4460df44ffa0747f645a602f35deea862fee1de64698a9b4ab9b2010bbc79273N

resource
4460df44ffa0747f645a602f35deea862fee1de64698a9b4ab9b2010bbc79273N
unpack001/$PLUGINSDIR/FindProcDLL.dll
unpack001/$PLUGINSDIR/KillProcDLL.dll
unpack001/$PLUGINSDIR/LogEx.dll
unpack001/$PLUGINSDIR/SetupPlugin.dll
unpack001/$PLUGINSDIR/nsExec.dll
unpack001/WiFiMaster.exe

IMPHASH 6ad1a6de4d76e6fec19d7929778ce3a5
SHA256 4460df44ffa0747f645a602f35deea862fee1de64698a9b4ab9b2010bbc79273
MD5 e466c5d14761c2acf7744ad8ef7269a0
SHA1 971b5457d25ee39736d780fb8193949f25cfd073
SHA512 13d23b3f043f237a1f71041b2227b031a3c6894a7b9cf107c2f0ff1e70aae345c4956e0e0423961be453eaf10b1c6d3c866994d7c73cb2f310c0f8fd2a354392
SSDEEP 98304:OCGmFF7jp1LLvTRKQCVRm5thoX1xBlGRr8eSU7tkkMIdvCuS7:OChFHFK5zSSlURo8tDbqd
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

13697

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathW GetShortPathNameW GetFullPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError CreateDirectoryW SetFileAttributesW Sleep GetTickCount CreateFileW GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess GetWindowsDirectoryW GetTempPathW GetCommandLineW SetErrorMode CloseHandle lstrlenW lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread LoadLibraryW CreateProcessW lstrcmpiA GetTempFileNameW lstrcatW GetProcAddress LoadLibraryA GetModuleHandleA OpenProcess lstrcpyW GetVersionExW GetSystemDirectoryW GetVersion lstrcpyA RemoveDirectoryW lstrcmpA lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW WideCharToMultiByte lstrlenA MulDiv WriteFile ReadFile MultiByteToWideChar SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW lstrcpynA

user32

ScreenToClient GetMessagePos CallWindowProcW IsWindowVisible LoadBitmapW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuW CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos DispatchMessageW TranslateMessage CheckDlgButton GetMessageW GetClassInfoW CreateWindowExW SystemParametersInfoW RegisterClassW SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharNextA CharUpperW CharPrevW PeekMessageW wsprintfA DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW LoadCursorW SetCursor GetWindowLongW GetSysColor CharNextW IsDialogMessageW ExitWindowsEx IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint FindWindowExW

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumValueW

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

$PLUGINSDIR/FindProcDLL.dll

IMPHASH 5ebb000a52998bb996312557ab4e30f5
SHA256 bda8e0ddb672ea3558ad68634c49da06cd72f93d7fca642ca41df00e26512df1
MD5 633625aa3be670a515fa87ff3a566d90
SHA1 de035c083125aef5df0a55c153ef6cc4dd4c15b4
SHA512 3c687ddf0e4e93a6787a23a93e2011df42898f6d21101c848a1b7c7bd2eddd5d49fdd0748e47e6235e7808596d00a1ecf79b5c975d050dd8d00a95f515a444a9
SSDEEP 12288:LAeafIS4J8anXexYWGRhvgbTu4RJ6//sCMUx:04J9/WGRS33+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

195352

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\BrowserProj\Tools\NSIS\FindProcU\Debug\FindProcDLL.pdb

psapi

GetModuleFileNameExW

kernel32

GetModuleFileNameA SetEnvironmentVariableA CloseHandle OpenProcess FreeLibrary GetProcAddress LoadLibraryW GetVersionExW GlobalFree lstrcpyW RaiseException HeapValidate IsBadReadPtr GetCurrentThreadId GetCommandLineA HeapFree GetVersionExA HeapAlloc GetProcessHeap TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW InterlockedIncrement InterlockedDecrement GetACP GetOEMCP GetCPInfo IsValidCodePage GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetLastError GetCurrentThread MultiByteToWideChar LCMapStringA WideCharToMultiByte LCMapStringW DebugBreak lstrlenA LoadLibraryA DeleteCriticalSection EnterCriticalSection LeaveCriticalSection FatalAppExitA HeapReAlloc HeapDestroy HeapCreate VirtualFree VirtualAlloc ExitProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WriteFile OutputDebugStringA WriteConsoleW OutputDebugStringW SetConsoleCtrlHandler GetTimeFormatA GetDateFormatA GetStringTypeA GetStringTypeW GetLocaleInfoA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID RtlUnwind VirtualQuery SetFilePointer GetConsoleCP GetConsoleMode InitializeCriticalSection InterlockedExchange GetTimeZoneInformation SetStdHandle WriteConsoleA GetConsoleOutputCP GetLocaleInfoW CreateFileA FlushFileBuffers CompareStringA CompareStringW

Name

.textbss

Size

Virtual Size

180KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

384KB

Virtual Size

381KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

68KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

806B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

20KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/KillProcDLL.dll

IMPHASH d806a080e21508dd768fa70be247d2ae
SHA256 de1177a4bd1c56c3555f366d40b37d7dd9cb25e16c4973d0a4d22bf9a8af7aed
MD5 1cc87d2b5a79b18f133b4f944e2f2f74
SHA1 98e0ddb727c76e06be1668434d754e5b80a0c154
SHA512 d8fee1c09fef9af4e1f38baaffa3a6d059713b14ecad900815c086cc22855644fcdeacd6bba31ea6e6925831e650f7b0d34e6dea4c57a978fb4f5bf0cd6d72a9
SSDEEP 384:JLmJwO50x66T9JOpOUT38YZvml7xoKdyuwlx8xSiorppugBwUdJopS:JW50hJwwUTsXdPwxvtpDtdJo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6841

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/LogEx.dll

IMPHASH 549d7b44067bbcdf42bf6a90a80a3a9e
SHA256 57ede354532937e38c4ae9da3710ee295705ea9770c402dfb3a5c56a32fd4314
MD5 0f96d9eb959ad4e8fd205e6d58cf01b8
SHA1 7c45512cbdb24216afd23a9e8cdce0cfeaa7660f
SHA512 9f3afb61d75ac7b7dc84abcbf1b04f759b7055992d46140dc5dcc269aed22268d044ee8030f5ea260bbb912774e5bbb751560c16e54efa99c700b9fc7d48832c
SSDEEP 384:w4NSXFjXCATBAQR4F1Y5u6I3wa4W7KNP66BjLjyXB0JyuDchv8EnohgSil2X:woaF+ATCQye/I3KWmxj00Jyb8Enov
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6315

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/SetupPlugin.dll

IMPHASH 8215c4336d9682cb08cbe5f78e292ffe
SHA256 4386761694d62ec93a19d344add5800a54c3cbfba1724331cc05c0a1b749a087
MD5 2fe9facfec8049c3f97dd6977cb8846b
SHA1 c807d52e7f94d7cb23ef780ce24341b5ec9cbfed
SHA512 a5b22a8b93acffb91dea1e88f1e7f20e0e4994e4f71e54dd4b07dc825345fc6445e6d008b89fee0f736a0e987136f56703a1bc84aa94b7523bd17da274ecea99
SSDEEP 49152:wFe3dzgYlOX5VxXgjUKS6pCgrsqx1vTGtotQ:plOX5VxQYKS6pZIdo
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

1116638

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\SVN\Wifi360\branches\201405131202\WiFiProject\Release\SetupPlugin.pdb

gdi32

SetPixel CreatePenIndirect CreateRectRgnIndirect GetCharABCWidthsW GetClipBox GetTextExtentPoint32W LineTo RoundRect SelectClipRgn ExtSelectClipRgn PtInRegion SetBkMode StretchBlt SetStretchBltMode SetTextColor CreateDIBSection MoveToEx TextOutW ExtTextOutW GetObjectA GetPixel CreateRectRgn CombineRgn SetWindowOrgEx GetObjectW GetTextMetricsW SaveDC RestoreDC Rectangle GetStockObject DeleteDC CreateSolidBrush CreatePen CreateFontIndirectW BitBlt SelectObject CreateCompatibleDC CreateCompatibleBitmap GetDeviceCaps CreateRoundRectRgn SetBkColor DeleteObject

winmm

timeSetEvent timeKillEvent timeGetDevCaps timeGetTime timeBeginPeriod timeEndPeriod

ws2_32

select WSAStartup WSACleanup WSAGetLastError recv send bind closesocket connect getpeername getsockname getsockopt gethostname htons ntohs setsockopt socket WSASetLastError getaddrinfo freeaddrinfo __WSAFDIsSet ioctlsocket accept listen recvfrom sendto

wldap32

ord26 ord27 ord32 ord35 ord79 ord30 ord200 ord301 ord33 ord22 ord41 ord50 ord211 ord46 ord143 ord60

kernel32

SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP IsValidCodePage FindNextFileA FindFirstFileExA FindClose SetStdHandle GetTimeZoneInformation GetConsoleCP EnumSystemLocalesW GetUserDefaultLCID IsValidLocale ReadConsoleW GetConsoleMode GetModuleFileNameA SetFilePointerEx SystemTimeToTzSpecificLocalTime GetDriveTypeW GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread InterlockedFlushSList InterlockedPushEntrySList LoadLibraryExW RtlUnwind GetLocaleInfoW LCMapStringW CompareStringW WritePrivateProfileStringW HeapFree WriteFile OutputDebugStringA RemoveDirectoryW GetModuleFileNameW InitializeCriticalSectionAndSpinCount GetTempPathW CreateFileW GetSystemDirectoryW HeapSize CreateToolhelp32Snapshot MultiByteToWideChar GetLastError Process32NextW DeleteFileW Process32FirstW HeapReAlloc CloseHandle RaiseException HeapAlloc GetCurrentDirectoryW DecodePointer HeapDestroy DeleteCriticalSection ExitProcess GetProcessHeap WideCharToMultiByte WinExec lstrcpynW GlobalAlloc GlobalFree lstrcpyW EnterCriticalSection LeaveCriticalSection InitializeCriticalSection GetPrivateProfileStringW GetLocalTime SetThreadPriority CreateDirectoryW Sleep GetSystemInfo GetModuleHandleW GetProcAddress GetTickCount LoadLibraryW GetACP FreeResource LockResource LoadResource SizeofResource FindResourceW GetFileSize ReadFile FreeLibrary MulDiv WriteConsoleW GetFileType SetFilePointer SetFileTime DuplicateHandle SystemTimeToFileTime DosDateTimeToFileTime InterlockedIncrement InterlockedDecrement GetFileAttributesW FileTimeToSystemTime GetFileTime GetPrivateProfileIntW OutputDebugStringW CreateFileA DeleteFileA FlushFileBuffers GetStartupInfoW GetCommandLineW TerminateProcess WaitForSingleObject GetModuleHandleA CreateProcessW IsBadReadPtr AreFileApisANSI HeapCreate GetFullPathNameW InterlockedCompareExchange GetDiskFreeSpaceW LockFile GetFullPathNameA SetEndOfFile UnlockFileEx CreateMutexW UnmapViewOfFile HeapValidate GetTempPathA FormatMessageW GetDiskFreeSpaceA GetFileAttributesA GetFileAttributesExW LoadLibraryA GetVersionExA UnlockFile LocalFree LockFileEx GetCurrentProcessId GetSystemTimeAsFileTime GetSystemTime FormatMessageA CreateFileMappingW MapViewOfFile QueryPerformanceCounter ExpandEnvironmentStringsW CreateEventW SetLastError SleepEx WaitForMultipleObjects GetStdHandle PeekNamedPipe ExpandEnvironmentStringsA GetCPInfo EncodePointer TlsFree TlsSetValue TlsGetValue TlsAlloc GetStringTypeW GetCurrentThread TryEnterCriticalSection InitializeSListHead GetCurrentThreadId IsDebuggerPresent WaitForSingleObjectEx ResetEvent SetEvent IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter CreateTimerQueue SignalObjectAndWait GetCurrentProcess SwitchToThread GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait GetThreadTimes GetVersionExW VirtualAlloc VirtualFree VirtualProtect ReleaseSemaphore InterlockedPopEntrySList QueryDepthSList UnregisterWaitEx

user32

GetParent PtInRect IsRectEmpty MapWindowPoints GetCursorPos InvalidateRect GetUpdateRect EndPaint BeginPaint ReleaseDC GetDC ReleaseCapture SetCapture GetKeyState GetFocus CharNextW DestroyWindow HideCaret SetRect DrawTextW CharPrevW LoadIconW FillRect OffsetRect InflateRect wvsprintfW KillTimer SetWindowLongW TranslateMessage ClientToScreen SetTimer DispatchMessageW ShowWindow GetMonitorInfoW MonitorFromWindow GetPropW InvalidateRgn CreateAcceleratorTableW MoveWindow GetWindowTextLengthW GetWindowTextW SetWindowTextW GetSysColor GetCaretPos SetCaretPos CreateCaret ShowCaret IsWindow CreateWindowExW PostMessageW wsprintfW SendMessageW MessageBoxW FindWindowExW CallWindowProcW GetMessageW IsIconic PostQuitMessage IsZoomed GetClientRect SetFocus GetSystemMetrics ScreenToClient SetPropW EnableWindow GetClassInfoExW RegisterClassExW RegisterClassW DefWindowProcW LoadCursorW IntersectRect SetCursor GetWindow SetWindowRgn SetWindowPos GetWindowRect GetWindowLongW

advapi32

CryptReleaseContext CryptGenRandom CryptAcquireContextW RegCloseKey RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegQueryValueExW

shell32

Shell_NotifyIconW SHGetPathFromIDListW SHBrowseForFolderW SHGetFolderPathW SHCreateDirectoryExW ShellExecuteW

ole32

OleLockRunning CoUninitialize CoInitializeSecurity CoInitializeEx CLSIDFromString CoCreateInstance CoTaskMemFree CLSIDFromProgID

oleaut32

VariantInit SysFreeString SysAllocString VariantClear

shlwapi

StrCpyW PathAppendW PathIsRelativeW PathCanonicalizeW SHSetValueW PathFileExistsW PathAddBackslashW SHGetValueW

comctl32

_TrackMouseEvent ord17

gdiplus

GdipCreateFontFromDC GdipSetTextRenderingHint GdipCreateFromHDC GdipCreateStringFormat GdipDeleteFont GdipCreateFontFromLogfontA GdipCreateLineBrushI GdipDeleteBrush GdipSetStringFormatLineAlign GdipCloneBrush GdiplusShutdown GdiplusStartup GdipCloneImage GdipDrawImageI GdipDeleteGraphics GdipFree GdipAlloc GdipDisposeImage GdipDeleteStringFormat GdipSetStringFormatAlign GdipGetPropertyItem GdipGetPropertyItemSize GdipImageSelectActiveFrame GdipImageGetFrameCount GdipImageGetFrameDimensionsList GdipImageGetFrameDimensionsCount GdipGetImageFlags GdipLoadImageFromFileICM GdipLoadImageFromFile GdipDrawString

imm32

ImmGetContext ImmSetCompositionWindow ImmReleaseContext

version

VerQueryValueA GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

d3d9

Direct3DCreate9

Name

.text

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

263KB

Virtual Size

263KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

31KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

736B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

63KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=27, id=241, version=40116,

count=182, id=243, version=40116,

count=32, id=242, version=40116,

count=2, id=261, version=23013,

count=9, id=199, version=41118,

count=26, id=259, version=24123,

count=114, id=261, version=24123,

count=37, id=260, version=24123,

count=14, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=526, id=1, productName=Unmarked objects,

count=39, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=68, id=260, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=39, id=261, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=52, id=265, version=24210,

count=1, id=256, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,

count=1, id=258, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

$PLUGINSDIR/nsExec.dll

IMPHASH 8700d0ebbb41c81ea52718af1ab70a93
SHA256 8e565626c37c33144d88df65dc4c25ff3aa0eec980b2c3b1e46def3faaf44b74
MD5 6cb1e608b65b83dad598cc5ff10697c6
SHA1 3462038e27a664f58cdc2597640c90f893bd2b1f
SHA512 f269497cb4547668e31b4a75d81bc2948616e5cce9da90ecb9a2cd8870b5a54b5c6b4d4d60d8e70f2b5ef53fce92b7d3da1d2ef15b0097353ca6530b72fec412
SSDEEP 96:M/rspqrIYxLPEQhThvov3TE4/2Sa5P9QFFYzOx4uF3sbSEI5Ly39sQvM:M/vUG7lhvov36S5FcUjliSEI5LRQ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

APDefault.ini

SHA256 e6e693733aa7226f931e93fe292548e59d14674f617c5f2b090e008c4c9200f5
MD5 2249d1b8917c51289a213f3321075827
SHA1 5987ef29f87a583cc4dbe21541f21e0f7d33b179
SHA512 313ee2a1a9547e7c7c76cf32c8fd2f51dfd2428c596ca1da8b47b90b3c577996f6386bbf1ba24cbd1640b87c61616e49292eb158d5e92f2e6e023a15abc13f08
MD5 SHA1 SHA512

Black.xml

SHA256 037918393b227eaaf6fd18d122265b75864d571b7d11513a6927f76ca5790e5f
MD5 97b65dffbd94e9441cccede3e40ddfc9
SHA1 a5051e0affd07cd3c336706912b2844cdf4a8589
SHA512 2535e66435756f8017bded4bbf7268006cc847975909f363e8064f5c56487c7f005b2d862d34251afe358aee3f66e5084202320b2a4b39d48ff39b8e5b1ced4c
MD5 SHA1 SHA512

CommonWindow.dll

IMPHASH 0764b325382af6a0b69e0db821ec6d1d
SHA256 420d3cf3d5075e4cf3e774afe8c0af98f68a6e5ca4b6bc92d92bac23c0718542
MD5 05d0412b9450d91c6ad740094a6cb6ca
SHA1 3bcbcbadd48852822aa6da22ae2f63e310406683
SHA512 9d1db937f99c959eb6056d837045a8c1a15e1c0a25ca3542c57c0fda2231893b9fa0afe88779dcae687f11da18c9b4703aa89728cc5aa83e32ec517fda101bca
SSDEEP 24576:Is8YvbCN/yDEunU+bJYEePlXYFwInNlgGlMYBxxfDppm70S6jBd:9OL2UKHWlXYFLMb7r0Bd
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

af:54:2b:6e:4f:bf:66:81:d6:7b:ae:ea:82:53:af:7d:74:e9:b3:19:f5:66:60:21:94:d1:b0:26:cc:9c:a6:f3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

PE Signature issue

Digest

f2:09:cb:27:31:b3:40:ba:a8:2d:4a:fb:46:54:4d:52:83:57:a0:09

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

1

Major OS version

5

Entry point

878610

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\SVN\WifiMaster\branches\201405131202\WiFiProject\Release\CommonWindow.pdb

gdiplus

GdipCloneBrush GdipGetPropertyItem GdipGetPropertyItemSize GdipImageSelectActiveFrame GdipImageGetFrameCount GdipImageGetFrameDimensionsList GdipImageGetFrameDimensionsCount GdipCreateBitmapFromScan0 GdipGetImageGraphicsContext GdipDeleteBrush GdipCreateLineBrushI GdipSetCompositingQuality GdipSetSmoothingMode GdipSetPixelOffsetMode GdipCloneImage GdipAlloc GdipDrawImageRectI GdipDisposeImage GdipFree GdipCreateFromHDC GdipDeleteGraphics GdipGetImageWidth GdipLoadImageFromStream GdiplusStartup GdipSetTextRenderingHint GdipSetInterpolationMode GdipGraphicsClear GdipDrawImage GdipDeleteFontFamily GdipCreateFontFromDC GdipCreateFontFromLogfontA GdipDeleteFont GdipGetFamily GdipDrawString GdipCreateStringFormat GdipDeleteStringFormat GdipSetStringFormatAlign GdipSetStringFormatLineAlign GdiplusShutdown GdipGetImageHeight

ws2_32

sendto ioctlsocket listen accept select __WSAFDIsSet freeaddrinfo getaddrinfo WSASetLastError socket setsockopt ntohs htons getsockopt getsockname getpeername connect closesocket bind send recv WSAGetLastError WSACleanup WSAStartup gethostname recvfrom

wldap32

ord50 ord301 ord30 ord79 ord35 ord33 ord32 ord27 ord26 ord22 ord41 ord200 ord60 ord211 ord46 ord143

kernel32

GetConsoleCP ReadConsoleW HeapFree InitializeCriticalSectionAndSpinCount HeapSize GetLastError HeapReAlloc RaiseException HeapAlloc DecodePointer HeapDestroy DeleteCriticalSection GetProcessHeap GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte Sleep SizeofResource EnterCriticalSection GetModuleHandleExW InterlockedDecrement LeaveCriticalSection DisableThreadLibraryCalls LoadResource FindResourceW GetProcAddress GetModuleHandleW FreeLibrary InterlockedIncrement lstrcmpiW LoadLibraryExW CreateDirectoryW InitializeCriticalSection GetFileAttributesW DeleteFileW CloseHandle LoadLibraryW CreateThread GetCurrentDirectoryW GetCurrentProcessId WaitForSingleObject CreateEventW SetEvent FreeResource LockResource GlobalAlloc GlobalLock GlobalUnlock SetLastError GetCurrentThreadId MulDiv CreateFileW GetLocalTime GetFileSize SetFileTime FileTimeToSystemTime WriteFile SetFilePointer OutputDebugStringW CreateFileA DeleteFileA FlushFileBuffers GetStartupInfoW GetCommandLineW GetCurrentProcess TerminateProcess LoadLibraryA GetSystemInfo ResetEvent WaitForMultipleObjects PeekNamedPipe SleepEx GetTickCount FormatMessageA GetFileType GetStdHandle GetConsoleMode GetFileAttributesExW SetFilePointerEx SystemTimeToTzSpecificLocalTime GetDriveTypeW GetTimeZoneInformation WriteConsoleW GetModuleFileNameA ExitThread RtlUnwind InterlockedFlushSList FreeLibraryAndExitThread GetThreadTimes SetUnhandledExceptionFilter UnhandledExceptionFilter DosDateTimeToFileTime SystemTimeToFileTime ExitProcess GetACP IsProcessorFeaturePresent InitializeSListHead IsDebuggerPresent LocalFree GetCPInfo LCMapStringW CompareStringW GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc QueryPerformanceCounter EncodePointer GetCurrentThread WaitForSingleObjectEx DuplicateHandle GetStringTypeW FormatMessageW GetFullPathNameW GetFullPathNameA SetStdHandle FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetEndOfFile AreFileApisANSI HeapCreate InterlockedCompareExchange GetDiskFreeSpaceW LockFile UnlockFileEx GetTempPathW CreateMutexW UnmapViewOfFile HeapValidate GetTempPathA GetDiskFreeSpaceA GetFileAttributesA GetVersionExA UnlockFile LockFileEx GetSystemTime IsBadReadPtr CreateFileMappingW MapViewOfFile ReadFile

user32

GetPropW CreateCaret SetWindowRgn HideCaret ShowCaret SetCaretPos SetPropW RegisterClassW IsZoomed OffsetRect wvsprintfW GetMonitorInfoW MonitorFromWindow UnionRect MapWindowPoints GetUpdateRect GetGUIThreadInfo CharPrevW DrawTextW SetRect DefWindowProcW GetKeyState GetActiveWindow IsIconic IsRectEmpty GetCaretPos GetCaretBlinkTime EnableWindow IntersectRect SetWindowPos IsWindowVisible GetClientRect ClientToScreen PostMessageW CharNextW GetParent IsWindow ShowWindow DestroyWindow GetWindowRect MessageBoxW GetWindowTextLengthW CallWindowProcW GetWindow GetFocus FillRect ScreenToClient SendMessageW SetWindowTextW InvalidateRgn GetSysColor MoveWindow CreateAcceleratorTableW SetFocus SetCapture GetClassInfoExW ReleaseCapture InvalidateRect BeginPaint EndPaint GetWindowTextW GetCursorPos GetDC SetTimer LoadCursorW SetCursor KillTimer PtInRect ReleaseDC GetWindowLongW CreateWindowExW RegisterClassExW SetWindowLongW

gdi32

GetTextMetricsW SaveDC RestoreDC Rectangle CreatePen CreateFontIndirectW SetTextColor SetBkMode CreatePatternBrush GdiFlush DeleteObject SetWindowOrgEx DeleteDC GetObjectA CreateRoundRectRgn CombineRgn CreatePenIndirect CreateRectRgnIndirect GetCharABCWidthsW GetClipBox GetTextExtentPoint32W LineTo RoundRect SelectClipRgn ExtSelectClipRgn SetBkColor StretchBlt SetStretchBltMode MoveToEx TextOutW ExtTextOutW CreateCompatibleBitmap GetStockObject GetDeviceCaps GetObjectW CreateSolidBrush BitBlt SelectObject CreateDIBSection CreateCompatibleDC

advapi32

RegQueryInfoKeyW RegDeleteValueW RegOpenKeyExW RegSetValueExW RegEnumKeyExW RegCreateKeyExW RegDeleteKeyW RegCloseKey

ole32

OleLockRunning CLSIDFromString CLSIDFromProgID CreateStreamOnHGlobal CoUninitialize CoInitialize CoTaskMemRealloc CoTaskMemFree CoCreateInstance CoTaskMemAlloc

oleaut32

VariantInit SysAllocString VariantClear SysFreeString VarUI4FromStr

imm32

ImmSetCompositionFontW ImmReleaseContext ImmSetCompositionWindow ImmGetContext

comctl32

_TrackMouseEvent ord17

??0CActiveXUI@DuiLib@@QAE@ABV01@@Z ??0CButtonUI@DuiLib@@QAE@$$QAV01@@Z ??0CButtonUI@DuiLib@@QAE@ABV01@@Z ??0CCheckBoxUI@DuiLib@@QAE@$$QAV01@@Z ??0CCheckBoxUI@DuiLib@@QAE@ABV01@@Z ??0CCheckBoxUI@DuiLib@@QAE@XZ ??0CChildLayoutUI@DuiLib@@QAE@$$QAV01@@Z ??0CChildLayoutUI@DuiLib@@QAE@ABV01@@Z ??0CComboUI@DuiLib@@QAE@$$QAV01@@Z ??0CComboUI@DuiLib@@QAE@ABV01@@Z ??0CContainerUI@DuiLib@@QAE@ABV01@@Z ??0CControlUI@DuiLib@@QAE@ABV01@@Z ??0CDateTimeUI@DuiLib@@QAE@$$QAV01@@Z ??0CDateTimeUI@DuiLib@@QAE@ABV01@@Z ??0CEditUI@DuiLib@@QAE@$$QAV01@@Z ??0CEditUI@DuiLib@@QAE@ABV01@@Z ??0CEventSource@DuiLib@@QAE@ABV01@@Z ??0CEventSource@DuiLib@@QAE@XZ ??0CGifAnimUI@DuiLib@@QAE@ABV01@@Z ??0CHorizontalLayoutUI@DuiLib@@QAE@$$QAV01@@Z ??0CHorizontalLayoutUI@DuiLib@@QAE@ABV01@@Z ??0CLabelUI@DuiLib@@QAE@ABV01@@Z ??0CListContainerElementUI@DuiLib@@QAE@$$QAV01@@Z ??0CListContainerElementUI@DuiLib@@QAE@ABV01@@Z ??0CListElementUI@DuiLib@@QAE@$$QAV01@@Z ??0CListElementUI@DuiLib@@QAE@ABV01@@Z ??0CListHBoxElementUI@DuiLib@@QAE@$$QAV01@@Z ??0CListHBoxElementUI@DuiLib@@QAE@ABV01@@Z ??0CListHeaderItemUI@DuiLib@@QAE@$$QAV01@@Z ??0CListHeaderItemUI@DuiLib@@QAE@ABV01@@Z ??0CListHeaderUI@DuiLib@@QAE@$$QAV01@@Z ??0CListHeaderUI@DuiLib@@QAE@ABV01@@Z ??0CListLabelElementUI@DuiLib@@QAE@$$QAV01@@Z ??0CListLabelElementUI@DuiLib@@QAE@ABV01@@Z ??0CListTextElementUI@DuiLib@@QAE@ABV01@@Z ??0CListUI@DuiLib@@QAE@$$QAV01@@Z ??0CListUI@DuiLib@@QAE@ABV01@@Z ??0CNotifyPump@DuiLib@@QAE@$$QAV01@@Z ??0CNotifyPump@DuiLib@@QAE@ABV01@@Z ??0CNotifyPump@DuiLib@@QAE@XZ ??0COptionUI@DuiLib@@QAE@ABV01@@Z ??0CPaintManagerUI@DuiLib@@QAE@ABV01@@Z ??0CProgressUI@DuiLib@@QAE@$$QAV01@@Z ??0CProgressUI@DuiLib@@QAE@ABV01@@Z ??0CRichEditUI@DuiLib@@QAE@ABV01@@Z ??0CScrollBarUI@DuiLib@@QAE@$$QAV01@@Z ??0CScrollBarUI@DuiLib@@QAE@ABV01@@Z ??0CSliderUI@DuiLib@@QAE@$$QAV01@@Z ??0CSliderUI@DuiLib@@QAE@ABV01@@Z ??0CTabLayoutUI@DuiLib@@QAE@$$QAV01@@Z ??0CTabLayoutUI@DuiLib@@QAE@ABV01@@Z ??0CTextUI@DuiLib@@QAE@ABV01@@Z ??0CTileLayoutUI@DuiLib@@QAE@$$QAV01@@Z ??0CTileLayoutUI@DuiLib@@QAE@ABV01@@Z ??0CTreeNodeUI@DuiLib@@QAE@ABV01@@Z ??0CTreeViewUI@DuiLib@@QAE@ABV01@@Z ??0CVerticalLayoutUI@DuiLib@@QAE@$$QAV01@@Z ??0CVerticalLayoutUI@DuiLib@@QAE@ABV01@@Z ??0CWebBrowserUI@DuiLib@@QAE@ABV01@@Z ??0CWindowWnd@DuiLib@@QAE@$$QAV01@@Z ??0CWindowWnd@DuiLib@@QAE@ABV01@@Z ??0CWndShadow@@QAE@ABV0@@Z ??0IMessageFilterUI@DuiLib@@QAE@$$QAV01@@Z ??0IMessageFilterUI@DuiLib@@QAE@ABV01@@Z ??0IMessageFilterUI@DuiLib@@QAE@XZ ??0INotifyUI@DuiLib@@QAE@$$QAV01@@Z ??0INotifyUI@DuiLib@@QAE@ABV01@@Z ??0INotifyUI@DuiLib@@QAE@XZ ??0ITranslateAccelerator@DuiLib@@QAE@$$QAV01@@Z ??0ITranslateAccelerator@DuiLib@@QAE@ABV01@@Z ??0ITranslateAccelerator@DuiLib@@QAE@XZ ??0WindowImplBase@DuiLib@@QAE@ABV01@@Z ??0WindowImplBase@DuiLib@@QAE@XZ ??0tagTDrawInfo@DuiLib@@QAE@$$QAU01@@Z ??0tagTDrawInfo@DuiLib@@QAE@ABU01@@Z ??0tagTFontInfo@DuiLib@@QAE@$$QAU01@@Z ??0tagTFontInfo@DuiLib@@QAE@ABU01@@Z ??0tagTFontInfo@DuiLib@@QAE@XZ ??0tagTImageInfo@DuiLib@@QAE@$$QAU01@@Z ??0tagTImageInfo@DuiLib@@QAE@ABU01@@Z ??0tagTImageInfo@DuiLib@@QAE@XZ ??0tagTResInfo@DuiLib@@QAE@$$QAU01@@Z ??0tagTResInfo@DuiLib@@QAE@ABU01@@Z ??0tagTResInfo@DuiLib@@QAE@XZ ??1CButtonUI@DuiLib@@UAE@XZ ??1CCheckBoxUI@DuiLib@@UAE@XZ ??1CChildLayoutUI@DuiLib@@UAE@XZ ??1CComboUI@DuiLib@@UAE@XZ ??1CDateTimeUI@DuiLib@@UAE@XZ ??1CDialogBuilder@DuiLib@@QAE@XZ ??1CEditUI@DuiLib@@UAE@XZ ??1CHorizontalLayoutUI@DuiLib@@UAE@XZ ??1CListContainerElementUI@DuiLib@@UAE@XZ ??1CListElementUI@DuiLib@@UAE@XZ ??1CListHBoxElementUI@DuiLib@@UAE@XZ ??1CListHeaderItemUI@DuiLib@@UAE@XZ ??1CListHeaderUI@DuiLib@@UAE@XZ ??1CListLabelElementUI@DuiLib@@UAE@XZ ??1CListUI@DuiLib@@UAE@XZ ??1CNotifyPump@DuiLib@@QAE@XZ ??1CProgressUI@DuiLib@@UAE@XZ ??1CScrollBarUI@DuiLib@@UAE@XZ ??1CSliderUI@DuiLib@@UAE@XZ ??1CTabLayoutUI@DuiLib@@UAE@XZ ??1CTileLayoutUI@DuiLib@@UAE@XZ ??1CVerticalLayoutUI@DuiLib@@UAE@XZ ??1WindowImplBase@DuiLib@@UAE@XZ ??1tagTDrawInfo@DuiLib@@QAE@XZ ??1tagTFontInfo@DuiLib@@QAE@XZ ??1tagTImageInfo@DuiLib@@QAE@XZ ??1tagTResInfo@DuiLib@@QAE@XZ ??4CActiveXUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CButtonUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CButtonUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CCheckBoxUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CCheckBoxUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CChildLayoutUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CChildLayoutUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CComboUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CComboUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CContainerUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CControlUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CDateTimeUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CDateTimeUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CDelegateBase@DuiLib@@QAEAAV01@ABV01@@Z ??4CDialogBuilder@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CDialogBuilder@DuiLib@@QAEAAV01@ABV01@@Z ??4CDuiPoint@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CDuiPoint@DuiLib@@QAEAAV01@ABV01@@Z ??4CDuiPtrArray@DuiLib@@QAEAAV01@ABV01@@Z ??4CDuiRect@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CDuiRect@DuiLib@@QAEAAV01@ABV01@@Z ??4CDuiSize@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CDuiSize@DuiLib@@QAEAAV01@ABV01@@Z ??4CDuiStringPtrMap@DuiLib@@QAEAAV01@ABV01@@Z ??4CDuiValArray@DuiLib@@QAEAAV01@ABV01@@Z ??4CEditUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CEditUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CEventSource@DuiLib@@QAEAAV01@ABV01@@Z ??4CGifAnimUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CHorizontalLayoutUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CHorizontalLayoutUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CLabelUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CListContainerElementUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CListContainerElementUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CListElementUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CListElementUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CListHBoxElementUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CListHBoxElementUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CListHeaderItemUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CListHeaderItemUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CListHeaderUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CListHeaderUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CListLabelElementUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CListLabelElementUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CListTextElementUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CListUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CListUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CMarkup@DuiLib@@QAEAAV01@ABV01@@Z ??4CMarkupNode@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CMarkupNode@DuiLib@@QAEAAV01@ABV01@@Z ??4CNotifyPump@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CNotifyPump@DuiLib@@QAEAAV01@ABV01@@Z ??4COptionUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CPaintManagerUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CProgressUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CProgressUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CRenderClip@DuiLib@@QAEAAV01@ABV01@@Z ??4CRenderEngine@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CRenderEngine@DuiLib@@QAEAAV01@ABV01@@Z ??4CRichEditUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CScrollBarUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CScrollBarUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CSliderUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CSliderUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CTabLayoutUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CTabLayoutUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CTextUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CTileLayoutUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CTileLayoutUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CTreeNodeUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CTreeViewUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CVerticalLayoutUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CVerticalLayoutUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CWaitCursor@DuiLib@@QAEAAV01@ABV01@@Z ??4CWebBrowserUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CWindowWnd@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CWindowWnd@DuiLib@@QAEAAV01@ABV01@@Z ??4CWndShadow@@QAEAAV0@ABV0@@Z ??4IMessageFilterUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4IMessageFilterUI@DuiLib@@QAEAAV01@ABV01@@Z ??4INotifyUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4INotifyUI@DuiLib@@QAEAAV01@ABV01@@Z ??4ITranslateAccelerator@DuiLib@@QAEAAV01@$$QAV01@@Z ??4ITranslateAccelerator@DuiLib@@QAEAAV01@ABV01@@Z ??4STRINGorID@DuiLib@@QAEAAV01@$$QAV01@@Z ??4STRINGorID@DuiLib@@QAEAAV01@ABV01@@Z ??4WindowImplBase@DuiLib@@QAEAAV01@ABV01@@Z ??4tagTDrawInfo@DuiLib@@QAEAAU01@$$QAU01@@Z ??4tagTDrawInfo@DuiLib@@QAEAAU01@ABU01@@Z ??4tagTEventUI@DuiLib@@QAEAAU01@$$QAU01@@Z ??4tagTEventUI@DuiLib@@QAEAAU01@ABU01@@Z ??4tagTFontInfo@DuiLib@@QAEAAU01@$$QAU01@@Z ??4tagTFontInfo@DuiLib@@QAEAAU01@ABU01@@Z ??4tagTImageInfo@DuiLib@@QAEAAU01@$$QAU01@@Z ??4tagTImageInfo@DuiLib@@QAEAAU01@ABU01@@Z ??4tagTPercentInfo@DuiLib@@QAEAAU01@$$QAU01@@Z ??4tagTPercentInfo@DuiLib@@QAEAAU01@ABU01@@Z ??4tagTResInfo@DuiLib@@QAEAAU01@$$QAU01@@Z ??4tagTResInfo@DuiLib@@QAEAAU01@ABU01@@Z ??_7CActiveXUI@DuiLib@@6BCControlUI@1@@ ??_7CActiveXUI@DuiLib@@6BIMessageFilterUI@1@@ ??_7CButtonUI@DuiLib@@6B@ ??_7CCheckBoxUI@DuiLib@@6B@ ??_7CChildLayoutUI@DuiLib@@6BCControlUI@1@@ ??_7CChildLayoutUI@DuiLib@@6BIContainerUI@1@@ ??_7CComboUI@DuiLib@@6B@ ??_7CComboUI@DuiLib@@6BCControlUI@1@@ ??_7CComboUI@DuiLib@@6BIContainerUI@1@@ ??_7CContainerUI@DuiLib@@6BCControlUI@1@@ ??_7CContainerUI@DuiLib@@6BIContainerUI@1@@ ??_7CControlUI@DuiLib@@6B@ ??_7CDateTimeUI@DuiLib@@6B@ ??_7CEditUI@DuiLib@@6B@ ??_7CGifAnimUI@DuiLib@@6BCControlUI@1@@ ??_7CGifAnimUI@DuiLib@@6BIContainerUI@1@@ ??_7CHorizontalLayoutUI@DuiLib@@6BCControlUI@1@@ ??_7CHorizontalLayoutUI@DuiLib@@6BIContainerUI@1@@ ??_7CLabelUI@DuiLib@@6B@ ??_7CListContainerElementUI@DuiLib@@6B@ ??_7CListContainerElementUI@DuiLib@@6BCControlUI@1@@ ??_7CListContainerElementUI@DuiLib@@6BIContainerUI@1@@ ??_7CListElementUI@DuiLib@@6BCControlUI@1@@ ??_7CListElementUI@DuiLib@@6BIListItemUI@1@@ ??_7CListHBoxElementUI@DuiLib@@6B@ ??_7CListHBoxElementUI@DuiLib@@6BCControlUI@1@@ ??_7CListHBoxElementUI@DuiLib@@6BIContainerUI@1@@ ??_7CListHeaderItemUI@DuiLib@@6B@ ??_7CListHeaderUI@DuiLib@@6BCControlUI@1@@ ??_7CListHeaderUI@DuiLib@@6BIContainerUI@1@@ ??_7CListLabelElementUI@DuiLib@@6BCControlUI@1@@ ??_7CListLabelElementUI@DuiLib@@6BIListItemUI@1@@ ??_7CListTextElementUI@DuiLib@@6BCControlUI@1@@ ??_7CListTextElementUI@DuiLib@@6BIListItemUI@1@@ ??_7CListUI@DuiLib@@6B@ ??_7CListUI@DuiLib@@6BCControlUI@1@@ ??_7CListUI@DuiLib@@6BIContainerUI@1@@ ??_7CNotifyPump@DuiLib@@6B@ ??_7COptionUI@DuiLib@@6B@ ??_7CProgressUI@DuiLib@@6B@ ??_7CRichEditUI@DuiLib@@6B@ ??_7CRichEditUI@DuiLib@@6BCControlUI@1@@ ??_7CRichEditUI@DuiLib@@6BIContainerUI@1@@ ??_7CScrollBarUI@DuiLib@@6B@ ??_7CSliderUI@DuiLib@@6B@ ??_7CTabLayoutUI@DuiLib@@6BCControlUI@1@@ ??_7CTabLayoutUI@DuiLib@@6BIContainerUI@1@@ ??_7CTextUI@DuiLib@@6B@ ??_7CTileLayoutUI@DuiLib@@6BCControlUI@1@@ ??_7CTileLayoutUI@DuiLib@@6BIContainerUI@1@@ ??_7CTreeNodeUI@DuiLib@@6B@ ??_7CTreeNodeUI@DuiLib@@6BCControlUI@1@@ ??_7CTreeNodeUI@DuiLib@@6BIContainerUI@1@@ ??_7CTreeViewUI@DuiLib@@6BCControlUI@1@@ ??_7CTreeViewUI@DuiLib@@6BCListUI@1@@ ??_7CTreeViewUI@DuiLib@@6BIContainerUI@1@@ ??_7CTreeViewUI@DuiLib@@6BINotifyUI@1@@ ??_7CVerticalLayoutUI@DuiLib@@6BCControlUI@1@@ ??_7CVerticalLayoutUI@DuiLib@@6BIContainerUI@1@@ ??_7CWebBrowserUI@DuiLib@@6BCControlUI@1@@ ??_7CWebBrowserUI@DuiLib@@6BIDispatch@@@ ??_7CWebBrowserUI@DuiLib@@6BIDocHostUIHandler@@@ ??_7CWebBrowserUI@DuiLib@@6BIMessageFilterUI@1@@ ??_7CWebBrowserUI@DuiLib@@6BIOleCommandTarget@@@ ??_7CWebBrowserUI@DuiLib@@6BIServiceProvider@@@ ??_7CWebBrowserUI@DuiLib@@6BITranslateAccelerator@1@@ ??_7CWindowWnd@DuiLib@@6B@ ??_7CWndShadow@@6B@ ??_7IMessageFilterUI@DuiLib@@6B@ ??_7INotifyUI@DuiLib@@6B@ ??_7ITranslateAccelerator@DuiLib@@6B@ ??_7WindowImplBase@DuiLib@@6BCNotifyPump@1@@ ??_7WindowImplBase@DuiLib@@6BCWindowWnd@1@@ ??_7WindowImplBase@DuiLib@@6BIDialogBuilderCallback@1@@ ??_7WindowImplBase@DuiLib@@6BIMessageFilterUI@1@@ ??_7WindowImplBase@DuiLib@@6BINotifyUI@1@@ ??_FCDuiPtrArray@DuiLib@@QAEXXZ ??_FCDuiStringPtrMap@DuiLib@@QAEXXZ ??_FCMarkup@DuiLib@@QAEXXZ ??_FCTreeNodeUI@DuiLib@@QAEXXZ ?GetCheckBox@CTreeNodeUI@DuiLib@@QBEPAVCCheckBoxUI@2@XZ ?GetDottedLine@CTreeNodeUI@DuiLib@@QBEPAVCLabelUI@2@XZ ?GetFolderButton@CTreeNodeUI@DuiLib@@QBEPAVCCheckBoxUI@2@XZ ?GetItemButton@CTreeNodeUI@DuiLib@@QBEPAVCOptionUI@2@XZ ?GetTreeNodeHoriznotal@CTreeNodeUI@DuiLib@@QBEPAVCHorizontalLayoutUI@2@XZ ?InitWindow@WindowImplBase@DuiLib@@UAEXXZ ?PreMultiply@CWndShadow@@IAEKKE@Z CreateInterface

Name

.text

Size

997KB

Virtual Size

996KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

212KB

Virtual Size

212KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

27KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

388B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

42KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=21, id=241, version=40116,

count=185, id=243, version=40116,

count=31, id=242, version=40116,

count=9, id=199, version=41118,

count=28, id=259, version=24123,

count=35, id=261, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=3, id=261, version=23013,

count=121, id=261, version=24123,

count=37, id=260, version=24123,

count=13, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=68, id=260, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=35, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=557, id=1, productName=Unmarked objects,

count=63, id=265, version=24210,

count=1, id=256, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,

count=1, id=151,

count=1, id=258, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

Conflict.xml

SHA256 aed7c63eb3259fd564c469220532bd60fea57d12720367a9b4ed67a3bd00b959
MD5 bea80388cbac3a3433b33d7ba8139367
SHA1 231b09cd9ae3f76073ffc4e87ea18f349edf1b51
SHA512 73aeaf524a2c5f04eac328b4fb36534473c85b5f3c6c63c4da41750003c6debb29d311511b1d527e1cc1a702c28861fe8112253f92d371cb52c955022dff71e4
MD5 SHA1 SHA512

HWID.ini

SHA256 937d8b5b77c74135071bc370f200dbf4e21350fcfe28ecf8957b6fcc52ebc0fa
MD5 c8fcc45012c5a98d3afe96010ac3f2b5
SHA1 598a8862c254372b063fa3b60c4ae1dd7b1d063b
SHA512 be99843efeb96778c01ceab85b48bf1b6e9e5780ff8718e44f76c927e9c52138596ed206eacf0fde206816356e42e37161ff7d30ce7ce2ee5b5dd5a2a6a58394
SSDEEP 96:wYbD5vBL4hZz7xe0sziq0IZGXe8UZoJCyojJ0QfWFRzImtqj6B2axiqE8LrgAnCZ:w8D7MZEY044J0hOmtqjI2wNLAwG9
MD5 SHA1 SHA512 SSDEEP

HWID.xml

SHA256 37cdc5ddbb4414213a3842f8ea3f5e7990d5413509d55fe25367a62e4913c8b8
MD5 d42b39b622d651cc38dd09b5126c217a
SHA1 1977bb8a0a57e7242429bd98f1638e4d9d1b3f3a
SHA512 fa69ff990ecf8a5105a0a37b0dde9a43bd87ca145f9566a60f4433cffd2bf8390e6ca59d564a502d861d30509b64d3eb7663da0be0bb04a5fc839bd9b8f53775
MD5 SHA1 SHA512

HWID_OURS.ini

SHA256 fe9e26538fd74360338541c80f514e69fd83ac85222fe8c1f8aa209d99cb4c38
MD5 e67d3c6daa84ecfdae7186dc35774e77
SHA1 a6cc5f33e0e47e1342723fa82ad8b41c44878d34
SHA512 9ff76a9e71bb8f36cc6f143a7840aa48c895ff63d47fab634ac2a6043702b44bec15df562263326aee7b3edbd80caf50ac3442fc37d27b3dee9e1ef7beb96936
MD5 SHA1 SHA512

ICSDHCP.dll

IMPHASH f0d2e9ee5555f95704b20fada179d46e
SHA256 ff27f4fb29a6a77e320eca748fb4317540c65f4165596d1c8c59699d8d864150
MD5 68d4392fe4f930b1a56ce069168d9161
SHA1 b1e3be4dc99ee1a2884b62c0eb815b83165533a8
SHA512 8d6fae098069b095ffe5f107c6b64fc97bbcfe77faeb79159efc3e89bec25208c0948357f1118fbbe72ff6aa8d6c301a5f60d63064d0a9f446987c2e0d5f1260
SSDEEP 6144:MojiX+sv8U6dKqa6pG+YJjSYFDhl1SOkf1zwM2BEWLT7IySGptkFLIxKPW4yWXAF:MiI+K8nzi+eFDUf1033TcFisWUX0X
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

71:14:ba:71:1e:65:86:a2:a9:00:81:48:5f:02:fe:e8:46:48:c7:a0:63:b8:2a:cc:52:30:d7:9e:34:87:56:33

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

PE Signature issue

Digest

2f:22:1b:07:e3:0f:db:25:e3:02:91:ea:84:0e:4b:7c:b8:8a:83:82

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

4

Entry point

277840

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP IMAGE_FILE_DLL

PDB paths

d:\P4Download\Seattle\TRUNK\WinAPP\ICSDHCP_1.1.8.22\Release\ICSDHCP.pdb

setupapi

SetupDiClassGuidsFromNameA SetupDiGetClassDevsA SetupDiEnumDeviceInfo SetupDiGetDeviceRegistryPropertyA SetupDiDestroyDeviceInfoList SetupDiOpenDevRegKey

ws2_32

inet_addr htonl WSACleanup WSAGetLastError closesocket __WSAFDIsSet select recvfrom sendto htons inet_ntoa bind setsockopt socket WSAStartup WSAIoctl gethostbyname ntohl ntohs WSAAddressToStringA WSASocketA

iphlpapi

GetNetworkParams GetAdaptersAddresses UnenableRouter EnableRouter GetBestInterface GetIfTable GetAdaptersInfo

rasapi32

RasEnumConnectionsA RasGetAutodialAddressA RasHangUpA

kernel32

lstrcmpA GetLocaleInfoA EnumResourceLanguagesA ConvertDefaultLocale GetCurrentThreadId GetCurrentThread GlobalDeleteAtom ResumeThread SuspendThread GlobalAddAtomA GetCurrentProcessId lstrcmpW GlobalFindAtomA GlobalGetAtomNameA FreeResource GetModuleFileNameW LeaveCriticalSection TlsGetValue EnterCriticalSection GlobalReAlloc InitializeCriticalSection TlsAlloc TlsSetValue LocalReAlloc DeleteCriticalSection TlsFree SetErrorMode InterlockedIncrement GetAtomNameA GetThreadLocale FileTimeToSystemTime WritePrivateProfileStringA GetCurrentDirectoryA GetStringTypeExA MoveFileA DeleteFileA ReadFile WriteFile SetFilePointer FlushFileBuffers LockFile UnlockFile SetEndOfFile GetFileSize DuplicateHandle GetCurrentProcess GetVolumeInformationA GetFullPathNameA GetShortPathNameA GetCPInfo GetOEMCP FileTimeToLocalFileTime LocalFileTimeToFileTime SetFileTime SetFileAttributesA GetFileAttributesA GetFileTime RtlUnwind GetSystemTimeAsFileTime ExitThread VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc GetCommandLineA RaiseException ExitProcess HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent FatalAppExitA VirtualFree HeapDestroy HeapCreate GetStdHandle GetACP IsValidCodePage LCMapStringA LCMapStringW SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings GetModuleHandleA GetEnvironmentStringsW QueryPerformanceCounter SetConsoleCtrlHandler GetTimeZoneInformation GetConsoleCP GetConsoleMode GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetStringTypeExW lstrlenW CompareStringA CompareStringW GetEnvironmentVariableA GetEnvironmentVariableW GetVersion InterlockedExchange OpenMutexA OpenEventA CreateFileMappingA WaitForMultipleObjects GetSystemTime SystemTimeToFileTime HeapFree GetProcessHeap HeapAlloc SetEvent SetThreadPriority CreateEventA LocalAlloc LocalFree InterlockedDecrement MultiByteToWideChar GlobalLock GlobalHandle GlobalUnlock CreateFileA DeviceIoControl FreeLibrary lstrcatA GetExitCodeProcess GetWindowsDirectoryA LoadLibraryA GetProcAddress LoadResource LockResource SizeofResource FindResourceA WideCharToMultiByte GetTickCount GetExitCodeThread TerminateThread CreateThread GetLastError Sleep GlobalAlloc GlobalFree UnmapViewOfFile OpenFileMappingA MapViewOfFile CreateMutexA ResetEvent ReleaseMutex CreateProcessA WaitForSingleObject CloseHandle FindFirstFileA FindClose GetVersionExA OutputDebugStringW OutputDebugStringA GetPrivateProfileIntA GetModuleFileNameA lstrlenA GetPrivateProfileStringA lstrcpyA SetLastError CopyFileA GlobalSize FormatMessageA MulDiv lstrcmpiA FreeEnvironmentStringsW lstrcmpiW GlobalFlags

user32

DestroyIcon InflateRect GetMenuItemInfoA DestroyMenu EndDialog GetNextDlgTabItem CreateDialogIndirectParamA GetDialogBaseUnits LoadCursorA GetSysColorBrush UnregisterClassA ScrollWindowEx ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageA LoadIconA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA SetPropA GetPropA RemovePropA SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow SetActiveWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar UpdateWindow GetMenu GetDesktopWindow GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo PtInRect SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindow MapVirtualKeyA GetKeyNameTextA ReleaseDC GetDC GetClientRect CopyRect IsWindow GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled MessageBoxA ShowOwnedPopups EndPaint BeginPaint GetWindowDC ClientToScreen SetCursor SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus GetParent SendMessageA ModifyMenuA EnableMenuItem CheckMenuItem PostQuitMessage GetMenuState GrayStringA DrawTextExA DrawTextA TabbedTextOutA FillRect CreateWindowExA DeleteMenu wvsprintfA wvsprintfW GetSystemMetrics PostMessageA GetClassNameA GetDlgItem EnumWindows EnableWindow CharLowerW CharLowerA CharUpperW CharUpperA RemoveMenu GetSubMenu GetMenuItemCount InsertMenuA GetMenuItemID AppendMenuA GetMenuStringA GetWindowRect

gdi32

MoveToEx SetTextAlign SetTextJustification SetTextCharacterExtra SetWindowExtEx ScaleWindowExtEx GetCurrentPositionEx ArcTo PolyDraw PolylineTo PolyBezierTo ExtSelectClipRgn SetMapperFlags SetArcDirection SetColorAdjustment DeleteObject DeleteDC CreateDIBPatternBrushPt CreatePatternBrush LineTo GetStockObject SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile SetWindowOrgEx CreatePen ExtCreatePen CreateSolidBrush CreateHatchBrush CreateFontIndirectA SetRectRgn CombineRgn GetMapMode DPtoLP GetTextExtentPoint32A GetTextMetricsA IntersectClipRect OffsetClipRgn ExcludeClipRect SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC GetObjectA SetBkColor SetTextColor GetClipBox GetDCOrgEx PatBlt CreateRectRgnIndirect CreateBitmap CreateDCA CopyMetaFileA CreateCompatibleDC GetDeviceCaps ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible StartDocA GetPixel BitBlt GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn OffsetWindowOrgEx

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA ClosePrinter DocumentPropertiesA

advapi32

RegQueryValueA RegOpenKeyA RegSetValueA RegEnumKeyExA RegEnumValueA ControlService StartServiceA ChangeServiceConfigA QueryServiceConfigA OpenSCManagerA OpenServiceA QueryServiceStatus CloseServiceHandle RegDeleteKeyA RegDeleteValueA RegCreateKeyExA RegSetValueExA RegEnumKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey RegCreateKeyA

shell32

SHGetFileInfoA ExtractIconA ShellExecuteExA ShellExecuteA

ole32

CoInitializeSecurity CoInitialize CoSetProxyBlanket CoUninitialize CoTaskMemFree SetConvertStg WriteFmtUserTypeStg WriteClassStg OleRegGetUserType ReadFmtUserTypeStg ReadClassStg StringFromCLSID CoTreatAsClass CreateBindCtx CLSIDFromProgID CoCreateInstance ReleaseStgMedium CoTaskMemAlloc OleDuplicateData CoDisconnectObject StringFromGUID2 CLSIDFromString

oleaut32

SafeArrayGetElement VariantClear SysFreeString VariantInit SysAllocString SysStringLen SysAllocStringByteLen SysStringByteLen VariantChangeType SysAllocStringLen SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SetErrorInfo GetErrorInfo VarBstrFromDate SafeArrayAllocDescriptor SafeArrayCopy CreateErrorInfo SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr

shlwapi

PathFindExtensionA PathFindFileNameA PathStripToRootA PathIsUNCA PathRemoveExtensionA

ImageOleCtrl.dll

IMPHASH ce857f145cbe4c3e87b86cd7cd23a7f7
SHA256 c330ca135fb622ebf10be269b5895bc9f8dc55de378ea8dfbb59c7ed4b8295b2
MD5 efda993c88fd10857f00bcd02804591e
SHA1 fb81319d127f27d0510cb0d20b1bdd4e6b4439d6
SHA512 9f1fa8bd8e17c68a0dedc77380e49334c6fa7364592c89d2e296497687e699c3e24f8b2a6260ebc93ada04fd43d65b1bc8180cfc953e28b710abd030a78240ed
SSDEEP 1536:6aN3A5AVr2Y8V3Zp5co5CFa+Ax5Eghr0OKy8SGaj3a0:nYMr2bZvcoEa+a3QOKx3aLv
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

PE Signature issue

Digest

af:4e:1d:75:20:7b:93:98:d9:6d:95:a9:8d:20:65:a4:6e:ea:c1:57:44:ff:da:0b:b5:85:25:f7:27:fc:09:4d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

PE Signature issue

Digest

37:08:a2:b9:23:12:c3:8b:a7:78:a3:0e:04:40:1d:bb:10:c9:57:ff

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

5

Entry point

46027

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\Demo\VC.Net\RichEditDemo\RichEditDemo\Release\ImageOleCtrl.pdb

kernel32

WideCharToMultiByte MultiByteToWideChar InterlockedCompareExchange TerminateProcess GlobalAlloc GetProcessHeap HeapSize HeapReAlloc GlobalLock FindResourceExW HeapDestroy DeleteCriticalSection InitializeCriticalSection RaiseException GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess FindResourceW SizeofResource LockResource LoadResource LeaveCriticalSection EnterCriticalSection InterlockedExchange GlobalFree GetTempPathW CloseHandle GetFileAttributesW MulDiv DisableThreadLibraryCalls lstrlenW GetModuleFileNameW IsBadWritePtr HeapAlloc GlobalUnlock GlobalSize InterlockedDecrement HeapFree InterlockedIncrement Sleep

user32

InvalidateRect wsprintfW RegisterClipboardFormatW GetDlgCtrlID wsprintfA IsClipboardFormatAvailable KillTimer FillRect GetFocus GetClientRect ReleaseDC GetDC SetTimer InvertRect SendMessageW FrameRect

gdi32

GdiFlush GetDIBits GetObjectW SetDIBColorTable GetDIBColorTable CreateDIBSection SelectClipRgn DeleteDC BitBlt DeleteObject CreateSolidBrush SelectObject CreateCompatibleBitmap CreateCompatibleDC ExtSelectClipRgn CreateRectRgnIndirect GetClipBox GetDeviceCaps

advapi32

RegSetValueExW RegDeleteKeyW RegCreateKeyExW RegCloseKey

ole32

CoTaskMemAlloc CoTaskMemFree CreateStreamOnHGlobal GetHGlobalFromStream CoCreateInstance ReleaseStgMedium

oleaut32

SysFreeString SysAllocString

msvcr90

_wtoi _unlock __dllonexit _encode_pointer _lock _onexit _decode_pointer _malloc_crt _encoded_null _initterm _initterm_e _amsg_exit _adjust_fdiv __CppXcptFilter _crt_debugger_hook ?terminate@@YAXXZ ?_type_info_dtor_internal_method@type_info@@QAEXXZ _except_handler4_common __clean_type_info_names_internal calloc _recalloc strncpy sscanf strstr wcsncmp wcscspn wcsspn wcsstr ??_U@YAPAXI@Z memcpy_s _resetstkoflw ??_V@YAXPAX@Z ?what@exception@std@@UBEPBDXZ _purecall _beginthreadex _wcsicmp _invalid_parameter_noinfo ??0exception@std@@QAE@ABV01@@Z ??0exception@std@@QAE@XZ memmove_s ??1exception@std@@UAE@XZ ??0exception@std@@QAE@ABQBD@Z wcsncpy wcschr wcsrchr free malloc ??2@YAPAXI@Z memset __CxxFrameHandler3 memcpy ??3@YAXPAX@Z _CxxThrowException

msvcp90

?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ ?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ ?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIPB_W@Z ?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z ??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z ??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z ??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z ??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z ?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z ?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z ?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z ?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z ??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ ??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z ??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z ??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z ??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z

gdiplus

GdipGetImageEncoders GdipGetImageGraphicsContext GdipSaveImageToStream GdipGetImagePixelFormat GdipGetImagePaletteSize GdipGetImageEncodersSize GdipGetPropertyItem GdipCreateBitmapFromScan0 GdipCreateBitmapFromHBITMAP GdipCreateBitmapFromFile GdipBitmapUnlockBits GdiplusStartup GdiplusShutdown GdipGetPropertyItemSize GdipImageSelectActiveFrame GdipImageGetFrameCount GdipImageGetFrameDimensionsList GdipImageGetFrameDimensionsCount GdipGetImageRawFormat GdipGetImageHeight GdipGetImageWidth GdipSaveImageToFile GdipCloneImage GdipLoadImageFromFile GdipDrawImageRectI GdipDrawImageI GdipDeleteGraphics GdipCreateFromHDC GdipDisposeImage GdipAlloc GdipFree GdipGetImagePalette GdipBitmapLockBits

shlwapi

PathFindExtensionW StrStrIW

urlmon

URLDownloadToFileW

InstallDriver.exe

IMPHASH 3ad5ab786e655d857c9526dd3d494ffa
SHA256 855183c7425eb40468afba7582b24fd0a132476b253435b5733cac1ea2b48723
MD5 2344de630bb1152a33b83099165c1c37
SHA1 5aec0f21ae521e5f2e119d0174dd5cfd25ba9a07
SHA512 7be5aed36f8c388b468c62daa8a1cef55b80ecdc9841a31857198a3da864fc5867b661a3acdaef61dfa091308354e1c44dc9ec1bb9a5283424253a348dfe8e44
SSDEEP 6144:N8NvRv9vUvOvEM3BbghBNQ+NF5w14egMBu9FAOzVDmvIm:q5BbMNQ+S1gMBu9FRCIm
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

6f:4f:93:e3:1b:3f:7e:99:c7:f5:ee:43:e8:d2:26:bb:ab:20:e9:5d:d9:30:92:2c:44:ae:4b:14:a5:49:8e:0e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

PE Signature issue

Digest

fd:d0:55:07:d4:f5:7d:76:de:15:66:b6:bb:56:f1:44:b3:ce:d7:38

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

1

Major OS version

5

Entry point

44212

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\SVN\WifiMaster\branches\201405131202\WiFiProject\Release\InstallDriver.pdb

kernel32

ResetEvent GetProcAddress GetModuleHandleW FreeLibrary FindFirstFileW HeapFree FindNextFileW TerminateProcess GetModuleFileNameW InitializeCriticalSectionAndSpinCount GetEnvironmentVariableW FindClose HeapSize GetPrivateProfileStringW DeleteFileW HeapReAlloc RaiseException HeapAlloc DecodePointer DeleteCriticalSection GetProcessHeap CreateProcessW CopyFileW GetExitCodeProcess GetSystemDirectoryW GetSystemInfo WideCharToMultiByte EnterCriticalSection LeaveCriticalSection SetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW OutputDebugStringW EncodePointer TlsAlloc CreateEventW TlsSetValue TlsFree CloseHandle SetLastError RtlUnwind GetStdHandle WriteFile MultiByteToWideChar ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW GetACP CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FindFirstFileExW IsValidCodePage GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx WriteConsoleW GetVersionExW CreateFileW WaitForSingleObject DeviceIoControl GetCurrentProcess LoadLibraryExW GetLastError TlsGetValue Sleep

iphlpapi

GetAdaptersInfo

user32

GetSystemMetrics

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHCreateDirectoryExW

Name

.text

Size

150KB

Virtual Size

149KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

63KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

1024B

Virtual Size

564B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

IpLib.dll

IMPHASH 37b904f80c242a2d95c62fd6b498e8e4
SHA256 5b4c770ee4d00d73edfaac01cdfce95a2b01b688478456e5425cdf6f79f9199d
MD5 1cef2be9bea5c9a3507cde80b5654885
SHA1 8b38e4e48f10d9d3f5f479ad811f52f2534dadfc
SHA512 fbf5b3bf07614a1d0b5dbc41a716f14a1412e66348061326faad187f190669790034daedbe0aff4ffc14dc18f2db41f89dca0c0ca153f9659f57d38fca4267d6
SSDEEP 3072:R7eQAls/n/sF2VVV9x590eZzRnQ88E7r2Wn2IjO5Sj4DqTeOV/j:pLJ//M2VVV9j90ERnQ8TbnTjaSVL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

6f:c2:4b:a1:64:1a:86:e5:24:62:27:43:17:43:b7:1a:ce:8e:1b:42:53:66:79:3c:83:23:6d:d3:72:a6:19:40

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

PE Signature issue

Digest

93:fb:13:f6:46:67:eb:b9:52:f1:11:54:35:9a:26:9a:39:ed:46:f4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

4

Entry point

56371

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\Realtek Source\IpLib\IPLib - 20120913\Release\IpLib.pdb

iphlpapi

GetAdaptersInfo

kernel32

GetCPInfo GetOEMCP HeapAlloc HeapFree HeapReAlloc VirtualAlloc RtlUnwind GetCommandLineA GetProcessHeap ExitProcess RaiseException HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep VirtualFree HeapDestroy HeapCreate GetStdHandle SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetACP IsValidCodePage GetConsoleCP GetConsoleMode LCMapStringW GetStringTypeA GetStringTypeW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW InterlockedExchange MultiByteToWideChar WideCharToMultiByte GetLastError GetVersion CompareStringA lstrlenA GetProcAddress GetModuleHandleA FreeLibrary GlobalAlloc lstrcmpA GlobalLock SizeofResource LockResource LoadResource FindResourceA LoadLibraryExA GetLocaleInfoA EnumResourceLanguagesA GetModuleFileNameA ConvertDefaultLocale GetCurrentThreadId GetCurrentThread GlobalDeleteAtom CloseHandle LCMapStringA CreateFileA GetCurrentProcess FlushFileBuffers SetFilePointer WriteFile ReadFile GetThreadLocale GlobalGetAtomNameA GlobalFindAtomA LoadLibraryA lstrcmpW GetVersionExA InterlockedIncrement GlobalFlags WritePrivateProfileStringA SetErrorMode TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedDecrement GetModuleFileNameW GlobalFree GlobalUnlock FormatMessageA LocalFree GetCurrentProcessId SetLastError GlobalAddAtomA

user32

LoadCursorA GetSysColorBrush ShowWindow RegisterWindowMessageA LoadIconA WinHelpA GetCapture GetClassLongA SetPropA GetPropA RemovePropA IsWindow GetForegroundWindow GetDlgItem GetTopWindow DestroyWindow GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow GetClientRect GetMenu CreateWindowExA GetClassInfoExA RegisterClassA AdjustWindowRectEx CopyRect DefWindowProcA CallWindowProcA SetWindowLongA SystemParametersInfoA IsIconic GetWindowPlacement GetSystemMetrics GetWindow GetDlgCtrlID GetWindowRect GetClassNameA PtInRect GetWindowTextA SetWindowTextA GetSysColor ReleaseDC GetDC ClientToScreen GrayStringA wsprintfA DrawTextExA DrawTextA TabbedTextOutA UnregisterClassA UnhookWindowsHookEx GetMenuItemID GetMenuItemCount GetSubMenu DestroyMenu GetClassInfoA PostQuitMessage PostMessageA CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA SendMessageA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps ValidateRect GetCursorPos PeekMessageA GetKeyState IsWindowVisible GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled EnableWindow MessageBoxA SetCursor SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow SetWindowPos

gdi32

SetMapMode GetClipBox DeleteObject PtVisible RectVisible TextOutA ExtTextOutA Escape SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx SetWindowExtEx ScaleWindowExtEx DeleteDC GetStockObject SetTextColor SetBkColor RestoreDC SaveDC GetDeviceCaps ScaleViewportExtEx CreateBitmap

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey

shlwapi

PathFindFileNameA PathFindExtensionA

oleaut32

VariantClear VariantChangeType VariantInit

MiniNews.exe

IMPHASH b30a3bff3ec9db770438db02e12674a1
SHA256 330516c9267709be11ea39be85d6e9af76e409b3bf64e012a54df9f092358e35
MD5 a071e485cdabfc11cce817b37b59883b
SHA1 e3a2bdf42e104e4b5fb3a36548037aae8c49e49f
SHA512 65e5202d174b3ce993c3b649a5b25c8cc61bcb41c803d084b154359ca1651c21cb980f970e15cb53a028187604d776e72fde2837bc504570420438ca2097a7a2
SSDEEP 24576:7L1XYNsnBN8oCyUmArQtthrphnd0QJ8yEy8MGZJv2Hk3KtBr81+z6nJUOq8:XB28trpFWQJ8wSvCaKv4IzOJUOq8
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

4d:c7:89:68:c1:ea:32:46:79:73:d6:a7:48:1b:72:e9:78:16:17:5d:35:31:a6:87:e9:b2:ec:46:5b:21:d6:a3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jun 18, 2021

PE Signature issue

Digest

16:22:23:46:ee:a9:19:c0:61:cb:eb:63:3a:7a:d3:67:d7:c8:34:70

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jun 18, 2021

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

1

Major OS version

5

Entry point

1153132

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\svn\WifiMaster_R\branches\201405131202\WiFiProject\Release\MiniNews.pdb

wininet

InternetSetOptionW

ws2_32

sendto WSACleanup WSAGetLastError recv send bind closesocket connect getpeername getsockname getsockopt htons ntohs setsockopt socket gethostname ioctlsocket WSASetLastError getaddrinfo freeaddrinfo __WSAFDIsSet select accept listen recvfrom WSAStartup

wldap32

ord143 ord46 ord211 ord60 ord50 ord41 ord22 ord26 ord27 ord32 ord33 ord35 ord79 ord30 ord200 ord301

version

GetFileVersionInfoSizeW VerQueryValueA GetFileVersionInfoW VerQueryValueW

user32

GetWindowTextLengthW wsprintfW CallWindowProcW GetWindow GetFocus GetDC FillRect ScreenToClient SendMessageW SetWindowTextW RegisterClassExW IsWindow InvalidateRgn GetAsyncKeyState DestroyAcceleratorTable IsChild GetSysColor MoveWindow CreateAcceleratorTableW SetFocus GetClassNameW SetCapture GetDlgItem PostQuitMessage GetDesktopWindow GetClassInfoExW RegisterWindowMessageW ReleaseCapture InvalidateRect ReleaseDC GetWindowTextW GetWindowLongW GetMessageW DefWindowProcW GetWindowRect DestroyWindow CreateWindowExW ShowWindow DispatchMessageW SetTimer RegisterClassW SetLayeredWindowAttributes CharNextW TranslateMessage LoadIconW LoadCursorW SetCursor SetWindowLongW KillTimer SystemParametersInfoW GetParent PtInRect UpdateWindow BeginPaint EndPaint PostMessageW ClientToScreen GetClientRect IsWindowVisible SetWindowPos UnregisterClassW MessageBoxW GetSystemMetrics RedrawWindow SetRect DrawTextW CharPrevW GetGUIThreadInfo SetWindowRgn IsZoomed GetPropW SetPropW IntersectRect EnableWindow GetCaretBlinkTime GetCaretPos IsRectEmpty IsIconic GetActiveWindow GetKeyState GetUpdateRect GetCursorPos MapWindowPoints UnionRect MonitorFromWindow GetMonitorInfoW wvsprintfW OffsetRect CreateCaret HideCaret ShowCaret SetCaretPos

ole32

CoCreateInstance CoTaskMemFree CreateStreamOnHGlobal CoTaskMemRealloc CoGetClassObject OleUninitialize StringFromGUID2 CLSIDFromProgID OleInitialize CLSIDFromString OleLockRunning CoInitialize CoUninitialize CoTaskMemAlloc

oleaut32

LoadRegTypeLi VariantInit LoadTypeLi OleCreateFontIndirect SysAllocString SysStringLen SysAllocStringLen VariantClear SysFreeString VarUI4FromStr

kernel32

IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetConsoleCP GetFullPathNameW GetFullPathNameA SetStdHandle FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetEndOfFile AreFileApisANSI HeapCreate InterlockedCompareExchange GetDiskFreeSpaceW LockFile UnlockFileEx GetTempPathW UnmapViewOfFile HeapValidate GetTempPathA GetDiskFreeSpaceA GetFileAttributesA GetVersionExA ExitProcess SystemTimeToFileTime DosDateTimeToFileTime UnhandledExceptionFilter SetUnhandledExceptionFilter CreateThread GetThreadTimes FreeLibraryAndExitThread UnlockFile LockFileEx GetSystemTime IsBadReadPtr CreateFileMappingW MapViewOfFile ExpandEnvironmentStringsW ReadConsoleW GetConsoleMode GetFileAttributesExW GetTimeZoneInformation WriteConsoleW SetFilePointerEx SystemTimeToTzSpecificLocalTime GetDriveTypeW GetModuleHandleExW ExitThread RtlUnwind LoadLibraryExA VirtualFree VirtualAlloc IsProcessorFeaturePresent FlushInstructionCache InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead IsDebuggerPresent GetCPInfo GetLocaleInfoW LCMapStringW CompareStringW HeapFree InitializeCriticalSectionAndSpinCount HeapSize GetLastError HeapReAlloc RaiseException HeapAlloc DecodePointer HeapDestroy DeleteCriticalSection GetProcessHeap SizeofResource EnterCriticalSection InterlockedDecrement GetModuleFileNameW LeaveCriticalSection CreateMutexW GetFileAttributesW ReleaseMutex FreeResource MultiByteToWideChar LockResource GlobalAlloc DeleteFileW CloseHandle LoadResource FindResourceW GetProcAddress GlobalLock GetModuleHandleW FreeLibrary InterlockedIncrement lstrcmpiW GlobalUnlock LoadLibraryExW lstrcmpW IsBadWritePtr SetLastError ReleaseSemaphore InitializeCriticalSection WaitForSingleObject GetCurrentThreadId CreateSemaphoreW WideCharToMultiByte MulDiv LocalFree CreateFileW LoadLibraryW GetLocalTime GetCurrentDirectoryW GetFileSize GetStartupInfoW ReadFile GetCommandLineW GetCurrentProcess OutputDebugStringA TerminateProcess Sleep SetFileTime FileTimeToSystemTime WriteFile SetFilePointer OutputDebugStringW CreateFileA DeleteFileA FlushFileBuffers LoadLibraryA GetCurrentProcessId GetSystemDirectoryW GetSystemInfo SleepEx GetTickCount FormatMessageA WaitForMultipleObjects GetFileType GetStdHandle PeekNamedPipe ExpandEnvironmentStringsA SetEvent ResetEvent WaitNamedPipeA GetPrivateProfileStringW CreateDirectoryW GetSystemTimeAsFileTime FormatMessageW GetStringTypeW DuplicateHandle WaitForSingleObjectEx GetCurrentThread EncodePointer QueryPerformanceCounter CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetACP

advapi32

RegDeleteValueW RegOpenKeyExW RegSetValueExW RegEnumKeyExW RegCreateKeyExW RegDeleteKeyW RegQueryInfoKeyW RegCloseKey RegQueryValueExW

shell32

SHGetFolderPathW SHCreateDirectoryExW SHGetSpecialFolderPathW CommandLineToArgvW SHAppBarMessage ShellExecuteW

shlwapi

PathAppendW PathCanonicalizeW PathAddBackslashW PathIsRelativeW

gdiplus

GdipGetImageHeight GdipCloneImage GdiplusShutdown GdiplusStartup GdipGetImageGraphicsContext GdipAlloc GdipDrawImageRectI GdipDisposeImage GdipFree GdipCreateFromHDC GdipDeleteGraphics GdipGetImageWidth GdipLoadImageFromStream GdipSetStringFormatAlign GdipSetSmoothingMode GdipSetPixelOffsetMode GdipSetTextRenderingHint GdipSetInterpolationMode GdipGraphicsClear GdipDrawImage GdipDeleteFontFamily GdipCreateFontFromDC GdipCreateFontFromLogfontA GdipDeleteFont GdipGetFamily GdipDrawString GdipCreateStringFormat GdipLoadImageFromFile GdipCreateBitmapFromScan0 GdipDeleteStringFormat GdipImageGetFrameDimensionsCount GdipImageGetFrameDimensionsList GdipImageGetFrameCount GdipImageSelectActiveFrame GdipGetPropertyItemSize GdipGetPropertyItem GdipCloneBrush GdipDeleteBrush GdipCreateLineBrushI GdipSetCompositingQuality GdipSetStringFormatLineAlign

gdi32

CreateSolidBrush DeleteObject GetObjectW DeleteDC GetDeviceCaps GetStockObject CreateCompatibleDC SelectObject CreateCompatibleBitmap BitBlt CreateDIBSection CreatePatternBrush SetBkMode SetTextColor CreateFontIndirectW CreatePen Rectangle RestoreDC SaveDC GetTextMetricsW SetWindowOrgEx GetObjectA CreateRoundRectRgn CombineRgn CreatePenIndirect CreateRectRgnIndirect GetCharABCWidthsW GetClipBox GetTextExtentPoint32W LineTo RoundRect SelectClipRgn ExtSelectClipRgn SetBkColor StretchBlt SetStretchBltMode MoveToEx TextOutW GdiFlush ExtTextOutW

imm32

ImmGetContext ImmReleaseContext ImmSetCompositionWindow ImmSetCompositionFontW

comctl32

_TrackMouseEvent ord17

??0CActiveXUI@DuiLib@@QAE@ABV01@@Z ??0CButtonUI@DuiLib@@QAE@$$QAV01@@Z ??0CButtonUI@DuiLib@@QAE@ABV01@@Z ??0CCheckBoxUI@DuiLib@@QAE@$$QAV01@@Z ??0CCheckBoxUI@DuiLib@@QAE@ABV01@@Z ??0CCheckBoxUI@DuiLib@@QAE@XZ ??0CChildLayoutUI@DuiLib@@QAE@$$QAV01@@Z ??0CChildLayoutUI@DuiLib@@QAE@ABV01@@Z ??0CComboUI@DuiLib@@QAE@$$QAV01@@Z ??0CComboUI@DuiLib@@QAE@ABV01@@Z ??0CContainerUI@DuiLib@@QAE@ABV01@@Z ??0CControlUI@DuiLib@@QAE@ABV01@@Z ??0CDateTimeUI@DuiLib@@QAE@$$QAV01@@Z ??0CDateTimeUI@DuiLib@@QAE@ABV01@@Z ??0CEditUI@DuiLib@@QAE@$$QAV01@@Z ??0CEditUI@DuiLib@@QAE@ABV01@@Z ??0CEventSource@DuiLib@@QAE@ABV01@@Z ??0CEventSource@DuiLib@@QAE@XZ ??0CGifAnimUI@DuiLib@@QAE@ABV01@@Z ??0CHorizontalLayoutUI@DuiLib@@QAE@$$QAV01@@Z ??0CHorizontalLayoutUI@DuiLib@@QAE@ABV01@@Z ??0CLabelUI@DuiLib@@QAE@ABV01@@Z ??0CListContainerElementUI@DuiLib@@QAE@$$QAV01@@Z ??0CListContainerElementUI@DuiLib@@QAE@ABV01@@Z ??0CListElementUI@DuiLib@@QAE@$$QAV01@@Z ??0CListElementUI@DuiLib@@QAE@ABV01@@Z ??0CListHBoxElementUI@DuiLib@@QAE@$$QAV01@@Z ??0CListHBoxElementUI@DuiLib@@QAE@ABV01@@Z ??0CListHeaderItemUI@DuiLib@@QAE@$$QAV01@@Z ??0CListHeaderItemUI@DuiLib@@QAE@ABV01@@Z ??0CListHeaderUI@DuiLib@@QAE@$$QAV01@@Z ??0CListHeaderUI@DuiLib@@QAE@ABV01@@Z ??0CListLabelElementUI@DuiLib@@QAE@$$QAV01@@Z ??0CListLabelElementUI@DuiLib@@QAE@ABV01@@Z ??0CListTextElementUI@DuiLib@@QAE@ABV01@@Z ??0CListUI@DuiLib@@QAE@$$QAV01@@Z ??0CListUI@DuiLib@@QAE@ABV01@@Z ??0CNotifyPump@DuiLib@@QAE@$$QAV01@@Z ??0CNotifyPump@DuiLib@@QAE@ABV01@@Z ??0CNotifyPump@DuiLib@@QAE@XZ ??0COptionUI@DuiLib@@QAE@ABV01@@Z ??0CPaintManagerUI@DuiLib@@QAE@ABV01@@Z ??0CProgressUI@DuiLib@@QAE@$$QAV01@@Z ??0CProgressUI@DuiLib@@QAE@ABV01@@Z ??0CRichEditUI@DuiLib@@QAE@ABV01@@Z ??0CScrollBarUI@DuiLib@@QAE@$$QAV01@@Z ??0CScrollBarUI@DuiLib@@QAE@ABV01@@Z ??0CSliderUI@DuiLib@@QAE@$$QAV01@@Z ??0CSliderUI@DuiLib@@QAE@ABV01@@Z ??0CTabLayoutUI@DuiLib@@QAE@$$QAV01@@Z ??0CTabLayoutUI@DuiLib@@QAE@ABV01@@Z ??0CTextUI@DuiLib@@QAE@ABV01@@Z ??0CTileLayoutUI@DuiLib@@QAE@$$QAV01@@Z ??0CTileLayoutUI@DuiLib@@QAE@ABV01@@Z ??0CTreeNodeUI@DuiLib@@QAE@ABV01@@Z ??0CTreeViewUI@DuiLib@@QAE@ABV01@@Z ??0CVerticalLayoutUI@DuiLib@@QAE@$$QAV01@@Z ??0CVerticalLayoutUI@DuiLib@@QAE@ABV01@@Z ??0CWebBrowserUI@DuiLib@@QAE@ABV01@@Z ??0CWindowWnd@DuiLib@@QAE@$$QAV01@@Z ??0CWindowWnd@DuiLib@@QAE@ABV01@@Z ??0CWndShadow@@QAE@ABV0@@Z ??0IMessageFilterUI@DuiLib@@QAE@$$QAV01@@Z ??0IMessageFilterUI@DuiLib@@QAE@ABV01@@Z ??0IMessageFilterUI@DuiLib@@QAE@XZ ??0INotifyUI@DuiLib@@QAE@$$QAV01@@Z ??0INotifyUI@DuiLib@@QAE@ABV01@@Z ??0INotifyUI@DuiLib@@QAE@XZ ??0ITranslateAccelerator@DuiLib@@QAE@$$QAV01@@Z ??0ITranslateAccelerator@DuiLib@@QAE@ABV01@@Z ??0ITranslateAccelerator@DuiLib@@QAE@XZ ??0WindowImplBase@DuiLib@@QAE@ABV01@@Z ??0WindowImplBase@DuiLib@@QAE@XZ ??0tagTDrawInfo@DuiLib@@QAE@$$QAU01@@Z ??0tagTDrawInfo@DuiLib@@QAE@ABU01@@Z ??0tagTFontInfo@DuiLib@@QAE@$$QAU01@@Z ??0tagTFontInfo@DuiLib@@QAE@ABU01@@Z ??0tagTFontInfo@DuiLib@@QAE@XZ ??0tagTImageInfo@DuiLib@@QAE@$$QAU01@@Z ??0tagTImageInfo@DuiLib@@QAE@ABU01@@Z ??0tagTImageInfo@DuiLib@@QAE@XZ ??0tagTResInfo@DuiLib@@QAE@$$QAU01@@Z ??0tagTResInfo@DuiLib@@QAE@ABU01@@Z ??0tagTResInfo@DuiLib@@QAE@XZ ??1CButtonUI@DuiLib@@UAE@XZ ??1CCheckBoxUI@DuiLib@@UAE@XZ ??1CChildLayoutUI@DuiLib@@UAE@XZ ??1CComboUI@DuiLib@@UAE@XZ ??1CDateTimeUI@DuiLib@@UAE@XZ ??1CDialogBuilder@DuiLib@@QAE@XZ ??1CEditUI@DuiLib@@UAE@XZ ??1CHorizontalLayoutUI@DuiLib@@UAE@XZ ??1CListContainerElementUI@DuiLib@@UAE@XZ ??1CListElementUI@DuiLib@@UAE@XZ ??1CListHBoxElementUI@DuiLib@@UAE@XZ ??1CListHeaderItemUI@DuiLib@@UAE@XZ ??1CListHeaderUI@DuiLib@@UAE@XZ ??1CListLabelElementUI@DuiLib@@UAE@XZ ??1CListUI@DuiLib@@UAE@XZ ??1CNotifyPump@DuiLib@@QAE@XZ ??1CProgressUI@DuiLib@@UAE@XZ ??1CScrollBarUI@DuiLib@@UAE@XZ ??1CSliderUI@DuiLib@@UAE@XZ ??1CTabLayoutUI@DuiLib@@UAE@XZ ??1CTileLayoutUI@DuiLib@@UAE@XZ ??1CVerticalLayoutUI@DuiLib@@UAE@XZ ??1WindowImplBase@DuiLib@@UAE@XZ ??1tagTDrawInfo@DuiLib@@QAE@XZ ??1tagTFontInfo@DuiLib@@QAE@XZ ??1tagTImageInfo@DuiLib@@QAE@XZ ??1tagTResInfo@DuiLib@@QAE@XZ ??4CActiveXUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CButtonUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CButtonUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CCheckBoxUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CCheckBoxUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CChildLayoutUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CChildLayoutUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CComboUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CComboUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CContainerUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CControlUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CDateTimeUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CDateTimeUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CDelegateBase@DuiLib@@QAEAAV01@ABV01@@Z ??4CDialogBuilder@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CDialogBuilder@DuiLib@@QAEAAV01@ABV01@@Z ??4CDuiPoint@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CDuiPoint@DuiLib@@QAEAAV01@ABV01@@Z ??4CDuiPtrArray@DuiLib@@QAEAAV01@ABV01@@Z ??4CDuiRect@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CDuiRect@DuiLib@@QAEAAV01@ABV01@@Z ??4CDuiSize@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CDuiSize@DuiLib@@QAEAAV01@ABV01@@Z ??4CDuiStringPtrMap@DuiLib@@QAEAAV01@ABV01@@Z ??4CDuiValArray@DuiLib@@QAEAAV01@ABV01@@Z ??4CEditUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CEditUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CEventSource@DuiLib@@QAEAAV01@ABV01@@Z ??4CGifAnimUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CHorizontalLayoutUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CHorizontalLayoutUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CLabelUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CListContainerElementUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CListContainerElementUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CListElementUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CListElementUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CListHBoxElementUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CListHBoxElementUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CListHeaderItemUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CListHeaderItemUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CListHeaderUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CListHeaderUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CListLabelElementUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CListLabelElementUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CListTextElementUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CListUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CListUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CMarkup@DuiLib@@QAEAAV01@ABV01@@Z ??4CMarkupNode@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CMarkupNode@DuiLib@@QAEAAV01@ABV01@@Z ??4CNotifyPump@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CNotifyPump@DuiLib@@QAEAAV01@ABV01@@Z ??4COptionUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CPaintManagerUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CProgressUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CProgressUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CRenderClip@DuiLib@@QAEAAV01@ABV01@@Z ??4CRenderEngine@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CRenderEngine@DuiLib@@QAEAAV01@ABV01@@Z ??4CRichEditUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CScrollBarUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CScrollBarUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CSliderUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CSliderUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CTabLayoutUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CTabLayoutUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CTextUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CTileLayoutUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CTileLayoutUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CTreeNodeUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CTreeViewUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CVerticalLayoutUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CVerticalLayoutUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CWaitCursor@DuiLib@@QAEAAV01@ABV01@@Z ??4CWebBrowserUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CWindowWnd@DuiLib@@QAEAAV01@$$QAV01@@Z ??4CWindowWnd@DuiLib@@QAEAAV01@ABV01@@Z ??4CWndShadow@@QAEAAV0@ABV0@@Z ??4IMessageFilterUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4IMessageFilterUI@DuiLib@@QAEAAV01@ABV01@@Z ??4INotifyUI@DuiLib@@QAEAAV01@$$QAV01@@Z ??4INotifyUI@DuiLib@@QAEAAV01@ABV01@@Z ??4ITranslateAccelerator@DuiLib@@QAEAAV01@$$QAV01@@Z ??4ITranslateAccelerator@DuiLib@@QAEAAV01@ABV01@@Z ??4STRINGorID@DuiLib@@QAEAAV01@$$QAV01@@Z ??4STRINGorID@DuiLib@@QAEAAV01@ABV01@@Z ??4WindowImplBase@DuiLib@@QAEAAV01@ABV01@@Z ??4tagTDrawInfo@DuiLib@@QAEAAU01@$$QAU01@@Z ??4tagTDrawInfo@DuiLib@@QAEAAU01@ABU01@@Z ??4tagTEventUI@DuiLib@@QAEAAU01@$$QAU01@@Z ??4tagTEventUI@DuiLib@@QAEAAU01@ABU01@@Z ??4tagTFontInfo@DuiLib@@QAEAAU01@$$QAU01@@Z ??4tagTFontInfo@DuiLib@@QAEAAU01@ABU01@@Z ??4tagTImageInfo@DuiLib@@QAEAAU01@$$QAU01@@Z ??4tagTImageInfo@DuiLib@@QAEAAU01@ABU01@@Z ??4tagTPercentInfo@DuiLib@@QAEAAU01@$$QAU01@@Z ??4tagTPercentInfo@DuiLib@@QAEAAU01@ABU01@@Z ??4tagTResInfo@DuiLib@@QAEAAU01@$$QAU01@@Z ??4tagTResInfo@DuiLib@@QAEAAU01@ABU01@@Z ??_7CActiveXUI@DuiLib@@6BCControlUI@1@@ ??_7CActiveXUI@DuiLib@@6BIMessageFilterUI@1@@ ??_7CButtonUI@DuiLib@@6B@ ??_7CCheckBoxUI@DuiLib@@6B@ ??_7CChildLayoutUI@DuiLib@@6BCControlUI@1@@ ??_7CChildLayoutUI@DuiLib@@6BIContainerUI@1@@ ??_7CComboUI@DuiLib@@6B@ ??_7CComboUI@DuiLib@@6BCControlUI@1@@ ??_7CComboUI@DuiLib@@6BIContainerUI@1@@ ??_7CContainerUI@DuiLib@@6BCControlUI@1@@ ??_7CContainerUI@DuiLib@@6BIContainerUI@1@@ ??_7CControlUI@DuiLib@@6B@ ??_7CDateTimeUI@DuiLib@@6B@ ??_7CEditUI@DuiLib@@6B@ ??_7CGifAnimUI@DuiLib@@6BCControlUI@1@@ ??_7CGifAnimUI@DuiLib@@6BIContainerUI@1@@ ??_7CHorizontalLayoutUI@DuiLib@@6BCControlUI@1@@ ??_7CHorizontalLayoutUI@DuiLib@@6BIContainerUI@1@@ ??_7CLabelUI@DuiLib@@6B@ ??_7CListContainerElementUI@DuiLib@@6B@ ??_7CListContainerElementUI@DuiLib@@6BCControlUI@1@@ ??_7CListContainerElementUI@DuiLib@@6BIContainerUI@1@@ ??_7CListElementUI@DuiLib@@6BCControlUI@1@@ ??_7CListElementUI@DuiLib@@6BIListItemUI@1@@ ??_7CListHBoxElementUI@DuiLib@@6B@ ??_7CListHBoxElementUI@DuiLib@@6BCControlUI@1@@ ??_7CListHBoxElementUI@DuiLib@@6BIContainerUI@1@@ ??_7CListHeaderItemUI@DuiLib@@6B@ ??_7CListHeaderUI@DuiLib@@6BCControlUI@1@@ ??_7CListHeaderUI@DuiLib@@6BIContainerUI@1@@ ??_7CListLabelElementUI@DuiLib@@6BCControlUI@1@@ ??_7CListLabelElementUI@DuiLib@@6BIListItemUI@1@@ ??_7CListTextElementUI@DuiLib@@6BCControlUI@1@@ ??_7CListTextElementUI@DuiLib@@6BIListItemUI@1@@ ??_7CListUI@DuiLib@@6B@ ??_7CListUI@DuiLib@@6BCControlUI@1@@ ??_7CListUI@DuiLib@@6BIContainerUI@1@@ ??_7CNotifyPump@DuiLib@@6B@ ??_7COptionUI@DuiLib@@6B@ ??_7CProgressUI@DuiLib@@6B@ ??_7CRichEditUI@DuiLib@@6B@ ??_7CRichEditUI@DuiLib@@6BCControlUI@1@@ ??_7CRichEditUI@DuiLib@@6BIContainerUI@1@@ ??_7CScrollBarUI@DuiLib@@6B@ ??_7CSliderUI@DuiLib@@6B@ ??_7CTabLayoutUI@DuiLib@@6BCControlUI@1@@ ??_7CTabLayoutUI@DuiLib@@6BIContainerUI@1@@ ??_7CTextUI@DuiLib@@6B@ ??_7CTileLayoutUI@DuiLib@@6BCControlUI@1@@ ??_7CTileLayoutUI@DuiLib@@6BIContainerUI@1@@ ??_7CTreeNodeUI@DuiLib@@6B@ ??_7CTreeNodeUI@DuiLib@@6BCControlUI@1@@ ??_7CTreeNodeUI@DuiLib@@6BIContainerUI@1@@ ??_7CTreeViewUI@DuiLib@@6BCControlUI@1@@ ??_7CTreeViewUI@DuiLib@@6BCListUI@1@@ ??_7CTreeViewUI@DuiLib@@6BIContainerUI@1@@ ??_7CTreeViewUI@DuiLib@@6BINotifyUI@1@@ ??_7CVerticalLayoutUI@DuiLib@@6BCControlUI@1@@ ??_7CVerticalLayoutUI@DuiLib@@6BIContainerUI@1@@ ??_7CWebBrowserUI@DuiLib@@6BCControlUI@1@@ ??_7CWebBrowserUI@DuiLib@@6BIDispatch@@@ ??_7CWebBrowserUI@DuiLib@@6BIDocHostUIHandler@@@ ??_7CWebBrowserUI@DuiLib@@6BIMessageFilterUI@1@@ ??_7CWebBrowserUI@DuiLib@@6BIOleCommandTarget@@@ ??_7CWebBrowserUI@DuiLib@@6BIServiceProvider@@@ ??_7CWebBrowserUI@DuiLib@@6BITranslateAccelerator@1@@ ??_7CWindowWnd@DuiLib@@6B@ ??_7CWndShadow@@6B@ ??_7IMessageFilterUI@DuiLib@@6B@ ??_7INotifyUI@DuiLib@@6B@ ??_7ITranslateAccelerator@DuiLib@@6B@ ??_7WindowImplBase@DuiLib@@6BCNotifyPump@1@@ ??_7WindowImplBase@DuiLib@@6BCWindowWnd@1@@ ??_7WindowImplBase@DuiLib@@6BIDialogBuilderCallback@1@@ ??_7WindowImplBase@DuiLib@@6BIMessageFilterUI@1@@ ??_7WindowImplBase@DuiLib@@6BINotifyUI@1@@ ??_FCDuiPtrArray@DuiLib@@QAEXXZ ??_FCDuiStringPtrMap@DuiLib@@QAEXXZ ??_FCMarkup@DuiLib@@QAEXXZ ??_FCTreeNodeUI@DuiLib@@QAEXXZ ?GetCheckBox@CTreeNodeUI@DuiLib@@QBEPAVCCheckBoxUI@2@XZ ?GetDottedLine@CTreeNodeUI@DuiLib@@QBEPAVCLabelUI@2@XZ ?GetFolderButton@CTreeNodeUI@DuiLib@@QBEPAVCCheckBoxUI@2@XZ ?GetItemButton@CTreeNodeUI@DuiLib@@QBEPAVCOptionUI@2@XZ ?GetTreeNodeHoriznotal@CTreeNodeUI@DuiLib@@QBEPAVCHorizontalLayoutUI@2@XZ ?InitWindow@WindowImplBase@DuiLib@@UAEXXZ ?PreMultiply@CWndShadow@@IAEKKE@Z ?__autoclassinit2@CActiveXUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CButtonUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CCheckBoxUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CChildLayoutUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CComboUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CContainerUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CControlUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CDateTimeUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CDelegateBase@DuiLib@@QAEXI@Z ?__autoclassinit2@CDialogBuilder@DuiLib@@QAEXI@Z ?__autoclassinit2@CDuiPtrArray@DuiLib@@QAEXI@Z ?__autoclassinit2@CDuiString@DuiLib@@QAEXI@Z ?__autoclassinit2@CDuiStringPtrMap@DuiLib@@QAEXI@Z ?__autoclassinit2@CDuiValArray@DuiLib@@QAEXI@Z ?__autoclassinit2@CEditUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CEventSource@DuiLib@@QAEXI@Z ?__autoclassinit2@CGifAnimUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CHorizontalLayoutUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CLabelUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CListContainerElementUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CListElementUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CListHBoxElementUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CListHeaderItemUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CListHeaderUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CListLabelElementUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CListTextElementUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CListUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CMarkup@DuiLib@@QAEXI@Z ?__autoclassinit2@CMarkupNode@DuiLib@@QAEXI@Z ?__autoclassinit2@CNotifyPump@DuiLib@@QAEXI@Z ?__autoclassinit2@COptionUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CPaintManagerUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CProgressUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CRenderClip@DuiLib@@QAEXI@Z ?__autoclassinit2@CRichEditUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CScrollBarUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CSliderUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CTabLayoutUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CTextUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CTileLayoutUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CTreeNodeUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CTreeViewUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CVerticalLayoutUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CWaitCursor@DuiLib@@QAEXI@Z ?__autoclassinit2@CWebBrowserUI@DuiLib@@QAEXI@Z ?__autoclassinit2@CWindowWnd@DuiLib@@QAEXI@Z ?__autoclassinit2@CWndShadow@@QAEXI@Z ?__autoclassinit2@STRINGorID@DuiLib@@QAEXI@Z ?__autoclassinit2@WindowImplBase@DuiLib@@QAEXI@Z

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

267KB

Virtual Size

267KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

31KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

1024B

Virtual Size

912B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

50KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

59KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=21, id=241, version=40116,

count=182, id=243, version=40116,

count=31, id=242, version=40116,

count=9, id=199, version=41118,

count=28, id=259, version=24123,

count=1, id=260, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=35, id=261, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=3, id=261, version=23013,

count=129, id=261, version=24123,

count=39, id=260, version=24123,

count=13, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=67, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,

count=551, id=1, productName=Unmarked objects,

count=35, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=49, id=265, version=24210,

count=1, id=256, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,

count=1, id=151,

count=1, id=258, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

RaAPAPI.dll

IMPHASH 0b343d327ffb1b702baef11212559baa
SHA256 143f65205ffcbdffac4b2db38f0e25f24ee6c1efef229996a546939a243449a9
MD5 1e5982a66a650673478c66e68f0c03b3
SHA1 9767e970d9ef3b9968a6573f3c5a0932cb1a2a25
SHA512 30a8704832c4dd8c97b457188acba14ff9a1c0f40d4f5f2bd0d3baf61c074c04954dd526e7de5c05703e252cc93b8ac1a29914c28b1820d6c1496297a597e72b
SSDEEP 12288:VmR92r4ShHxzIrJTWxYgTGtUHXF0cNSNJmWgUWD3H7ugTZE:Vmf2rHHxOJWBSNJmWfU77TZE
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

6b:f5:14:fe:62:8f:1f:80:80:5d:ce:53:15:f7:fb:c7:d6:c9:a0:68:b3:9d:c8:7d:f7:2a:8b:84:cb:c5:c7:15

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

PE Signature issue

Digest

4d:00:1f:fd:82:00:21:3a:aa:7e:ac:25:cd:7a:9d:09:2a:aa:76:d6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

4

Entry point

605199

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP IMAGE_FILE_DLL

PDB paths

e:\WCN_AUTO\workspace\AR_WCN-Wi_Fi_Application_RaAPAPI\206\codebase\Release\RaAPAPI.pdb

setupapi

SetupDiOpenDevRegKey CM_Get_DevNode_Status_Ex SetupDiClassGuidsFromNameA SetupDiGetClassDevsA SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList SetupDiGetDeviceRegistryPropertyA

iphlpapi

GetAdaptersAddresses GetAdaptersInfo

rpcrt4

RpcStringBindingComposeA RpcBindingFromStringBindingA RpcBindingSetAuthInfoA RpcMgmtIsServerListening RpcBindingFree RpcStringFreeA UuidToStringA NdrClientCall2

ole32

CoTaskMemFree StringFromIID CoCreateInstance CoUninitialize CoInitializeEx StringFromGUID2 CoInitialize CoTaskMemAlloc CoTaskMemRealloc SetConvertStg WriteFmtUserTypeStg WriteClassStg OleRegGetUserType ReadFmtUserTypeStg ReadClassStg StringFromCLSID CoTreatAsClass CreateBindCtx ReleaseStgMedium OleDuplicateData CoDisconnectObject CLSIDFromString

kernel32

SetFilePointer FlushFileBuffers LockFile UnlockFile SetEndOfFile GetFileSize GetThreadLocale DuplicateHandle GetVolumeInformationA GetFullPathNameA GetShortPathNameA GlobalDeleteAtom lstrcmpA GetLocaleInfoA EnumResourceLanguagesA ConvertDefaultLocale GetCurrentThread GlobalAddAtomA GetCurrentProcessId GetModuleFileNameW TlsGetValue GlobalReAlloc TlsAlloc TlsSetValue LocalReAlloc TlsFree SetErrorMode GlobalGetAtomNameA GetAtomNameA FileTimeToSystemTime SystemTimeToFileTime lstrcmpW GlobalFindAtomA SuspendThread FileTimeToLocalFileTime LocalFileTimeToFileTime SetFileTime SetFileAttributesA GetFileAttributesA GetFileTime GetCurrentDirectoryA GlobalFlags GetCPInfo GetOEMCP HeapFree HeapAlloc GetSystemTimeAsFileTime RtlUnwind TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc GetCommandLineA GetProcessHeap ExitThread ExitProcess HeapSize GetACP LCMapStringA LCMapStringW HeapDestroy HeapCreate VirtualFree FatalAppExitA GetStdHandle SetHandleCount GetFileType FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount SetConsoleCtrlHandler GetTimeZoneInformation GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage GetConsoleCP GetConsoleMode SetStdHandle WriteFile WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA GetCurrentThreadId ResumeThread SetThreadPriority CopyFileA GlobalSize FormatMessageA MulDiv CreatePipe GetStartupInfoA ReadFile LocalAlloc LocalFree GetStringTypeExW GetStringTypeExA GetEnvironmentVariableW GetEnvironmentVariableA lstrcmpiW CompareStringW CompareStringA GetVersion InterlockedExchange LoadLibraryExA IsDBCSLeadByte lstrcmpiA InterlockedIncrement DeleteCriticalSection RaiseException GlobalHandle GlobalUnlock GlobalAlloc GlobalLock GlobalFree CreateProcessA InitializeCriticalSection EnterCriticalSection LeaveCriticalSection SetEvent OpenMutexA OpenEventA CreateEventA InterlockedDecrement FreeLibrary LoadLibraryA WritePrivateProfileStringA CreateDirectoryA WinExec CreateThread GetExitCodeThread MultiByteToWideChar lstrlenW GetPrivateProfileSectionNamesA CreateToolhelp32Snapshot Process32First Process32Next GetPrivateProfileIntA UnmapViewOfFile OpenFileMappingA CreateMutexA CreateFileMappingA MapViewOfFile WaitForSingleObject ResetEvent ReleaseMutex OutputDebugStringA SetLastError GetCurrentProcess FindFirstFileA FindClose GetModuleHandleA GetVersionExA Sleep GetProcAddress FindResourceA LoadResource LockResource SizeofResource WideCharToMultiByte DeviceIoControl GetLastError GetWindowsDirectoryA lstrcatA CreateFileA CloseHandle GetModuleFileNameA lstrcpyA lstrlenA GetPrivateProfileStringA DeleteFileA GetLocaleInfoW MoveFileA FreeResource

user32

DrawTextExA DrawTextA TabbedTextOutA FillRect GetDesktopWindow ClientToScreen DeleteMenu ScrollWindowEx ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton RegisterWindowMessageA LoadIconA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA IsWindow SetFocus GetForegroundWindow SetActiveWindow BeginDeferWindowPos EndDeferWindowPos GetDlgItem GetTopWindow DestroyWindow GetMessageTime GetMessagePos MapWindowPoints ScrollWindow TrackPopupMenuEx TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar UpdateWindow GrayStringA GetMenu CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos CopyRect GetScrollInfo SetScrollInfo PtInRect SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA SetWindowPos OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect GetWindow GetWindowTextLengthA GetWindowTextA LoadCursorA GetDC ReleaseDC GetSysColor GetSysColorBrush UnregisterClassA GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled EnableWindow ShowOwnedPopups SetCursor SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus GetParent ModifyMenuA EnableMenuItem CheckMenuItem PostQuitMessage SetWindowsHookExA CallNextHookEx GetActiveWindow GetWindowDC BeginPaint EndPaint DestroyIcon InflateRect GetMenuItemInfoA DestroyMenu EndDialog GetNextDlgTabItem CreateDialogIndirectParamA GetDialogBaseUnits GetClientRect IsWindowVisible SendMessageA GetKeyState PeekMessageA GetCursorPos ValidateRect GetMenuState GetMenuStringA AppendMenuA GetMenuItemID InsertMenuA GetMenuItemCount GetSubMenu RemoveMenu MessageBoxA ExitWindowsEx CharUpperW CharUpperA CharLowerW CharLowerA CharNextA PostMessageA PostThreadMessageA GetMessageA TranslateMessage DispatchMessageA wvsprintfA GetSystemMetrics wsprintfA UnhookWindowsHookEx

gdi32

PlayMetaFile CreatePen ExtCreatePen CreateSolidBrush CreateHatchBrush CreateFontIndirectA GetTextExtentPoint32A EnumMetaFile SetRectRgn PlayMetaFileRecord GetMapMode PatBlt DPtoLP GetTextMetricsA CreateRectRgnIndirect GetObjectType DeleteDC ExtSelectClipRgn PolyBezierTo PolylineTo SelectPalette SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode ModifyWorldTransform SetWorldTransform SetGraphicsMode SetStretchBltMode PolyDraw SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC DeleteObject GetObjectA GetStockObject CreateCompatibleDC CreatePatternBrush SetBkColor SetTextColor GetClipBox GetDCOrgEx CreateBitmap GetDeviceCaps CopyMetaFileA CombineRgn CreateDCA ArcTo GetCurrentPositionEx ScaleWindowExtEx SetWindowExtEx OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible StartDocA GetPixel BitBlt GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra CreateDIBPatternBrushPt

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueA RegOpenKeyA RegSetValueA LookupPrivilegeValueA AdjustTokenPrivileges QueryServiceConfigA RegEnumKeyExA RegQueryInfoKeyA RegSetValueExA RegDeleteKeyA RegDeleteValueA RegCreateKeyExA ConvertStringSecurityDescriptorToSecurityDescriptorA RegEnumValueA ControlService StartServiceA ChangeServiceConfigA OpenSCManagerA OpenServiceA CloseServiceHandle QueryServiceStatus AllocateAndInitializeSid OpenProcessToken GetTokenInformation EqualSid FreeSid RegEnumKeyA RegQueryValueExA RegOpenKeyExA RegCloseKey RegCreateKeyA

shell32

SHGetFolderPathA SHGetFileInfoA ExtractIconA ShellExecuteExA

shlwapi

SHCopyKeyA PathIsUNCA PathFindExtensionA PathRemoveExtensionA SHDeleteKeyA PathStripToRootA PathFindFileNameA

oleaut32

SafeArrayDestroyDescriptor SafeArrayDestroyData SafeArrayDestroy SafeArrayUnlock SysStringLen SysFreeString VarBstrCat SysAllocStringLen SysAllocString SysAllocStringByteLen SysStringByteLen VarUI4FromStr VariantClear GetErrorInfo VariantChangeType VariantInit SetErrorInfo CreateErrorInfo SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement VariantTimeToSystemTime SystemTimeToVariantTime SysReAllocStringLen VarDateFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromDate SafeArrayLock

ws2_32

WSACreateEvent WSANSPIoctl WSAWaitForMultipleEvents WSAResetEvent WSAStartup WSALookupServiceBeginA WSALookupServiceNextA WSALookupServiceEnd WSACleanup htonl inet_addr WSAAddressToStringA WSAGetLastError

MTK_AP_AutoSelectAdapter MTK_AP_GetAllStationsTraffic MTK_AP_GetNatSetting MTK_AP_GetSelectedAdapter MTK_AP_GetWanLanAdapter MTK_AP_Init MTK_AP_OutPutUIWppLog MTK_AP_ReStart MTK_AP_RegisterPacketReadCallBack MTK_AP_RegisterPrintLogCallBack MTK_AP_RegisterSoftAPCallBack MTK_AP_RegisterStaConnectCallBack MTK_AP_Run MTK_AP_SetAPSetting MTK_AP_SetLedMode MTK_AP_Stop MTK_AP_UnInit MTK_AP_UnRegisterPacketReadCallBack MTK_AP_WritePacket MTK_AP_WriteStaAccessInternetFlag MTK_Sys_Repair MTK_Sys_RestartAllServices MTK_Sys_Scan RAAP_AdapterSelect RAAP_ChannelToFrequency RAAP_CheckAllowBW40ForBand RAAP_CheckAllowBW80ForBand RAAP_CheckIEEE80211H RAAP_ConvertMACStrToByte RAAP_ConvertRssiToSignalQuality RAAP_CreateShortCut RAAP_DeInitial RAAP_DeleteVistaWindowsProfile RAAP_DetectMoreThanOneProcess RAAP_DetectUserAdmin RAAP_DevEnable RAAP_DisableDhcpServer RAAP_DisableICS RAAP_DisableXpZeroConfigFlag RAAP_EnableDhcpServer RAAP_EnableICS RAAP_EnableXpZeroConfigFlag RAAP_FrequencyToChannel RAAP_GetAPDefault RAAP_GetAdaptersInfo RAAP_GetAvailableAdapters RAAP_GetCountryChannel RAAP_GetCurrentDeviceModel RAAP_GetDriverName RAAP_GetDriverPath RAAP_GetEEPROMVer RAAP_GetFirmwareVer RAAP_GetMacAddrs RAAP_GetNetConfig RAAP_GetSideBandParaFromE2PROM_BG RAAP_GetWinOS RAAP_HostedNetworkSetup RAAP_IPDataToStr RAAP_InitAPSettings RAAP_Initial RAAP_Is80211ACSupport RAAP_Is80211ASupport RAAP_Is80211NSupport RAAP_IsConnectToEthernet RAAP_IsDeviceExist RAAP_IsEnableICS RAAP_IsFileExist RAAP_IsWow64 RAAP_IsZeroConfig RAAP_OIDQueryInfo RAAP_OIDSetInfo RAAP_Query80211CONFIGURATION RAAP_QueryAIRONETIP RAAP_QueryAntennaNumber RAAP_QueryApWLANStatus RAAP_QueryAuthMode RAAP_QueryBACap RAAP_QueryBATable RAAP_QueryCountryRegion RAAP_QueryDevStatus RAAP_QueryEventTable RAAP_QueryHTStatus RAAP_QueryHWArchitectureVer RAAP_QueryHWReg RAAP_QueryInitialState RAAP_QueryMacTable RAAP_QueryMacTableNOT_11N RAAP_QueryOPMode RAAP_QueryRxAgcVgcTuning RAAP_QuerySTAConfig RAAP_QuerySWRadioState RAAP_QuerySignalStrength RAAP_QueryZeroConfigFlagFromReg RAAP_RaGetRegValue RAAP_ReadAccessList RAAP_ReadAccessPolicy RAAP_ReadAuthMode RAAP_ReadBACap RAAP_ReadChannelMode RAAP_ReadConfigData RAAP_ReadExtAPConfig RAAP_ReadRegValue RAAP_ReadVHTPhyMode RAAP_ResetStatisticsCounter RAAP_RestoreStationSetting RAAP_Set80211ACL RAAP_SetAuthSecuKey RAAP_SetBACap RAAP_SetConfigData RAAP_SetFirewall RAAP_SetGENMICERROR RAAP_SetHWReg RAAP_SetHideSsid RAAP_SetIMMEBA RAAP_SetOPMode RAAP_SetRxAgcVgcTuning RAAP_SetVistaWindowsProfile RAAP_StartXpZeroConfig RAAP_StopXpZeroConfig RAAP_StrToIPData RAAP_WlanDeleteAllRalinkWindowsProfiles RAAP_WriteAccessList RAAP_WriteAccessPolicy RAAP_WriteBACap RAAP_WriteExtAPConfig RAAP_WriteRegValue RAAP_WriteVHTPhyMode RAAP_WriteandSetConfigData

Repair_WiFi.exe

IMPHASH e65886a5ba6311201b8f0bdd8d2b1115
SHA256 ada7fece9f83562f7956f2e860e49b0bf8b5596c39321065c2ad63ddc54177ae
MD5 ae62403c898c44968ade7bb2309d87b9
SHA1 65aeb683f2e7cc528ce0f2ddfc410e543aa02d9f
SHA512 b0c11157e649880c3770d6a921392549070741812e12ccd9c7bcd6ea59b6a116aeea4e7a56821089782f48894536b069d3e9fdc11d82ae468170f7fdec5394dc
SSDEEP 24576:T/5USJDq1wMwRhO8EK6fZrCjvVyXFK9D7qGB4XMA+cCc1ITU65vQjAMAvkLN:TLulM8jK6fWvVmoDIMVUITU6egvkLN
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

65:6b:09:a7:db:7d:b3:23:5f:73:e2:0a:82:af:63:8d:94:43:da:b5:3d:76:73:dd:87:ad:a3:a5:84:1b:6b:1b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

PE Signature issue

Digest

b8:9d:fe:32:4a:ec:c2:05:e1:ce:a6:d1:11:7a:96:3d:e4:de:ba:63

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

1

Major OS version

5

Entry point

1006721

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\SVN\Wifi360\branches\201405131202\WiFiProject\Release\Repair_WiFi.pdb

winmm

timeEndPeriod timeBeginPeriod timeGetDevCaps timeKillEvent timeSetEvent timeGetTime

gdi32

CreateSolidBrush DeleteDC DeleteObject GetStockObject Rectangle RestoreDC SaveDC SelectObject GetTextMetricsW GetObjectW SetWindowOrgEx CreateRoundRectRgn CreatePen SetPixel CombineRgn CreateRectRgn PtInRegion CreatePenIndirect CreateRectRgnIndirect GetCharABCWidthsW GetClipBox GetTextExtentPoint32W LineTo RoundRect SelectClipRgn ExtSelectClipRgn SetBkColor SetBkMode StretchBlt SetStretchBltMode SetTextColor CreateDIBSection MoveToEx TextOutW ExtTextOutW GetDeviceCaps GetObjectA CreateFontIndirectW CreateCompatibleDC CreateCompatibleBitmap BitBlt GetPixel

ws2_32

accept ioctlsocket WSAStartup WSACleanup WSAGetLastError recv send bind closesocket connect getpeername getsockname getsockopt htons ntohs setsockopt socket WSASetLastError getaddrinfo freeaddrinfo __WSAFDIsSet select listen recvfrom sendto gethostname

wldap32

ord22 ord26 ord27 ord32 ord33 ord35 ord30 ord200 ord301 ord41 ord50 ord60 ord211 ord46 ord143 ord79

user32

ShowCaret HideCaret CreateCaret SetRect DrawTextW CharPrevW IntersectRect FillRect SetWindowRgn IsZoomed GetMonitorInfoW MonitorFromWindow GetPropW SetPropW EnableWindow ShowWindow GetClassInfoExW RegisterClassExW RegisterClassW CallWindowProcW DefWindowProcW LoadIconW LoadCursorW OffsetRect InflateRect SetCursor wvsprintfW GetWindow GetParent SetWindowLongW CreateAcceleratorTableW PtInRect IsRectEmpty SetCaretPos ScreenToClient GetCursorPos GetClientRect InvalidateRect GetUpdateRect EndPaint BeginPaint ReleaseDC GetDC MapWindowPoints SetTimer ReleaseCapture SetCapture GetKeyState GetFocus SetFocus CharNextW IsIconic SetWindowPos DestroyWindow IsWindow CreateWindowExW PostMessageW DispatchMessageW TranslateMessage GetMessageW GetWindowRect GetSystemMetrics wsprintfW MessageBoxW SendMessageW GetCaretPos ClientToScreen GetSysColor SetWindowTextW GetWindowTextW InvalidateRgn GetWindowTextLengthW MoveWindow GetWindowLongW KillTimer

ole32

CoUninitialize CoCreateInstance CoInitializeSecurity CoInitializeEx CLSIDFromString CLSIDFromProgID OleLockRunning CoInitialize

oleaut32

SysFreeString SysAllocString VariantInit VariantClear

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueA

kernel32

ReadConsoleW GetConsoleMode SetFilePointerEx FreeLibraryAndExitThread ExitThread GetDriveTypeW GetModuleHandleExW LoadLibraryExW RtlUnwind SystemTimeToTzSpecificLocalTime IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetTimeZoneInformation GetConsoleCP SetStdHandle FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA CreateFileW IsDebuggerPresent InitializeSListHead GetCurrentThreadId IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter WaitForSingleObjectEx ResetEvent SetEvent GetLocaleInfoW LCMapStringW CompareStringW TlsFree TlsSetValue TlsGetValue TlsAlloc GetCPInfo EncodePointer GetStringTypeW ExpandEnvironmentStringsA PeekNamedPipe GetStdHandle WaitForMultipleObjects SleepEx SetLastError InterlockedDecrement InterlockedIncrement CreateDirectoryW DosDateTimeToFileTime DuplicateHandle GetFileType MulDiv ExitProcess GetACP FileTimeToSystemTime SetFileTime GetTickCount QueryPerformanceCounter MapViewOfFile CreateFileMappingW IsBadReadPtr FormatMessageA GetSystemTime GetSystemTimeAsFileTime SystemTimeToFileTime GetCurrentProcessId LockFileEx LocalFree UnlockFile LoadLibraryW GetVersionExA GetFileAttributesExW GetFileAttributesA GetDiskFreeSpaceA FormatMessageW GetTempPathA HeapValidate UnmapViewOfFile CreateMutexW GetTempPathW UnlockFileEx SetEndOfFile GetFullPathNameA LeaveCriticalSection LockFile GetDiskFreeSpaceW InterlockedCompareExchange GetFullPathNameW EnterCriticalSection HeapCreate AreFileApisANSI GetCurrentDirectoryW DeleteFileW WritePrivateProfileStringW GetSystemInfo GetSystemDirectoryW CreateProcessW Sleep TerminateProcess GetCurrentProcess GetCommandLineW InitializeCriticalSectionAndSpinCount HeapFree HeapSize GetLastError LoadLibraryA HeapReAlloc RaiseException HeapAlloc DecodePointer HeapDestroy GetProcAddress DeleteCriticalSection GetProcessHeap FreeLibrary WideCharToMultiByte OutputDebugStringA WaitForSingleObject MultiByteToWideChar GetModuleFileNameW CloseHandle CreateThread SizeofResource FreeResource LockResource LoadResource FindResourceW GetModuleHandleW ExpandEnvironmentStringsW CreateEventW WriteFile InitializeCriticalSection SetFilePointer WriteConsoleW GetFileAttributesW OutputDebugStringW CreateFileA DeleteFileA GetLocalTime GetFileSize FlushFileBuffers GetStartupInfoW ReadFile

advapi32

RegQueryValueExW RegOpenKeyExW RegEnumKeyExW RegQueryInfoKeyW RegCloseKey

shell32

ShellExecuteW SHGetFolderPathW Shell_NotifyIconW SHCreateDirectoryExW

shlwapi

PathIsRelativeW PathAppendW SHGetValueW SHSetValueW PathAddBackslashW PathCanonicalizeW

setupapi

SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList SetupDiSetClassInstallParamsA SetupDiChangeState SetupDiGetDeviceRegistryPropertyA SetupDiGetDeviceRegistryPropertyW SetupDiGetClassDevsW

rpcrt4

UuidFromStringW

comctl32

_TrackMouseEvent ord17

gdiplus

GdipGetPropertyItemSize GdipImageSelectActiveFrame GdipImageGetFrameCount GdipImageGetFrameDimensionsList GdipDrawImageI GdipImageGetFrameDimensionsCount GdipGetImageFlags GdipLoadImageFromFileICM GdipLoadImageFromFile GdipSetStringFormatLineAlign GdipSetStringFormatAlign GdipDeleteStringFormat GdipCreateStringFormat GdipDrawString GdipDeleteFont GdipCreateFontFromLogfontA GdipCreateFontFromDC GdipSetTextRenderingHint GdipDeleteGraphics GdipCreateFromHDC GdipCreateLineBrushI GdipDeleteBrush GdipCloneBrush GdiplusShutdown GdiplusStartup GdipDisposeImage GdipCloneImage GdipFree GdipAlloc GdipGetPropertyItem

imm32

ImmGetContext ImmSetCompositionWindow ImmReleaseContext

d3d9

Direct3DCreate9

Name

.text

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

217KB

Virtual Size

216KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

25KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

1024B

Virtual Size

684B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

169KB

Virtual Size

169KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

53KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=23, id=241, version=40116,

count=181, id=243, version=40116,

count=31, id=242, version=40116,

count=2, id=261, version=23013,

count=9, id=199, version=41118,

count=26, id=259, version=24123,

count=61, id=261, version=24123,

count=36, id=260, version=24123,

count=11, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=68, id=260, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=40, id=261, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=473, id=1, productName=Unmarked objects,

count=41, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=22, id=265, version=24210,

count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,

count=1, id=151,

count=1, id=258, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

RtlIhvOid.dll

IMPHASH fafa17ac87711b607ef79bda4ee2b20f
SHA256 d9c5435cba78b92aad87d98c3f33a39b9df10a2ac989d51b01cca2404049fef2
MD5 513891ae7439d3fcf1eeb4a04c3df3fe
SHA1 9eefae9eca58b112b990ffaae62901a8444fa57d
SHA512 60591c10fdb77642c78da73574d36bbfe31b53f161197cc22bcef665f2d1abdabfe0877de085831eaf54a646bbb39e281d94ec4134c280c0c17d66670aaecc79
SSDEEP 6144:+wOvNGMHRaTXJwS2FH4LmIe+MJYlrwnZOyQ:mvNPj9AMJYlrwIp
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

c7:e6:07:d0:14:7a:21:4f:06:31:ba:29:77:df:ca:3f:69:b2:e2:66:ba:43:c3:0d:fe:ab:a7:3a:03:11:4c:29

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

PE Signature issue

Digest

bf:65:39:4c:54:10:fa:cc:d9:7e:73:ea:23:79:33:ba:31:35:7a:5a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

5

Entry point

101208

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\360_SoftAP\test\RtlIhvOid\release\RtlIhvOid.pdb

advapi32

RegOpenKeyA RegQueryValueExA RegCloseKey RegSetValueExA RegEnumKeyA RegOpenKeyExA RegDeleteKeyA RegCreateKeyExA RegQueryValueA

setupapi

SetupDiGetDeviceInterfaceDetailA SetupDiEnumDeviceInterfaces SetupDiGetClassDevsA CM_Get_Parent CM_Get_Sibling CM_Get_Child CM_Get_Device_IDA CM_Get_DevNode_Registry_PropertyA CM_Locate_DevNodeA SetupDiDestroyDeviceInfoList

wlanapi

WlanDisconnect WlanIhvControl WlanConnect WlanGetProfile WlanGetProfileList WlanQueryInterface WlanSetSecuritySettings WlanFreeMemory WlanCloseHandle WlanOpenHandle WlanSetProfile WlanSetProfilePosition WlanDeleteProfile WlanScan WlanGetAvailableNetworkList WlanGetNetworkBssList WlanSetInterface WlanSaveTemporaryProfile WlanSetProfileEapXmlUserData

wlanui

WlanUIEditProfile

rpcrt4

UuidFromStringA

kernel32

GlobalAddAtomA GetCurrentProcessId GlobalGetAtomNameA GetThreadLocale InterlockedIncrement LocalAlloc LeaveCriticalSection TlsGetValue EnterCriticalSection GlobalReAlloc GlobalHandle InitializeCriticalSection TlsAlloc TlsSetValue LocalReAlloc DeleteCriticalSection TlsFree WritePrivateProfileStringA GlobalFlags lstrcmpW LoadLibraryA GlobalFindAtomA ReadFile WriteFile SetFilePointer FlushFileBuffers GetCurrentProcess GetCPInfo GetOEMCP HeapFree HeapAlloc VirtualAlloc HeapReAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetProcessHeap RtlUnwind RaiseException ExitProcess HeapSize GetACP IsValidCodePage HeapDestroy HeapCreate VirtualFree LCMapStringA LCMapStringW GetStdHandle SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetStringTypeA GetStringTypeW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW GetVersionExA GetProcAddress GetModuleHandleA GlobalAlloc GlobalFree CreateFileA CloseHandle DeviceIoControl GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA LoadLibraryExA lstrcmpA FreeLibrary SetLastError GlobalLock GlobalUnlock FormatMessageA LocalFree lstrcpyW WinExec Sleep GetModuleFileNameA InterlockedDecrement GetVersion CompareStringA LockResource GetLastError InterlockedExchange MultiByteToWideChar SizeofResource LoadResource lstrlenA FindResourceA WideCharToMultiByte lstrlenW OutputDebugStringA

user32

WinHelpA LoadIconA RegisterWindowMessageA ShowWindow UnregisterClassA DestroyMenu SetForegroundWindow GetClientRect GetMenu CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx CopyRect DefWindowProcA CallWindowProcA SetWindowLongA SetWindowPos SystemParametersInfoA IsIconic GetWindowPlacement GetWindow GetDlgCtrlID GetWindowRect PtInRect GetCapture ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA UnhookWindowsHookEx LoadCursorA ReleaseDC GetSysColor GetSysColorBrush GetWindowTextA GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled EnableWindow MessageBoxA SetCursor SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus GetParent SendMessageA ModifyMenuA EnableMenuItem CheckMenuItem PostQuitMessage GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu GetDlgItem GetTopWindow DestroyWindow GetClassLongA SetPropA GetPropA RemovePropA IsWindow GetForegroundWindow SetWindowTextA GetMessageTime GetMessagePos MapWindowPoints GetClassNameA GetSystemMetrics wsprintfA FindWindowA PostMessageA GetDC

gdi32

CreateBitmap SaveDC RestoreDC SetBkColor SetTextColor SetMapMode GetClipBox DeleteObject PtVisible RectVisible TextOutA ExtTextOutA Escape SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx DeleteDC GetStockObject GetDeviceCaps

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

shlwapi

PathFindFileNameA PathFindExtensionA

ole32

CoCreateInstance CoInitialize CoUninitialize OleRun

oleaut32

SysAllocString SysFreeString VariantInit VariantClear VariantChangeType GetErrorInfo

IHV_Connect IHV_DeleteProfile IHV_Disconnect IHV_FreeMemory IHV_GetAcmConnectionState IHV_GetAvailableNetworkList IHV_GetGUID IHV_GetNetworkBssList IHV_GetProfile IHV_GetProfileList IHV_GetStatusReadyAfterApplyProfile IHV_Init IHV_Oid IHV_QueryInterface IHV_ResetStatusReadyAfterApplyProfile IHV_Scan IHV_SetInterface IHV_SetProfile IHV_SetProfileEap IHV_SetProfilePosition IHV_SoftAP_Enable IHV_SoftAP_ForceStart IHV_SoftAP_ForceStop IHV_SoftAP_GetProfile IHV_SoftAP_IsEnable IHV_SoftAP_QueryProperty IHV_SoftAP_QueryPropertyWin8 IHV_SoftAP_QuerySecondaryKey IHV_SoftAP_QueryStatus IHV_SoftAP_Query_connection IHV_SoftAP_Query_security IHV_SoftAP_RefreshSecuritySettings IHV_SoftAP_SetProperty IHV_SoftAP_SetSecondaryKey IHV_SoftAP_Set_connection IHV_SoftAP_Start IHV_SoftAP_Status_Get IHV_SoftAP_Status_GetBSSID IHV_SoftAP_Status_GetChannelFrequency IHV_SoftAP_Status_GetGUID IHV_SoftAP_Status_GetNumberOfPeers IHV_SoftAP_Status_GetStateOfPeer IHV_SoftAP_Status_Refresh IHV_SoftAP_Stop IHV_Stop IHV_UIEditProfile IHV_VSTAGetGUID IHV_VSTAStartVirtualStation IHV_VSTAStopVirtualStation IHV_WLanRtlGetWiFiDirectLinkDiscoverUpdateStatus IHV_WlanRtlCheckSwitchUSB IHV_WlanRtlGetInterfaceState IHV_WlanRtlGetP2PMode IHV_WlanRtlGetUsbHubType IHV_WlanRtlGetUsbMode IHV_WlanRtlGetWiFiDirectLinkCurrentRole IHV_WlanRtlGetWiFiDirectLinkDiscoveredDeviceList IHV_WlanRtlGetWiFiDirectLinkDiscoveredService IHV_WlanRtlGetWiFiDirectLinkFormatingResult IHV_WlanRtlGetWiFiDirectLinkGOFormatedStatus IHV_WlanRtlGetWiFiDirectLinkGOInfomation IHV_WlanRtlGetWiFiDirectLinkGOIntent IHV_WlanRtlGetWiFiDirectLinkIndicateStatus IHV_WlanRtlGetWiFiDirectLinkInvitationRequest_ScanListIndex IHV_WlanRtlGetWiFiDirectLinkProvisionDiscoveryRequestConfigMethod IHV_WlanRtlGetWiFiDirectLinkProvisionDiscoveryResponseConfigMethod IHV_WlanRtlNeedCheckSwitchUSB IHV_WlanRtlSartP2PGoAPMode IHV_WlanRtlSaveTemporaryProfile IHV_WlanRtlSetP2PInvite IHV_WlanRtlSetP2PMode IHV_WlanRtlSetP2PModeEx IHV_WlanRtlSetP2PProvisionDiscovery IHV_WlanRtlSetProfilePosition IHV_WlanRtlSetWPSIE IHV_WlanRtlSetWiFiDirectLinkCallbackDeregister IHV_WlanRtlSetWiFiDirectLinkCallbackInit IHV_WlanRtlSetWiFiDirectLinkConnect IHV_WlanRtlSetWiFiDirectLinkDiscoverAction IHV_WlanRtlSetWiFiDirectLinkGOIntent IHV_WlanRtlSetWiFiDirectLinkGroupCapabilityCrossConnection IHV_WlanRtlSetWiFiDirectLinkUUID IHV_WlanRtlWiFiDirectLinkGetIpConfigNotify IHV_WlanRtlWiFiDirectLinkWpsClientResultNotify IHV_WlanRtlWiFiDirectLinkWpsPinNotify

RtlLib.dll

IMPHASH 7e339aa26db1485c99854c0f800f939c
SHA256 75fd5c6336369cf994d81ed49ceadc09c9ee78fb31946061baed621e3504a42d
MD5 dfaf646ddaebb012dfbfc9003dd43c8f
SHA1 e508dd7366349caa24d935697ba0b95a8a52d366
SHA512 4b25b934adb77ae3baa23eeefce54eb684573cb21e71e8f4ad89fcbb73bc0155771f72ffc7dde72ef01f3a93f3627dd53bb258b5be452b6161f4411a5394ade2
SSDEEP 6144:WWl6PziMx2kt/u0UyJ1h4h/fHKGgZJv+IpPFwa3opJ:WWlwiMxr224hqvtw2AJ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

77:04:aa:38:74:20:51:b7:6a:c2:c6:0e:e7:ff:ca:40:5d:90:44:28:44:4c:dc:1e:af:43:0c:87:57:de:09:ad

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

PE Signature issue

Digest

0f:b1:56:46:d6:bd:06:b6:ae:d5:be:ae:d0:18:9f:1f:75:27:6b:cf

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

5

Entry point

170889

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\360_SoftAP\test\RtlLib\release\RtlLib.pdb

wtsapi32

WTSQueryUserToken

version

GetFileVersionInfoSizeA GetFileVersionInfoA

advapi32

RegSetValueExA RegQueryValueA RegDeleteKeyA RegOpenKeyA RegQueryValueExA RegCloseKey OpenSCManagerA OpenServiceA CloseServiceHandle QueryServiceStatus StartServiceA RegEnumKeyA ControlService RegOpenKeyExA RegCreateKeyExA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges DuplicateTokenEx SetTokenInformation GetUserNameA RegFlushKey ImpersonateLoggedOnUser RevertToSelf

iphlpapi

GetInterfaceInfo IpReleaseAddress

setupapi

SetupDiGetDeviceInstanceIdA SetupDiOpenDevRegKey SetupDiDestroyDeviceInfoList SetupDiGetDeviceInstallParamsA SetupDiCallClassInstaller SetupDiSetClassInstallParamsA CM_Get_DevNode_Status SetupDiEnumDeviceInfo SetupDiOpenClassRegKey SetupDiGetClassDevsA SetupDiGetDeviceRegistryPropertyA SetupDiClassGuidsFromNameA

rtlihvoid

ord29 ord36 ord27 ord24 ord33 ord30 ord15 ord34 ord28 ord2 ord18 ord22 ord4 ord20 ord6 ord5 ord7 ord19 ord8 ord9 ord10 ord11 ord12 ord1 ord3 ord21 ord13 ord14 ord17 ord25 ord26

rpcrt4

RpcStringFreeA UuidToStringA

kernel32

Process32Next OpenProcess TerminateProcess GetProcAddress GetModuleHandleA GetSystemInfo ProcessIdToSessionId GetCurrentThreadId GetLocaleInfoA lstrcpyW GetTickCount GetSystemDirectoryA LoadLibraryA FreeLibrary CreateProcessA CompareStringW InterlockedExchange CompareStringA GetVersion MulDiv GlobalUnlock WinExec GlobalAlloc GlobalFree SetLastError FreeResource lstrcmpW GlobalDeleteAtom GlobalFindAtomA GlobalAddAtomA GlobalGetAtomNameA GetThreadLocale SetFilePointer FlushFileBuffers LockFile UnlockFile SetEndOfFile GetFileSize DuplicateHandle FindClose FindFirstFileA GetVolumeInformationA GetFullPathNameA SetThreadPriority ResumeThread SetEvent SuspendThread lstrcmpA LoadLibraryExA EnumResourceLanguagesA ConvertDefaultLocale GetCurrentThread GetCurrentProcessId GetModuleFileNameW LocalAlloc LeaveCriticalSection TlsGetValue EnterCriticalSection GlobalReAlloc GlobalHandle InitializeCriticalSection TlsAlloc TlsSetValue LocalReAlloc DeleteCriticalSection TlsFree SetErrorMode FileTimeToSystemTime GlobalFlags GetCPInfo GetOEMCP FileTimeToLocalFileTime GetFileAttributesA Process32First WritePrivateProfileStringA GetSystemTimeAsFileTime HeapFree HeapAlloc VirtualAlloc HeapReAlloc GetCommandLineA GetProcessHeap RtlUnwind RaiseException ExitThread CreateThread ExitProcess HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetACP IsValidCodePage LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode GetStdHandle HeapDestroy HeapCreate VirtualFree SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTimeZoneInformation GetStringTypeA GetStringTypeW WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle SetEnvironmentVariableA lstrlenA InterlockedDecrement InterlockedIncrement lstrcatA CreateFileA ReadFile WriteFile CreateEventA WaitForSingleObject CloseHandle ReleaseSemaphore Sleep lstrcpyA GetModuleFileNameA LocalFree OutputDebugStringA GetLastError FormatMessageA MultiByteToWideChar GetVersionExA FindResourceA LoadResource LockResource SizeofResource WideCharToMultiByte CreateToolhelp32Snapshot SetPriorityClass GetPriorityClass GetFileTime GetCurrentProcess GlobalLock

user32

ClientToScreen BeginPaint EndPaint DestroyMenu GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints GetKeyState SetForegroundWindow IsWindowVisible UpdateWindow GetClientRect GetMenu MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx CopyRect UnregisterClassA GetDlgCtrlID DefWindowProcA CallWindowProcA GrayStringA SetWindowPos SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect GetActiveWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow IsWindow GetWindowLongA GetDlgItem IsWindowEnabled GetParent GetNextDlgTabItem EndDialog GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu CharUpperA PostMessageA FindWindowA GetDesktopWindow GetUserObjectInformationA GetThreadDesktop GetProcessWindowStation SendMessageA wsprintfA EnableWindow GetWindowThreadProcessId SetCursor PostQuitMessage GetMessageA TranslateMessage GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions DrawTextExA DrawTextA TabbedTextOutA LoadCursorA GetDC ReleaseDC SetWindowLongA GetSysColorBrush LoadBitmapA ModifyMenuA EnableMenuItem CheckMenuItem ShowWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA LoadIconA SendDlgItemMessageA WinHelpA GetCapture SetWindowsHookExA CallNextHookEx GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetFocus SetFocus GetWindowTextA GetForegroundWindow GetLastActivePopup DispatchMessageA PtInRect GetWindow

gdi32

SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx SelectObject GetClipBox SetTextColor SetBkColor GetObjectA CreateBitmap SaveDC RestoreDC SetMapMode DeleteObject PtVisible RectVisible Escape GetDeviceCaps ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx DeleteDC GetStockObject TextOutA ExtTextOutA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

shlwapi

PathStripToRootA PathIsUNCA PathFindFileNameA PathFindExtensionA

ole32

OleRun CoCreateInstance CoUninitialize CoInitialize

oleaut32

SysAllocString SysStringLen SysFreeString VariantInit VariantCopy VariantClear VariantChangeType VarBstrCat SysAllocStringLen GetErrorInfo

?ConvertANSItoUTF8@@YA?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V12@@Z ?ConvertUTF8toANSI@@YA?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V12@@Z RT_ACM_Delete_AllProfiles RT_ACM_Delete_Profile RT_ACM_Disconnect RT_ACM_GetProfile RT_ACM_Get_ProfileNameList RT_ACM_LinkDefaultProfile RT_ACM_LinkProfile RT_ACM_LinkProfileAndSave RT_ACM_LinkRtlProfile RT_ACM_LinkRtlProfileNew RT_ACM_LinkRtlProfileNewAP RT_ACM_LinkRtlProfileNewSTA RT_ACM_Link_Any RT_ACM_SaveProfile RT_ACM_Scan RT_ACM_SoftAP_Enable RT_ACM_SoftAP_GetGUID RT_ACM_SoftAP_GetIsVWiFiMode RT_ACM_SoftAP_GetMacAddress RT_ACM_SoftAP_GetMacAddressString RT_ACM_SoftAP_GetProfile RT_ACM_SoftAP_GetStatus RT_ACM_SoftAP_Get_State RT_ACM_SoftAP_IsEnable RT_ACM_SoftAP_Query_SecondaryKey RT_ACM_SoftAP_Query_connection RT_ACM_SoftAP_Set_SecondaryKey RT_ACM_SoftAP_Set_connection RT_ACM_SoftAP_Start RT_ACM_SoftAP_Stop RT_ACM_XMLtoProfile RT_ADD_PMK_CONX RT_ADD_PSK_CONX RT_AP_BEACON_START RT_AP_GET_CLOUD_KEY RT_AP_GET_CLOUD_KEY_Ex RT_AP_GetDefaultPermitted RT_AP_GetIsAPMode RT_AP_GetStationCount RT_AP_GetStationList RT_AP_IsSupported RT_AP_SetDefaultPermitted RT_AP_SetPassphrase RT_AP_SwitchToAPMode RT_AP_SwitchToStationMode RT_Aegis_Event_Port_Changed RT_AutoCfgScan RT_CCX_GetTpower RT_CCX_GetTxPowerPercentage RT_CCX_GetTxPowerRange RT_CCX_SetTpower RT_CCX_SetTxPowerPercentage RT_CertUrlWin32String RT_Check_Session_Overlap RT_Construct_WPS_Probe_Rsp_IE RT_CustomRequest RT_DebugCmdCheck RT_DebugCmdSend RT_Debug_Methodflag RT_DebuggCmdReturn RT_Destroy_WPS_Probe_Rsp_IE RT_Disassociate RT_EnableWirelessMode RT_EnableZeroConfig RT_EnableZeroConfigService RT_ForceTxDataRate RT_GEN_PIN RT_Get802_1xStatus RT_GetAUTOChannel RT_GetAdapterList RT_GetAdapterList_HWID RT_GetAuthenticaionMode RT_GetBSSID RT_GetBeaconInterval RT_GetBssWirelessMode RT_GetChannel RT_GetChannelList RT_GetChannelPlanByCountry RT_GetCurrentWirelessMode RT_GetDTIMPeriod RT_GetDefaultEncryptionAlgorithm RT_GetDefaultKeyID RT_GetDriverDescription RT_GetDriverInfo RT_GetDriverPath RT_GetEncCAMStatus RT_GetEncKeyMatchStatistics RT_GetExtendedStatistics RT_GetFILTER_STA_ADDRESS RT_GetFragmentationThreshold RT_GetInitial_11N_Txrate RT_GetIsDedicateProbe RT_GetIsHidden_SSID RT_GetIsRadioOff RT_GetIsWDS_MODE RT_GetIsXlink RT_GetLOCKED_STA_ADDRESS RT_GetLiveTime RT_GetMacAddress RT_GetMacAddressString RT_GetMeshID RT_GetMeshMode RT_GetNetworkType RT_GetNicGuid RT_GetPIN_WS2 RT_GetPowerSaveMode RT_GetPreambleMode RT_GetPrivacy RT_GetRTSThreshold RT_GetRates RT_GetRegistry RT_GetSBW RT_GetSSID RT_GetShowIcon RT_GetStatistics RT_GetStatusAPIP RT_GetStatusAuthStatus RT_GetStatusChannel RT_GetStatusChannelInfo RT_GetStatusDriverInfo RT_GetStatusDynamicRate RT_GetStatusHardwareRadioOff RT_GetStatusLinkInfo RT_GetStatusMediaStatus RT_GetStatusPerformanceInfo RT_GetStatusPermanentChannelSet RT_GetStatusPowerMode RT_GetStatusSecurityInfo RT_GetStatusSignalInfo RT_GetStatusSignalInfoMIMO RT_GetStatusWEPKeyMisMatch RT_GetStatus_11N_Rxrate RT_GetStatus_11N_Txrate RT_GetSupportedWirelessMode RT_GetSwAntennaDiversity RT_GetTurboMode RT_GetTxPower RT_GetUserCertList RT_GetWDS_AP_LIST RT_GetWEPKeyValid RT_GetWirelessMode RT_Get_11N_LINK_CURRENT_BANDWIDTH RT_Get_11N_Retry_Count RT_Get_AP_Filter_STA_ADDRESS RT_Get_FIRMWARE_VERSION RT_Get_HW_PBCStatus RT_Get_User_Token RT_Get_WMM_QoS_APSD RT_Initialize RT_IsCardDisabled RT_IsUnplug RT_IsXPConfig RT_NicChangeState RT_NoAutoRescan RT_OpenClassRegKey RT_Passphrase128 RT_Passphrase64 RT_PasswordHash RT_QueryOID RT_QueryRTHandle RT_REMOVE_PSK_CONX RT_ReNewIPAddress RT_ReadEepromByte RT_ReadRegData RT_RefreshAdapter RT_Rescan RT_RoamToSelBSSID RT_SET_WPS_CUSTOMIZED_FLAG RT_SET_WPS_CUSTOMIZED_TIMEOUT_FLAG RT_SET_WPS_DEVICE_NAME RT_SET_WPS_MANUFACTURER RT_SET_WPS_MODEL_NAME RT_SET_WPS_MODEL_NUMBER RT_SET_WPS_SERIAL_NUMBER RT_SaveLog RT_SendMagicPacket RT_Set802_1xStatus RT_SetAUTOChannel RT_SetAdhocDefaultWirelessMode RT_SetAuthenticaionMode RT_SetBSSID RT_SetBeaconInterval RT_SetChannel RT_SetChannelPlan RT_SetChannelPlanByCountry RT_SetDATA_RATE_STA RT_SetDTIMPeriod RT_SetDedicateProbe RT_SetDefaultAdapterIndex RT_SetDefaultEncryptionAlgorithm RT_SetDefaultKeyID RT_SetDriverFileName RT_SetEncryptionStatus RT_SetFILTER_STA_ADDRESS RT_SetFragmentationThreshold RT_SetIsHidden_SSID RT_SetIsWDS_MODE RT_SetIsXlink RT_SetLOCKED_STA_ADDRESS RT_SetMHSecurityInfo RT_SetMeshID RT_SetMeshMode RT_SetNetworkType RT_SetNicTcpipAddr RT_SetOID RT_SetPowerSaveMode RT_SetPreambleMode RT_SetPrivacy RT_SetRTSThreshold RT_SetRadioOff RT_SetRates RT_SetRatesG RT_SetRegistry RT_SetSBW RT_SetSSID RT_SetShowIcon RT_SetSuspendState RT_SetSwAntennaDiversity RT_SetTurboMode RT_SetTxPower RT_SetWDS_AP_LIST RT_SetWEPKey RT_SetWakeUpState RT_SetWirelessMode RT_Set_8021x_conf RT_Set_8021x_tunnle RT_Set_AP_Filter_STA_ADDRESS RT_Set_Filter_Type RT_Set_HW_PBCStatus RT_Set_SCAN_LIMIT RT_Set_WMM_QoS_APSD RT_SiteSurvey RT_SiteSurveyEx RT_SiteSurvey_WS2 RT_Stop RT_SwAntenna RT_VERIFY_PIN RT_WPS RT_WPSAPLockedSurvey RT_WPSAPSurvey RT_WPSAPSurveyEx RT_WPSAPUnconfiguredSurvey RT_WPS_2_Enable_4_PIN RT_WPS_2_Enable_IE_Fragment RT_WPS_2_Enable_Packet_Fragment RT_WPS_2_Enable_Version_2 RT_WPS_2_SetFakeCrendital RT_WPS_2_SetFixPIN RT_WPS_2_SetFragmentSize RT_WPS_2_Support_Weak_Security RT_WPS_Check_GO_Progress RT_WPS_Disable_WEP_Key_Parse RT_WPS_External_Registrar RT_WPS_External_Registrar_AP_PIN RT_WPS_External_Registrar_Add_New_Device RT_WPS_Registrar_APConfig RT_WS2_init RT_WS2_stop RT_WSC_Connect RT_WriteEepromByte RT_WriteRegData RT_ZeroConfigService ShowLastError

RtlLib_xp.dll

IMPHASH 441c5dea59f51f4ad18138998614cc60
SHA256 cdc24849bb0b0fe0db924aa9d4c478250df76e78bf9610deebacaa992c4a6b26
MD5 825f8d04b584df11561b1f0a3cdf7489
SHA1 b7b0e6342ea108544da0eff31cabbd201334a109
SHA512 a634e3a1c47b389998643e092b33d6bdd18b7c248233d86b9f841a65c2e9c2bd007384864f3ab93fe69fa10e7340139f45557c496e704778dd36dcecb0d28ac0
SSDEEP 6144:M64Pk4uQdLHfEK95mbmKQQNmgUdj5xNSMdkq1WyA0yBr08+0It:M7dLHfEyXQNmg+PNSc1WyAAft
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

de:d9:8a:f3:af:8b:0b:42:04:7e:25:1f:f8:4a:26:4a:bf:60:e8:6a:f3:d1:32:0a:af:9d:78:79:98:24:ac:55

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

PE Signature issue

Digest

c7:42:7d:9b:7b:94:f8:3e:13:26:08:40:97:09:1a:99:2e:47:74:b5

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

4

Entry point

251079

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

setupapi

SetupDiGetDeviceRegistryPropertyA SetupDiDestroyDeviceInfoList SetupDiGetDeviceInstallParamsA SetupDiCallClassInstaller SetupDiGetDeviceInstanceIdA SetupDiOpenDevRegKey SetupDiEnumDeviceInterfaces SetupDiGetDeviceInterfaceDetailA CM_Locate_DevNodeA SetupDiSetClassInstallParamsA CM_Get_DevNode_Status SetupDiEnumDeviceInfo SetupDiOpenClassRegKey SetupDiGetClassDevsA SetupDiClassGuidsFromNameA CM_Get_Parent CM_Get_Sibling CM_Get_Child CM_Get_Device_IDA CM_Get_DevNode_Registry_PropertyA

version

GetFileVersionInfoSizeA GetFileVersionInfoA

advapi32

RegDeleteKeyA RegDeleteValueA CreateServiceA RegEnumKeyA InitializeSecurityDescriptor SetSecurityDescriptorDacl OpenSCManagerA OpenServiceA CloseServiceHandle QueryServiceStatus StartServiceA RegOpenKeyA RegQueryValueExA RegCloseKey ControlService RegSetValueExA RegEnumKeyExA RegFlushKey RegCreateKeyExA RegOpenKeyExA DeleteService

iphlpapi

IpRenewAddress GetAdaptersInfo GetInterfaceInfo IpReleaseAddress

acauth

acEapSIMInit acEapPEAPInit acEapMSCHAPv2Init acEapMD5Init acEapLEAPInit acEapGTCInit acEapFASTInit ac8021xInit acInit acNetCallback acDebugLevelString acDebugIsEnabled acDebugEnable acLogLevelString acLogIsEnabled acLogEnable acLogSet acDebugSet acDriverVersion acVersion acEventString acPortStatusString acPortStateString acPortGetLinkSpeed acPortGetAssociationInfo acPortAuthModeString acPortLinkStateString ac8021xGetStats acPortReAuth acPortAttach acGetPortAttr acCcxRadioCfg acCcxGetRadioCfg acRsnProbeIeVerifyIsEnabled acRsnProbeIeVerifyEnable acPortDetach acPortStop acEapTLSInit acPortGetState acPortGetStatus acPortDisassociate acCredCcxRogueAP acPortAssociate acCredEapTTLSTunnelMethod acCredGetEapSIMAltIdentity acCredGetEapFASTAID acCredEapFASTPacTypes acRsnInit acCredUserCert acCredGetPasswordPrompt acPasswordDestroy acPasswordCreate acCredPassword acCredGetEapMethod acCredGetEapFASTMode acCredEapMethods acIdentityCreate acCredMachineIdentity acIdentityDestroy acCredIdentity acCredEapSIM acCredDeferred acCredSessionStart acCredEapFASTProvisionModes acCredServerGetField acCredServerVerifyChain acCredServerVerifyCA acCredServerVerifyDomain acCredServerVerifyField acCredServerVerified acCredComplete acErrorString acPortNdisRequest acGetNextPortSymName acEapFASTPacCreate acPortGetLinkState acEapTTLSInit acCredEapFASTPac acEapFASTPacDestroy acCcxInit acSmartCardInit acRsnPskDestroy acExit acIpDhcpIsEnabled acIpDhcpRelease acIpDhcpRenew acIpGetConfig acIpIsConnected acPortAuth acCredRsnPsk acRsnBinPskCreate acRsnPskCreate acCcxEnable acCertGetField acCertUrlWin32String acCertCreate acTlvInit acCredGetEapFASTPacOpaque acCredGetEapFASTPacKey acCredGetEapFASTPacAIDInfo acCredGetEapFASTPacType acCertDestroy acEapSIMDestroy acCredGetEapNotification acWzcEnable acCredGetEapFASTPacIID acCredGetEapFASTPacAID acCredGetEapFASTPacLifeTime

crypt32

CertVerifyTimeValidity CertOpenStore CertCloseStore CertFindCertificateInStore CertGetCertificateContextProperty CertGetEnhancedKeyUsage CertFreeCertificateChain CertGetCertificateChain CertGetNameStringA CertEnumCertificatesInStore

cryptui

CryptUIDlgViewContext

kernel32

IsBadReadPtr GetDriveTypeA UnhandledExceptionFilter GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA SetUnhandledExceptionFilter GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA GetStartupInfoA GetFileType GetStdHandle SetHandleCount IsBadWritePtr VirtualAlloc VirtualFree HeapCreate HeapDestroy GetEnvironmentVariableA FatalAppExitA GetACP HeapReAlloc HeapSize ExitProcess ExitThread RaiseException GetCommandLineA HeapFree HeapAlloc GetSystemTime GetTimeZoneInformation RtlUnwind GetCurrentDirectoryA WritePrivateProfileStringA GetPrivateProfileStringA GetPrivateProfileIntA FileTimeToLocalFileTime FileTimeToSystemTime SetFileAttributesA SetFileTime SystemTimeToFileTime LocalFileTimeToFileTime GetFileTime GetFileAttributesA GetOEMCP GetCPInfo GetProcessVersion SizeofResource IsBadCodePtr SetStdHandle CompareStringW SetEnvironmentVariableA IsValidLocale IsValidCodePage GetLocaleInfoA EnumSystemLocalesA GetUserDefaultLCID SetConsoleCtrlHandler GetLocaleInfoW CompareStringA CloseHandle GetFileSize CreateFileA GetLocalTime GetVersionExA GetLastError Sleep ReleaseSemaphore WaitForSingleObject CreateSemaphoreA CreateEventA GetOverlappedResult DeviceIoControl GetComputerNameA OutputDebugStringA MultiByteToWideChar WriteFile ResetEvent ReadFile CreateThread FormatMessageA GetWindowsDirectoryA GlobalFree GlobalAlloc WideCharToMultiByte Process32Next Process32First CreateToolhelp32Snapshot TerminateProcess OpenProcess WinExec TerminateThread GetTickCount LocalFree GetSystemDirectoryA FreeLibrary GetProcAddress LoadLibraryA CopyFileA CreateDirectoryA DeleteFileA GetModuleFileNameA LoadResource FindResourceA LockResource GlobalUnlock GlobalLock GetModuleHandleA lstrcpyA GlobalDeleteAtom GlobalFindAtomA GlobalAddAtomA lstrcmpiA GlobalGetAtomNameA GetCurrentThreadId lstrcatA GetVersion InterlockedIncrement InterlockedDecrement lstrlenA SetEvent ResumeThread SetThreadPriority SuspendThread DuplicateHandle GetCurrentProcess SetFilePointer FlushFileBuffers LockFile UnlockFile SetEndOfFile MoveFileA FindClose FindFirstFileA GetVolumeInformationA lstrcpynA GetFullPathNameA GetStringTypeExA GetThreadLocale GetShortPathNameA SetLastError FindNextFileA GetCurrentThread lstrcmpA LocalAlloc InitializeCriticalSection TlsAlloc DeleteCriticalSection GlobalHandle TlsFree LeaveCriticalSection GlobalReAlloc EnterCriticalSection TlsSetValue LocalReAlloc TlsGetValue SetErrorMode MulDiv GlobalFlags

user32

GetMenuStringA DeleteMenu InsertMenuA LoadStringA DestroyMenu GetSysColorBrush LoadCursorA GrayStringA DrawTextA TabbedTextOutA EndPaint BeginPaint GetWindowDC GetDC GetDialogBaseUnits ReleaseDC GetDesktopWindow ClientToScreen PtInRect GetClassNameA UnregisterClassA SetCursor ShowOwnedPopups PostQuitMessage CharUpperA GetMessageA TranslateMessage ValidateRect GetCursorPos wvsprintfA OemToCharA CharToOemA GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps EnableWindow wsprintfA SendMessageA PostMessageA IsWindowEnabled GetDlgItem GetWindowLongA GetParent DestroyWindow CreateDialogIndirectParamA GetSystemMetrics IsWindow SetActiveWindow GetActiveWindow EndDialog GetNextDlgTabItem GetWindowRect GetWindowPlacement IsIconic SystemParametersInfoA IntersectRect OffsetRect RegisterWindowMessageA SetWindowPos SetWindowLongA GetWindow SetForegroundWindow GetForegroundWindow GetLastActivePopup GetMessagePos GetMessageTime DefWindowProcA RemovePropA CallWindowProcA GetPropA UnhookWindowsHookEx SetPropA GetClassLongA CallNextHookEx SetWindowsHookExA CreateWindowExA GetKeyState GetDlgCtrlID GetWindowTextA GetWindowTextLengthA SetWindowPlacement TrackPopupMenu GetMenuItemID GetSubMenu GetMenuItemCount GetMenu RegisterClassA GetClassInfoA WinHelpA GetCapture IsChild MessageBoxA GetTopWindow SetScrollPos GetScrollPos SetScrollRange GetScrollRange ShowScrollBar SetScrollInfo GetScrollInfo ScrollWindow IsWindowVisible EndDeferWindowPos CopyRect BeginDeferWindowPos GetClientRect DeferWindowPos EqualRect ScreenToClient AdjustWindowRectEx SetFocus GetFocus DispatchMessageA PeekMessageA GetSysColor MapWindowPoints SendDlgItemMessageA UpdateWindow LoadIconA CheckDlgButton CheckRadioButton GetDlgItemInt GetDlgItemTextA SetDlgItemInt SetDlgItemTextA IsDlgButtonChecked ScrollWindowEx IsDialogMessageA SetWindowTextA MoveWindow ShowWindow EnableMenuItem CheckMenuItem

gdi32

SelectClipPath ExtSelectClipRgn PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile GetViewportExtEx CreateRectRgn GetClipRgn PolyBezierTo SetColorAdjustment PolylineTo PolyDraw SetArcDirection ArcTo GetCurrentPositionEx SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign LineTo MoveToEx OffsetClipRgn IntersectClipRect ExcludeClipRect SelectClipRgn ScaleWindowExtEx SetWindowExtEx OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetMapMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode SelectPalette RestoreDC SaveDC StartDocA DeleteDC GetStockObject GetDeviceCaps CreateFontIndirectA SelectObject GetWindowExtEx GetTextExtentPoint32A DeleteObject CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox GetDCOrgEx Escape ExtTextOutA TextOutA RectVisible PtVisible CreateDIBPatternBrushPt CreatePatternBrush CreateHatchBrush CreateSolidBrush GetTextMetricsA ExtCreatePen CreatePen

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

shell32

DragAcceptFiles SHGetFileInfoA Shell_NotifyIconA SHGetFolderPathA

comctl32

ord17

wsock32

ioctlsocket

RT_ADD_PMK_CONX RT_ADD_PSK_CONX RT_AP_BEACON_START RT_AP_GET_CLOUD_KEY RT_AP_GET_CLOUD_KEY_Ex RT_AP_GetDefaultPermitted RT_AP_GetIsAPMode RT_AP_GetStationCount RT_AP_GetStationList RT_AP_IsSupported RT_AP_SetDefaultPermitted RT_AP_SetPassphrase RT_AP_SwitchToAPMode RT_AP_SwitchToStationMode RT_Aegis_Event_Port_Changed RT_AutoCfgScan RT_CCX_ENABLE_RM RT_CCX_GetTpower RT_CCX_GetTxPowerPercentage RT_CCX_GetTxPowerRange RT_CCX_InitCallback RT_CCX_SetTpower RT_CCX_SetTxPowerPercentage RT_CertUrlWin32String RT_Check_RtlDHCP_Port_Work RT_Check_Session_Overlap RT_Check_Switch_USB RT_ConfigCCX RT_CustomRequest RT_DebugCmdCheck RT_DebugCmdSend RT_Debug_Methodflag RT_DebuggCmdReturn RT_Delete_PacFile RT_Delete_PacFileByIndex RT_Disassociate RT_EnableWirelessMode RT_EnableZeroConfig RT_EnableZeroConfigService RT_ForceTxDataRate RT_GEN_PIN RT_Get802_1xStatus RT_GetAUTOChannel RT_GetAdapterList RT_GetAdapterList_HWID RT_GetAuthenticaionMode RT_GetBSSID RT_GetBeaconInterval RT_GetBssWirelessMode RT_GetChannel RT_GetChannelList RT_GetChannelPlanByCountry RT_GetChannelPlanString RT_GetCurrentWirelessMode RT_GetDTIMPeriod RT_GetDefaultEncryptionAlgorithm RT_GetDefaultKeyID RT_GetDriverDescription RT_GetDriverInfo RT_GetDriverPath RT_GetEapFastVersion RT_GetEncCAMStatus RT_GetEncKeyMatchStatistics RT_GetExtendedStatistics RT_GetFILTER_STA_ADDRESS RT_GetFragmentationThreshold RT_GetInitial_11N_Txrate RT_GetIsDedicateProbe RT_GetIsHidden_SSID RT_GetIsRadioOff RT_GetIsWDS_MODE RT_GetIsXlink RT_GetLOCKED_STA_ADDRESS RT_GetLiveTime RT_GetLoginInfo RT_GetMacAddress RT_GetMacAddressString RT_GetMeshID RT_GetMeshMode RT_GetNetworkType RT_GetNicGuid RT_GetPIN_WS2 RT_GetPacFileInfo RT_GetPacFileNameList RT_GetPort_Auth_State RT_GetPowerSaveMode RT_GetPreambleMode RT_GetPrivacy RT_GetRTSThreshold RT_GetRates RT_GetRegistry RT_GetSBW RT_GetSSID RT_GetShowIcon RT_GetStatistics RT_GetStatusACAuthStatus RT_GetStatusAPIP RT_GetStatusAegisInfo RT_GetStatusAuthStatus RT_GetStatusChannel RT_GetStatusChannelInfo RT_GetStatusDriverInfo RT_GetStatusDynamicRate RT_GetStatusHardwareRadioOff RT_GetStatusLinkInfo RT_GetStatusMediaStatus RT_GetStatusPerformanceInfo RT_GetStatusPermanentChannelSet RT_GetStatusPowerMode RT_GetStatusSecurityInfo RT_GetStatusSignalInfo RT_GetStatusSignalInfoMIMO RT_GetStatusWEPKeyMisMatch RT_GetStatus_11N_Rxrate RT_GetStatus_11N_Txrate RT_GetSupportedWirelessMode RT_GetSwAntennaDiversity RT_GetTurboMode RT_GetTxPower RT_GetUsbHubType RT_GetUsbMode RT_GetUserCertList RT_GetUserLogOff RT_GetWDS_AP_LIST RT_GetWEPKeyValid RT_GetWirelessMode RT_Get_11N_LINK_CURRENT_BANDWIDTH RT_Get_11N_Retry_Count RT_Get_Cert_CA_List RT_Get_Cert_CA_URL RT_Get_Current_Channel_Info RT_Get_FIRMWARE_VERSION RT_Get_HW_PBCStatus RT_Get_WMM_QoS_APSD RT_Get_credServerVerify RT_GetszPacFileNameList RT_Import_PacFile RT_Initialize RT_IsCardDisabled RT_IsUnplug RT_IsXPConfig RT_Need_check_USB RT_NicChangeState RT_NoAutoRescan RT_OpenClassRegKey RT_Passphrase128 RT_Passphrase64 RT_PasswordHash RT_QueryOID RT_REMOVE_PSK_CONX RT_ReNewIPAddress RT_ReadEepromByte RT_ReadRegData RT_RefreshAdapter RT_RefreshPacFileNameList RT_RegisterMessageHandler RT_Rescan RT_RoamToSelBSSID RT_SET_WPS_CUSTOMIZED_FLAG RT_SET_WPS_CUSTOMIZED_TIMEOUT_FLAG RT_SET_WPS_DEVICE_NAME RT_SET_WPS_MANUFACTURER RT_SET_WPS_MODEL_NAME RT_SET_WPS_MODEL_NUMBER RT_SET_WPS_SERIAL_NUMBER RT_SaveLog RT_SendMagicPacket RT_Set802_1xStatus RT_SetAUTOChannel RT_SetAdhocDefaultWirelessMode RT_SetAuthenticaionMode RT_SetBSSID RT_SetBeaconInterval RT_SetChannel RT_SetChannelPlan RT_SetChannelPlanByCountry RT_SetDATA_RATE_STA RT_SetDTIMPeriod RT_SetDedicateProbe RT_SetDefaultAdapterIndex RT_SetDefaultEncryptionAlgorithm RT_SetDefaultKeyID RT_SetDriverFileName RT_SetEapFastVersion RT_SetEncryptionStatus RT_SetFILTER_STA_ADDRESS RT_SetFragmentationThreshold RT_SetIsHidden_SSID RT_SetIsWDS_MODE RT_SetIsXlink RT_SetLOCKED_STA_ADDRESS RT_SetLoginInfo RT_SetMHSecurityInfo RT_SetMeshID RT_SetMeshMode RT_SetNetworkType RT_SetNicTcpipAddr RT_SetOID RT_SetPacFileIndex RT_SetPowerSaveMode RT_SetPreambleMode RT_SetPrivacy RT_SetRTSThreshold RT_SetRadioOff RT_SetRates RT_SetRatesG RT_SetRegistry RT_SetSBW RT_SetSSID RT_SetShowIcon RT_SetSuspendState RT_SetSwAntennaDiversity RT_SetTurboMode RT_SetTxPower RT_SetUserLogOff RT_SetWDS_AP_LIST RT_SetWEPKey RT_SetWakeUpState RT_SetWirelessMode RT_Set_8021x_conf RT_Set_8021x_tunnle RT_Set_Filter_Type RT_Set_HW_PBCStatus RT_Set_SCAN_LIMIT RT_Set_WMM_QoS_APSD RT_SiteSurvey RT_SiteSurveyEx RT_SiteSurvey_WS2 RT_Stop RT_SwAntenna RT_UIDlgView_Cert RT_VERIFY_PIN RT_VWLan_SoftAP_Enable RT_VWLan_SoftAP_GetGUID RT_VWLan_SoftAP_GetSSID RT_VWLan_SoftAP_GetStationList RT_VWLan_SoftAP_Get_Auth_Mode RT_VWLan_SoftAP_Get_Encrypt_Mode RT_VWLan_SoftAP_IsEnable RT_VWLan_SoftAP_Set_Auth_Mode RT_VWLan_SoftAP_Set_Encrypt_Mode RT_VWLan_SoftAP_Set_Passphrase RT_VWLan_SoftAP_Set_WEP RT_WPS RT_WPSAPLockedSurvey RT_WPSAPSurvey RT_WPSAPSurveyEx RT_WPSAPUnconfiguredSurvey RT_WPS_2_Support_Weak_Security RT_WPS_Disable_WEP_Key_Parse RT_WPS_External_Registrar RT_WPS_External_Registrar_AP_PIN RT_WPS_External_Registrar_Add_New_Device RT_WPS_Registrar_APConfig RT_WS2_init RT_WS2_stop RT_WriteEepromByte RT_WriteRegData RT_ZeroConfigService RT_credServerVerify

Name

.text

Size

452KB

Virtual Size

448KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

44KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

56KB

Virtual Size

109KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

20KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

12KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

28KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

SetIp.vbs

SHA256 21fe3b1282df4012c194e2bdbac2bbe4a7f09e994453de301dc989e8d6303895
MD5 0779f21466aa770f112d8f990419b3a5
SHA1 b52ccd816c2b30889c743a087c14cda3ed5f7ecf
SHA512 80aaf1acfc87e70aac948a1d14244067e335ee168f7407c98eed22a94e87f7210ae93767fefd65d06e0064f47c4f79c5e7a9d62d78caf3b4faef8aae93b1647c
SSDEEP 384:Z736YlDgz5JVg/Qd5rMUgJeVLa95giXm2R:ZT6YlkzC/QdfgsLa95gZ2
MD5 SHA1 SHA512 SSDEEP

WiFiCommon.dll

IMPHASH a48055182519fdd44c9770d9691f8568
SHA256 efc0c998175b75e059600fb63985e341c08d8e42aee1e127cd1e7231dabb12e6
MD5 6e56f9e56233b23491d5c9a18cbc45f4
SHA1 98ca2df830466e9a1f463c8e857e00e79ddf17f5
SHA512 1fccc15fd1db24aa92aa6dd8b659c1f96e691aa32d27e8d870c735c3594abc98eeedc24ee6b354cdd9ff97ead2f1f4c376945724ad8ae1d73a37818d8fcc2a86
SSDEEP 3072:C2MddsJtbS4KgkTU6N11loR6k7IYa5sM4KdXLv:MIpvK1Q6F8Wmv2XLv
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

e4:d6:99:77:dc:48:d7:45:8d:cb:31:91:7e:cc:65:13:a6:df:1c:7f:4e:5e:e7:a1:71:93:f7:24:71:35:48:c5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

PE Signature issue

Digest

12:47:d2:67:91:e3:c9:be:5f:03:9b:9b:13:ee:62:a8:76:53:18:78

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

1

Major OS version

5

Entry point

15854

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\SVN\WifiMaster\branches\201405131202\Tool\Release\WiFiCommon.pdb

kernel32

HeapFree InterlockedCompareExchange CreateMutexW FreeLibraryAndExitThread OpenFileMappingW UnmapViewOfFile GetModuleHandleExA GetLastError CreateThread HeapAlloc GetProcessHeap InterlockedIncrement CreateFileMappingW InterlockedExchange VirtualProtect VirtualFree VirtualAlloc LoadLibraryA GetProcAddress FreeLibrary IsBadReadPtr SetEndOfFile WriteConsoleW HeapSize GetModuleHandleW CloseHandle TerminateThread Sleep WaitForSingleObject GetModuleFileNameW MapViewOfFile OutputDebugStringA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead EncodePointer RaiseException InterlockedFlushSList SetLastError RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ReadFile ExitProcess GetModuleHandleExW GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte SetFilePointerEx GetConsoleMode ReadConsoleW GetStdHandle GetFileType LCMapStringW GetACP HeapReAlloc FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetStringTypeW SetStdHandle FlushFileBuffers WriteFile GetConsoleCP CreateFileW DecodePointer

user32

CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW PostMessageW

advapi32

AllocateAndInitializeSid FreeSid InitializeSecurityDescriptor InitializeAcl GetLengthSid AddAccessAllowedAce SetSecurityDescriptorDacl

WiFiDire.dll

IMPHASH 90f21571894a3d931aff6f9608b4101d
SHA256 16093ea6df787215677169197e2795dac14ec141f61a90ba66585f5ab0c8578f
MD5 8f4b50d0967096afe4d335c64d4f369f
SHA1 8b3dd4aeae22fb3d4f25190ba9483ab266d19365
SHA512 9db3490a1a7aee8cf285b7cf821e7a58f2eef8ca7a7d8227b6ac4dbc6f8483447f1380f2fef4dec6d171b851a76d14908718b5f25316f523cb9ce5f21e766f3c
SSDEEP 6144:lKNlxil02dqVh6KF9rfwShNOV3RaAOhnPH5:ENlYdqVF97jnljPH5
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

70:eb:47:f2:d7:d5:71:01:a5:86:bc:78:86:90:88:23:96:a7:4e:20:55:3d:66:f3:a3:b9:25:46:73:5e:cf:7d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

PE Signature issue

Digest

17:9e:0d:99:27:9b:74:66:c1:60:88:39:12:fd:36:af:24:1e:65:8b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

76155

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\SVN\Wifi360\branches\201405131202\WiFiMaster_win10\WiFiDirectLegacyAP\Release\WiFiDire.pdb

kernel32

WaitForSingleObjectEx Sleep OutputDebugStringA EnterCriticalSection HeapSize WriteConsoleW ReadConsoleW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW LeaveCriticalSection SetEvent DeleteCriticalSection InitializeCriticalSectionEx CreateEventExW RaiseException GetLastError CreateFileW CloseHandle GetCommandLineW GetCommandLineA GetOEMCP MultiByteToWideChar WideCharToMultiByte GetStringTypeW EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress LCMapStringW GetLocaleInfoW GetCPInfo ResetEvent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwind FreeLibrary LoadLibraryExW InterlockedFlushSList HeapAlloc HeapReAlloc HeapFree ExitProcess GetModuleHandleExW GetModuleFileNameA GetACP GetStdHandle GetFileType IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode ReadFile SetFilePointerEx GetProcessHeap FindClose FindFirstFileExA FindNextFileA IsValidCodePage

api-ms-win-core-winrt-l1-1-0

RoUninitialize RoActivateInstance RoGetActivationFactory RoInitialize

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateString WindowsCreateStringReference WindowsGetStringRawBuffer WindowsDeleteString

advapi32

CloseServiceHandle ControlService QueryServiceStatus OpenServiceA OpenSCManagerA

ole32

CoUninitialize CoInitializeEx

Name

.text

Size

178KB

Virtual Size

177KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

70KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

WiFiHelper.dll

IMPHASH 7d5d2b14199fd62571967eaac9c19059
SHA256 dc3e93fc74ed3c27750835c0a1399b002e159c62ad1be16d4ef38a5b41511e19
MD5 cb47260c6607367a98fd7a3052d377b0
SHA1 cae78292ebff953f09938981f6a5471d3cb54d4a
SHA512 4d291c12a41b9903adb60d5148b0a3c3931fbaa321bd6bcb308bfb3672970121b0490ea00bc38af4c9cd6fdcf201f4b875af1f64ce066a05b970bf4658a851b6
SSDEEP 6144:sKJhrE6WtamfVo0wpM+wIbaG5QjxNMCXpSUqg65AOzI1TmhxUi:sC46sK0UGG5QjPn5SU25R8UUi
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

34:3a:cf:7c:2c:1c:1b:82:88:1b:fd:45:58:ee:a0:0e:40:0a:17:fe:6c:a0:de:fe:be:7d:10:37:3e:22:64:27

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

PE Signature issue

Digest

69:f5:26:5e:34:c3:e2:25:b5:f5:b0:f1:3a:c3:f8:bc:17:dd:86:39

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

1

Major OS version

5

Entry point

143314

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\SVN\Wifi360\branches\201405131202\WiFiProject\Release\WiFiHelper.pdb

kernel32

SetLastError GetCommandLineW FindNextFileW GetCurrentProcess WriteFile GetModuleHandleExW GetPrivateProfileIntW InterlockedDecrement GetModuleFileNameW CreatePipe FindClose CreateMutexA WaitForSingleObject GetFileAttributesW ResumeThread OpenProcess MultiByteToWideChar GetTempPathA OpenMutexA GetFileAttributesA FileTimeToSystemTime TerminateThread LoadLibraryA DeleteFileA LoadLibraryW CreateThread FileTimeToLocalFileTime ExitProcess GetCurrentProcessId CreateProcessW GetModuleHandleW FreeLibrary WideCharToMultiByte IsBadReadPtr GetTickCount VirtualQuery GetFileTime OpenThread HeapCreate VirtualAllocEx GetSystemInfo ExpandEnvironmentStringsW CreateEventW VirtualProtect TerminateProcess Thread32Next Thread32First CreateToolhelp32Snapshot GetExitCodeThread CreateRemoteThread GetVersionExW VirtualProtectEx VirtualFreeEx SetEndOfFile WriteConsoleW SetStdHandle GetConsoleCP FlushFileBuffers SetHandleInformation WriteProcessMemory FindFirstFileW GetModuleFileNameA GetStartupInfoW GetProcessHeap DeleteCriticalSection GetFileSize GetProcAddress DecodePointer HeapAlloc RaiseException CloseHandle HeapReAlloc OutputDebugStringW ReadFile GetLastError Sleep HeapSize GetModuleHandleA GetSystemDirectoryW CreateFileW InitializeCriticalSectionAndSpinCount DeviceIoControl FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP IsValidCodePage FindNextFileA FindFirstFileExA ReadConsoleW GetConsoleMode SetFilePointerEx GetACP GetFileType GetStdHandle EnumSystemLocalesW GetUserDefaultLCID IsValidLocale InterlockedFlushSList LoadLibraryExW RtlUnwind InitializeSListHead GetCurrentThreadId QueryPerformanceCounter IsProcessorFeaturePresent HeapFree SetUnhandledExceptionFilter UnhandledExceptionFilter WaitForSingleObjectEx ResetEvent SetEvent IsDebuggerPresent LocalFree GetCPInfo GetLocaleInfoW LCMapStringW GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue GetStringTypeW EnterCriticalSection LeaveCriticalSection EncodePointer TlsAlloc

user32

GetWindowThreadProcessId GetSystemMetrics wsprintfW

advapi32

CryptGetHashParam RegQueryInfoKeyW RegEnumKeyExW RegCloseKey CloseServiceHandle OpenSCManagerW GetServiceKeyNameW RegOpenKeyExW QueryServiceConfigW RegQueryValueExW CryptAcquireContextW CryptCreateHash CryptHashData CryptDestroyHash CryptReleaseContext

shell32

SHGetFolderPathW

ole32

CoInitializeEx CoInitializeSecurity CoSetProxyBlanket CoInitialize CoUninitialize CoCreateInstance CoTaskMemFree

oleaut32

VariantClear SysAllocString SysFreeString VariantInit

ws2_32

inet_addr WSACleanup gethostbyname WSASetLastError WSAStartup inet_ntoa

psapi

EnumProcessModules GetModuleBaseNameW GetModuleFileNameExA GetModuleFileNameExW GetModuleInformation

iphlpapi

GetBestInterface

shlwapi

PathFindFileNameW PathAppendW StrStrIW StrStrA StrStrW StrStrIA PathFindFileNameA PathFileExistsW

version

VerQueryValueA GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

Name

.text

Size

258KB

Virtual Size

258KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

HookStub

Size

512B

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ

Name

.rdata

Size

84KB

Virtual Size

83KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

1024B

Virtual Size

696B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

WiFiHelper.exe

IMPHASH f51ad65de9d365c7825328eb3f74d656
SHA256 24d37a2006503921e048249115db3e96331d0f2e92845e79e2b00b1b4d1f4c3d
MD5 8a4e075e1413f7c43b9732fd5cc269ee
SHA1 5af9b679266558b18b3f5a7db63778d31d32546c
SHA512 4df0ceb289ae5afd6deafc40192b066a291276fb3d841733f6a2b8225d85e2d8ab56b07633ba541a2a094b163c726318e0d8b35c7b896c632ad845b081288043
SSDEEP 12288:V4+x/ixd8yhLCPZMxzkYTOqHVZoxkxdNx1LBlzZaamnC0RDRtAbrK2:V9ixpZOkBZa5CCltSO2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

46:b9:15:38:65:26:69:4a:2b:4d:90:8a:fe:c5:dd:f8:ac:7a:d6:9f:0d:63:c4:69:19:0e:33:95:92:4f:2e:2e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

PE Signature issue

Digest

98:a9:60:4b:9a:41:56:ed:d4:52:a6:16:7a:95:2a:5b:10:1b:5e:89

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

1

Major OS version

5

Entry point

106749

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\SVN\Wifi360\branches\201405131202\Tool\WiFiHelper\Release\WiFiHelper.pdb

version

GetFileVersionInfoW VerQueryValueA VerQueryValueW GetFileVersionInfoSizeW

psapi

GetModuleFileNameExW

user32

wsprintfW GetSystemMetrics

ole32

CoUninitialize CoCreateInstance CoInitialize

oleaut32

VariantInit

kernel32

MultiByteToWideChar CreateFileW GetFileAttributesW FileTimeToSystemTime CloseHandle WideCharToMultiByte WriteFile OutputDebugStringA InitializeCriticalSection SetFilePointer OutputDebugStringW CreateFileA DeleteFileA GetLocalTime GetFileSize DeleteCriticalSection FlushFileBuffers GetSystemDirectoryW GetSystemInfo GetModuleHandleW GetCurrentProcess Sleep GetLastError LoadLibraryA GetProcAddress FreeLibrary GetModuleFileNameA WritePrivateProfileStringW HeapFree GetPrivateProfileIntW GetModuleFileNameW InitializeCriticalSectionAndSpinCount GetModuleHandleA OpenProcess HeapSize CreateToolhelp32Snapshot GetPrivateProfileStringW OpenMutexA Process32NextW Process32FirstW HeapReAlloc RaiseException HeapAlloc FindClose GetProcessHeap CopyFileW GetCurrentProcessId WriteProcessMemory SetLastError WaitForSingleObject GetVersionExW GetExitCodeThread LoadLibraryW VirtualProtectEx VirtualAllocEx CreateRemoteThread VirtualFreeEx GetStringTypeW EnterCriticalSection LeaveCriticalSection EncodePointer CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetTickCount CompareStringW LCMapStringW GetLocaleInfoW GetCPInfo SetEvent ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId InitializeSListHead FindFirstFileExW FindNextFileW SetEndOfFile IsValidCodePage GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetEnvironmentVariableW SetStdHandle GetCurrentDirectoryW GetFullPathNameW WriteConsoleW DecodePointer GetTimeZoneInformation GetConsoleCP ReadConsoleW GetConsoleMode EnumSystemLocalesW GetUserDefaultLCID IsValidLocale SetFilePointerEx FreeLibraryAndExitThread ExitThread CreateThread SystemTimeToTzSpecificLocalTime GetDriveTypeW GetACP GetCommandLineW GetCommandLineA GetModuleHandleExW ExitProcess LoadLibraryExW RtlUnwind ExpandEnvironmentStringsA PeekNamedPipe ReadFile GetStdHandle GetFileType WaitForMultipleObjects FormatMessageA SleepEx

advapi32

RegSetValueExA RegCreateKeyExW RegSetValueExW RegOpenKeyExW LookupPrivilegeValueW AdjustTokenPrivileges CreateServiceW RegCloseKey CloseServiceHandle OpenSCManagerW RegCreateKeyExA DeleteService ControlService OpenProcessToken StartServiceW RegOpenKeyExA OpenServiceW

shell32

SHGetFolderPathW

ws2_32

getsockopt getsockname getpeername connect closesocket bind send recv WSAGetLastError WSACleanup WSAStartup ntohs setsockopt socket WSASetLastError htons ioctlsocket gethostname sendto getaddrinfo freeaddrinfo __WSAFDIsSet select accept listen recvfrom

wldap32

ord60 ord46 ord143 ord50 ord41 ord22 ord26 ord301 ord200 ord30 ord79 ord35 ord33 ord32 ord211 ord27

Name

.text

Size

430KB

Virtual Size

429KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

104KB

Virtual Size

103KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

1024B

Virtual Size

732B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

WiFiHelper.sys

IMPHASH aed72e2fd84418b7a8babbbcb82647e9
SHA256 7c548e819a58aa8c36a97a612cca1bd07591ca76d775939536ce4070497f0a0d
MD5 ec6d24fe8baae2cb3d234f8b7eaf6a3d
SHA1 dd21cd32f9f148897c2be87bbedef7c7cbffe11f
SHA512 524572e4e2186f8360dfc8fd9909b77fa872d79212ae9913bbb7760c34cc1f322c004a9b95e020307d9881078fa8981bb883be83c7c2563a909114bb1c93a70b
SSDEEP 768:+4iB49a/R0ZeoffReVPzWixKg/ifd6Kgd:+4iB49a/R0VffRehzFcYn
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

81:35:ee:15:4b:b6:31:82:1d:f2:2b:82:22:ea:75:d9:2f:27:28:16:52:66:c0:24:54:e2:d5:4a:85:cb:99:61

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

PE Signature issue

Digest

4d:8c:fc:b2:b7:fb:e7:e6:4e:f9:8d:0a:21:21:de:fc:54:ea:4d:87

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:29:15:27:00:00:00:00:00:2a

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:29:15:27:00:00:00:00:00:2a

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

4

Entry point

17200

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

512B

Virtual Size

388B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

816B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

732B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

WiFiHelperX64.dll

IMPHASH 33c21edc0052c4fd4c9f102f2a4036ea
SHA256 236b47484519ce57f09208c655b2282f6d7001df912775b2a6f5d901872a15ac
MD5 db8ec301f79f9693368e45fcfa8d4f9e
SHA1 905baab86b623a24c1723560dfd763c9dd8dc591
SHA512 4c02b93b15fd5d0989f984220721d13cbc82540ee1744defbacd5220df0dcdbf7c2a63488b3c90d8550f167ab2dccb269923edf8504693f91220da4bfd623871
SSDEEP 6144:ZUK+pZwAYYCUHhuGU7qBCnV8aHpR7ZPIkA/xxubyo2:GK8JhuGU7q8nTHXdDrn2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

PE Signature issue

Digest

bb:fb:b7:f7:df:38:00:fa:12:66:f0:ca:5c:d8:e5:f8:42:d8:ed:00:95:06:3f:33:f5:20:76:86:0c:7a:bb:9f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

PE Signature issue

Digest

4a:65:b5:a3:75:cf:c2:1d:9b:9e:a4:e5:7e:13:02:85:3f:a5:f3:4f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

2

Major OS version

5

Entry point

87748

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\SVN\Wifi360\branches\201405131202\WiFiProject\x64\Release\WiFiHelperX64.pdb

kernel32

GetTickCount GetLastError CreatePipe SetHandleInformation WaitForSingleObject Sleep GetFileSize ReadFile WriteFile CloseHandle SetLastError GetModuleFileNameW FreeLibrary LoadLibraryW OutputDebugStringW GetCurrentProcess GetCurrentProcessId CreateMutexA GetModuleHandleExW CreateThread GetModuleFileNameA CreateFileW HeapReAlloc GetModuleHandleA WideCharToMultiByte OutputDebugStringA GetModuleHandleW GetProcAddress HeapSize SetFilePointerEx SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindNextFileA FindFirstFileExA FindClose GetConsoleMode GetConsoleCP LoadLibraryA FlushFileBuffers WaitForSingleObjectEx GetStringTypeW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW MultiByteToWideChar LocalFree EnterCriticalSection VirtualFree VirtualAlloc SetThreadPriority LeaveCriticalSection InitializeCriticalSection GetCurrentThreadId SuspendThread ResumeThread GetCurrentThread GetThreadPriority GetSystemInfo VirtualProtectEx GetThreadContext FlushInstructionCache VirtualQuery OpenThread RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead RtlPcToFileHeader EncodePointer RaiseException RtlUnwindEx InterlockedFlushSList DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetStdHandle GetFileType WriteConsoleW ExitProcess HeapFree HeapAlloc GetACP

user32

wsprintfW

advapi32

CloseServiceHandle GetServiceKeyNameW OpenSCManagerW QueryServiceConfigW

ole32

CoInitializeEx CoInitializeSecurity CoUninitialize CoCreateInstance CoSetProxyBlanket CoInitialize CoTaskMemFree

oleaut32

VariantInit VariantClear SysAllocString SysFreeString

ws2_32

gethostbyname WSACleanup inet_ntoa inet_addr WSAStartup

iphlpapi

GetBestInterface

shlwapi

PathFindFileNameW StrStrIW StrStrIA PathFindFileNameA

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

Name

.text

Size

189KB

Virtual Size

188KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

76KB

Virtual Size

75KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

170KB

Virtual Size

176KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

284B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

WiFiHelperX64.sys

IMPHASH 980581b65150936b55ed636cbc215aa7
SHA256 a7e20e5ec867eb34e00f8cfb0332691d5d1747b8eeaafd15201a235178545b58
MD5 3b60a8c90fa640a70e91ccece9c66cbf
SHA1 90adbb64f5702a315fb5e24325f554ae216aae49
SHA512 d323227f6e965ec89c69697f4c0a39ed409fae91270b0f486dd538dfd2e6ef46f43d104f6edec10cc2db4031810ef1039b63607536a998e0309abda6213a0288
SSDEEP 384:GtCFuDR/kGWAbvGPBIMlQ7BV1EgfmVDvi9r+raYSMK6jHxr+raYIzMK6jR:Tu1MGZOn677cLoixKgRiUQKgR
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

PE Signature issue

Digest

1c:1a:17:40:4e:e4:0f:92:6a:c1:eb:03:fb:30:b0:2f:2a:bf:16:75:c1:d2:f7:7c:d9:a0:02:7d:97:03:17:d5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

PE Signature issue

Digest

f2:a4:72:12:aa:7c:5c:d5:98:88:b0:03:4b:bc:c2:25:85:70:4a:c8

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Chains

Jan 13, 2020

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:29:15:27:00:00:00:00:00:2a

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=上海游安网络科技有限公司,O=上海游安网络科技有限公司,L=上海市,ST=上海市,C=CN

Serial Number

0f:44:a1:4e:b0:b0:a8:ca:a3:65:c0:b1

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 23, 2019 - Dec 23, 2021

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:29:15:27:00:00:00:00:00:2a

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

10

Entry point

32768

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

E:\其它\桌面2\test\x64\Release\test.pdb

Name

.text

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

656B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

36B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

WiFiHelperX64_ms.sys

IMPHASH 980581b65150936b55ed636cbc215aa7
SHA256 728c84d7c2d058743b43848c8e0ed9287c4f146167d13ba209847361af4a99de
MD5 4de33eb8e0feefbf4e7328754dc1e5b4
SHA1 5b7a3b7555bc2c7ea286f3a102f3899434f5c54b
SHA512 da0809d6c5b1375493d8cb26f670c5d914ccf16e11160dd34acce3b07915d54c853feff67e3243891a41d6bf4123b5434fb625411160edbe223a866f27ad94d1
SSDEEP 384:Gt7FuDR/kGWAbvGPBIMlQ7BV1EgfmVDvi7qFRGwlndaIGFOQ1FE:yu1MGZOn677cLEMLaFE
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

PE Signature issue

Digest

1c:1a:17:40:4e:e4:0f:92:6a:c1:eb:03:fb:30:b0:2f:2a:bf:16:75:c1:d2:f7:7c:d9:a0:02:7d:97:03:17:d5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 5, 2024

Minor OS version

0

Major OS version

10

Entry point

32768

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

E:\其它\桌面2\test\x64\Release\test.pdb

Name

.text

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

656B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

36B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

WiFiMaster.exe

IMPHASH cdb75093399178675353f6931d6bd7b0
SHA256 488ed02f3cdc19e128e0ff7912530fc4c57a241d2d236486c65e1338910570ff
MD5 9d1b670968e59b0cf972e1529342e46b
SHA1 89100c52b6924b701690db4cdb0543931daee673
SHA512 cc46b2e5dce06519f677d98829103201ab9d1532089d03d76aa5f07b57f38b574826d3486cc7231ef0c7a22b9de88656e996756904112c4e3506a711b70279de
SSDEEP 98304:gYk4QB/tZc/1Vc1ZfCUlmQwRyxQrQ38jEi1uQDgJai6WlrHhkG2Esz2:Rh3aaSQRT88jIJG4hB26
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

2982770

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\SVN\WifiMaster\branches\201405131202\WiFiProject\Release\WiFiMaster.pdb

winmm

mixerGetDevCapsW mixerGetLineInfoW mixerOpen mixerSetControlDetails mixerGetControlDetailsW mixerGetLineControlsW mixerClose PlaySoundW

gdi32

PtVisible RectVisible RestoreDC SaveDC SelectClipRgn ExtSelectClipRgn SelectObject SelectPalette SetBkMode SetMapMode SetLayout GetLayout SetPolyFillMode SetROP2 SetTextAlign MoveToEx TextOutW ExtTextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx CreateFontIndirectW GetTextExtentPoint32W CombineRgn CreateRectRgnIndirect PatBlt SetRectRgn DPtoLP GetTextMetricsW EnumFontFamiliesExW CreatePalette GetNearestPaletteIndex GetPaletteEntries GetSystemPaletteEntries RealizePalette GetBkColor CreateCompatibleBitmap CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo SetPixel StretchBlt CreateDIBSection SetDIBColorTable CreateEllipticRgn Ellipse GetTextColor CreatePolygonRgn Polygon Polyline CreateRoundRectRgn LPtoDP Rectangle GetRgnBox OffsetRgn RoundRect FillRgn FrameRgn GetBoundsRect PtInRegion SetPaletteEntries SetPixelV GetWindowOrgEx GetViewportOrgEx GetTextFaceW CopyMetaFileW CreateDCW ExtFloodFill GetDeviceCaps CreateBitmap SetBkColor SetTextColor GetObjectW DeleteObject BitBlt CreateCompatibleDC CreateHatchBrush CreatePen CreatePatternBrush CreateRectRgn CreateSolidBrush DeleteDC Escape ExcludeClipRect GetClipBox GetObjectType GetPixel GetStockObject GetViewportExtEx GetWindowExtEx IntersectClipRect LineTo

version

VerQueryValueW GetFileVersionInfoW VerQueryValueA GetFileVersionInfoSizeW

psapi

GetModuleInformation EnumProcesses GetModuleFileNameExW GetMappedFileNameW

user32

OpenWindowStationW GetSysColor GetSysColorBrush LoadCursorW GetWindowTextW RegisterWindowMessageA LoadMenuA PostMessageA SetWindowLongA CallWindowProcA GetWindowLongA RegisterClassA DefWindowProcA CreateWindowExA SendMessageA LoadIconA GetWindowTextLengthA RegisterClassExA GetMessageA DispatchMessageA FindWindowExW ExitWindowsEx LockWorkStation EnumWindows FindWindowW wsprintfA keybd_event GetShellWindow wsprintfW DestroyCursor GetWindowRgn CreateMenu SubtractRect TranslateMDISysAccel DefMDIChildProcW DefFrameProcW DrawMenuBar GetUpdateRect IsClipboardFormatAvailable CharUpperBuffW RegisterClipboardFormatW ModifyMenuW GetDoubleClickTime SetMenuDefaultItem LockWindowUpdate SetRect CopyAcceleratorTableW DestroyAcceleratorTable CreateAcceleratorTableW GetKeyboardState ToUnicodeEx MapVirtualKeyExW IsCharLowerW GetKeyboardLayout WaitMessage PostThreadMessageW GetComboBoxInfo ReuseDDElParam UnpackDDElParam InsertMenuItemW TranslateAcceleratorW LoadAcceleratorsW MonitorFromPoint UpdateLayeredWindow UnionRect DrawIcon FrameRect CopyIcon SetCursorPos BringWindowToTop GetSystemMenu IsZoomed DrawFrameControl DrawEdge DrawStateW EmptyClipboard SetClipboardData CloseClipboard OpenClipboard SetParent SetWindowRgn SetClassLongW EnumDisplayMonitors SetLayeredWindowAttributes LoadMenuW GetKeyNameTextW MapVirtualKeyW GetWindowTextLengthW CreatePopupMenu NotifyWinEvent InvertRect HideCaret EnableScrollBar MessageBeep GetIconInfo DrawIconEx IsRectEmpty DrawFocusRect OpenDesktopW ReleaseCapture SetCapture GetNextDlgGroupItem KillTimer SetTimer DeleteMenu SetCursor ShowOwnedPopups LoadImageW InvalidateRect TrackMouseEvent IntersectRect MapDialogRect GetAsyncKeyState GetNextDlgTabItem EndDialog CreateDialogIndirectParamW PostQuitMessage OffsetRect SetRectEmpty SendDlgItemMessageA CopyImage SystemParametersInfoW InflateRect GetMenuItemInfoW DestroyMenu FillRect GetWindowDC TabbedTextOutW GrayStringW DrawTextExW DrawTextW RealChildWindowFromPoint GetDesktopWindow ClientToScreen CharUpperW DestroyIcon IsDialogMessageW SetWindowTextW CheckDlgButton MoveWindow ShowWindow GetMonitorInfoW MonitorFromWindow WinHelpW GetScrollInfo SetScrollInfo LoadIconW GetWindow GetTopWindow GetClassNameW GetClassLongW SetWindowLongW PtInRect EqualRect CopyRect MapWindowPoints ScreenToClient AdjustWindowRectEx GetWindowRect GetClientRect RemovePropW GetPropW SetPropW ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow RedrawWindow EndPaint BeginPaint SetForegroundWindow GetForegroundWindow SetActiveWindow UpdateWindow TrackPopupMenu SetMenu GetMenu GetCapture SetFocus GetDlgCtrlID GetDlgItem IsIconic EndDeferWindowPos DeferWindowPos GetFocus SetWindowPlacement GetWindowPlacement SetWindowPos DestroyWindow IsChild IsMenu IsWindow CreateWindowExW GetClassInfoExW GetClassInfoW SetProcessWindowStation MessageBoxA CloseDesktop SetThreadDesktop CloseWindowStation SendMessageTimeoutW GetCursorPos SetWindowsHookExW CallNextHookEx GetSystemMetrics GetDC ReleaseDC ValidateRect GetKeyState GetActiveWindow IsWindowVisible PeekMessageW DispatchMessageW TranslateMessage GetMessageW RemoveMenu AppendMenuW InsertMenuW GetMenuItemCount GetMenuItemID GetSubMenu GetMenuState GetMenuStringW GetLastActivePopup GetWindowThreadProcessId GetParent GetWindowLongW IsWindowEnabled EnableWindow SendMessageW UnhookWindowsHookEx MessageBoxW WindowFromPoint PostMessageW CheckMenuItem EnableMenuItem SetMenuItemBitmaps GetMenuCheckMarkDimensions SetMenuItemInfoW LoadBitmapW RegisterWindowMessageW GetMessagePos RegisterClassW CallWindowProcW DefWindowProcW GetMenuDefaultItem BeginDeferWindowPos GetMessageTime

ole32

ReleaseStgMedium CoTaskMemFree CoTaskMemAlloc StringFromGUID2 CoInitializeEx CoSetProxyBlanket CoCreateInstance CoUninitialize CoInitialize CoInitializeSecurity OleDuplicateData CoDisconnectObject CreateStreamOnHGlobal DoDragDrop OleGetClipboard CoLockObjectExternal RegisterDragDrop RevokeDragDrop OleLockRunning OleCreateMenuDescriptor OleDestroyMenuDescriptor OleTranslateAccelerator IsAccelerator

oleaut32

SysFreeString LoadTypeLi SysAllocStringLen SysStringLen SystemTimeToVariantTime VariantTimeToSystemTime VariantClear VariantCopy VariantChangeType VarBstrFromDate VariantInit SysAllocString

kernel32

RtlUnwind InterlockedPushEntrySList InterlockedFlushSList ExitThread FreeLibraryAndExitThread GetModuleHandleExW HeapQueryInformation VirtualAlloc VirtualQuery SetStdHandle GetFileType GetStdHandle GetACP WriteConsoleW GetModuleFileNameW InitializeCriticalSectionAndSpinCount HeapSize GetLastError HeapReAlloc RaiseException LoadLibraryW GetTimeZoneInformation SetFilePointerEx FindFirstFileExW GetConsoleMode ReadConsoleW GetConsoleCP GetDateFormatW GetTimeFormatW IsValidLocale EnumSystemLocalesW IsValidCodePage GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA CreateTimerQueue SignalObjectAndWait SwitchToThread GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask RegisterWaitForSingleObject UnregisterWait GetThreadTimes RemoveDirectoryW VirtualFree InterlockedPopEntrySList QueryDepthSList UnregisterWaitEx SleepEx ExpandEnvironmentStringsA OpenEventW SetHandleInformation OpenFileMappingW DosDateTimeToFileTime SetThreadAffinityMask GetCPInfo LCMapStringW TryEnterCriticalSection GetStringTypeW GetDriveTypeW MoveFileExW GetLogicalDriveStringsW lstrlenW PostQueuedCompletionStatus QueryPerformanceFrequency CreateIoCompletionPort GetQueuedCompletionStatus CreateSemaphoreW GetPrivateProfileSectionNamesW GetEnvironmentVariableW SetEnvironmentVariableW GetSystemDirectoryA GetModuleFileNameA DeviceIoControl TerminateJobObject OpenJobObjectW CreateJobObjectW SetInformationJobObject OpenThread SetThreadContext GetThreadContext GetCommandLineA CompareFileTime CreateMutexA VirtualFreeEx VirtualAllocEx VirtualProtectEx WriteProcessMemory Module32NextW Module32FirstW MapViewOfFile CreateFileMappingW IsBadReadPtr FormatMessageA GetSystemTime LockFileEx GetSystemInfo GetVersionExA GetFileAttributesA GetDiskFreeSpaceA GetTempPathA HeapValidate UnmapViewOfFile UnlockFileEx GetFullPathNameA InterlockedCompareExchange HeapCreate AreFileApisANSI ExpandEnvironmentStringsW CreateProcessA CreateRemoteThread CreateProcessW ReadProcessMemory GetExitCodeThread Thread32First CreatePipe Thread32Next AssignProcessToJobObject QueryDosDeviceW DeleteFileA FindNextFileW CreateSemaphoreA ReleaseSemaphore GetExitCodeProcess ConnectNamedPipe CreateEventA GetOverlappedResult TerminateThread DisconnectNamedPipe PeekNamedPipe WaitForMultipleObjects CreateNamedPipeA CreateFileA WaitNamedPipeA CreateDirectoryW GetLocalTime InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter WaitForSingleObjectEx ResetEvent GetUserDefaultLCID GetDiskFreeSpaceW SearchPathW GetProfileIntW GetTickCount GetTempFileNameW VerifyVersionInfoW VerSetConditionMask GetWindowsDirectoryW lstrcpyW SystemTimeToTzSpecificLocalTime SetFileTime GetFileTime GetFileSizeEx GetFileAttributesExW FileTimeToLocalFileTime VirtualProtect GetVersionExW GlobalFlags GetUserDefaultUILanguage GetLocaleInfoW CompareStringW MoveFileW lstrcmpiW DuplicateHandle UnlockFile SetFilePointer SetEndOfFile ReadFile LockFile GetVolumeInformationW GetFullPathNameW GetFileSize FlushFileBuffers FindFirstFileW FindClose GlobalFindAtomW GlobalAddAtomW LoadLibraryA lstrcmpW GlobalDeleteAtom LoadLibraryExW FreeResource FreeLibrary GetSystemDirectoryW EncodePointer SystemTimeToFileTime FileTimeToSystemTime GlobalGetAtomNameW lstrcmpA ResumeThread SuspendThread GetCurrentThreadId CreateEventW SetEvent CopyFileW FormatMessageW MulDiv GlobalSize LocalFree LocalReAlloc LocalAlloc GlobalFree GlobalUnlock GlobalHandle GlobalLock GlobalReAlloc GlobalAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection GetModuleHandleA SetLastError OutputDebugStringW GetTempPathW SetCurrentDirectoryW FindResourceW LoadResource FindResourceExW LockResource OpenProcess WaitForSingleObject SizeofResource GetCurrentProcessId ExitProcess Process32FirstW GetCurrentThread Process32NextW OpenMutexA CreateToolhelp32Snapshot ReleaseMutex GetFileAttributesW CreateMutexW LeaveCriticalSection SetThreadPriority TerminateProcess InterlockedDecrement OutputDebugStringA GetCurrentProcess GetCommandLineW EnterCriticalSection SetPriorityClass WritePrivateProfileStringW WideCharToMultiByte GetCurrentDirectoryW CreateThread CloseHandle DeleteFileW Sleep MultiByteToWideChar CreateFileW WriteFile GetModuleHandleW GetPrivateProfileStringW GetPrivateProfileIntW GetProcessHeap DeleteCriticalSection GetProcAddress HeapDestroy DecodePointer HeapAlloc HeapFree

advapi32

RegDeleteValueW OpenServiceW ControlService OpenSCManagerA OpenSCManagerW CloseServiceHandle QueryServiceStatus RegOpenKeyExW RegCloseKey RegCreateKeyExW RegDeleteKeyW RegEnumKeyExW RegSetValueExW RegQueryValueExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW RegQueryInfoKeyW CryptReleaseContext CryptGenRandom CryptAcquireContextW CryptGetHashParam CryptDestroyHash CryptHashData CryptCreateHash ChangeServiceConfigW QueryServiceConfigW StartServiceW DeleteService RegOpenKeyExA RegSetValueExA StartServiceA RegQueryValueExA QueryServiceStatusEx RegEnumKeyExA OpenServiceA

shell32

ShellExecuteW SHGetFolderPathW ShellExecuteExW SHGetFileInfoW SHGetPathFromIDListW SHGetSpecialFolderLocation SHGetDesktopFolder DragQueryFileW DragFinish SHBrowseForFolderW SHAppBarMessage CommandLineToArgvW ShellExecuteA SHCreateDirectoryExW

shlwapi

PathAddBackslashW PathCanonicalizeW PathIsRelativeW PathAppendW PathFindFileNameW PathIsUNCW PathStripToRootW PathFindExtensionW PathRemoveFileSpecW StrFormatKBSizeW PathIsDirectoryW SHGetValueW SHSetValueW SHDeleteValueW StrStrIW PathFileExistsW StrStrIA

ws2_32

getaddrinfo freeaddrinfo gethostname WSASetLastError getsockopt inet_addr WSAGetLastError setsockopt gethostbyaddr WSASendTo WSARecvFrom WSASend shutdown sendto htons WSARecv getsockname gethostbyname WSAAccept WSASetEvent getpeername WSAEventSelect WSAResetEvent WSAWaitForMultipleEvents ioctlsocket WSACleanup __WSAFDIsSet accept bind WSAIoctl closesocket select ntohl listen WSACloseEvent WSACreateEvent WSASocketW WSAStartup send socket ntohs connect inet_ntoa recvfrom recv htonl

oleacc

CreateStdAccessibleObject AccessibleObjectFromWindow LresultFromObject

gdiplus

GdiplusShutdown GdipFree GdipGetImageEncoders GdipGetImageEncodersSize GdiplusStartup GdipCloneImage GdipDisposeImage GdipGetImageGraphicsContext GdipGetImageWidth GdipGetImageHeight GdipGetImagePixelFormat GdipGetImagePalette GdipSaveImageToFile GdipScaleWorldTransform GdipDrawImageRectI GdipSetInterpolationMode GdipCreateFromHDC GdipGetImagePaletteSize GdipCreateBitmapFromStream GdipCreateBitmapFromScan0 GdipBitmapLockBits GdipBitmapUnlockBits GdipAlloc GdipDeleteGraphics GdipDrawImageI GdipCreateBitmapFromHBITMAP

msimg32

TransparentBlt AlphaBlend

imm32

ImmReleaseContext ImmGetOpenStatus ImmGetContext

rpcrt4

UuidFromStringW

iphlpapi

GetAdaptersInfo GetBestInterface SendARP GetNetworkParams NotifyAddrChange GetAdaptersAddresses GetIfEntry EnableRouter GetIfTable UnenableRouter

setupapi

CM_Get_DevNode_Status CM_Reenumerate_DevNode CM_Locate_DevNodeW SetupDiSetClassInstallParamsW SetupDiCreateDeviceInfoList SetupDiGetINFClassW SetupDiChangeState SetupOpenInfFileW SetupDiGetDeviceRegistryPropertyW SetupDiGetDeviceInstanceIdA SetupDiClassNameFromGuidA SetupDiSetClassInstallParamsA SetupDiGetDeviceRegistryPropertyA SetupDiCallClassInstaller SetupDiSetDeviceRegistryPropertyW SetupDiCreateDeviceInfoW SetupDiClassGuidsFromNameW SetupDiRemoveDevice SetupGetStringFieldW SetupGetLineCountW SetupCloseInfFile SetupGetLineByIndexW SetupDiGetClassDevsW SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList

newdev

UpdateDriverForPlugAndPlayDevicesW

winspool.drv

OpenPrinterW DocumentPropertiesW ClosePrinter

uxtheme

DrawThemeText DrawThemeParentBackground OpenThemeData CloseThemeData DrawThemeBackground GetThemeColor GetCurrentThemeName GetWindowTheme IsAppThemed IsThemeBackgroundPartiallyTransparent GetThemeSysColor GetThemePartSize

wldap32

ord79 ord35 ord33 ord32 ord27 ord30 ord22 ord41 ord50 ord60 ord211 ord46 ord143 ord200 ord301 ord26

Name

.text

Size

3.5MB

Virtual Size

3.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

730KB

Virtual Size

729KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

78KB

Virtual Size

344KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

107KB

Virtual Size

106KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.giats

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

222KB

Virtual Size

221KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=32, id=241, version=40116,

count=221, id=243, version=40116,

count=34, id=242, version=40116,

count=2, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=13, id=199, version=41118,

count=2, id=261, version=23013,

count=16, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=2, id=261, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=1094, id=1, productName=Unmarked objects,

count=51, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=67, id=260, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=27, id=259, version=24123,

count=39, id=260, version=24123,

count=431, id=261, version=24123,

count=211, id=265, version=24210,

count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,

count=1, id=151,

count=1, id=258, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

Sharing

General

Malware Config

Signatures

File Explorer