
PPSetConfig
PPStartTask
PPStartTaskEx
PPStopSeed
PPStopTask
StartLan
StopLan
_EnableP2P
_GetLanupTasks
_GetProductLst
_GetTasks
_IsStopped
_P2SPCancelCheckProxy
_P2SPCheckProxy
_P2SPCheckProxyEx
_P2SPSetOption
_P2SPUpdateRegInfo
_PPQueryIPPort
_PPQueryProduct
_PPQueryTask2
_PPQueryTask3
_PPSetLocalLog
_Run
_SetKeep
_SetKeepEx
_SetLocalLog
_StartRun
_StopRun
__PPSetModulePath2

Sections

.text
Size: 471KB - Virtual size: 470KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/MiniUI.dll
.dll windows:5 windows x86 arch:x86

f986ff25a78e0c855385d1734a1726e9

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

26:27:9f:0f:2f:11:97:0d:cc:f6:3e:ba:88:f2:d4:c4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

06-01-2016 00:00

Not After

28-03-2019 23:59

Subject

CN=Qihoo 360 Software (Beijing) Company Limited,OU=Tech. Dev. Dept.,O=Qihoo 360 Software (Beijing) Company Limited,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

23:38:91:61:e4:5a:21:8b:d2:4e:6e:85:9a:e1:11:53
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28-12-2015 00:00

Not After

28-03-2019 23:59

Subject

CN=Qihoo 360 Software (Beijing) Company Limited,OU=Tech. Dev. Dept.,O=Qihoo 360 Software (Beijing) Company Limited,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10-12-2013 00:00

Not After

09-12-2023 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2d:4e:86:50:85:be:e0:0e:13:72:28:b3:d0:b1:32:e9
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11-06-2015 00:00

Not After

29-12-2020 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 2,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01-01-1997 00:00

Not After

31-12-2020 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

17:fd:0d:29:3e:e9:e1:4d:d2:ab:20:42:39:ec:8b:18:b4:db:23:8b:16:9d:c2:ab:d8:b8:6f:95:2e:4f:03:14
Signer

Actual PE Digest

17:fd:0d:29:3e:e9:e1:4d:d2:ab:20:42:39:ec:8b:18:b4:db:23:8b:16:9d:c2:ab:d8:b8:6f:95:2e:4f:03:14

Digest Algorithm

sha256

PE Digest Matches

true

a2:18:43:e1:be:48:6d:8c:ad:df:50:6c:76:67:2b:ac:c5:d8:c4:3e
Signer

Actual PE Digest

a2:18:43:e1:be:48:6d:8c:ad:df:50:6c:76:67:2b:ac:c5:d8:c4:3e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\vmagent_new\bin\joblist\126488\out\Release\MiniUI.pdb

Imports

kernel32

SetEnvironmentVariableA
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringA
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleHandleA
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
SetStdHandle
LCMapStringW
SetFilePointer
GetStartupInfoA
GetFileType
SetHandleCount
GetConsoleMode
GetConsoleCP
HeapDestroy
HeapCreate
GetModuleFileNameA
GetStdHandle
HeapSize
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
GetCommandLineA
ExitProcess
CreateThread
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
TlsFree
DeleteAtom
FindAtomW
TlsAlloc
ReleaseMutex
AddAtomW
OpenThread
GetAtomNameW
TlsSetValue
TlsGetValue
CreateMutexW
GetSystemTime
LocalFree
FormatMessageW
GetFileSizeEx
ReadFile
WriteFile
SetFilePointerEx
SetEndOfFile
LocalFileTimeToFileTime
GetSystemTimeAsFileTime
SystemTimeToFileTime
CreateFileA
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
LocalAlloc
HeapFree
GetProcessHeap
HeapAlloc
GetVersion
InterlockedExchange
GetFileTime
LoadLibraryExW
lstrcmpiW
FindResourceW
GetLastError
LoadResource
SizeofResource
LockResource
FreeResource
GlobalLock
GlobalUnlock
GlobalFree
CreateEventW
ResumeThread
Sleep
GlobalAlloc
SetEvent
WaitForSingleObject
ResetEvent
MulDiv
GetVersionExW
MultiByteToWideChar
WideCharToMultiByte
GetSystemWindowsDirectoryW
GetStartupInfoW
OutputDebugStringW
DebugBreak
lstrlenA
GetTempPathW
GetTempFileNameW
DeleteFileW
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
CloseHandle
RaiseException
InterlockedDecrement
lstrlenW
EnterCriticalSection
LeaveCriticalSection
CreateProcessW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
DeleteCriticalSection
FreeLibrary
InitializeCriticalSection
LoadLibraryW
GetCurrentProcessId
CreateFileW
DeviceIoControl
IsValidCodePage

user32

SetWindowPos
MonitorFromWindow
CreateDialogParamW
EnableWindow
GetMessageTime
GetPropW
EnableScrollBar
SetTimer
ShowScrollBar
SetPropW
RemovePropW
GetSysColorBrush
DrawEdge
FrameRect
DrawFrameControl
GetParent
UnregisterClassA
KillTimer
SetDlgItemTextW
EndDialog
GetWindowThreadProcessId
DialogBoxParamW
LoadImageW
wsprintfW
MessageBoxW
SetScrollRange
SetWindowTextW
FindWindowW
MapWindowPoints
LoadBitmapW
WindowFromDC
GetWindowDC
GetMessagePos
GetActiveWindow
GetDC
ReleaseDC
SetWindowLongW
CharLowerW
GetCursor
PostMessageW
GetClientRect
InvalidateRect
ShowWindow
IsWindow
GetClassInfoExW
LoadCursorW
OffsetRect
LoadStringW
DestroyWindow
DrawTextW
SystemParametersInfoW
GetWindowTextLengthW
GetWindowTextW
DrawIconEx
GetSysColor
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
GetSubMenu
ClientToScreen
TrackPopupMenu
MonitorFromPoint
GetMonitorInfoW
GetMenuItemCount
IsZoomed
GetMenuStringW
DestroyMenu
LoadMenuW
GetSystemMetrics
UpdateWindow
SetRectEmpty
GetFocus
EqualRect
SetFocus
SetScrollPos
SetScrollInfo
GetScrollRange
GetScrollPos
GetScrollInfo
CharNextW
wvsprintfW
SetCursor
IntersectRect
SetRect
FillRect
IsIconic
CopyIcon
SetWindowRgn
DestroyIcon
MoveWindow
EnumChildWindows
GetDlgItem
GetWindowRect
GetWindow
CharUpperW
GetComboBoxInfo
GetClassNameW
ReleaseCapture
GetNextDlgGroupItem
IsWindowEnabled
GetCursorPos
ScreenToClient
GetDlgCtrlID
CopyRect
InflateRect
PtInRect
IsRectEmpty
RedrawWindow
IsWindowVisible
SendMessageW
SetCapture
SetLayeredWindowAttributes
CreateWindowExW
RegisterClassExW
EndPaint
BeginPaint
CallWindowProcW
GetWindowLongW
DefWindowProcW

gdi32

SetTextColor
GetTextExtentPoint32W
SetBkMode
BitBlt
DeleteDC
DeleteObject
CreateCompatibleBitmap
SetViewportOrgEx
SelectObject
CreateCompatibleDC
SetBkColor
ExtTextOutW
GetCurrentObject
GetObjectW
StretchBlt
SetStretchBltMode
Rectangle
RoundRect
CreateEllipticRgn
CombineRgn
OffsetRgn
PatBlt
CreateDIBSection
PlayEnhMetaFile
SetWindowOrgEx
IntersectClipRect
CreateFontIndirectW
GetStockObject
GetObjectType
SaveDC
RestoreDC
OffsetViewportOrgEx
CreateRectRgn
CreateRoundRectRgn
GetDeviceCaps
CreateSolidBrush
SelectClipRgn
CreateDCW
GetViewportOrgEx
MoveToEx
LineTo
CreateDIBitmap
CreateFontW
CreatePen

advapi32

RegQueryValueExA
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW

ole32

CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CreateStreamOnHGlobal
CoInitialize

oleaut32

VarBstrCmp
VariantCopy
SysAllocStringLen
VariantChangeType
VarUI4FromStr
OleLoadPicture
SysStringByteLen
SysAllocStringByteLen
VariantClear
VariantInit
SysFreeString
SysStringLen
SysAllocString

shlwapi

SHSetValueW
SHGetValueW
wnsprintfW
PathRemoveExtensionW
PathFindExtensionW
PathAppendW
PathIsRelativeW
PathRemoveFileSpecW
PathCombineW
PathFileExistsW

comctl32

InitCommonControlsEx
_TrackMouseEvent
ImageList_Destroy

msimg32

GradientFill
AlphaBlend
TransparentBlt

gdiplus

GdipCloneImage
GdipLoadImageFromStream
GdipDisposeImage
GdipAlloc
GdipFree
GdipLoadImageFromStreamICM
GdiplusStartup

Exports

Exports

CreateBalloonManager
CreateDynamicScrollBar
CreateDynamicScrollBar2
CreateMessageBoxRender
CreateMiniUIBitmap
GetCompitibleMode
GetDPICompatible
GetMiniUI
GetMiniUI2
GetMiniUI3
GetMiniUI4
OnSkinChanged
SetCompitibleMode
SetMiniUIFlag

Sections

.text
Size: 621KB - Virtual size: 621KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/NetBridge.dll
.dll windows:5 windows x86 arch:x86

537afe0a71789d1756cc4a4cf91dee75

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:de:6c:1e:6d:cb:34:df:98:69:ae:dc:15:7f:07:25
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25-05-2021 00:00

Not After

28-05-2024 23:59

Subject

CN=Chengdu Qilu Technology Co. Ltd.,O=Chengdu Qilu Technology Co. Ltd.,L=成都市,ST=四川省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

43:8c:27:02:fd:e7:bf:e1:34:37:8c:48:94:e1:44:1b:95:ae:30:a2:8d:ab:12:3f:cc:6e:27:a9:4d:50:58:eb
Signer

Actual PE Digest

43:8c:27:02:fd:e7:bf:e1:34:37:8c:48:94:e1:44:1b:95:ae:30:a2:8d:ab:12:3f:cc:6e:27:a9:4d:50:58:eb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\build\360cloud_build\360NetUL_base1031\bin\360NetUL.pdb

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
SetFilePointer
WriteFile
GetFileSize
CreateFileW
SetEndOfFile
GetFileSizeEx
lstrlenW
GetLocalTime
GetTickCount
RaiseException
GetModuleHandleW
FormatMessageA
WaitForSingleObject
CreateEventW
SetEvent
ResetEvent
SetLastError
CreateThread
CreateDirectoryW
DisableThreadLibraryCalls
GetModuleFileNameW
LoadLibraryW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
LoadLibraryA
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetLastError
GetCurrentThreadId
CloseHandle
Sleep
WaitForMultipleObjects
GetUserDefaultLangID
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetModuleHandleA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
ExitProcess
GetProcAddress
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
GetCommandLineA

user32

IsDialogMessageW
SetFocus
CheckDlgButton
SendMessageW
GetDlgItem
SetDlgItemTextW
SetWindowTextW
SetWindowsHookExW
IsDlgButtonChecked
GetDlgItemTextW
DestroyWindow
DispatchMessageW
TranslateMessage
GetMessageW
SetWindowLongW
GetWindowLongW
ShowWindow
CreateDialogParamW
PostMessageW
PostQuitMessage
UnhookWindowsHookEx
SetForegroundWindow
CallNextHookEx

advapi32

RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW

shell32

SHGetFolderPathW

shlwapi

PathCombineW
PathIsDirectoryW

wininet

HttpOpenRequestA
InternetQueryOptionW
InternetGetConnectedState
InternetSetOptionW
HttpEndRequestA
InternetWriteFile
HttpSendRequestExA
HttpSendRequestA
HttpAddRequestHeadersA
InternetConnectA
InternetSetStatusCallbackA
InternetOpenW
InternetCloseHandle
InternetReadFileExA
HttpQueryInfoA

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

winmm

timeGetTime

ws2_32

getpeername

Exports

Exports

HttpInit
HttpUninit
zlib_compress
zlib_compressBound
zlib_uncompress

Sections

.text
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/ScriptExecute.exe
.exe windows:5 windows x86 arch:x86

219bf57fc1c48792924eac8dea788d1a

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28-07-2020 00:00

Not After

28-07-2030 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

44:8a:bf:29:b0:45:82:3e:5d:6d:cc:0b
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

05-01-2022 09:58

Not After

06-01-2024 09:58

Subject

SERIALNUMBER=911101026662879416,CN=Beijing Qihu Technology Co.\, Ltd.,O=Beijing Qihu Technology Co.\, Ltd.,STREET=朝阳区酒仙桥路6号院2号楼1至19层104号内8层801,L=Beijing,ST=Beijing,C=CN,1.3.6.1.4.1.311.60.2.1.2=#13074245494a494e47,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

06-04-2022 07:44

Not After

08-05-2033 07:44

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20-06-2018 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

20-02-2019 00:00

Not After

18-03-2029 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18-03-2009 10:00

Not After

18-03-2029 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

12:8b:5f:2f:7f:f9:74:75:e2:45:a7:25:e1:8a:3c:8d:c5:b4:e8:3c:d1:d1:62:a4:b7:79:20:8b:0b:cb:14:00
Signer

Actual PE Digest

12:8b:5f:2f:7f:f9:74:75:e2:45:a7:25:e1:8a:3c:8d:c5:b4:e8:3c:d1:d1:62:a4:b7:79:20:8b:0b:cb:14:00

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\vmagent_new\bin\joblist\728924\out\Release\ScriptExecute.pdb

Imports

kernel32

SetLastError
GetTickCount
QueryPerformanceCounter
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
lstrlenA
GetDiskFreeSpaceExW
CreateDirectoryW
SystemTimeToFileTime
ReadFile
ExpandEnvironmentStringsW
lstrcmpiW
GetPrivateProfileStringW
CopyFileW
TerminateProcess
InterlockedIncrement
InterlockedDecrement
GetWindowsDirectoryW
GetCurrentThread
VirtualAlloc
VirtualQuery
ResumeThread
GetThreadContext
SuspendThread
OpenThread
SetThreadPriority
GetThreadPriority
FlushInstructionCache
VirtualProtect
lstrcpyW
GetTempPathW
SetErrorMode
WaitForMultipleObjects
SetEvent
OpenEventW
CreateFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetProcessHeap
HeapAlloc
HeapFree
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
GetShortPathNameW
GetTempFileNameW
GetCurrentDirectoryW
CreateEventW
GetDriveTypeW
SetFileTime
GetFileAttributesW
lstrcmpiA
lstrcmpA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetModuleFileNameA
GetFileAttributesExW
SetFileAttributesW
LocalAlloc
GetCurrentThreadId
GetLocalTime
SetFilePointer
GetFileSizeEx
MoveFileW
WriteFile
DeleteCriticalSection
WideCharToMultiByte
CreateToolhelp32Snapshot
Process32FirstW
GetCurrentProcessId
Process32NextW
GetLastError
DeviceIoControl
CreateMutexW
InitializeCriticalSection
GetCommandLineW
GetPrivateProfileIntW
InterlockedExchange
LocalFree
InterlockedCompareExchange
Sleep
lstrlenW
GetVersionExW
FreeResource
GetSystemWindowsDirectoryW
GetCurrentProcess
GetModuleHandleA
GetSystemInfo
DeleteFileW
EnterCriticalSection
CloseHandle
LeaveCriticalSection
FreeLibrary
LoadLibraryExW
LoadLibraryW
WaitForSingleObject
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetSystemDirectoryW
GetModuleHandleW
GetProcAddress
GetModuleFileNameW
FindFirstFileW
FindNextFileW
FindClose
SetStdHandle
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetLocaleInfoA
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlushFileBuffers
GetStartupInfoA
SetHandleCount
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
LoadLibraryA
HeapCreate
VirtualFree
IsValidCodePage
GetOEMCP
GetACP
GetStringTypeW
GetCPInfo
LCMapStringW
LCMapStringA
GetStdHandle
GetFileType
WriteConsoleW
GetDateFormatA
GetTimeFormatA
CreateThread
ExitThread
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
TlsFree
TlsAlloc
ReleaseMutex
HeapWalk
HeapLock
HeapUnlock
TlsSetValue
OutputDebugStringW
TlsGetValue
SetFilePointerEx
SetEndOfFile
LocalFileTimeToFileTime
GetSystemTimeAsFileTime
HeapSize
OpenProcess
MultiByteToWideChar
HeapReAlloc
HeapDestroy
RaiseException
CreateFileW
SetVolumeLabelW

user32

ExitWindowsEx
GetActiveWindow
MessageBoxW
SetForegroundWindow
BringWindowToTop
PostMessageW
GetClassInfoExW
RegisterClassExW
CreateWindowExW
DefWindowProcW
FindWindowW
IsIconic
IsWindowVisible
ShowWindow

advapi32

StartServiceW
RegEnumKeyExA
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerW
SetServiceStatus
RegOpenKeyW
RegCreateKeyW
GetFileSecurityW
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetLengthSid
InitializeAcl
EqualSid
AddAce
AddAccessAllowedAce
SetSecurityDescriptorDacl
GetSecurityDescriptorControl
SetFileSecurityW
DeleteService
CreateServiceW
ChangeServiceConfig2W
LockServiceDatabase
QueryServiceLockStatusW
UnlockServiceDatabase
ChangeServiceConfigW
ControlService
QueryServiceStatus
QueryServiceConfigW
OpenSCManagerW
OpenServiceW
CloseServiceHandle
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
GetAclInformation
GetAce
GetUserNameW
GetNamedSecurityInfoW
BuildExplicitAccessWithNameW
SetEntriesInAclW
SetNamedSecurityInfoW
GetExplicitEntriesFromAclW
DeleteAce
LookupAccountNameW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegEnumKeyExW
RegQueryValueExA
RegOpenKeyExA

shell32

SHGetSpecialFolderPathW
ord165
SHCreateDirectoryExW
SHFileOperationW
CommandLineToArgvW
ShellExecuteW

shlwapi

SHSetValueA
SHGetValueA
PathFindFileNameW
StrStrIA
StrFormatByteSizeW
PathIsRelativeW
PathIsDirectoryW
SHDeleteKeyW
PathIsRootW
SHSetValueW
SHDeleteValueW
PathStripPathW
SHGetValueW
PathFileExistsW
PathAppendW
PathRemoveFileSpecW
PathCombineW
StrStrIW

wtsapi32

WTSQuerySessionInformationW
WTSFreeMemory

psapi

GetModuleFileNameExW
EnumProcessModules

setupapi

SetupIterateCabinetW

urlmon

URLDownloadToFileW

imm32

ImmDisableIME

Sections

.text
Size: 504KB - Virtual size: 504KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/SignHelper.dll
.dll windows:5 windows x86 arch:x86

7ac074b18f2c26c591f7186d54d076d2

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10-05-2010 00:00

Not After

10-05-2015 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08-11-2006 00:00

Not After

07-11-2021 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

51:bd:5d:8e:45:b8:2a:02:10:f1:7f:e4:c5:23:34:68
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

11-03-2013 00:00

Not After

10-03-2016 23:59

Subject

CN=Qihoo 360 Software (Beijing) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Tech. Dev. Dept.,O=Qihoo 360 Software (Beijing) Company Limited,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2e:4e:dd:7a:9c:db:56:5b:0f:84:da:22:76:48:27:5f:53:27:c6:32
Signer

Actual PE Digest

2e:4e:dd:7a:9c:db:56:5b:0f:84:da:22:76:48:27:5f:53:27:c6:32

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\building\ludashi_projects\360HardwareMaster\SignHelper\Release\SignHelper.pdb

Imports

kernel32

GetModuleFileNameW
CreateFileW
DeviceIoControl
GetModuleHandleW
CloseHandle
LoadLibraryW
MultiByteToWideChar
lstrlenA
EnterCriticalSection
GetProcAddress
GetCurrentProcessId
InitializeCriticalSection
FreeLibrary
DeleteCriticalSection
CreateFileA
SystemTimeToFileTime
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
SetFilePointerEx
WriteFile
ReadFile
GetFileSizeEx
OutputDebugStringW
FormatMessageW
GetLastError
SetLastError
GetCurrentThreadId
LocalFree
GetSystemTime
CreateMutexW
TlsGetValue
HeapAlloc
HeapFree
WaitForSingleObject
GetProcessHeap
TlsSetValue
GetAtomNameW
OpenThread
AddAtomW
ReleaseMutex
TlsAlloc
FindAtomW
DeleteAtom
TlsFree
WideCharToMultiByte
lstrcmpA
lstrcmpiA
GetCommandLineA
HeapReAlloc
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
Sleep
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
VirtualAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
LeaveCriticalSection

netapi32

Netbios

advapi32

RegQueryValueExA
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExW

shlwapi

SHSetValueA
SHGetValueA

Exports

Exports

GetMIDA
GetMIDW
InitA
InitW
UnInitA
UnInitW

Sections

.text
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/atiags32.dll
.dll windows:5 windows x86 arch:x86

1cfc385348903665a4f2b0a0d18f57fa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\MyWork\ISV\isv_desktop\SDK\Tools\AMDGPUServices\ATI AGS Lib\lib\Win32\dll\atiags.pdb

Imports

kernel32

GetTempPathA
LoadLibraryA
GetModuleHandleA
GetProcAddress
FreeLibrary
GetSystemInfo
DeleteFileA
GetVersionExA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

gdi32

CreateDCA
DeleteDC
ExtEscape

msvcr90

_purecall
fopen_s
fread
ftell
fseek
ferror
fputc
fprintf
sscanf_s
atof
_vsnprintf_s
fclose
memmove
tolower
isalpha
isalnum
strncmp
strchr
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
memcpy
atoi
free
__CxxFrameHandler3
??2@YAPAXI@Z
??3@YAXPAX@Z
_mbscmp
strstr
strcpy_s
malloc
printf
memset
isspace

Exports

Exports

agsCrossfireGetGPUCount
agsDriverGetLatestVersionInfo
agsDriverGetVersionInfo
agsEyefinityGetConfigInfo

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/cacert.dat
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/config/config.xml
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/config/defaultskin/MiniUI.xml
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/config/defaultskin/defaultskin.ui
.zip
Common/360Safe-16new.png
.png
Common/360Safe.ico
Common/Buttom_Hover.png
.png
Common/CoolUI/Button_Normal.png
.png
Common/CoolUI/DlgBackground.png
.png
Common/CoolUI/DlgBackground_NB.png
.png
Common/CoolUI/DlgBackground_simple.png
.png
Common/CoolUI/TopBanner/Mainbanner_Danger.png
.png
Common/CoolUI/TopBanner/Mainbanner_Normal.png
.png
Common/CoolUI/TopBanner/Mainbanner_Safe.png
.png
Common/CoolUI/TopBanner/Mainbanner_Warn.png
.png
Common/CoolUI/cool_dlg_with_tab.png
.png
Common/CoolUI/tab/tab_background.PNG
.png
Common/CoolUI/tab/tab_hover.PNG
.png
Common/CoolUI/tab/tab_normal.PNG
.png
Common/CoolUI/tab/tab_pushed.PNG
.png
Common/DlgBackground.jpg
.jpg
Common/Foreground.jpg
.jpg
Common/Safe_S.png
.png
Common/SearchR_InfoS.png
.png
Common/Tips.png
.png
Common/animation.gif
.gif
Common/bkgnd-border.png
.png
Common/button_disable.jpg
.jpg
Common/button_focus.jpg
.jpg
Common/button_hover.jpg
.jpg
Common/button_normal.jpg
.jpg
Common/button_pushed.jpg
.jpg
Common/checkbox.png
.png
Common/close.png
.png
Common/collapse.bmp
Common/dynamic_listbox_item_hover.png
.png
Common/dynamic_listbox_item_normal.png
.png
Common/dynamic_listbox_item_pushed.png
.png
Common/error_back.png
.png
Common/expand.bmp
Common/frame.jpg
.jpg
Common/frame_border.bmp
Common/headerctrl_hover.bmp
Common/headerctrl_normal.bmp
Common/headerctrl_normal16.bmp
Common/headerctrl_pushed.bmp
Common/listCtrlBtn_Disable.jpg
.jpg
Common/listCtrlBtn_Focus.jpg
.jpg
Common/listCtrlBtn_Hover.jpg
.jpg
Common/listCtrlBtn_Normal.jpg
.jpg
Common/listCtrlBtn_Pushed.jpg
.jpg
Common/msg_icon_check.png
.png
Common/msg_icon_error.png
.png
Common/msg_icon_info.png
.png
Common/msg_icon_question.png
.png
Common/msg_icon_warning.png
.png
Common/netstateerror2.png
.png
Common/netstateok2.png
.png
Common/old/sys_button_close.png
.png
Common/old/sys_button_max.png
.png
Common/old/sys_button_menu.png
.png
Common/old/sys_button_min.png
.png
Common/old/sys_button_restore.png
.png
Common/old/sys_dlg_close.png
.png
Common/old/sys_dlg_max.png
.png
Common/old/sys_dlg_min.png
.png
Common/old/sys_dlg_restore.png
.png
Common/old/sysmenu_close2.png
.png
Common/popup_dialog_title_bar_background.bmp
Common/progress_ctrl_background.bmp
Common/progress_ctrl_fg.bmp
Common/radiobutton.bmp
Common/scrollh/background.png
.png
Common/scrollh/buttons.png
.png
Common/scrollh/thumb.png
.png
Common/scrollh/thumbgripper.png
.png
Common/scrollv/background.png
.png
Common/scrollv/buttons.png
.png
Common/scrollv/thumb.png
.png
Common/scrollv/thumbgripper.png
.png
Common/sys_button_close.png
.png
Common/sys_button_max.png
.png
Common/sys_button_min.png
.png
Common/sys_button_min2.png
.png
Common/sys_button_restore.png
.png
Common/sys_dlg_close.png
.png
Common/sysmenu_close2.png
.png
Common/tab_background.bmp
Common/tab_background.png
.png
Common/tab_hover.PNG
.png
Common/tab_normal.PNG
.png
Common/tab_pushed.PNG
.png
Common/tips_D01.png
.png
Common/title_bar_menu.png
.png
Common/toolbar_hover.png
.png
Common/toolbar_normal.png
.png
Common/toolbar_pushed.png
.png
Common/toolbar_sim_hover.png
.png
Common/toolbar_sim_normal.png
.png
Common/toolbar_sim_pushed.png
.png
ver.txt
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/dynlenv.dll
.dll windows:5 windows x86 arch:x86

87fc4450eafd884b9231c1769147c9a5

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10-05-2010 00:00

Not After

10-05-2015 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08-11-2006 00:00

Not After

07-11-2021 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

51:bd:5d:8e:45:b8:2a:02:10:f1:7f:e4:c5:23:34:68
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

11-03-2013 00:00

Not After

10-03-2016 23:59

Subject

CN=Qihoo 360 Software (Beijing) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Tech. Dev. Dept.,O=Qihoo 360 Software (Beijing) Company Limited,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6e:01:7f:0b:e5:b9:6f:70:c4:6f:c8:ca:4c:49:3c:7a:eb:27:b7:fc
Signer

Actual PE Digest

6e:01:7f:0b:e5:b9:6f:70:c4:6f:c8:ca:4c:49:3c:7a:eb:27:b7:fc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameW
CreateFileW
GetPrivateProfileIntW
GetLastError
GetProcAddress
EnterCriticalSection
DeleteCriticalSection
TlsAlloc
CloseHandle
TlsFree
TlsGetValue
GetFileSize
GetFullPathNameW
TlsSetValue
GetModuleHandleW
GetCurrentProcessId
ReadFile
DeviceIoControl
WideCharToMultiByte
MultiByteToWideChar
OutputDebugStringA
FormatMessageA
LoadLibraryA
GetModuleFileNameA
LeaveCriticalSection
LoadLibraryW
InitializeCriticalSection
WriteFile
OutputDebugStringW
SetEnvironmentVariableA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetModuleHandleA
SetStdHandle
GetLocaleInfoW
CompareStringW
CompareStringA
FreeLibrary
CreateFileA
SystemTimeToFileTime
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
SetEndOfFile
SetFilePointerEx
GetFileSizeEx
FormatMessageW
SetLastError
GetCurrentThreadId
LocalFree
GetSystemTime
CreateMutexW
HeapAlloc
HeapFree
WaitForSingleObject
GetProcessHeap
GetAtomNameW
OpenThread
AddAtomW
ReleaseMutex
FindAtomW
DeleteAtom
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
ExitProcess
GetCommandLineA
HeapReAlloc
RtlUnwind
CreateProcessA
DuplicateHandle
MoveFileA
DeleteFileA
GetTimeFormatA
GetDateFormatA
InterlockedIncrement
InterlockedDecrement
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
HeapSize
GetStdHandle
InitializeCriticalSectionAndSpinCount
LCMapStringA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
VirtualAlloc
GetFileAttributesA
CreatePipe
GetExitCodeProcess
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetTimeZoneInformation
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
SetFilePointer

user32

GetActiveWindow
MessageBoxW

shell32

ShellExecuteW

shlwapi

PathAppendW
PathFindFileNameW
PathCombineW
SHGetValueW
PathFileExistsW

advapi32

RegCloseKey
RegQueryValueExA
RegQueryValueExW
RegOpenKeyExW
RegEnumKeyExW

Exports

Exports

get_lua_env_dispatch
get_lua_raw_dispatch

Sections

.text
Size: 348KB - Virtual size: 347KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

QProtect
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/pdown.dll
.dll windows:5 windows x86 arch:x86

8b29c71233141e1c912a10b8a268fa9f

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

26:27:9f:0f:2f:11:97:0d:cc:f6:3e:ba:88:f2:d4:c4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

06-01-2016 00:00

Not After

28-03-2019 23:59

Subject

CN=Qihoo 360 Software (Beijing) Company Limited,OU=Tech. Dev. Dept.,O=Qihoo 360 Software (Beijing) Company Limited,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

23:38:91:61:e4:5a:21:8b:d2:4e:6e:85:9a:e1:11:53
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28-12-2015 00:00

Not After

28-03-2019 23:59

Subject

CN=Qihoo 360 Software (Beijing) Company Limited,OU=Tech. Dev. Dept.,O=Qihoo 360 Software (Beijing) Company Limited,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10-12-2013 00:00

Not After

09-12-2023 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:a0:1c:f4:ea:ef:99:fd:46:6c:ed:16:30:c1:b0:1f
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11-06-2015 00:00

Not After

29-12-2020 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 4,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01-01-1997 00:00

Not After

31-12-2020 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6e:ab:ed:dd:94:57:a6:46:03:9c:18:65:b6:f0:8a:df:91:78:a5:d6:90:32:33:63:10:1f:2d:b2:92:e3:8e:86
Signer

Actual PE Digest

6e:ab:ed:dd:94:57:a6:46:03:9c:18:65:b6:f0:8a:df:91:78:a5:d6:90:32:33:63:10:1f:2d:b2:92:e3:8e:86

Digest Algorithm

sha256

PE Digest Matches

true

b5:ee:6b:28:a3:38:8d:b8:e5:4f:5c:f4:06:07:06:69:33:f5:bd:cb
Signer

Actual PE Digest

b5:ee:6b:28:a3:38:8d:b8:e5:4f:5c:f4:06:07:06:69:33:f5:bd:cb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\vmagent_new\bin\joblist\134794\out\Release\Release\PDown.pdb

Imports

kernel32

CreateFileW
GetLastError
SetEvent
GetModuleFileNameW
MoveFileW
DeleteFileW
WriteFile
MoveFileExW
ReadFile
GetTickCount
GetPrivateProfileIntW
GetSystemInfo
GlobalMemoryStatusEx
GetModuleHandleExW
FreeLibraryAndExitThread
WaitForSingleObject
LoadLibraryW
GetCurrentProcessId
GetProcAddress
FreeLibrary
CreateProcessW
GetStartupInfoW
TerminateProcess
GetCurrentProcess
OpenProcess
InterlockedDecrement
InterlockedIncrement
SetFilePointer
SetEndOfFile
ReleaseMutex
CreateMutexW
GetLocalTime
CopyFileW
DeviceIoControl
GetModuleHandleW
Sleep
FlushFileBuffers
WriteConsoleW
GetFileSizeEx
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
CloseHandle
CreateEventW
FindFirstFileW
FindClose
GetFileAttributesW
LeaveCriticalSection
EnterCriticalSection
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
LoadLibraryA
VirtualAlloc
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
HeapSize
WideCharToMultiByte
LCMapStringA
ExitProcess
LCMapStringW
InitializeCriticalSection
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleHandleA
GetModuleFileNameA
GetStdHandle
HeapReAlloc
GetCommandLineA
CreateThread
DeleteCriticalSection
GetConsoleOutputCP
CreateFileA
SystemTimeToFileTime
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
SetFilePointerEx
OutputDebugStringW
FormatMessageW
MultiByteToWideChar
SetLastError
GetCurrentThreadId
LocalFree
GetSystemTime
TlsGetValue
HeapAlloc
HeapFree
GetProcessHeap
TlsSetValue
GetAtomNameW
OpenThread
AddAtomW
TlsAlloc
FindAtomW
DeleteAtom
TlsFree
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
ExitThread

user32

MessageBoxW
GetWindowThreadProcessId
SendMessageTimeoutW
PostThreadMessageW
DestroyWindow
DispatchMessageW
WaitForInputIdle
GetMessageW
CreateWindowExW
DefWindowProcW
UnregisterClassW
RegisterClassW
FindWindowW
IsWindow
TranslateMessage

advapi32

RegEnumKeyExW
RegSetValueExW
RegOpenKeyW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegQueryValueExA

shell32

SHGetSpecialFolderPathW

ole32

CoInitialize
CoCreateInstance
CLSIDFromProgID
CoUninitialize

oleaut32

SysAllocString
SysFreeString

shlwapi

PathCombineW
PathRemoveFileSpecW
wvnsprintfW
PathFileExistsW

ws2_32

sendto
WSAStartup
ntohs
WSACleanup
gethostbyname
WSAGetLastError
recvfrom
WSAWaitForMultipleEvents
closesocket
WSAEventSelect
socket
bind
htons
htonl
setsockopt
WSAIoctl

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Exports

Exports

PPClose
PPCloseHandle
PPDownload
PPGetConfig
PPInit
PPInit2
PPQueryTask
PPQueryTaskEx
PPRemoveTask
PPRestart
PPSetConfig
PPSetOption
PPStartTask
PPStartTaskEx
PPStopTask
StartLan
StopLan

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
360驱动大师v2.0.0.2050绿色纯净版/360DrvMgr/清理缓存垃圾.bat
360驱动大师v2.0.0.2050绿色纯净版/说明.txt

Sharing

General

Malware Config

Signatures

Files

04a116d242e299d4ddbfcdcde9080a8f

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

26:27:9f:0f:2f:11:97:0d:cc:f6:3e:ba:88:f2:d4:c4Certificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

23:38:91:61:e4:5a:21:8b:d2:4e:6e:85:9a:e1:11:53Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18Certificate

Extended Key Usages

Key Usages

Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

9c:57:83:91:29:74:c3:40:38:38:02:24:0e:59:f9:8b:da:71:4d:ed:ad:b4:1d:67:3d:c8:75:3f:8f:cc:95:a3Signer

23:d1:a0:5a:0e:e2:46:7a:a1:6f:06:e1:06:8b:58:cb:07:bc:c1:4dSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

ole32

oleaut32

shlwapi

version

netapi32

crypt32

iphlpapi

Exports

Exports

Sections

.text Size: 601KB - Virtual size: 601KB

.rdata Size: 186KB - Virtual size: 185KB

.data Size: 52KB - Virtual size: 67KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 44KB - Virtual size: 44KB

25df8d6894c0a282a643ee848f478a06

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

gdiplus

psapi

wintrust

Sections

.text Size: 738KB - Virtual size: 737KB

.rdata Size: 155KB - Virtual size: 155KB

.data Size: 184KB - Virtual size: 202KB

.rsrc Size: 335KB - Virtual size: 336KB

.reloc Size: 48KB - Virtual size: 47KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

26:27:9f:0f:2f:11:97:0d:cc:f6:3e:ba:88:f2:d4:c4
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

23:38:91:61:e4:5a:21:8b:d2:4e:6e:85:9a:e1:11:53
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

9c:57:83:91:29:74:c3:40:38:38:02:24:0e:59:f9:8b:da:71:4d:ed:ad:b4:1d:67:3d:c8:75:3f:8f:cc:95:a3
Signer

23:d1:a0:5a:0e:e2:46:7a:a1:6f:06:e1:06:8b:58:cb:07:bc:c1:4d
Signer

.text
Size: 601KB - Virtual size: 601KB

.rdata
Size: 186KB - Virtual size: 185KB

.data
Size: 52KB - Virtual size: 67KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 44KB - Virtual size: 44KB

.text
Size: 738KB - Virtual size: 737KB

.rdata
Size: 155KB - Virtual size: 155KB

.data
Size: 184KB - Virtual size: 202KB

.rsrc
Size: 335KB - Virtual size: 336KB

.reloc
Size: 48KB - Virtual size: 47KB

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

47:33:bb:60:89:e3:2f:cd:22:4d:0e:49:de:b6:63:da
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

5b:21:3a:c4:69:7a:65:f6:b7:82:7d:9e:48:92:64:dc
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

50:67:fa:46:ce:6c:fe:95:15:a6:9e:b2
Certificate

04:00:00:00:00:01:31:89:c6:50:04
Certificate

04:00:00:00:00:01:21:58:53:08:a2
Certificate

ee:ee:ed:e7:f3:2e:83:8a:e9:c1:8b:f6:59:a7:c6:d9:62:13:63:c5:01:22:ba:96:f2:c6:1b:6f:bb:9a:6f:ca
Signer

71:62:86:09:fa:ff:91:9c:39:e2:02:5e:52:8b:e3:48:1f:6d:00:ca
Signer

.text
Size: 1.0MB - Virtual size: 1.0MB

.rdata
Size: 271KB - Virtual size: 271KB

.data
Size: 42KB - Virtual size: 65KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 57KB - Virtual size: 56KB

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

26:27:9f:0f:2f:11:97:0d:cc:f6:3e:ba:88:f2:d4:c4
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

23:38:91:61:e4:5a:21:8b:d2:4e:6e:85:9a:e1:11:53
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

5f:d6:93:fa:b0:98:e3:f4:67:7b:b8:cb:67:2c:22:9e
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate