WireVpn_v3[.]6[.]0[.]3-6872e76[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

WireVpn_v3.6.0.3-6872e76.exe

IMPHASH b76363e9cb88bf9390860da8e50999d2
SHA256 f5111a55125fcc4223805a676963852e9cf238287a51e4caad46791331127a24
MD5 6872e762ad08e54a7158359ff92e61dd
SHA1 7d16a1e77c487364021673e4eeb2552852f53039
SHA512 ead4f48f1416f1487b54a8db92297882ff4ba064ce2054653e49394092df0e39e176df1c0c971bda17da1ac31c02bfbadea1d1bbb99246cd860f0f82c95f5893
SSDEEP 393216:lE2hyY0hSJPmvnuN0W5BiJunKvM+xD1zWjW3WjWX:uBQJmDW5BiQKhXG0Ge
TLSH
T1D1E6333C2626F846CF4669729DBCD047D5874B789E8E15E00922EAD330DF3EC54B8A5E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

9b:d8:29:ac:91:e2:26:0a:dd:53:58:0d:95:08:9d:df:2b:08:ed:3b:05:63:cf:e6:b2:59:b6:41:f6:47:45:c0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 5, 2026

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

12539

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA SetFileAttributesA CompareFileTime SearchPathA GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA GetTempPathA Sleep lstrcmpiA GetVersion SetErrorMode lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread GetLastError CreateDirectoryA CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrcatA GetSystemDirectoryA WaitForSingleObject SetFileTime CloseHandle GlobalFree lstrcmpA ExpandEnvironmentStringsA GetExitCodeProcess GlobalAlloc lstrlenA GetCommandLineA GetProcAddress FindFirstFileA FindNextFileA DeleteFileA SetFilePointer ReadFile FindClose GetPrivateProfileStringA WritePrivateProfileStringA WriteFile MulDiv MultiByteToWideChar LoadLibraryExA GetModuleHandleA FreeLibrary

user32

SetCursor GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor EndDialog ScreenToClient LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetForegroundWindow GetWindowLongA RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA ExitWindowsEx SetTimer PostQuitMessage SetWindowLongA SendMessageTimeoutA LoadImageA wsprintfA GetDlgItem FindWindowExA IsWindow SetClipboardData EmptyClipboard OpenClipboard EndPaint CreateDialogParamA DestroyWindow ShowWindow SetWindowTextA

gdi32

SelectObject SetBkMode CreateFontIndirectA SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA SHFileOperationA ShellExecuteA

advapi32

RegDeleteValueA SetFileSecurityA RegOpenKeyExA RegDeleteKeyA RegEnumValueA RegCloseKey RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_AddMasked ImageList_Destroy ImageList_Create ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH f2ac1ab587d5531d5f1bf76c094aef4c
SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
MD5 56a321bd011112ec5d8a32b2f6fd3231
SHA1 df20e3a35a1636de64df5290ae5e4e7572447f78
SHA512 5354890cbc53ce51081a78c64ba9c4c8c4dc9e01141798c1e916e19c5776dac7c82989fad0f08c73e81aaba332dad81205f90d0663119af45550b97b338b9cc3
SSDEEP 192:uv+cJZE61KRWJQO6tFiUdK7ckK4k7l1XRBm0w+NiHi1GSJ:uf6rtFRduQ1W+fG8
TLSH
T127225C5893E0C1F3D6A0853C18A73A772729712445A18FE3CFA35841AE196D7BC7E336
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10512

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/setupdll.dll

IMPHASH fa356e30e1a9a95211f4155236d3d3fc
SHA256 8ebc5121acf8a6f3371ecab94961a67f8f6557b5ef8ab585d0729d396d9f4337
MD5 bbae36f39600ae44409e7b26c8117f0b
SHA1 0980d794d50054d448ac6bf17cd91cb40b2e8cb7
SHA512 96e7ffc20f5e2bde4d31692887d42f91c854228d5f66cf1dabbb0b77765b27f158c310292a13b670dc06fef683ce8dd280c30ef85bf18e0f1af4dece243e9ab9
SSDEEP 98304:MKdqLjI0yAMQV2R3c7QF34W7Nr616Ab+RX:aPIpF6nNb+RX
TLSH
T102F5CF11BA904072D19E02705A76F7BE8D7EEA105774C9C3BBAC166F4F326D0E63A352
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

09:d8:b8:6a:d0:76:e5:2b:4b:71:5f:d8:ad:aa:a0:ff:02:d8:d3:0a:62:52:8a:3d:d7:25:b4:e4:02:51:b9:0b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Dec 16, 2025

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

1667225

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\youqu_wirevpn\InstallPackage\setupdll-360\bin\setupdll.pdb

ws2_32

WSAIoctl getaddrinfo freeaddrinfo accept ntohs recvfrom sendto ioctlsocket gethostname htons getsockopt getsockname getpeername connect closesocket bind send recv WSASetLastError select __WSAFDIsSet socket WSAGetLastError WSACleanup shutdown setsockopt htonl getservbyname gethostbyname listen WSAStartup

wldap32

ord33 ord32 ord27 ord301 ord22 ord41 ord50 ord60 ord200 ord79 ord26 ord30 ord211 ord46 ord217 ord143 ord35

kernel32

HeapAlloc HeapFree FreeResource LockResource LoadResource SizeofResource FindResourceW GetFullPathNameW GetTickCount GetVersionExW FreeLibrary LoadLibraryW GetLocalTime GetVersionExA LoadLibraryA GetModuleHandleA FormatMessageA InitializeCriticalSectionEx SleepEx GetTickCount64 WaitForSingleObjectEx ExpandEnvironmentStringsA GetStdHandle GetFileType PeekNamedPipe WaitForMultipleObjects VerSetConditionMask GetSystemDirectoryA VerifyVersionInfoA FlushConsoleInputBuffer WriteFile GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GlobalMemoryStatus GetSystemTime SystemTimeToFileTime ReadConsoleInputW SetConsoleMode SetEndOfFile GetFileAttributesExW GetCurrentDirectoryW GetTimeZoneInformation SetStdHandle HeapReAlloc EnterCriticalSection GetUserDefaultLCID IsValidLocale GetFileSizeEx FlushFileBuffers GetConsoleOutputCP ReadConsoleW GetConsoleMode GetConsoleCP SetConsoleCtrlHandler SetFilePointerEx GetModuleHandleExW ExitThread FileTimeToSystemTime SystemTimeToTzSpecificLocalTime HeapCreate GetDriveTypeW CreateFileW RaiseException RtlUnwind UnregisterWaitEx QueryDepthSList InterlockedFlushSList InterlockedPushEntrySList InterlockedPopEntrySList ReleaseSemaphore VirtualFree VirtualProtect VirtualAlloc LoadLibraryExW FreeLibraryAndExitThread GetThreadTimes UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer ChangeTimerQueueTimer CreateTimerQueueTimer GetLogicalProcessorInformation GetThreadPriority SetThreadPriority SignalObjectAndWait CreateTimerQueue InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter ResetEvent SetEvent LocalFree GetCPInfo GetLocaleInfoW LCMapStringW CompareStringW DecodePointer EncodePointer GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc CreateEventW InitializeCriticalSectionAndSpinCount GetStringTypeW GetCurrentThread SwitchToThread DuplicateHandle TryEnterCriticalSection InitializeCriticalSection InterlockedDecrement InterlockedIncrement lstrcpyW CreateProcessW GetStartupInfoW SetCurrentDirectoryW GetCommandLineW FlushInstructionCache MulDiv DeleteCriticalSection HeapDestroy GetFileInformationByHandle lstrcpynW lstrcpynA GlobalFree lstrcpyA OpenProcess GetNativeSystemInfo ExitProcess OutputDebugStringW CreateThread ReadFile TerminateProcess CreatePipe Process32NextW Process32FirstW CreateToolhelp32Snapshot WaitForSingleObject GetPrivateProfileStringW GetModuleFileNameW OutputDebugStringA CopyFileA DeleteFileA Sleep lstrlenA FindClose FindFirstFileW LeaveCriticalSection SetLastError CloseHandle CreateProcessA GetStartupInfoA MultiByteToWideChar WideCharToMultiByte GetLastError CreateDirectoryW GetCurrentProcess GetModuleHandleW GetProcAddress GlobalUnlock GlobalLock GlobalAlloc FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap HeapSize WriteConsoleW EnumSystemLocalesW

user32

PtInRect MessageBoxW PostMessageW CopyRect InflateRect IsRectEmpty OffsetRect FillRect InvertRect DrawIconEx MsgWaitForMultipleObjects GetProcessWindowStation GetForegroundWindow UpdateLayeredWindow GetDesktopWindow GetUserObjectInformationW ShowWindow GetCursorPos IsIconic SetRect GetActiveWindow CallWindowProcW SetWindowLongW FindWindowExW SetTimer KillTimer SetCursor IntersectRect UnionRect EqualRect IsWindow DestroyWindow LoadCursorW DestroyCursor CharNextW DestroyIcon GetIconInfo DefWindowProcW UnregisterClassW RegisterClassExW CreateWindowExW SetWindowPos GetDlgItem GetClientRect GetWindowRect MapWindowPoints GetWindowLongW GetParent GetWindow SetActiveWindow EnableWindow MapVirtualKeyA CharLowerBuffW MessageBoxA SendMessageW ScreenToClient SystemParametersInfoA DrawTextW IsWindowVisible GetSystemMetrics EnableMenuItem ClientToScreen PeekMessageW MonitorFromWindow GetMonitorInfoW TrackMouseEvent PostQuitMessage AnimateWindow DispatchMessageW TranslateMessage GetMessageW LoadIconW LoadImageW CreateIconFromResource LoadBitmapW GetKeyState GetFocus GetSysColor SetMenuContextHelpId SetForegroundWindow GetMenuItemInfoW SetMenuInfo GetMenuInfo TrackPopupMenu AppendMenuW GetMenuItemCount DestroyMenu CreatePopupMenu IsWindowEnabled IsMenu GetClassNameW IsZoomed SetCaretPos HideCaret GetCaretBlinkTime CreateCaret SetWindowTextW InvalidateRect EndPaint BeginPaint ReleaseDC GetDC UpdateWindow ReleaseCapture SetCapture GetCapture SetFocus SetLayeredWindowAttributes

gdi32

GetClipRgn GetRgnBox GetTextColor GetTextExtentPoint32W IntersectClipRect OffsetRgn Pie PtInRegion RectInRegion RestoreDC RoundRect SaveDC ExtSelectClipRgn SetRectRgn SetTextColor GetWorldTransform CreateCompatibleBitmap StretchBlt ExcludeClipRect SetBkMode Rectangle GetStockObject GetClipBox CreateSolidBrush CreateFontIndirectW SetGraphicsMode GetDeviceCaps SelectObject DeleteDC CreateCompatibleDC CreateBitmap EnumFontsW BitBlt CreateRoundRectRgn DeleteObject SetWorldTransform CreateDIBSection Polyline GetCurrentObject GetViewportOrgEx Ellipse CreateRectRgnIndirect CreateRectRgn CreatePatternBrush CreatePen CreateEllipticRgnIndirect CombineRgn GetObjectW Arc SetViewportOrgEx

advapi32

CryptExportKey CryptGetUserKey CryptEnumProvidersA CryptSignHashA CryptDestroyHash CryptCreateHash CryptDecrypt RegCreateKeyExW RegOpenKeyExW RegCloseKey RegDeleteValueW RegSetValueExW RegQueryValueExW RegDeleteKeyW OpenSCManagerW CreateServiceW ChangeServiceConfig2W CloseServiceHandle OpenServiceW QueryServiceStatus StartServiceW ControlService DeregisterEventSource RegisterEventSourceA ReportEventA CryptAcquireContextA CryptGetProvParam CryptSetHashParam CryptDestroyKey CryptReleaseContext

shell32

Shell_NotifyIconW SHGetPathFromIDListW SHBrowseForFolderW ShellExecuteW ShellExecuteExW SHGetSpecialFolderPathW

ole32

StringFromGUID2 CoCreateGuid CreateBindCtx CLSIDFromProgID CLSIDFromString OleLockRunning OleInitialize CoTaskMemFree IIDFromString CoCreateInstance CreateStreamOnHGlobal OleUninitialize

oleaut32

SysAllocString VariantClear SysFreeString

shlwapi

StrToIntExW

iphlpapi

GetAdaptersInfo

gdiplus

GdipGetImageEncodersSize GdipDrawImageRectI GdipGraphicsClear GdipSaveImageToFile GdiplusShutdown GdiplusStartup GdipGetImageEncoders GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipFree GdipAlloc GdipDisposeImage GdipGetImageGraphicsContext GdipBitmapUnlockBits GdipDeleteGraphics GdipDrawImageI GdipCloneImage GdipGetImageWidth GdipGetImageHeight GdipImageGetFrameDimensionsCount GdipImageGetFrameDimensionsList GdipImageGetFrameCount GdipImageSelectActiveFrame GdipGetPropertyItemSize GdipGetPropertyItem GdipCreateBitmapFromFile GdipCreateBitmapFromStream

imm32

ImmReleaseContext ImmAssociateContext ImmGetContext

msimg32

AlphaBlend GradientFill

crypt32

CertDuplicateCertificateContext CertFindCertificateInStore CertEnumCertificatesInStore CertCloseStore CertOpenStore CertFreeCertificateContext CertGetCertificateContextProperty

Channel.dll

IMPHASH 6f7bf2eea44a79803e0341696ad0719b
SHA256 a64569669898736981b411dae920ee298e080ca625ab4ca18a6e738a967c343b
MD5 f11bdf6dd71ab62c55315b393bf074c5
SHA1 26a3570d30c8bdfb54401052c032d7e67aa52720
SHA512 dc80f217ce86ecf6d03a03ff3b98cea29a139cdd325fbd19508920d3950cb490eae0d84e27770ad1eb7b5d5f5b216c83231b80befa8d13445cb90cb1a6247593
SSDEEP 12288:GMyYUcgjfdlER+Jp1qF73C2eLKe5nEx05A2jqH4V:Gf3ayqLOKeJ5nw4V
TLSH
T1F5D47B10B501C037DE6D00700FB99BEA466D7D620BB144DBA7D92EFD99B11D36B32E2A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

36:9c:64:43:74:e7:f9:2f:45:00:50:26:2a:cd:dc:c4:1e:9c:53:71:a3:97:d8:ce:d7:75:bd:18:64:25:78:fd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 11, 2023

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

228787

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\youqu_driver\savitar\savitar-proxy\bin\Release\Win32\Channel.pdb

ws2_32

closesocket htons ntohs WSAGetLastError getsockopt setsockopt ioctlsocket WSASetLastError WSAStartup select WSARecvFrom bind WSAIoctl WSASend shutdown listen WSASocketW getsockname socket WSARecv

kernel32

GetACP IsValidCodePage GetTimeZoneInformation GetFileSizeEx CreatePipe SetEndOfFile HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW CompareStringW SystemTimeToTzSpecificLocalTime GetDriveTypeW GetFileAttributesExW GetModuleFileNameA GetModuleHandleW GetProcAddress LoadLibraryW FreeLibrary IsWow64Process GetCurrentProcess GetCurrentProcessId OpenThread CloseHandle CreateJobObjectA GetLastError QueryInformationJobObject SetInformationJobObject CreateProcessA AssignProcessToJobObject ResumeThread WaitForSingleObject Sleep HeapFree HeapAlloc GetProcessHeap SetErrorMode GetQueuedCompletionStatus PostQueuedCompletionStatus GetQueuedCompletionStatusEx CreateIoCompletionPort CancelIo SetHandleInformation RegisterWaitForSingleObject UnregisterWait CreateEventW SetFileCompletionNotificationModes GetConsoleMode GetFileType ReadFile SetNamedPipeHandleState SetLastError EnterCriticalSection WriteFile CreateNamedPipeW LeaveCriticalSection InitializeCriticalSection PeekNamedPipe CreateFileW DuplicateHandle QueueUserWorkItem MultiByteToWideChar CancelSynchronousIo GetNamedPipeHandleStateW GetCurrentThread CancelIoEx SwitchToThread LocalFree DeleteCriticalSection WideCharToMultiByte ConnectNamedPipe FlushFileBuffers GetCommandLineW GetFileInformationByHandle SetFilePointerEx GetOEMCP SetConsoleCtrlHandler GetConsoleScreenBufferInfo SetConsoleTextAttribute GetConsoleCursorInfo SetConsoleCursorInfo FillConsoleOutputCharacterW ReadConsoleInputW CreateFileA ReadConsoleW WriteConsoleInputW FillConsoleOutputAttribute WriteConsoleW GetNumberOfConsoleInputEvents SetConsoleCursorPosition TryEnterCriticalSection TlsSetValue ReleaseSemaphore SetEvent TlsAlloc CreateSemaphoreW TlsGetValue TlsFree GetLongPathNameW GetCurrentDirectoryW ReadDirectoryChangesW GetModuleFileNameW SetEnvironmentVariableW FileTimeToSystemTime QueryPerformanceFrequency QueryPerformanceCounter FormatMessageA DebugBreak GetModuleHandleA LoadLibraryA TerminateProcess UnregisterWaitEx LCMapStringW CreateProcessW GetExitCodeProcess GetStartupInfoW GetStdHandle FindFirstFileExW GetFullPathNameW FindNextFileW OutputDebugStringA FindClose GetTempPathA GetWindowsDirectoryA GetComputerNameA GetCurrentThreadId RtlCaptureStackBackTrace GetSystemTimeAsFileTime GetConsoleOutputCP SetStdHandle FreeLibraryAndExitThread ExitThread CreateThread GetEnvironmentStringsW FreeEnvironmentStringsW DeleteFileW HeapSize GetCommandLineA GetModuleHandleExW ExitProcess LoadLibraryExW InterlockedFlushSList RaiseException RtlUnwind GetCPInfo GetStringTypeW LCMapStringEx DecodePointer EncodePointer InitializeCriticalSectionAndSpinCount ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent IsDebuggerPresent InitializeSListHead InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive InitializeCriticalSectionEx GetExitCodeThread

user32

GetMessageW TranslateMessage MapVirtualKeyW DispatchMessageW

shell32

SHCreateDirectoryExA

ole32

StringFromGUID2 CoCreateGuid

oleaut32

SysAllocString VariantClear SysFreeString

shlwapi

PathStripPathA PathRemoveFileSpecA PathFileExistsA

dbghelp

UnDecorateSymbolName SymFromAddr SymSetOptions ImageNtHeader SymCleanup SymInitialize

Wirevpn.exe

IMPHASH 3226519b9b9586991801a7a279a328ab
SHA256 68bad2fda125ec4c4e7c029f62756f83d6f58309ba484cfb151b6b3eea0f18f6
MD5 6458265f48b9fb7f02ab3d0bfd335562
SHA1 05c25a81f4b6032445d0e4e0e09b0ea14cad722d
SHA512 6860acb0dca960e29be173ae6f1a93e33ca51b4de81ed3a5561ef495e1f479abfd73017c7fd207ca888478bfffa66e13771a6a9e692af6ac7a3b6c6f4eb37f44
SSDEEP 196608:S60CKZ5v+xc68AwSRpbCi3CUMEMkhRvTO:lGEc64SRpbCK1MMfa
TLSH
T10596D0217E82C031D6520271596CBBFB45BDAA212B3481D7B79C162D8F305D26F37BAB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

40:61:d7:8b:2f:6d:9d:0a:9a:4c:20:3e:59:48:fa:3e:57:4a:e0:6c:d2:1d:97:a1:61:c3:e1:44:38:e4:8c:ab

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 5, 2026

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

3063336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\youqu_wirevpn\wirevpn-vs\bin\Release\Wirevpn.pdb

ws2_32

htons inet_addr WSACloseEvent closesocket WSAEventSelect WSAIoctl sendto recvfrom connect WSASocketW send recv WSAWaitForMultipleEvents WSAEnumNetworkEvents setsockopt WSAStartup WSACleanup __WSAFDIsSet select getservbyname gethostbyname ntohl htonl shutdown WSASetLastError bind getpeername getsockname getsockopt ntohs getaddrinfo socket freeaddrinfo gethostname WSACreateEvent WSAGetLastError ioctlsocket listen accept

wldap32

ord79 ord301 ord35 ord33 ord32 ord27 ord26 ord22 ord41 ord50 ord143 ord30 ord60 ord211 ord46 ord217 ord200

channel

?getEngineChannelInterface@@YA?AV?$shared_ptr@VEngineChannelInterface@@@std@@W4type@EngineChannelInterface@@@Z

kernel32

LockResource SizeofResource FindResourceW FindResourceExW GetModuleHandleW DeleteFileW CopyFileW CreateToolhelp32Snapshot Process32FirstW Process32NextW GetStartupInfoW CreateProcessW CreatePipe TerminateProcess GetCurrentProcessId GetTickCount64 MoveFileExW FindFirstFileW FindNextFileW FindClose SetCurrentDirectoryW GetCommandLineW CreateMutexW GetCurrentThreadId HeapCreate InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetCurrentProcess FlushInstructionCache IsBadReadPtr MulDiv GetFullPathNameW FreeResource GetSystemTime GetVersionExW FreeLibrary GetVersionExA GetModuleHandleA LoadLibraryA FormatMessageA SleepEx WaitForSingleObjectEx ExpandEnvironmentStringsA GetStdHandle GetFileType PeekNamedPipe WaitForMultipleObjects VerSetConditionMask GetSystemDirectoryA VerifyVersionInfoA FlushConsoleInputBuffer QueryPerformanceCounter GlobalMemoryStatus DeleteFileA GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW FlushFileBuffers GetFileSizeEx Sleep GetConsoleOutputCP ReadConsoleW GetConsoleMode ExitProcess GetConsoleCP SetConsoleCtrlHandler SetFilePointerEx SystemTimeToTzSpecificLocalTime GetDriveTypeW GetModuleHandleExW FreeLibraryAndExitThread ExitThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InterlockedFlushSList InterlockedPushEntrySList RtlUnwind WaitNamedPipeW TransactNamedPipe SetNamedPipeHandleState DuplicateHandle GetThreadSelectorEntry VirtualQueryEx GetThreadContext GetProcessId ResumeThread SuspendThread OpenThread CreateThread RtlCaptureContext GetTempPathW OutputDebugStringW InitializeSListHead IsDebuggerPresent CreateEventW ResetEvent SetEvent InitializeCriticalSectionAndSpinCount IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter SetConsoleTextAttribute GetConsoleScreenBufferInfo GetModuleHandleExA CreateSemaphoreW ReleaseSemaphore OutputDebugStringA GlobalLock GlobalUnlock GlobalAlloc GetCPInfo CompareStringEx GetStringTypeW GetLocaleInfoEx CreateSymbolicLinkW GetFileInformationByHandleEx CloseThreadpoolWait SetThreadpoolWait CreateThreadpoolWait CloseThreadpoolTimer WaitForThreadpoolTimerCallbacks SetThreadpoolTimer CreateThreadpoolTimer CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork FreeLibraryWhenCallbackReturns GetSystemTimeAsFileTime GetCurrentProcessorNumber FlushProcessWriteBuffers CreateSemaphoreExW CreateEventExW InitOnceExecuteOnce FlsFree FlsSetValue FlsGetValue FlsAlloc SetFileInformationByHandle QueryPerformanceFrequency LCMapStringEx EncodePointer LocalFree SleepConditionVariableSRW SleepConditionVariableCS WakeAllConditionVariable WakeConditionVariable InitializeConditionVariable TryEnterCriticalSection AcquireSRWLockExclusive ReleaseSRWLockExclusive InitializeSRWLock GetNativeSystemInfo GetExitCodeThread SwitchToThread HeapSize HeapReAlloc HeapDestroy DecodePointer DeleteCriticalSection InitializeCriticalSectionEx RaiseException HeapFree GetProcessHeap HeapAlloc GetProcAddress LoadLibraryW GetTickCount UnmapViewOfFile MapViewOfFile CreateFileMappingW GetFileSize GetFileInformationByHandle GetLocalTime FileTimeToSystemTime SetFileTime WriteFile CreateDirectoryW LocalFileTimeToFileTime GetCurrentDirectoryW ReadFile CreateFileW GetFileAttributesW SystemTimeToFileTime SetFilePointer FormatMessageW GetACP MultiByteToWideChar WideCharToMultiByte SetLastError CloseHandle GetLastError CreateProcessA GetStartupInfoA WaitForSingleObject WritePrivateProfileStringW GetPrivateProfileIntW GetPrivateProfileStringW GetModuleFileNameW GetModuleFileNameA EnumSystemLocalesW SetStdHandle GetTimeZoneInformation GetFileAttributesExW SetFileAttributesW SetEndOfFile SetConsoleMode GetNumberOfConsoleInputEvents ReadConsoleInputW PeekConsoleInputA FindFirstFileExW IsValidCodePage GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW WriteConsoleW FindFirstFileA FindNextFileA LoadResource lstrlenA LoadLibraryExA GetExitCodeProcess CreateDirectoryA CopyFileA GetCurrentThread

user32

IntersectRect SetCursor SetWindowPos OffsetRect UnregisterClassW SendMessageW PostMessageW GetDC ReleaseDC ClientToScreen ShowWindow DestroyWindow IsRectEmpty RegisterWindowMessageW IsIconic SetForegroundWindow GetCursorPos SetTimer KillTimer GetDesktopWindow MessageBoxW GetActiveWindow CopyRect InflateRect UnionRect EqualRect PtInRect IsWindow LoadCursorW SystemParametersInfoW DestroyCursor CharNextW GetIconInfo DefWindowProcW CallWindowProcW RegisterClassExW CreateWindowExW GetDlgItem MessageBoxA GetClientRect GetWindowRect MapWindowPoints GetWindowLongW SetWindowLongW GetParent GetWindow DrawIconEx DestroyIcon AnimateWindow MonitorFromWindow wsprintfW GetUserObjectInformationW GetProcessWindowStation SetActiveWindow EnableWindow UpdateLayeredWindow MapVirtualKeyA CharLowerBuffW SystemParametersInfoA DrawTextW GetWindowPlacement MonitorFromRect LoadIconW GetSystemMetrics CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW EnableMenuItem SetRect PostThreadMessageW LoadImageW CreateIconFromResource LoadBitmapW GetSysColor SetMenuContextHelpId GetMenuItemInfoW SetMenuInfo GetMenuInfo TrackPopupMenu DeleteMenu AppendMenuW InsertMenuW GetMenuItemCount CheckMenuItem DestroyMenu CreatePopupMenu IsMenu GetForegroundWindow IsWindowEnabled MsgWaitForMultipleObjects IsWindowVisible PeekMessageW DispatchMessageW TranslateMessage GetMessageW GetKeyState GetFocus GetClassNameW ScreenToClient SetWindowTextW InvalidateRect EndPaint BeginPaint UpdateWindow ReleaseCapture SetCapture GetCapture SetFocus IsZoomed SetLayeredWindowAttributes GetMonitorInfoW PostQuitMessage TrackMouseEvent SetRectEmpty

gdi32

SetWorldTransform SelectClipRgn GetCurrentObject GetCharABCWidthsW GetFontData IntersectClipRect EnumFontFamiliesExW CreateDIBSection GetGlyphOutlineW GetOutlineTextMetricsW GetFontUnicodeRanges GetGlyphIndicesW GetTextExtentPointI AddFontMemResourceEx RemoveFontMemResourceEx SetTextColor SetTextAlign GetTextMetricsW ExtTextOutW GetTextFaceW GdiFlush ExtCreateRegion GetViewportOrgEx GetTextExtentPoint32W DeleteObject GetObjectA GetDIBits SetViewportOrgEx CreateCompatibleBitmap StretchBlt GetDCOrgEx GetObjectW SetBkMode Rectangle GetStockObject GetClipBox CreateSolidBrush CreateFontIndirectW SetGraphicsMode GetDeviceCaps SelectObject DeleteDC CreateCompatibleDC CreateBitmap EnumFontsW BitBlt

advapi32

RegOpenKeyExW RegCreateKeyExW RegCloseKey RegDeleteValueW RegSetValueExW RegSetValueExA RegQueryValueExW RegRestoreKeyW RegSaveKeyW OpenSCManagerW CreateServiceW ChangeServiceConfig2W CloseServiceHandle OpenServiceW DeleteService QueryServiceStatus StartServiceW ControlService QueryServiceConfig2W ChangeServiceConfigW QueryServiceConfigW DeregisterEventSource RegisterEventSourceA ReportEventA CryptAcquireContextA CryptReleaseContext CryptDestroyKey CryptSetHashParam CryptGetProvParam CryptGetUserKey CryptExportKey CryptDecrypt CryptCreateHash CryptEnumProvidersA CryptSignHashA CryptDestroyHash

shell32

ShellExecuteExW ShellExecuteW Shell_NotifyIconW SHFileOperationW

ole32

CreateStreamOnHGlobal IIDFromString CoInitialize CoUninitialize CoCreateInstance OleRun OleInitialize OleUninitialize OleLockRunning CLSIDFromString CLSIDFromProgID CreateBindCtx CoCreateGuid StringFromGUID2

oleaut32

VariantCopy GetErrorInfo VariantChangeType SetErrorInfo CreateErrorInfo VariantInit VariantClear SysAllocStringByteLen SysAllocString SysFreeString SysStringByteLen

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

shlwapi

PathIsDirectoryA StrToIntExW PathFileExistsW

iphlpapi

GetTcpTable GetUdpTable

imm32

ImmCreateContext ImmGetContext ImmSetCandidateWindow ImmSetCompositionWindow ImmDestroyContext ImmAssociateContext ImmReleaseContext

msimg32

AlphaBlend

wininet

HttpQueryInfoW InternetCloseHandle InternetReadFile InternetOpenW InternetOpenUrlW

gdiplus

GdipAlloc GdipGetImageEncoders GdipGetImageEncodersSize GdipFree GdiplusStartup GdipDrawImageRectI GdipGraphicsClear GdipDeleteGraphics GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromFileICM GdipCreateBitmapFromStreamICM GdipCreateBitmapFromFile GdipCreateBitmapFromStream GdipGetPropertyItem GdipGetPropertyItemSize GdipImageSelectActiveFrame GdipImageGetFrameCount GdipGetImageHeight GdipGetImageWidth GdipGetImageGraphicsContext GdipSaveImageToFile GdipDisposeImage GdipCloneImage GdiplusShutdown

crypt32

CertOpenStore CertCloseStore CertEnumCertificatesInStore CertGetCertificateContextProperty CertFindCertificateInStore CertDuplicateCertificateContext CertFreeCertificateContext

usp10

ScriptShape ScriptItemize ScriptFreeCache

opengl32

wglGetProcAddress wglGetCurrentContext

??0CharReader@Json_f@@QAE@ABV01@@Z ??0CharReader@Json_f@@QAE@XZ ??0CharReaderBuilder@Json_f@@QAE@ABV01@@Z ??0CharReaderBuilder@Json_f@@QAE@XZ ??0Exception@Json_f@@QAE@ABV01@@Z ??0Exception@Json_f@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0Factory@CharReader@Json_f@@QAE@ABV012@@Z ??0Factory@CharReader@Json_f@@QAE@XZ ??0Factory@StreamWriter@Json_f@@QAE@ABV012@@Z ??0Factory@StreamWriter@Json_f@@QAE@XZ ??0FastWriter@Json_f@@QAE@ABV01@@Z ??0FastWriter@Json_f@@QAE@XZ ??0Features@Json_f@@QAE@XZ ??0LogicError@Json_f@@QAE@$$QAV01@@Z ??0LogicError@Json_f@@QAE@ABV01@@Z ??0LogicError@Json_f@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0Path@Json_f@@QAE@$$QAV01@@Z ??0Path@Json_f@@QAE@ABV01@@Z ??0Path@Json_f@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVPathArgument@1@1111@Z ??0PathArgument@Json_f@@QAE@$$QAV01@@Z ??0PathArgument@Json_f@@QAE@ABV01@@Z ??0PathArgument@Json_f@@QAE@I@Z ??0PathArgument@Json_f@@QAE@PBD@Z ??0PathArgument@Json_f@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0PathArgument@Json_f@@QAE@XZ ??0Reader@Json_f@@QAE@$$QAV01@@Z ??0Reader@Json_f@@QAE@ABV01@@Z ??0Reader@Json_f@@QAE@ABVFeatures@1@@Z ??0Reader@Json_f@@QAE@XZ ??0RuntimeError@Json_f@@QAE@$$QAV01@@Z ??0RuntimeError@Json_f@@QAE@ABV01@@Z ??0RuntimeError@Json_f@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0StaticString@Json_f@@QAE@PBD@Z ??0StreamWriter@Json_f@@QAE@ABV01@@Z ??0StreamWriter@Json_f@@QAE@XZ ??0StreamWriterBuilder@Json_f@@QAE@ABV01@@Z ??0StreamWriterBuilder@Json_f@@QAE@XZ ??0StyledStreamWriter@Json_f@@QAE@ABV01@@Z ??0StyledStreamWriter@Json_f@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0StyledWriter@Json_f@@QAE@ABV01@@Z ??0StyledWriter@Json_f@@QAE@XZ ??0Value@Json_f@@QAE@$$QAV01@@Z ??0Value@Json_f@@QAE@ABV01@@Z ??0Value@Json_f@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0Value@Json_f@@QAE@ABVStaticString@1@@Z ??0Value@Json_f@@QAE@H@Z ??0Value@Json_f@@QAE@I@Z ??0Value@Json_f@@QAE@N@Z ??0Value@Json_f@@QAE@PBD0@Z ??0Value@Json_f@@QAE@PBD@Z ??0Value@Json_f@@QAE@W4ValueType@1@@Z ??0Value@Json_f@@QAE@_J@Z ??0Value@Json_f@@QAE@_K@Z ??0Value@Json_f@@QAE@_N@Z ??0ValueConstIterator@Json_f@@AAE@ABV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBVCZString@Value@Json_f@@V23@@std@@@std@@@std@@@std@@@Z ??0ValueConstIterator@Json_f@@QAE@ABVValueIterator@1@@Z ??0ValueConstIterator@Json_f@@QAE@XZ ??0ValueIterator@Json_f@@AAE@ABV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBVCZString@Value@Json_f@@V23@@std@@@std@@@std@@@std@@@Z ??0ValueIterator@Json_f@@QAE@ABV01@@Z ??0ValueIterator@Json_f@@QAE@ABVValueConstIterator@1@@Z ??0ValueIterator@Json_f@@QAE@XZ ??0ValueIteratorBase@Json_f@@QAE@ABV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBVCZString@Value@Json_f@@V23@@std@@@std@@@std@@@std@@@Z ??0ValueIteratorBase@Json_f@@QAE@XZ ??0Writer@Json_f@@QAE@ABV01@@Z ??0Writer@Json_f@@QAE@XZ ??1CharReader@Json_f@@UAE@XZ ??1CharReaderBuilder@Json_f@@UAE@XZ ??1Exception@Json_f@@UAE@XZ ??1Factory@CharReader@Json_f@@UAE@XZ ??1Factory@StreamWriter@Json_f@@UAE@XZ ??1FastWriter@Json_f@@UAE@XZ ??1LogicError@Json_f@@UAE@XZ ??1Path@Json_f@@QAE@XZ ??1PathArgument@Json_f@@QAE@XZ ??1Reader@Json_f@@QAE@XZ ??1RuntimeError@Json_f@@UAE@XZ ??1StreamWriter@Json_f@@UAE@XZ ??1StreamWriterBuilder@Json_f@@UAE@XZ ??1StyledStreamWriter@Json_f@@QAE@XZ ??1StyledWriter@Json_f@@UAE@XZ ??1Value@Json_f@@QAE@XZ ??1Writer@Json_f@@UAE@XZ ??4CharReader@Json_f@@QAEAAV01@ABV01@@Z ??4CharReaderBuilder@Json_f@@QAEAAV01@ABV01@@Z ??4Exception@Json_f@@QAEAAV01@ABV01@@Z ??4Factory@CharReader@Json_f@@QAEAAV012@ABV012@@Z ??4Factory@StreamWriter@Json_f@@QAEAAV012@ABV012@@Z ??4FastWriter@Json_f@@QAEAAV01@ABV01@@Z ??4Features@Json_f@@QAEAAV01@$$QAV01@@Z ??4Features@Json_f@@QAEAAV01@ABV01@@Z ??4LogicError@Json_f@@QAEAAV01@$$QAV01@@Z ??4LogicError@Json_f@@QAEAAV01@ABV01@@Z ??4Path@Json_f@@QAEAAV01@$$QAV01@@Z ??4Path@Json_f@@QAEAAV01@ABV01@@Z ??4PathArgument@Json_f@@QAEAAV01@$$QAV01@@Z ??4PathArgument@Json_f@@QAEAAV01@ABV01@@Z ??4Reader@Json_f@@QAEAAV01@$$QAV01@@Z ??4Reader@Json_f@@QAEAAV01@ABV01@@Z ??4RuntimeError@Json_f@@QAEAAV01@$$QAV01@@Z ??4RuntimeError@Json_f@@QAEAAV01@ABV01@@Z ??4StaticString@Json_f@@QAEAAV01@$$QAV01@@Z ??4StaticString@Json_f@@QAEAAV01@ABV01@@Z ??4StreamWriter@Json_f@@QAEAAV01@ABV01@@Z ??4StreamWriterBuilder@Json_f@@QAEAAV01@ABV01@@Z ??4StyledStreamWriter@Json_f@@QAEAAV01@ABV01@@Z ??4StyledWriter@Json_f@@QAEAAV01@ABV01@@Z ??4Value@Json_f@@QAEAAV01@$$QAV01@@Z ??4Value@Json_f@@QAEAAV01@ABV01@@Z ??4ValueConstIterator@Json_f@@QAEAAV01@$$QAV01@@Z ??4ValueConstIterator@Json_f@@QAEAAV01@ABV01@@Z ??4ValueConstIterator@Json_f@@QAEAAV01@ABVValueIteratorBase@1@@Z ??4ValueIterator@Json_f@@QAEAAV01@ABV01@@Z ??4ValueIteratorBase@Json_f@@QAEAAV01@$$QAV01@@Z ??4ValueIteratorBase@Json_f@@QAEAAV01@ABV01@@Z ??4Writer@Json_f@@QAEAAV01@ABV01@@Z ??5Json_f@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@std@@AAV12@AAVValue@0@@Z ??6Json_f@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AAV12@ABVValue@0@@Z ??8Value@Json_f@@QBE_NABV01@@Z ??8ValueIteratorBase@Json_f@@QBE_NABV01@@Z ??9Value@Json_f@@QBE_NABV01@@Z ??9ValueIteratorBase@Json_f@@QBE_NABV01@@Z ??ACharReaderBuilder@Json_f@@QAEAAVValue@1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??AStreamWriterBuilder@Json_f@@QAEAAVValue@1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??AValue@Json_f@@QAEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??AValue@Json_f@@QAEAAV01@ABVStaticString@1@@Z ??AValue@Json_f@@QAEAAV01@H@Z ??AValue@Json_f@@QAEAAV01@I@Z ??AValue@Json_f@@QAEAAV01@PBD@Z ??AValue@Json_f@@QBEABV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??AValue@Json_f@@QBEABV01@H@Z ??AValue@Json_f@@QBEABV01@I@Z ??AValue@Json_f@@QBEABV01@PBD@Z ??BStaticString@Json_f@@QBEPBDXZ ??BValue@Json_f@@QBE_NXZ ??CValueConstIterator@Json_f@@QBEPBVValue@1@XZ ??CValueIterator@Json_f@@QBEPAVValue@1@XZ ??DValueConstIterator@Json_f@@QBEABVValue@1@XZ ??DValueIterator@Json_f@@QBEAAVValue@1@XZ ??EValueConstIterator@Json_f@@QAE?AV01@H@Z ??EValueConstIterator@Json_f@@QAEAAV01@XZ ??EValueIterator@Json_f@@QAE?AV01@H@Z ??EValueIterator@Json_f@@QAEAAV01@XZ ??FValueConstIterator@Json_f@@QAE?AV01@H@Z ??FValueConstIterator@Json_f@@QAEAAV01@XZ ??FValueIterator@Json_f@@QAE?AV01@H@Z ??FValueIterator@Json_f@@QAEAAV01@XZ ??GValueIteratorBase@Json_f@@QBEHABV01@@Z ??MValue@Json_f@@QBE_NABV01@@Z ??NValue@Json_f@@QBE_NABV01@@Z ??OValue@Json_f@@QBE_NABV01@@Z ??PValue@Json_f@@QBE_NABV01@@Z ??_7CharReader@Json_f@@6B@ ??_7CharReaderBuilder@Json_f@@6B@ ??_7Exception@Json_f@@6B@ ??_7Factory@CharReader@Json_f@@6B@ ??_7Factory@StreamWriter@Json_f@@6B@ ??_7FastWriter@Json_f@@6B@ ??_7LogicError@Json_f@@6B@ ??_7RuntimeError@Json_f@@6B@ ??_7StreamWriter@Json_f@@6B@ ??_7StreamWriterBuilder@Json_f@@6B@ ??_7StyledWriter@Json_f@@6B@ ??_7Writer@Json_f@@6B@ ??_FStyledStreamWriter@Json_f@@QAEXXZ ??_FValue@Json_f@@QAEXXZ ?addComment@Reader@Json_f@@AAEXPBD0W4CommentPlacement@2@@Z ?addError@Reader@Json_f@@AAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVToken@12@PBD@Z ?addErrorAndRecover@Reader@Json_f@@AAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVToken@12@W4TokenType@12@@Z ?addPathInArg@Path@Json_f@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$vector@PBVPathArgument@Json_f@@V?$allocator@PBVPathArgument@Json_f@@@std@@@4@AAV?$_Vector_const_iterator@V?$_Vector_val@U?$_Simple_types@PBVPathArgument@Json_f@@@std@@@std@@@4@W4Kind@PathArgument@2@@Z ?all@Features@Json_f@@SA?AV12@XZ ?append@Value@Json_f@@QAEAAV12@$$QAV12@@Z ?append@Value@Json_f@@QAEAAV12@ABV12@@Z ?asBool@Value@Json_f@@QBE_NXZ ?asCString@Value@Json_f@@QBEPBDXZ ?asDouble@Value@Json_f@@QBENXZ ?asFloat@Value@Json_f@@QBEMXZ ?asInt64@Value@Json_f@@QBE_JXZ ?asInt@Value@Json_f@@QBEHXZ ?asLargestInt@Value@Json_f@@QBE_JXZ ?asLargestUInt@Value@Json_f@@QBE_KXZ ?asString@Value@Json_f@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?asUInt64@Value@Json_f@@QBE_KXZ ?asUInt@Value@Json_f@@QBEIXZ ?begin@Value@Json_f@@QAE?AVValueIterator@2@XZ ?begin@Value@Json_f@@QBE?AVValueConstIterator@2@XZ ?c_str@StaticString@Json_f@@QBEPBDXZ ?clear@Value@Json_f@@QAEXXZ ?compare@Value@Json_f@@QBEHABV12@@Z ?computeDistance@ValueIteratorBase@Json_f@@IBEHABV12@@Z ?containsNewLine@Reader@Json_f@@CA_NPBD0@Z ?copy@Value@Json_f@@QAEXABV12@@Z ?copy@ValueIteratorBase@Json_f@@IAEXABV12@@Z ?copyPayload@Value@Json_f@@QAEXABV12@@Z ?currentValue@Reader@Json_f@@AAEAAVValue@2@XZ ?decodeDouble@Reader@Json_f@@AAE_NAAVToken@12@@Z ?decodeDouble@Reader@Json_f@@AAE_NAAVToken@12@AAVValue@2@@Z ?decodeNumber@Reader@Json_f@@AAE_NAAVToken@12@@Z ?decodeNumber@Reader@Json_f@@AAE_NAAVToken@12@AAVValue@2@@Z ?decodeString@Reader@Json_f@@AAE_NAAVToken@12@@Z ?decodeString@Reader@Json_f@@AAE_NAAVToken@12@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?decodeUnicodeCodePoint@Reader@Json_f@@AAE_NAAVToken@12@AAPBDPBDAAI@Z ?decodeUnicodeEscapeSequence@Reader@Json_f@@AAE_NAAVToken@12@AAPBDPBDAAI@Z ?decrement@ValueIteratorBase@Json_f@@IAEXXZ ?defaultRealPrecision@Value@Json_f@@2IB ?demand@Value@Json_f@@QAEPAV12@PBD0@Z ?deref@ValueIteratorBase@Json_f@@IAEAAVValue@2@XZ ?deref@ValueIteratorBase@Json_f@@IBEABVValue@2@XZ ?dropNullPlaceholders@FastWriter@Json_f@@QAEXXZ ?dupMeta@Value@Json_f@@AAEXABV12@@Z ?dupPayload@Value@Json_f@@AAEXABV12@@Z ?empty@Value@Json_f@@QBE_NXZ ?enableYAMLCompatibility@FastWriter@Json_f@@QAEXXZ ?end@Value@Json_f@@QAE?AVValueIterator@2@XZ ?end@Value@Json_f@@QBE?AVValueConstIterator@2@XZ ?find@Value@Json_f@@QBEPBV12@PBD0@Z ?get@Value@Json_f@@QBE?AV12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV12@@Z ?get@Value@Json_f@@QBE?AV12@IABV12@@Z ?get@Value@Json_f@@QBE?AV12@PBD0ABV12@@Z ?get@Value@Json_f@@QBE?AV12@PBDABV12@@Z ?getComment@Value@Json_f@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4CommentPlacement@2@@Z ?getFormatedErrorMessages@Reader@Json_f@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?getFormattedErrorMessages@Reader@Json_f@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?getLocationLineAndColumn@Reader@Json_f@@ABE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD@Z ?getLocationLineAndColumn@Reader@Json_f@@ABEXPBDAAH1@Z ?getMemberNames@Value@Json_f@@QBE?AV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ ?getNextChar@Reader@Json_f@@AAEDXZ ?getOffsetLimit@Value@Json_f@@QBEHXZ ?getOffsetStart@Value@Json_f@@QBEHXZ ?getString@Value@Json_f@@QBE_NPAPBD0@Z ?getStructuredErrors@Reader@Json_f@@QBE?AV?$vector@UStructuredError@Reader@Json_f@@V?$allocator@UStructuredError@Reader@Json_f@@@std@@@std@@XZ ?good@Reader@Json_f@@QBE_NXZ ?hasComment@Value@Json_f@@QBE_NW4CommentPlacement@2@@Z ?hasCommentForValue@StyledStreamWriter@Json_f@@CA_NABVValue@2@@Z ?hasCommentForValue@StyledWriter@Json_f@@CA_NABVValue@2@@Z ?increment@ValueIteratorBase@Json_f@@IAEXXZ ?indent@StyledStreamWriter@Json_f@@AAEXXZ ?indent@StyledWriter@Json_f@@AAEXXZ ?index@ValueIteratorBase@Json_f@@QBEIXZ ?initBasic@Value@Json_f@@AAEXW4ValueType@2@_N@Z ?insert@Value@Json_f@@QAE_NI$$QAV12@@Z ?insert@Value@Json_f@@QAE_NIABV12@@Z ?invalidPath@Path@Json_f@@CAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z ?isAllocated@Value@Json_f@@ABE_NXZ ?isArray@Value@Json_f@@QBE_NXZ ?isBool@Value@Json_f@@QBE_NXZ ?isConvertibleTo@Value@Json_f@@QBE_NW4ValueType@2@@Z ?isDouble@Value@Json_f@@QBE_NXZ ?isEqual@ValueIteratorBase@Json_f@@IBE_NABV12@@Z ?isInt64@Value@Json_f@@QBE_NXZ ?isInt@Value@Json_f@@QBE_NXZ ?isIntegral@Value@Json_f@@QBE_NXZ ?isMember@Value@Json_f@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?isMember@Value@Json_f@@QBE_NPBD0@Z ?isMember@Value@Json_f@@QBE_NPBD@Z ?isMultilineArray@StyledStreamWriter@Json_f@@AAE_NABVValue@2@@Z ?isMultilineArray@StyledWriter@Json_f@@AAE_NABVValue@2@@Z ?isNull@Value@Json_f@@QBE_NXZ ?isNumeric@Value@Json_f@@QBE_NXZ ?isObject@Value@Json_f@@QBE_NXZ ?isString@Value@Json_f@@QBE_NXZ ?isUInt64@Value@Json_f@@QBE_NXZ ?isUInt@Value@Json_f@@QBE_NXZ ?isValidIndex@Value@Json_f@@QBE_NI@Z ?key@ValueIteratorBase@Json_f@@QBE?AVValue@2@XZ ?make@Path@Json_f@@QBEAAVValue@2@AAV32@@Z ?makePath@Path@Json_f@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$vector@PBVPathArgument@Json_f@@V?$allocator@PBVPathArgument@Json_f@@@std@@@4@@Z ?match@Reader@Json_f@@AAE_NPBDH@Z ?maxInt64@Value@Json_f@@2_JB ?maxInt@Value@Json_f@@2HB ?maxLargestInt@Value@Json_f@@2_JB ?maxLargestUInt@Value@Json_f@@2_KB ?maxUInt64@Value@Json_f@@2_KB ?maxUInt64AsDouble@Value@Json_f@@2NB ?maxUInt@Value@Json_f@@2IB ?memberName@ValueIteratorBase@Json_f@@QBEPBDPAPBD@Z ?memberName@ValueIteratorBase@Json_f@@QBEPBDXZ ?minInt64@Value@Json_f@@2_JB ?minInt@Value@Json_f@@2HB ?minLargestInt@Value@Json_f@@2_JB ?name@ValueIteratorBase@Json_f@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?newCharReader@CharReaderBuilder@Json_f@@UBEPAVCharReader@2@XZ ?newStreamWriter@StreamWriterBuilder@Json_f@@UBEPAVStreamWriter@2@XZ ?normalizeEOL@Reader@Json_f@@CA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD0@Z ?null@Value@Json_f@@2ABV12@B ?nullRef@Value@Json_f@@2ABV12@B ?nullSingleton@Value@Json_f@@SAABV12@XZ ?omitEndingLineFeed@FastWriter@Json_f@@QAEXXZ ?parse@Reader@Json_f@@QAE_NAAV?$basic_istream@DU?$char_traits@D@std@@@std@@AAVValue@2@_N@Z ?parse@Reader@Json_f@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVValue@2@_N@Z ?parse@Reader@Json_f@@QAE_NPBD0AAVValue@2@_N@Z ?parseFromStream@Json_f@@YA_NABVFactory@CharReader@1@AAV?$basic_istream@DU?$char_traits@D@std@@@std@@PAVValue@1@PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@@Z ?pushError@Reader@Json_f@@QAE_NABVValue@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z ?pushError@Reader@Json_f@@QAE_NABVValue@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?pushValue@StyledStreamWriter@Json_f@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?pushValue@StyledWriter@Json_f@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?readArray@Reader@Json_f@@AAE_NAAVToken@12@@Z ?readCStyleComment@Reader@Json_f@@AAE_NXZ ?readComment@Reader@Json_f@@AAE_NXZ ?readCppStyleComment@Reader@Json_f@@AAE_NXZ ?readNumber@Reader@Json_f@@AAEXXZ ?readObject@Reader@Json_f@@AAE_NAAVToken@12@@Z ?readString@Reader@Json_f@@AAE_NXZ ?readToken@Reader@Json_f@@AAE_NAAVToken@12@@Z ?readValue@Reader@Json_f@@AAE_NXZ ?recoverFromError@Reader@Json_f@@AAE_NW4TokenType@12@@Z ?releasePayload@Value@Json_f@@AAEXXZ ?removeIndex@Value@Json_f@@QAE_NIPAV12@@Z ?removeMember@Value@Json_f@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?removeMember@Value@Json_f@@QAEXPBD@Z ?removeMember@Value@Json_f@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAV12@@Z ?removeMember@Value@Json_f@@QAE_NPBD0PAV12@@Z ?removeMember@Value@Json_f@@QAE_NPBDPAV12@@Z ?resize@Value@Json_f@@QAEXI@Z ?resolve@Path@Json_f@@QBE?AVValue@2@ABV32@0@Z ?resolve@Path@Json_f@@QBEABVValue@2@ABV32@@Z ?resolveReference@Value@Json_f@@AAEAAV12@PBD0@Z ?resolveReference@Value@Json_f@@AAEAAV12@PBD@Z ?setComment@Value@Json_f@@QAEXPBDIW4CommentPlacement@2@@Z ?setComment@Value@Json_f@@QAEXPBDW4CommentPlacement@2@@Z ?setComment@Value@Json_f@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4CommentPlacement@2@@Z ?setDefaults@CharReaderBuilder@Json_f@@SAXPAVValue@2@@Z ?setDefaults@StreamWriterBuilder@Json_f@@SAXPAVValue@2@@Z ?setIsAllocated@Value@Json_f@@AAEX_N@Z ?setOffsetLimit@Value@Json_f@@QAEXH@Z ?setOffsetStart@Value@Json_f@@QAEXH@Z ?setType@Value@Json_f@@AAEXW4ValueType@2@@Z ?size@Value@Json_f@@QBEIXZ ?skipCommentTokens@Reader@Json_f@@AAEXAAVToken@12@@Z ?skipSpaces@Reader@Json_f@@AAEXXZ ?strictMode@CharReaderBuilder@Json_f@@SAXPAVValue@2@@Z ?strictMode@Features@Json_f@@SA?AV12@XZ ?swap@Value@Json_f@@QAEXAAV12@@Z ?swapPayload@Value@Json_f@@QAEXAAV12@@Z ?toStyledString@Value@Json_f@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?type@Value@Json_f@@QBE?AW4ValueType@2@XZ ?unindent@StyledStreamWriter@Json_f@@AAEXXZ ?unindent@StyledWriter@Json_f@@AAEXXZ ?validate@CharReaderBuilder@Json_f@@QBE_NPAVValue@2@@Z ?validate@StreamWriterBuilder@Json_f@@QBE_NPAVValue@2@@Z ?valueToQuotedString@Json_f@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD@Z ?valueToString@Json_f@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z ?valueToString@Json_f@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z ?valueToString@Json_f@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NIW4PrecisionType@1@@Z ?valueToString@Json_f@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_J@Z ?valueToString@Json_f@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_K@Z ?valueToString@Json_f@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z ?what@Exception@Json_f@@UBEPBDXZ ?write@FastWriter@Json_f@@UAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVValue@2@@Z ?write@StyledStreamWriter@Json_f@@QAEXAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@ABVValue@2@@Z ?write@StyledWriter@Json_f@@UAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVValue@2@@Z ?writeArrayValue@StyledStreamWriter@Json_f@@AAEXABVValue@2@@Z ?writeArrayValue@StyledWriter@Json_f@@AAEXABVValue@2@@Z ?writeCommentAfterValueOnSameLine@StyledStreamWriter@Json_f@@AAEXABVValue@2@@Z ?writeCommentAfterValueOnSameLine@StyledWriter@Json_f@@AAEXABVValue@2@@Z ?writeCommentBeforeValue@StyledStreamWriter@Json_f@@AAEXABVValue@2@@Z ?writeCommentBeforeValue@StyledWriter@Json_f@@AAEXABVValue@2@@Z ?writeIndent@StyledStreamWriter@Json_f@@AAEXXZ ?writeIndent@StyledWriter@Json_f@@AAEXXZ ?writeString@Json_f@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVFactory@StreamWriter@1@ABVValue@1@@Z ?writeValue@FastWriter@Json_f@@AAEXABVValue@2@@Z ?writeValue@StyledStreamWriter@Json_f@@AAEXABVValue@2@@Z ?writeValue@StyledWriter@Json_f@@AAEXABVValue@2@@Z ?writeWithIndent@StyledStreamWriter@Json_f@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?writeWithIndent@StyledWriter@Json_f@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

generic

count=58, id=259, version=27412,

count=1, id=263, version=27412,

count=255, id=261, version=27412,

count=3, id=261, productName=VS2017 v15.9.11 build 27030, version=27030,

count=7, id=253, version=28518,

count=22, id=260, version=30034,

count=28, id=259, version=30034,

count=54, id=260, version=27045,

count=96, id=261, version=30034,

count=41, id=260, version=27412,

count=2, id=257, version=30148,

count=3, id=261, version=30145,

count=39, id=257, version=27412,

count=575, id=1, productName=Unmarked objects,

count=621, id=260, version=27024,

count=108, id=261, version=27048,

count=354, id=261, version=27045,

count=58, id=265, version=30148,

count=1, id=256, version=30148,

count=1, id=255, version=30148,

count=1, id=151,

count=1, id=258, version=30148,

crashreport.exe

IMPHASH 673921486cd713d74ac2c64c9514d5f0
SHA256 ef23426b1392cbb684eac0a501c303debee4be6fbe65c4ee205d65b46b2e6697
MD5 ef7dfe875ff733e224a87dd0d03d5c3f
SHA1 7c3076016d39ce5a7d0b10326eefab4fb0da698d
SHA512 86727fdd7fc78de9331def4698beb4a688f152f45bc0b1a4de2186490c865af8263090cb665d3c2cd69ef05c9f9d325dd7d7fbc2dbcc23819a46fe0c314dfc5d
SSDEEP 12288:wobXd5qP+/Yf9skCdXXs0vWi+qxtVVvOViiuwfTUryE/EdZbEMNx:woTdIrf9skCZXs0vpZVvylNfTUrFEdZj
TLSH
T1E5A47C21FA80C072D59100B59E75EBB69A7DBE715B2055CB73C02F6A5B302C26E31F6B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

07:61:19:17:b2:4b:ed:d2:a8:9e:aa:f2:67:67:45:0f:af:bb:97:cc:c3:43:6a:5e:d0:73:00:92:72:78:23:7b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 11, 2023

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

187212

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\Project\SmallProject\crashreport\bin\Release\Win32\crashreport.pdb

wininet

HttpQueryInfoW InternetCrackUrlW InternetOpenW HttpSendRequestExW HttpSendRequestW InternetCloseHandle InternetConnectW InternetReadFile HttpEndRequestW HttpOpenRequestW

kernel32

lstrcmpiW LoadLibraryExW ReadFile WriteFile SetFilePointer CreateFileW CloseHandle GetFileSize CreateDirectoryW GetTempPathW GetFileAttributesW SetLastError GlobalAlloc GlobalLock ExitProcess CreateProcessA GlobalUnlock lstrcmpW MulDiv FindFirstFileW FindClose GetSystemDefaultLangID OpenProcess SetEvent GetSystemInfo ReadProcessMemory GlobalMemoryStatusEx MoveFileW GetDriveTypeW GetComputerNameA LoadLibraryW GetCurrentProcessId SetUnhandledExceptionFilter FindNextFileW lstrlenW GetCommandLineW InitializeCriticalSection CreateMutexW WaitForSingleObject ReleaseMutex CreateEventW DeleteFileW ResetEvent GetLocalTime WideCharToMultiByte HeapCreate GetFileSizeEx UnmapViewOfFile CreateFileMappingW MapViewOfFile lstrcpynW lstrcpyW GetCurrentProcess GetModuleHandleW Sleep Process32NextW Process32FirstW FileTimeToSystemTime GetFileTime CreateThread TlsFree TlsSetValue TlsGetValue TlsAlloc RtlUnwind GetSystemTimeAsFileTime QueryPerformanceCounter GetStartupInfoW TerminateProcess UnhandledExceptionFilter WaitForSingleObjectEx InitializeCriticalSectionAndSpinCount LoadLibraryExA VirtualFree VirtualAlloc IsProcessorFeaturePresent FlushInstructionCache InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead EncodePointer OutputDebugStringW IsDebuggerPresent FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle GetFileType GetProcessHeap DeleteCriticalSection GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetTimeZoneInformation GetConsoleMode ReadConsoleW ExitThread GetConsoleOutputCP SetFilePointerEx FindFirstFileExW IsValidCodePage GetACP GetProcAddress HeapDestroy DecodePointer HeapAlloc FindResourceW LoadResource RaiseException HeapReAlloc GetLastError MultiByteToWideChar HeapSize GetCurrentThreadId InitializeCriticalSectionEx LeaveCriticalSection GetModuleFileNameW EnterCriticalSection FreeLibrary HeapFree SizeofResource GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetOEMCP SetEnvironmentVariableW SetStdHandle GetStringTypeW FlushFileBuffers SetEndOfFile CreateToolhelp32Snapshot WriteConsoleW

user32

SendMessageW GetSystemMetrics SetWindowTextW RegisterClassExW ShowWindow InvalidateRgn SetTimer RedrawWindow IsDialogMessageW GetMonitorInfoW GetDlgCtrlID ClientToScreen DestroyAcceleratorTable IsChild SetDlgItemTextW MapWindowPoints GetWindowTextLengthW CreateWindowExW TranslateMessage PeekMessageW DispatchMessageW CreateDialogParamW GetMessageW wsprintfW PtInRect DrawTextW SetCursor DestroyCursor MsgWaitForMultipleObjects GetWindow GetWindowRect ScreenToClient SetWindowTextA GetDlgItemTextW GetSysColor MoveWindow IsDlgButtonChecked CreateAcceleratorTableW SetFocus LoadCursorW FillRect MonitorFromWindow SetWindowPos GetDC GetFocus GetWindowLongW GetClassNameW SetCapture SetWindowLongW GetClientRect GetDlgItem CheckDlgButton GetDesktopWindow GetClassInfoExW GetParent RegisterWindowMessageW ReleaseCapture LoadImageW InvalidateRect ReleaseDC BeginPaint EndPaint EnableWindow GetWindowTextW DefWindowProcW DestroyWindow MessageBoxW UnregisterClassW CharNextW CallWindowProcW IsWindow

gdi32

GetTextExtentPoint32W SetTextColor SetBkMode CreateFontIndirectW BitBlt CreateCompatibleBitmap CreateSolidBrush DeleteObject GetObjectW DeleteDC GetDeviceCaps GetStockObject SelectObject CreateCompatibleDC

advapi32

RegSetValueExW RegEnumKeyExW RegOpenKeyExW GetUserNameA RegQueryValueExW RegCloseKey RegQueryInfoKeyW RegDeleteKeyW RegDeleteValueW RegCreateKeyExW

shell32

ShellExecuteW SHGetSpecialFolderPathW

ole32

CoCreateInstance CoUninitialize CoTaskMemAlloc CoInitialize StringFromGUID2 CoTaskMemRealloc CLSIDFromProgID CreateStreamOnHGlobal OleInitialize CLSIDFromString OleLockRunning CoInitializeEx OleUninitialize CoGetClassObject CoTaskMemFree

oleaut32

SafeArrayDestroy LoadRegTypeLi VariantInit LoadTypeLi OleCreateFontIndirect SysStringLen SafeArrayCreate SysAllocStringLen SafeArrayAccessData VariantClear SysFreeString VarUI4FromStr SysAllocString

shlwapi

StrStrIW

comctl32

InitCommonControlsEx

ws2_32

WSAStartup

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

psapi

GetModuleInformation GetModuleFileNameExA EnumProcessModules GetModuleFileNameExW GetProcessMemoryInfo

driver.dll

SHA256 16d0b36d56b43a042809a1ae61dd0372adb599e832a49878b3367a7cd319ef59
MD5 968865db1547701c67730046c8dc447b
SHA1 b69ad0b59435da4f856112dd9e3afc1fb7b43773
SHA512 d319f1992cb639519d9562d0961e5f7f288ce7a50dd159ac6cc41396265dadced9d530eecbf73d312da4046cddd4cf0883e7e15f11ae2793cadfa83220a7ecea
SSDEEP 12288:6cMPOA7coczLXkD4Kdj9UnQKKPHkTVQ9g1:6cMGhocvXQjIAwSQ
TLSH
T11894236DFC2B57C0C296D0B97A8446723457EF45686C7FC3618B24948A6CE5FC78A3C2
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

driver/tdi/windows10/amd64/wvpack.sys

IMPHASH 0097c5a462209696c6b8908f211e31b2
SHA256 0049a6710d955d023f0f4df17595372068248bc0075a91ccc2bf02eac5bad3c8
MD5 f5ef422804d6de2fb51dceeb325d0c53
SHA1 05c19f77186e8bc11f4311ce6b9cdc662b2235b0
SHA512 0524b2fb44d2e595b2dc0bec15ba4a959682e3b7197d1aef9598559d001853ebc7c734099621675ce46f92d05fb8fac262e94736879da9e5ac2abff182abc454
SSDEEP 1536:8Z5BlvF2CBbgU1xHBu260A7e8PxFUszhz:8ZnxF2CBbx1xHBu2603sxCmh
TLSH
T161836D6B936918A9DD59C9B8C6B9961BEFF070031B7182DF02E4C5851F637D29F2C328
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

NSIS installer

installer

Digest

a8:d0:2f:7a:57:94:f8:e0:e4:22:14:98:90:63:7c:c4:9d:d1:58:7e:6a:39:09:66:e0:54:32:6b:d0:e6:3e:ea

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 19, 2023

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Digest

a8:d0:2f:7a:57:94:f8:e0:e4:22:14:98:90:63:7c:c4:9d:d1:58:7e:6a:39:09:66:e0:54:32:6b:d0:e6:3e:ea

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jun 19, 2023

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:29:15:27:00:00:00:00:00:2a

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:61:c8:8b:12:9c:2a:7f:1d:87:00:00:00:00:00:61

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 6, 2023 - Apr 3, 2024

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Oct 15, 2014 - Oct 15, 2029

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b3:fe:25:ce:29:1b:1b:8a:1c:00:01:00:00:01:b3

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

10

Entry point

23792

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\youqu_driver\driver\netfilter-driver\build\bin\x64\Win8_Release\tdiw\wvpack.pdb

Name

.text

Size

50KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

20B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/tdi/windows10/i386/wvpack.sys

IMPHASH 75b0f96e3e492c77743efa00382e8a87
SHA256 cd4b2f1450d750e31293440a2b6da30ad2202479587ffa01df13a7681192356e
MD5 e68c32fc41bfa9e38fd72cf8ca433c2f
SHA1 194da4adfd6721c4a7caafb5a193bb32e48001aa
SHA512 d36dca71bca10f1b35011cf85bacd8707005c67744306abca48d0b3d3d3d5539f6c64ef29ec89cef9a5ed30c1417a60eb4191bc0bf56f85baa03796150906d06
SSDEEP 1536:M1tbOTCyQEdSl1R4crFdXpECR7uQ3VU1UFRTWA7soPx/skUhzB:M1t2QEA1OcZUCR7TVUOFIox/NUh
TLSH
T1C1736DD3E6400C73D6D64AB0B2E8E3276B79DF060A9050F78B25C9C095717D1EAA936F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x86 arch:x86

NSIS installer

installer

Digest

20:27:d2:af:7e:d6:45:64:0f:6d:3f:98:68:1a:03:ff:1b:ec:d2:a6:9d:17:3a:63:20:da:88:33:a6:3f:bb:4f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 19, 2023

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Digest

20:27:d2:af:7e:d6:45:64:0f:6d:3f:98:68:1a:03:ff:1b:ec:d2:a6:9d:17:3a:63:20:da:88:33:a6:3f:bb:4f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jun 19, 2023

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:29:15:27:00:00:00:00:00:2a

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:61:c8:8b:12:9c:2a:7f:1d:87:00:00:00:00:00:61

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 6, 2023 - Apr 3, 2024

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Oct 15, 2014 - Oct 15, 2029

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b3:fe:25:ce:29:1b:1b:8a:1c:00:01:00:00:01:b3

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

10

Entry point

20096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\youqu_driver\driver\netfilter-driver\build\bin\Win32\Win8_Release\tdiw\wvpack.pdb

Name

.text

Size

41KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/tdi/windows7/amd64/wvpack.sys

IMPHASH 0097c5a462209696c6b8908f211e31b2
SHA256 c21ba9518e5e4ed1045354ae4dae9d485a134b40f54b1662af2a6f2bfd07cb3a
MD5 22bd68726ec87be63869b0d041916d57
SHA1 5720433092b99f21006e3dc12c84ca05b5897bb8
SHA512 f105bfbf1892a95fd308ba02aa656d8c7151d0fc793e0e2527e97d39fc5f363c837fd08813371c1393a153956172d553678042bfd13a67032cbd399fd4ad585b
SSDEEP 768:mpLWkhlJL9JnxxWfjmydo+BEx1sf3rpY3kEnZNMjGPIB9hDIX/qgYvkO10k79CJO:TZ5BlvF2CBbgU1xHyu26RA7APxqslhz
TLSH
T18E836C6B936914A9DD59C9B8C6B9961BEFF070432B7182CF02E4C5851F637D29F2C328
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

NSIS installer

installer

Digest

9d:49:90:c2:6d:66:20:e0:4a:1d:31:f5:c1:42:b9:90:33:1f:dc:93:40:7c:60:0b:47:7d:91:28:2f:73:70:62

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 19, 2023

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Digest

9d:49:90:c2:6d:66:20:e0:4a:1d:31:f5:c1:42:b9:90:33:1f:dc:93:40:7c:60:0b:47:7d:91:28:2f:73:70:62

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jun 19, 2023

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:29:15:27:00:00:00:00:00:2a

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:61:c8:8b:12:9c:2a:7f:1d:87:00:00:00:00:00:61

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 6, 2023 - Apr 3, 2024

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Oct 15, 2014 - Oct 15, 2029

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b3:fe:25:ce:29:1b:1b:8a:1c:00:01:00:00:01:b3

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

10

Entry point

23792

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\youqu_driver\driver\netfilter-driver\build\bin\x64\Win7_Release\tdiw\wvpack.pdb

Name

.text

Size

50KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

20B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/tdi/windows7/i386/wvpack.sys

IMPHASH 75b0f96e3e492c77743efa00382e8a87
SHA256 75c950906b1d13587461f04938b3381b1e90d4859696cf4ef55499fc6b641769
MD5 99d739a2a75bf2871d7e593178cedd3e
SHA1 e5b9bcf1acc69be7ad763111576460b26c7d74bf
SHA512 033f790c5909859b2aa4fda0b4cac3fe7d908a09f8ae88b90a4ba58e6fe102183e7740344f4a065603e0f7bf55fb17e2bfb22da6067a80ae4a1ccebe8fcdfc97
SSDEEP 1536:MytbOTCyQEdSl1R4crFdXpECR7uQ35U1UFRTHA7yPxCsahz:Myt2QEA1OcZUCR7T5UOF11xCLh
TLSH
T1E0737DD3E6400C63D6C64AB1B5ECE3276B79DF020A9050F78B25C9C095717D1EAA93AF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x86 arch:x86

NSIS installer

installer

Digest

27:6c:b2:ee:2d:44:4a:f1:a4:1f:6e:aa:87:99:03:ba:79:eb:ca:9a:fc:95:ca:fc:0e:b8:13:d8:93:0c:67:76

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 19, 2023

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Digest

27:6c:b2:ee:2d:44:4a:f1:a4:1f:6e:aa:87:99:03:ba:79:eb:ca:9a:fc:95:ca:fc:0e:b8:13:d8:93:0c:67:76

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jun 19, 2023

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:29:15:27:00:00:00:00:00:2a

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:61:c8:8b:12:9c:2a:7f:1d:87:00:00:00:00:00:61

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 6, 2023 - Apr 3, 2024

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Oct 15, 2014 - Oct 15, 2029

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b3:fe:25:ce:29:1b:1b:8a:1c:00:01:00:00:01:b3

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

10

Entry point

20096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\youqu_driver\driver\netfilter-driver\build\bin\Win32\Win7_Release\tdiw\wvpack.pdb

Name

.text

Size

41KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/wfp/windows10/amd64/wvpack.sys

IMPHASH b395c6a8213cd8e8041e69d9f3d2fe66
SHA256 c85553c0b7db2f975e03e0a0a6a2570c86d7f48bbbed376c7edc5360adaafeb7
MD5 825436a04c40f7e0b2c97e5f738da64a
SHA1 17649181819f38dcefe1dbce53958598666d8c65
SHA512 0d7357a31985f183b0ee0abbf5f2fe7950236ef19ec52a56ac9368e8192f64723482d2de98531371be471b537bb2f840508c7bdb2205e10a67019034ee395b34
SSDEEP 1536:sg6VIer15WqL+WNvh6Y2Ns1aLv2LpTEi1aIIiikZxEA74oPxSVTsZhzy:sDKS55L+WNp6yajszZqV4x0shm
TLSH
T1D6A36A6B23F414D9EAA7E5B4C6A5DA07EBB1B0423BA153CF07A184801F633D16F39395
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

NSIS installer

installer

Digest

c0:e0:ea:e1:a8:57:b9:f0:61:10:16:71:49:13:2f:28:37:e3:61:36:2e:c2:ef:42:7e:d5:ae:fc:31:fa:95:72

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 19, 2023

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Digest

c0:e0:ea:e1:a8:57:b9:f0:61:10:16:71:49:13:2f:28:37:e3:61:36:2e:c2:ef:42:7e:d5:ae:fc:31:fa:95:72

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jun 19, 2023

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:29:15:27:00:00:00:00:00:2a

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:61:c8:8b:12:9c:2a:7f:1d:87:00:00:00:00:00:61

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 6, 2023 - Apr 3, 2024

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Oct 15, 2014 - Oct 15, 2029

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b3:fe:25:ce:29:1b:1b:8a:1c:00:01:00:00:01:b3

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

10

Entry point

43824

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\youqu_driver\driver\netfilter-driver\build\bin\x64\Win8_Release\wfpw\wvpack.pdb

fwpkclnt.sys

FwpsFreeNetBufferList0

ndis.sys

NdisFreeGenericObject NdisFreeNetBufferListPool NdisRetreatNetBufferDataStart NdisAdvanceNetBufferDataStart NdisGetDataBuffer NdisAllocateGenericObject NdisWaitEvent NdisInitializeEvent NdisAllocateNetBufferListPool

ntoskrnl.exe

RtlCompareMemory KeAcquireInStackQueuedSpinLock KeReleaseInStackQueuedSpinLock ExAllocatePoolWithTag ExUuidCreate swprintf_s __C_specific_handler RtlInitUnicodeString MmGetSystemRoutineAddress RtlAppendUnicodeToString RtlCreateSecurityDescriptor RtlSetDaclSecurityDescriptor KeInitializeEvent KeSetEvent KeWaitForSingleObject ExFreePoolWithTag ExQueryDepthSList ExpInterlockedPopEntrySList ExpInterlockedPushEntrySList ExInitializeNPagedLookasideList ExDeleteNPagedLookasideList MmBuildMdlForNonPagedPool MmMapLockedPagesSpecifyCache MmUnmapLockedPages MmAllocatePagesForMdl MmFreePagesFromMdl PsCreateSystemThread PsTerminateSystemThread IoAllocateMdl IofCompleteRequest IoCreateDevice IoCreateSymbolicLink IoDeleteDevice IoDeleteSymbolicLink IoFreeMdl IoReleaseCancelSpinLock ObReferenceObjectByHandle ObfDereferenceObject ZwClose ZwOpenKey ZwQueryValueKey PsGetCurrentProcessId ZwSetInformationThread RtlLengthSid RtlCreateAcl RtlAddAccessAllowedAce PsLookupProcessByProcessId ObOpenObjectByPointer ZwSetSecurityObject SeExports RtlGetVersion _stricmp ZwQuerySystemInformation RtlValidSid

Name

.text

Size

62KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

320B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/wfp/windows10/i386/wvpack.sys

IMPHASH 2cd605a05dafdfe059f7b1e351736d91
SHA256 6e421c21ba0538b8366ea1c06feb63cec5f203fea101827b9c78aa22454784bc
MD5 39747bcde257a2388ceea8ab793efb4b
SHA1 c3e1581b27cc2a1628a64a269d10a917efff735d
SHA512 03ccc7da105a2761602a67a5e0300b53cbd757c9e2778e5ab38125c1b5a17e033a52e859130c92eb328acd1f7d1a04b8e815cc8b223e96834787de0986764641
SSDEEP 1536:4oyacY7LBT8t8BZpWFfNuxQO+Q5tlnakthrlmXF54qE6lqa378A70PxjslhzQ:WlEBTGwZpWuF53akthsU6qawvxjYhk
TLSH
T13493AEB3FA0490A3FA965A30F29CEB736D3D63122A568CE39398C54654317C1D5363EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x86 arch:x86

NSIS installer

installer

Digest

4f:4f:62:c0:be:12:16:bc:88:42:f0:a1:67:ae:23:bf:2e:d0:1b:71:57:e2:94:b7:ea:ad:d3:a8:b9:0a:eb:2d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 19, 2023

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Digest

4f:4f:62:c0:be:12:16:bc:88:42:f0:a1:67:ae:23:bf:2e:d0:1b:71:57:e2:94:b7:ea:ad:d3:a8:b9:0a:eb:2d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jun 19, 2023

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:29:15:27:00:00:00:00:00:2a

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:61:c8:8b:12:9c:2a:7f:1d:87:00:00:00:00:00:61

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 6, 2023 - Apr 3, 2024

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Oct 15, 2014 - Oct 15, 2029

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b3:fe:25:ce:29:1b:1b:8a:1c:00:01:00:00:01:b3

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

10

Entry point

39680

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\youqu_driver\driver\netfilter-driver\build\bin\Win32\Win8_Release\wfpw\wvpack.pdb

fwpkclnt.sys

FwpsFreeNetBufferList0

ndis.sys

NdisGetDataBuffer NdisAllocateGenericObject NdisFreeGenericObject NdisAdvanceNetBufferDataStart NdisWaitEvent NdisAllocateNetBufferListPool NdisFreeNetBufferListPool NdisRetreatNetBufferDataStart NdisInitializeEvent

ntoskrnl.exe

memcpy memset RtlInitUnicodeString MmGetSystemRoutineAddress RtlAppendUnicodeToString RtlCreateSecurityDescriptor RtlSetDaclSecurityDescriptor KeInitializeEvent KeSetEvent KeWaitForSingleObject ExFreePoolWithTag InterlockedPopEntrySList InterlockedPushEntrySList ExInitializeNPagedLookasideList ExDeleteNPagedLookasideList MmBuildMdlForNonPagedPool MmMapLockedPagesSpecifyCache MmUnmapLockedPages MmAllocatePagesForMdl MmFreePagesFromMdl PsCreateSystemThread ExUuidCreate IoAllocateMdl IofCompleteRequest IoCreateDevice IoCreateSymbolicLink IoDeleteDevice IoDeleteSymbolicLink IoFreeMdl IoReleaseCancelSpinLock ObReferenceObjectByHandle ObfDereferenceObject ZwClose ZwOpenKey ZwQueryValueKey PsGetCurrentProcessId ZwSetInformationThread RtlLengthSid RtlCreateAcl RtlAddAccessAllowedAce PsLookupProcessByProcessId ObOpenObjectByPointer ZwSetSecurityObject SeExports RtlGetVersion _stricmp ZwQuerySystemInformation KeQuerySystemTime _allmul _aulldiv _aullrem RtlValidSid swprintf_s RtlUnwind ExAllocatePoolWithTag RtlCompareMemory PsTerminateSystemThread

hal

KeGetCurrentIrql KeReleaseInStackQueuedSpinLock KeAcquireInStackQueuedSpinLock

Name

.text

Size

53KB

Virtual Size

53KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

INIT

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/wfp/windows7/amd64/wvpack.sys

IMPHASH 0fd6894d0de85d75397d3b75aaf01ba4
SHA256 bfb207e31c1f29a0730d5d1a85d0e7f6d19cd2034e0101b31c3aba6b4f27b0d4
MD5 ce64a66a8f9d8f221424872fd735989a
SHA1 70f3f3eb1434c6baa0acff56fa9a3c8bfd02f54a
SHA512 d181be06186b27923b8c4324be09421258d9cc69c7852d912982f91b5757d044784b855c027a8935d776ebf55cd653e45372a027160ddd078e8412449105aedd
SSDEEP 1536:lvAPe1lXssUNtrOuCDven0syd91EiIEI3NhxeA7RePxosyhz:ljasUNtrRCXd90NhI7xoHh
TLSH
T1A3A37B6B23E414D9EAABE5B4C2A9DA17EFB1B4423BA153CF0761C4501F633D16F38285
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

NSIS installer

installer

Digest

6a:c6:e7:96:37:fa:fc:72:21:a2:86:1c:a4:fa:99:bf:38:db:5b:da:aa:a1:a3:3a:4f:61:1b:1d:26:28:b8:9d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 19, 2023

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Digest

6a:c6:e7:96:37:fa:fc:72:21:a2:86:1c:a4:fa:99:bf:38:db:5b:da:aa:a1:a3:3a:4f:61:1b:1d:26:28:b8:9d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jun 19, 2023

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:29:15:27:00:00:00:00:00:2a

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:61:c8:8b:12:9c:2a:7f:1d:87:00:00:00:00:00:61

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 6, 2023 - Apr 3, 2024

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Oct 15, 2014 - Oct 15, 2029

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b3:fe:25:ce:29:1b:1b:8a:1c:00:01:00:00:01:b3

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

10

Entry point

42560

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\youqu_driver\driver\netfilter-driver\build\bin\x64\Win7_Release\wfpw\wvpack.pdb

fwpkclnt.sys

FwpsFreeNetBufferList0

ndis.sys

NdisFreeGenericObject NdisFreeNetBufferListPool NdisRetreatNetBufferDataStart NdisAdvanceNetBufferDataStart NdisGetDataBuffer NdisAllocateGenericObject NdisWaitEvent NdisInitializeEvent NdisAllocateNetBufferListPool

ntoskrnl.exe

RtlCompareMemory KeAcquireInStackQueuedSpinLock KeReleaseInStackQueuedSpinLock ExAllocatePoolWithTag ExUuidCreate swprintf_s __C_specific_handler RtlInitUnicodeString RtlAppendUnicodeToString RtlCreateSecurityDescriptor RtlSetDaclSecurityDescriptor KeInitializeEvent KeSetEvent KeWaitForSingleObject ExFreePoolWithTag ExQueryDepthSList ExpInterlockedPopEntrySList ExpInterlockedPushEntrySList ExInitializeNPagedLookasideList ExDeleteNPagedLookasideList MmBuildMdlForNonPagedPool MmGetSystemRoutineAddress MmMapLockedPagesSpecifyCache MmUnmapLockedPages MmAllocatePagesForMdl MmFreePagesFromMdl PsCreateSystemThread PsTerminateSystemThread IoAllocateMdl IofCompleteRequest IoCreateDevice IoCreateSymbolicLink IoDeleteDevice IoDeleteSymbolicLink IoFreeMdl IoReleaseCancelSpinLock ObReferenceObjectByHandle ObfDereferenceObject ZwClose ZwOpenKey ZwQueryValueKey PsGetCurrentProcessId ZwSetInformationThread RtlLengthSid RtlCreateAcl RtlAddAccessAllowedAce PsLookupProcessByProcessId ObOpenObjectByPointer ZwSetSecurityObject SeExports _stricmp ZwQuerySystemInformation RtlValidSid KeBugCheckEx

Name

.text

Size

61KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

320B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/wfp/windows7/i386/wvpack.sys

IMPHASH 4fda5fd328a7d7a00c648c9e9138195d
SHA256 b0831e1baa2738e9fdb649c9e5563118d39d3548b6fe3843aacdcbed031d0213
MD5 2405b07af9ad529c79a1f9f21ec619f0
SHA1 9f51ec99b94d5f9a629289704feb52de8e08e18b
SHA512 940f16a9602247f38c3ce1899d8ad795941866c19ea0c21ccc5c5b4fb336f929e8adcc59b8c7f7cf2389bc0a6a3e0c2ae796661f9e901593f969ea343816e98e
SSDEEP 1536:4zSKHsizINbr2VwwzJBKj0k2mhudCRgWkE6/1qUhQTD3A7PhPx3syhz5:zWsizIcBbkbhQs0qUU0x37hd
TLSH
T1F0939EB3F7044073EA92ADB092BCDB232F7E9E516A9545E35354C607A4787C1DA3432E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x86 arch:x86

NSIS installer

installer

Digest

f0:93:b0:ba:39:34:16:0b:9f:62:da:8a:12:a5:53:f5:44:eb:9d:e3:cb:99:64:c3:5d:5f:63:37:04:cc:15:b0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 19, 2023

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Digest

f0:93:b0:ba:39:34:16:0b:9f:62:da:8a:12:a5:53:f5:44:eb:9d:e3:cb:99:64:c3:5d:5f:63:37:04:cc:15:b0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jun 19, 2023

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:29:15:27:00:00:00:00:00:2a

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:61:c8:8b:12:9c:2a:7f:1d:87:00:00:00:00:00:61

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 6, 2023 - Apr 3, 2024

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Oct 15, 2014 - Oct 15, 2029

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b3:fe:25:ce:29:1b:1b:8a:1c:00:01:00:00:01:b3

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

10

Entry point

38304

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\youqu_driver\driver\netfilter-driver\build\bin\Win32\Win7_Release\wfpw\wvpack.pdb

fwpkclnt.sys

FwpsFreeNetBufferList0

ndis.sys

NdisGetDataBuffer NdisAllocateGenericObject NdisFreeGenericObject NdisAdvanceNetBufferDataStart NdisWaitEvent NdisAllocateNetBufferListPool NdisFreeNetBufferListPool NdisRetreatNetBufferDataStart NdisInitializeEvent

ntoskrnl.exe

memcpy memset RtlInitUnicodeString RtlAppendUnicodeToString RtlCreateSecurityDescriptor RtlSetDaclSecurityDescriptor KeInitializeEvent KeSetEvent KeWaitForSingleObject ExFreePoolWithTag InterlockedPopEntrySList InterlockedPushEntrySList ExInitializeNPagedLookasideList ExDeleteNPagedLookasideList MmBuildMdlForNonPagedPool MmGetSystemRoutineAddress MmMapLockedPagesSpecifyCache MmUnmapLockedPages MmAllocatePagesForMdl MmFreePagesFromMdl PsCreateSystemThread ExUuidCreate IoAllocateMdl IofCompleteRequest IoCreateDevice IoCreateSymbolicLink IoDeleteDevice IoDeleteSymbolicLink IoFreeMdl IoReleaseCancelSpinLock ObReferenceObjectByHandle ObfDereferenceObject ZwClose ZwOpenKey ZwQueryValueKey PsGetCurrentProcessId ZwSetInformationThread RtlLengthSid RtlCreateAcl RtlAddAccessAllowedAce PsLookupProcessByProcessId ObOpenObjectByPointer ZwSetSecurityObject SeExports _stricmp ZwQuerySystemInformation KeQuerySystemTime _allmul _aulldiv _aullrem RtlValidSid KeBugCheckEx swprintf_s RtlUnwind ExAllocatePoolWithTag RtlCompareMemory PsTerminateSystemThread

hal

KeGetCurrentIrql KeReleaseInStackQueuedSpinLock KeAcquireInStackQueuedSpinLock

Name

.text

Size

52KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

INIT

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/tdi/windows10/amd64/wvpack.sys

IMPHASH 0097c5a462209696c6b8908f211e31b2
SHA256 0049a6710d955d023f0f4df17595372068248bc0075a91ccc2bf02eac5bad3c8
MD5 f5ef422804d6de2fb51dceeb325d0c53
SHA1 05c19f77186e8bc11f4311ce6b9cdc662b2235b0
SHA512 0524b2fb44d2e595b2dc0bec15ba4a959682e3b7197d1aef9598559d001853ebc7c734099621675ce46f92d05fb8fac262e94736879da9e5ac2abff182abc454
SSDEEP 1536:8Z5BlvF2CBbgU1xHBu260A7e8PxFUszhz:8ZnxF2CBbx1xHBu2603sxCmh
TLSH
T161836D6B936918A9DD59C9B8C6B9961BEFF070031B7182DF02E4C5851F637D29F2C328
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

NSIS installer

installer

Digest

a8:d0:2f:7a:57:94:f8:e0:e4:22:14:98:90:63:7c:c4:9d:d1:58:7e:6a:39:09:66:e0:54:32:6b:d0:e6:3e:ea

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 19, 2023

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Digest

a8:d0:2f:7a:57:94:f8:e0:e4:22:14:98:90:63:7c:c4:9d:d1:58:7e:6a:39:09:66:e0:54:32:6b:d0:e6:3e:ea

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jun 19, 2023

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:29:15:27:00:00:00:00:00:2a

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:61:c8:8b:12:9c:2a:7f:1d:87:00:00:00:00:00:61

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 6, 2023 - Apr 3, 2024

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Oct 15, 2014 - Oct 15, 2029

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b3:fe:25:ce:29:1b:1b:8a:1c:00:01:00:00:01:b3

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

10

Entry point

23792

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\youqu_driver\driver\netfilter-driver\build\bin\x64\Win8_Release\tdiw\wvpack.pdb

Name

.text

Size

50KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

20B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/tdi/windows10/i386/wvpack.sys

IMPHASH 75b0f96e3e492c77743efa00382e8a87
SHA256 cd4b2f1450d750e31293440a2b6da30ad2202479587ffa01df13a7681192356e
MD5 e68c32fc41bfa9e38fd72cf8ca433c2f
SHA1 194da4adfd6721c4a7caafb5a193bb32e48001aa
SHA512 d36dca71bca10f1b35011cf85bacd8707005c67744306abca48d0b3d3d3d5539f6c64ef29ec89cef9a5ed30c1417a60eb4191bc0bf56f85baa03796150906d06
SSDEEP 1536:M1tbOTCyQEdSl1R4crFdXpECR7uQ3VU1UFRTWA7soPx/skUhzB:M1t2QEA1OcZUCR7TVUOFIox/NUh
TLSH
T1C1736DD3E6400C73D6D64AB0B2E8E3276B79DF060A9050F78B25C9C095717D1EAA936F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x86 arch:x86

NSIS installer

installer

Digest

20:27:d2:af:7e:d6:45:64:0f:6d:3f:98:68:1a:03:ff:1b:ec:d2:a6:9d:17:3a:63:20:da:88:33:a6:3f:bb:4f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 19, 2023

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Digest

20:27:d2:af:7e:d6:45:64:0f:6d:3f:98:68:1a:03:ff:1b:ec:d2:a6:9d:17:3a:63:20:da:88:33:a6:3f:bb:4f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jun 19, 2023

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:29:15:27:00:00:00:00:00:2a

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:61:c8:8b:12:9c:2a:7f:1d:87:00:00:00:00:00:61

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 6, 2023 - Apr 3, 2024

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Oct 15, 2014 - Oct 15, 2029

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b3:fe:25:ce:29:1b:1b:8a:1c:00:01:00:00:01:b3

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

10

Entry point

20096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\youqu_driver\driver\netfilter-driver\build\bin\Win32\Win8_Release\tdiw\wvpack.pdb

Name

.text

Size

41KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/tdi/windows7/amd64/wvpack.sys

IMPHASH 0097c5a462209696c6b8908f211e31b2
SHA256 c21ba9518e5e4ed1045354ae4dae9d485a134b40f54b1662af2a6f2bfd07cb3a
MD5 22bd68726ec87be63869b0d041916d57
SHA1 5720433092b99f21006e3dc12c84ca05b5897bb8
SHA512 f105bfbf1892a95fd308ba02aa656d8c7151d0fc793e0e2527e97d39fc5f363c837fd08813371c1393a153956172d553678042bfd13a67032cbd399fd4ad585b
SSDEEP 768:mpLWkhlJL9JnxxWfjmydo+BEx1sf3rpY3kEnZNMjGPIB9hDIX/qgYvkO10k79CJO:TZ5BlvF2CBbgU1xHyu26RA7APxqslhz
TLSH
T18E836C6B936914A9DD59C9B8C6B9961BEFF070432B7182CF02E4C5851F637D29F2C328
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

NSIS installer

installer

Digest

9d:49:90:c2:6d:66:20:e0:4a:1d:31:f5:c1:42:b9:90:33:1f:dc:93:40:7c:60:0b:47:7d:91:28:2f:73:70:62

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 19, 2023

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Digest

9d:49:90:c2:6d:66:20:e0:4a:1d:31:f5:c1:42:b9:90:33:1f:dc:93:40:7c:60:0b:47:7d:91:28:2f:73:70:62

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jun 19, 2023

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:29:15:27:00:00:00:00:00:2a

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:61:c8:8b:12:9c:2a:7f:1d:87:00:00:00:00:00:61

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 6, 2023 - Apr 3, 2024

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Oct 15, 2014 - Oct 15, 2029

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b3:fe:25:ce:29:1b:1b:8a:1c:00:01:00:00:01:b3

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

10

Entry point

23792

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\youqu_driver\driver\netfilter-driver\build\bin\x64\Win7_Release\tdiw\wvpack.pdb

Name

.text

Size

50KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

20B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/tdi/windows7/i386/wvpack.sys

IMPHASH 75b0f96e3e492c77743efa00382e8a87
SHA256 75c950906b1d13587461f04938b3381b1e90d4859696cf4ef55499fc6b641769
MD5 99d739a2a75bf2871d7e593178cedd3e
SHA1 e5b9bcf1acc69be7ad763111576460b26c7d74bf
SHA512 033f790c5909859b2aa4fda0b4cac3fe7d908a09f8ae88b90a4ba58e6fe102183e7740344f4a065603e0f7bf55fb17e2bfb22da6067a80ae4a1ccebe8fcdfc97
SSDEEP 1536:MytbOTCyQEdSl1R4crFdXpECR7uQ35U1UFRTHA7yPxCsahz:Myt2QEA1OcZUCR7T5UOF11xCLh
TLSH
T1E0737DD3E6400C63D6C64AB1B5ECE3276B79DF020A9050F78B25C9C095717D1EAA93AF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x86 arch:x86

NSIS installer

installer

Digest

27:6c:b2:ee:2d:44:4a:f1:a4:1f:6e:aa:87:99:03:ba:79:eb:ca:9a:fc:95:ca:fc:0e:b8:13:d8:93:0c:67:76

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 19, 2023

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Digest

27:6c:b2:ee:2d:44:4a:f1:a4:1f:6e:aa:87:99:03:ba:79:eb:ca:9a:fc:95:ca:fc:0e:b8:13:d8:93:0c:67:76

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jun 19, 2023

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:29:15:27:00:00:00:00:00:2a

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:61:c8:8b:12:9c:2a:7f:1d:87:00:00:00:00:00:61

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 6, 2023 - Apr 3, 2024

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Oct 15, 2014 - Oct 15, 2029

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b3:fe:25:ce:29:1b:1b:8a:1c:00:01:00:00:01:b3

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

10

Entry point

20096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\youqu_driver\driver\netfilter-driver\build\bin\Win32\Win7_Release\tdiw\wvpack.pdb

Name

.text

Size

41KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/wfp/windows10/amd64/wvpack.sys

IMPHASH b395c6a8213cd8e8041e69d9f3d2fe66
SHA256 c85553c0b7db2f975e03e0a0a6a2570c86d7f48bbbed376c7edc5360adaafeb7
MD5 825436a04c40f7e0b2c97e5f738da64a
SHA1 17649181819f38dcefe1dbce53958598666d8c65
SHA512 0d7357a31985f183b0ee0abbf5f2fe7950236ef19ec52a56ac9368e8192f64723482d2de98531371be471b537bb2f840508c7bdb2205e10a67019034ee395b34
SSDEEP 1536:sg6VIer15WqL+WNvh6Y2Ns1aLv2LpTEi1aIIiikZxEA74oPxSVTsZhzy:sDKS55L+WNp6yajszZqV4x0shm
TLSH
T1D6A36A6B23F414D9EAA7E5B4C6A5DA07EBB1B0423BA153CF07A184801F633D16F39395
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

NSIS installer

installer

Digest

c0:e0:ea:e1:a8:57:b9:f0:61:10:16:71:49:13:2f:28:37:e3:61:36:2e:c2:ef:42:7e:d5:ae:fc:31:fa:95:72

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 19, 2023

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Digest

c0:e0:ea:e1:a8:57:b9:f0:61:10:16:71:49:13:2f:28:37:e3:61:36:2e:c2:ef:42:7e:d5:ae:fc:31:fa:95:72

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jun 19, 2023

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:29:15:27:00:00:00:00:00:2a

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:61:c8:8b:12:9c:2a:7f:1d:87:00:00:00:00:00:61

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 6, 2023 - Apr 3, 2024

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Oct 15, 2014 - Oct 15, 2029

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b3:fe:25:ce:29:1b:1b:8a:1c:00:01:00:00:01:b3

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

10

Entry point

43824

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\youqu_driver\driver\netfilter-driver\build\bin\x64\Win8_Release\wfpw\wvpack.pdb

fwpkclnt.sys

FwpsFreeNetBufferList0

ndis.sys

NdisFreeGenericObject NdisFreeNetBufferListPool NdisRetreatNetBufferDataStart NdisAdvanceNetBufferDataStart NdisGetDataBuffer NdisAllocateGenericObject NdisWaitEvent NdisInitializeEvent NdisAllocateNetBufferListPool

ntoskrnl.exe

RtlCompareMemory KeAcquireInStackQueuedSpinLock KeReleaseInStackQueuedSpinLock ExAllocatePoolWithTag ExUuidCreate swprintf_s __C_specific_handler RtlInitUnicodeString MmGetSystemRoutineAddress RtlAppendUnicodeToString RtlCreateSecurityDescriptor RtlSetDaclSecurityDescriptor KeInitializeEvent KeSetEvent KeWaitForSingleObject ExFreePoolWithTag ExQueryDepthSList ExpInterlockedPopEntrySList ExpInterlockedPushEntrySList ExInitializeNPagedLookasideList ExDeleteNPagedLookasideList MmBuildMdlForNonPagedPool MmMapLockedPagesSpecifyCache MmUnmapLockedPages MmAllocatePagesForMdl MmFreePagesFromMdl PsCreateSystemThread PsTerminateSystemThread IoAllocateMdl IofCompleteRequest IoCreateDevice IoCreateSymbolicLink IoDeleteDevice IoDeleteSymbolicLink IoFreeMdl IoReleaseCancelSpinLock ObReferenceObjectByHandle ObfDereferenceObject ZwClose ZwOpenKey ZwQueryValueKey PsGetCurrentProcessId ZwSetInformationThread RtlLengthSid RtlCreateAcl RtlAddAccessAllowedAce PsLookupProcessByProcessId ObOpenObjectByPointer ZwSetSecurityObject SeExports RtlGetVersion _stricmp ZwQuerySystemInformation RtlValidSid

Name

.text

Size

62KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

320B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/wfp/windows10/i386/wvpack.sys

IMPHASH 2cd605a05dafdfe059f7b1e351736d91
SHA256 6e421c21ba0538b8366ea1c06feb63cec5f203fea101827b9c78aa22454784bc
MD5 39747bcde257a2388ceea8ab793efb4b
SHA1 c3e1581b27cc2a1628a64a269d10a917efff735d
SHA512 03ccc7da105a2761602a67a5e0300b53cbd757c9e2778e5ab38125c1b5a17e033a52e859130c92eb328acd1f7d1a04b8e815cc8b223e96834787de0986764641
SSDEEP 1536:4oyacY7LBT8t8BZpWFfNuxQO+Q5tlnakthrlmXF54qE6lqa378A70PxjslhzQ:WlEBTGwZpWuF53akthsU6qawvxjYhk
TLSH
T13493AEB3FA0490A3FA965A30F29CEB736D3D63122A568CE39398C54654317C1D5363EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x86 arch:x86

NSIS installer

installer

Digest

4f:4f:62:c0:be:12:16:bc:88:42:f0:a1:67:ae:23:bf:2e:d0:1b:71:57:e2:94:b7:ea:ad:d3:a8:b9:0a:eb:2d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 19, 2023

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Digest

4f:4f:62:c0:be:12:16:bc:88:42:f0:a1:67:ae:23:bf:2e:d0:1b:71:57:e2:94:b7:ea:ad:d3:a8:b9:0a:eb:2d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jun 19, 2023

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:29:15:27:00:00:00:00:00:2a

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:61:c8:8b:12:9c:2a:7f:1d:87:00:00:00:00:00:61

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 6, 2023 - Apr 3, 2024

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Oct 15, 2014 - Oct 15, 2029

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b3:fe:25:ce:29:1b:1b:8a:1c:00:01:00:00:01:b3

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

10

Entry point

39680

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\youqu_driver\driver\netfilter-driver\build\bin\Win32\Win8_Release\wfpw\wvpack.pdb

fwpkclnt.sys

FwpsFreeNetBufferList0

ndis.sys

NdisGetDataBuffer NdisAllocateGenericObject NdisFreeGenericObject NdisAdvanceNetBufferDataStart NdisWaitEvent NdisAllocateNetBufferListPool NdisFreeNetBufferListPool NdisRetreatNetBufferDataStart NdisInitializeEvent

ntoskrnl.exe

memcpy memset RtlInitUnicodeString MmGetSystemRoutineAddress RtlAppendUnicodeToString RtlCreateSecurityDescriptor RtlSetDaclSecurityDescriptor KeInitializeEvent KeSetEvent KeWaitForSingleObject ExFreePoolWithTag InterlockedPopEntrySList InterlockedPushEntrySList ExInitializeNPagedLookasideList ExDeleteNPagedLookasideList MmBuildMdlForNonPagedPool MmMapLockedPagesSpecifyCache MmUnmapLockedPages MmAllocatePagesForMdl MmFreePagesFromMdl PsCreateSystemThread ExUuidCreate IoAllocateMdl IofCompleteRequest IoCreateDevice IoCreateSymbolicLink IoDeleteDevice IoDeleteSymbolicLink IoFreeMdl IoReleaseCancelSpinLock ObReferenceObjectByHandle ObfDereferenceObject ZwClose ZwOpenKey ZwQueryValueKey PsGetCurrentProcessId ZwSetInformationThread RtlLengthSid RtlCreateAcl RtlAddAccessAllowedAce PsLookupProcessByProcessId ObOpenObjectByPointer ZwSetSecurityObject SeExports RtlGetVersion _stricmp ZwQuerySystemInformation KeQuerySystemTime _allmul _aulldiv _aullrem RtlValidSid swprintf_s RtlUnwind ExAllocatePoolWithTag RtlCompareMemory PsTerminateSystemThread

hal

KeGetCurrentIrql KeReleaseInStackQueuedSpinLock KeAcquireInStackQueuedSpinLock

Name

.text

Size

53KB

Virtual Size

53KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

INIT

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/wfp/windows7/amd64/wvpack.sys

IMPHASH 0fd6894d0de85d75397d3b75aaf01ba4
SHA256 bfb207e31c1f29a0730d5d1a85d0e7f6d19cd2034e0101b31c3aba6b4f27b0d4
MD5 ce64a66a8f9d8f221424872fd735989a
SHA1 70f3f3eb1434c6baa0acff56fa9a3c8bfd02f54a
SHA512 d181be06186b27923b8c4324be09421258d9cc69c7852d912982f91b5757d044784b855c027a8935d776ebf55cd653e45372a027160ddd078e8412449105aedd
SSDEEP 1536:lvAPe1lXssUNtrOuCDven0syd91EiIEI3NhxeA7RePxosyhz:ljasUNtrRCXd90NhI7xoHh
TLSH
T1A3A37B6B23E414D9EAABE5B4C2A9DA17EFB1B4423BA153CF0761C4501F633D16F38285
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

NSIS installer

installer

Digest

6a:c6:e7:96:37:fa:fc:72:21:a2:86:1c:a4:fa:99:bf:38:db:5b:da:aa:a1:a3:3a:4f:61:1b:1d:26:28:b8:9d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 19, 2023

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Digest

6a:c6:e7:96:37:fa:fc:72:21:a2:86:1c:a4:fa:99:bf:38:db:5b:da:aa:a1:a3:3a:4f:61:1b:1d:26:28:b8:9d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jun 19, 2023

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:29:15:27:00:00:00:00:00:2a

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:61:c8:8b:12:9c:2a:7f:1d:87:00:00:00:00:00:61

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 6, 2023 - Apr 3, 2024

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Oct 15, 2014 - Oct 15, 2029

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b3:fe:25:ce:29:1b:1b:8a:1c:00:01:00:00:01:b3

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

10

Entry point

42560

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\youqu_driver\driver\netfilter-driver\build\bin\x64\Win7_Release\wfpw\wvpack.pdb

fwpkclnt.sys

FwpsFreeNetBufferList0

ndis.sys

NdisFreeGenericObject NdisFreeNetBufferListPool NdisRetreatNetBufferDataStart NdisAdvanceNetBufferDataStart NdisGetDataBuffer NdisAllocateGenericObject NdisWaitEvent NdisInitializeEvent NdisAllocateNetBufferListPool

ntoskrnl.exe

RtlCompareMemory KeAcquireInStackQueuedSpinLock KeReleaseInStackQueuedSpinLock ExAllocatePoolWithTag ExUuidCreate swprintf_s __C_specific_handler RtlInitUnicodeString RtlAppendUnicodeToString RtlCreateSecurityDescriptor RtlSetDaclSecurityDescriptor KeInitializeEvent KeSetEvent KeWaitForSingleObject ExFreePoolWithTag ExQueryDepthSList ExpInterlockedPopEntrySList ExpInterlockedPushEntrySList ExInitializeNPagedLookasideList ExDeleteNPagedLookasideList MmBuildMdlForNonPagedPool MmGetSystemRoutineAddress MmMapLockedPagesSpecifyCache MmUnmapLockedPages MmAllocatePagesForMdl MmFreePagesFromMdl PsCreateSystemThread PsTerminateSystemThread IoAllocateMdl IofCompleteRequest IoCreateDevice IoCreateSymbolicLink IoDeleteDevice IoDeleteSymbolicLink IoFreeMdl IoReleaseCancelSpinLock ObReferenceObjectByHandle ObfDereferenceObject ZwClose ZwOpenKey ZwQueryValueKey PsGetCurrentProcessId ZwSetInformationThread RtlLengthSid RtlCreateAcl RtlAddAccessAllowedAce PsLookupProcessByProcessId ObOpenObjectByPointer ZwSetSecurityObject SeExports _stricmp ZwQuerySystemInformation RtlValidSid KeBugCheckEx

Name

.text

Size

61KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

320B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/wfp/windows7/i386/wvpack.sys

IMPHASH 4fda5fd328a7d7a00c648c9e9138195d
SHA256 b0831e1baa2738e9fdb649c9e5563118d39d3548b6fe3843aacdcbed031d0213
MD5 2405b07af9ad529c79a1f9f21ec619f0
SHA1 9f51ec99b94d5f9a629289704feb52de8e08e18b
SHA512 940f16a9602247f38c3ce1899d8ad795941866c19ea0c21ccc5c5b4fb336f929e8adcc59b8c7f7cf2389bc0a6a3e0c2ae796661f9e901593f969ea343816e98e
SSDEEP 1536:4zSKHsizINbr2VwwzJBKj0k2mhudCRgWkE6/1qUhQTD3A7PhPx3syhz5:zWsizIcBbkbhQs0qUU0x37hd
TLSH
T1F0939EB3F7044073EA92ADB092BCDB232F7E9E516A9545E35354C607A4787C1DA3432E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x86 arch:x86

NSIS installer

installer

Digest

f0:93:b0:ba:39:34:16:0b:9f:62:da:8a:12:a5:53:f5:44:eb:9d:e3:cb:99:64:c3:5d:5f:63:37:04:cc:15:b0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 19, 2023

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Digest

f0:93:b0:ba:39:34:16:0b:9f:62:da:8a:12:a5:53:f5:44:eb:9d:e3:cb:99:64:c3:5d:5f:63:37:04:cc:15:b0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jun 19, 2023

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:29:15:27:00:00:00:00:00:2a

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:61:c8:8b:12:9c:2a:7f:1d:87:00:00:00:00:00:61

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 6, 2023 - Apr 3, 2024

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Oct 15, 2014 - Oct 15, 2029

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b3:fe:25:ce:29:1b:1b:8a:1c:00:01:00:00:01:b3

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

10

Entry point

38304

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\youqu_driver\driver\netfilter-driver\build\bin\Win32\Win7_Release\wfpw\wvpack.pdb

fwpkclnt.sys

FwpsFreeNetBufferList0

ndis.sys

NdisGetDataBuffer NdisAllocateGenericObject NdisFreeGenericObject NdisAdvanceNetBufferDataStart NdisWaitEvent NdisAllocateNetBufferListPool NdisFreeNetBufferListPool NdisRetreatNetBufferDataStart NdisInitializeEvent

ntoskrnl.exe

memcpy memset RtlInitUnicodeString RtlAppendUnicodeToString RtlCreateSecurityDescriptor RtlSetDaclSecurityDescriptor KeInitializeEvent KeSetEvent KeWaitForSingleObject ExFreePoolWithTag InterlockedPopEntrySList InterlockedPushEntrySList ExInitializeNPagedLookasideList ExDeleteNPagedLookasideList MmBuildMdlForNonPagedPool MmGetSystemRoutineAddress MmMapLockedPagesSpecifyCache MmUnmapLockedPages MmAllocatePagesForMdl MmFreePagesFromMdl PsCreateSystemThread ExUuidCreate IoAllocateMdl IofCompleteRequest IoCreateDevice IoCreateSymbolicLink IoDeleteDevice IoDeleteSymbolicLink IoFreeMdl IoReleaseCancelSpinLock ObReferenceObjectByHandle ObfDereferenceObject ZwClose ZwOpenKey ZwQueryValueKey PsGetCurrentProcessId ZwSetInformationThread RtlLengthSid RtlCreateAcl RtlAddAccessAllowedAce PsLookupProcessByProcessId ObOpenObjectByPointer ZwSetSecurityObject SeExports _stricmp ZwQuerySystemInformation KeQuerySystemTime _allmul _aulldiv _aullrem RtlValidSid KeBugCheckEx swprintf_s RtlUnwind ExAllocatePoolWithTag RtlCompareMemory PsTerminateSystemThread

hal

KeGetCurrentIrql KeReleaseInStackQueuedSpinLock KeAcquireInStackQueuedSpinLock

Name

.text

Size

52KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

INIT

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

license.txt

SHA256 76d8b0af66c0f2c25518904a9849a01b02a74e27870518870ece3998a90e756f
MD5 38c8f5f259d1eb09167edb78a0e92507
SHA1 265c18c258b95e7c8eceb759cd08639ccaba6093
SHA512 f46d9cac40c6d4dff7f653b24f7d5f4e1460eabc674da99787039cbfdefe3569e72200c6af22513884289bdfff461f5fc33e675b3677856c78e1fa39ca3b083f
TLSH
T18241E9FFC63B48C01A333DD16A44524C7D18771BE4F2A6E0A93521B4BC9942306CDE09
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

proxyg.dll

IMPHASH ef2950805cfd017c3b005284a639e584
SHA256 b71fdb1e1cee470b75bd34006221bab84a00132e02b78a50ba66e089dea73488
MD5 6f80e5ac45df495a43d0e6aae5978d27
SHA1 209775ca1cd13381760ecf4123ed493f133249cf
SHA512 ea50dbe6011d296a8d097d8d5c59091e3bac72d46d3280bd52bedf4469328ecab38a2fef39bf41b2b6e12bd78d71efd6a9614e1ecf85c8fc3b48adbdff7e4bda
SSDEEP 49152:lw9/r5dgUGhKyaN4d295T61E5vZvpqmx1Fful5A9cc55GX:lQ/r5lLL4Qt9e
TLSH
T19DC54A52F99B50F2F60B15354467A2AF2330BA05D735CAC7DD00AE6AFCB36A21D37216
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

06:13:43:e4:52:2f:ab:3f:81:7c:27:b0:fe:d6:1b:d3:5d:16:37:23:4d:36:62:8f:75:af:2b:3f:6f:5c:f2:4b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Sep 11, 2025

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

1

Major OS version

6

Entry point

5040

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

kernel32

AddVectoredExceptionHandler CloseHandle CreateEventA CreateFileA CreateIoCompletionPort CreateThread CreateWaitableTimerExW DeleteCriticalSection DuplicateHandle EnterCriticalSection ExitProcess FreeEnvironmentStringsW GetConsoleMode GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetLastError GetProcAddress GetProcessAffinityMask GetQueuedCompletionStatusEx GetStdHandle GetSystemDirectoryA GetSystemInfo GetSystemTimeAsFileTime GetThreadContext GetTickCount InitializeCriticalSection LeaveCriticalSection LoadLibraryA LoadLibraryW PostQueuedCompletionStatus QueryPerformanceCounter ResumeThread SetConsoleCtrlHandler SetErrorMode SetEvent SetProcessPriorityBoost SetThreadContext SetUnhandledExceptionFilter SetWaitableTimer Sleep SuspendThread SwitchToThread TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WriteConsoleW WriteFile

msvcrt

_amsg_exit _beginthread _errno _initterm _iob _lock _unlock abort calloc fprintf free fwrite malloc realloc strlen strncmp vfprintf

Name

.text

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

202KB

Virtual Size

201KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

179KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

110B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

8B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

832B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

95KB

Virtual Size

94KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

upWire.exe

IMPHASH 3c9f80f2e71286e71d7f91cdd26c6049
SHA256 90b89a6dc4565c9817e7db8323702006860cb2b49f352863f2b18ba21c66b435
MD5 8f6cec6f5436eb0fe79a1f26a1c663d4
SHA1 4fb4b6ab3aa38fd54b8f52854e0d4b2a052a2805
SHA512 a50b117bc3c041efc1783fd4df786d229b70ec686bd0e575238a5f92ddef333776eb55bfe7462e674430a8f79f7f9885e8e397136951354e9b79a75a07facd90
SSDEEP 49152:DsQqp8Ay5PMpaOjPufBp3cyKB33Ma67NreT6scPEWcylvJbp:lquA8PQaOjPuZp3cyKB33Mx7NrpstQ
TLSH
T122B5AE12BA42C072E59202B462FA6B7FCC3A9934573585C397D01E7589312E37B3E79E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

2b:2a:16:c0:60:71:a9:f7:8d:39:a1:99:34:a4:a2:c6:8a:82:b8:ae:d7:44:79:97:78:fb:5d:da:06:ed:52:3a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 5, 2026

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

1508045

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\youqu_job\SuperBrowser\wirevpnLauncher\code\AllUpdateServer\bin\Release\up7zupdate.pdb

ws2_32

getsockname getpeername htons ntohs connect closesocket getservbyname bind send recv WSASetLastError select __WSAFDIsSet socket WSAGetLastError WSACleanup shutdown htonl gethostbyname getsockopt setsockopt gethostname ioctlsocket sendto recvfrom listen accept freeaddrinfo getaddrinfo WSAIoctl WSAStartup

wldap32

ord27 ord26 ord22 ord33 ord32 ord79 ord200 ord301 ord41 ord50 ord143 ord60 ord211 ord46 ord35 ord217 ord30

kernel32

GetCurrentDirectoryW SystemTimeToFileTime WideCharToMultiByte GetCurrentProcess Sleep MoveFileExA DeleteFileA CreateThread GetProcAddress GetModuleHandleW GetACP FormatMessageW GetLastError FindFirstFileW FindNextFileW TerminateProcess GetModuleFileNameW CreatePipe FindClose WaitForSingleObject DeleteFileW MoveFileExW GetModuleFileNameA FindFirstFileExW GetConsoleScreenBufferInfo SetConsoleTextAttribute EnterCriticalSection GetFullPathNameW GetStdHandle OutputDebugStringA LeaveCriticalSection InitializeCriticalSection GetTempPathA GetWindowsDirectoryA DeleteCriticalSection GetComputerNameA GetCurrentThreadId RtlCaptureStackBackTrace GetSystemTimeAsFileTime SetLastError FormatMessageA InitializeCriticalSectionEx SleepEx GetTickCount64 WaitForSingleObjectEx ExpandEnvironmentStringsA GetFileType PeekNamedPipe WaitForMultipleObjects FreeLibrary VerSetConditionMask GetSystemDirectoryA GetModuleHandleA SetFilePointer VerifyVersionInfoA FlushConsoleInputBuffer QueryPerformanceCounter GetCurrentProcessId GetTickCount GlobalMemoryStatus GetSystemTime SetConsoleCtrlHandler FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetFileInformationByHandle CloseHandle GetConsoleMode GetConsoleOutputCP SetFileTime WriteFile ReadFile CreateDirectoryW LocalFileTimeToFileTime MultiByteToWideChar SetFilePointerEx GetConsoleCP ExitProcess GetCommandLineA GetCommandLineW ReadConsoleW HeapFree HeapAlloc GetFileSizeEx FlushFileBuffers CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetExitCodeProcess GetFileAttributesExW SetStdHandle SetEndOfFile GetTimeZoneInformation HeapReAlloc SetConsoleMode ReadConsoleInputW IsValidCodePage GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap CreateProcessW DuplicateHandle GetModuleHandleExW FreeLibraryAndExitThread ExitThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc GetFileAttributesW GetDriveTypeW CreateFileW RaiseException RtlUnwind InitializeSListHead GetStartupInfoW IsDebuggerPresent CreateEventW ResetEvent SetEvent InitializeCriticalSectionAndSpinCount IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo HeapSize WriteConsoleW LoadLibraryA GetStringTypeW InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive TryEnterCriticalSection GetExitCodeThread EncodePointer DecodePointer LocalFree LCMapStringEx

user32

GetProcessWindowStation GetUserObjectInformationW MessageBoxA

advapi32

DeregisterEventSource RegisterServiceCtrlHandlerW SetServiceStatus RegQueryValueExW RegSetValueExW CryptEnumProvidersA CryptSignHashA CryptDestroyHash CryptCreateHash CryptDecrypt CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam CryptDestroyKey CryptReleaseContext CryptAcquireContextA ReportEventA RegisterEventSourceA StartServiceCtrlDispatcherW CreateServiceW QueryServiceStatus CloseServiceHandle OpenSCManagerW ChangeServiceConfig2W ControlService StartServiceW OpenServiceW RegCloseKey RegCreateKeyExW

shell32

SHCreateDirectoryExA SHFileOperationW

ole32

CoSetProxyBlanket CoInitializeEx OleRun CoCreateInstance CoUninitialize CoInitialize CoCreateGuid CoInitializeSecurity StringFromGUID2

oleaut32

VariantInit VariantClear SysFreeString SysAllocString GetErrorInfo

shlwapi

PathStripPathA PathFileExistsW PathRemoveFileSpecA

wininet

InternetCloseHandle HttpQueryInfoW InternetOpenW InternetOpenUrlW InternetReadFile

dbghelp

SymFromAddr SymSetOptions SymInitialize SymCleanup UnDecorateSymbolName

crypt32

CertOpenStore CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertDuplicateCertificateContext CertFreeCertificateContext CertGetCertificateContextProperty

??0CharReader@Json_c@@QAE@ABV01@@Z ??0CharReader@Json_c@@QAE@XZ ??0CharReaderBuilder@Json_c@@QAE@ABV01@@Z ??0CharReaderBuilder@Json_c@@QAE@XZ ??0Exception@Json_c@@QAE@ABV01@@Z ??0Exception@Json_c@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0Factory@CharReader@Json_c@@QAE@ABV012@@Z ??0Factory@CharReader@Json_c@@QAE@XZ ??0Factory@StreamWriter@Json_c@@QAE@ABV012@@Z ??0Factory@StreamWriter@Json_c@@QAE@XZ ??0FastWriter@Json_c@@QAE@ABV01@@Z ??0FastWriter@Json_c@@QAE@XZ ??0Features@Json_c@@QAE@XZ ??0LogicError@Json_c@@QAE@$$QAV01@@Z ??0LogicError@Json_c@@QAE@ABV01@@Z ??0LogicError@Json_c@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0Path@Json_c@@QAE@$$QAV01@@Z ??0Path@Json_c@@QAE@ABV01@@Z ??0Path@Json_c@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVPathArgument@1@1111@Z ??0PathArgument@Json_c@@QAE@$$QAV01@@Z ??0PathArgument@Json_c@@QAE@ABV01@@Z ??0PathArgument@Json_c@@QAE@I@Z ??0PathArgument@Json_c@@QAE@PBD@Z ??0PathArgument@Json_c@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0PathArgument@Json_c@@QAE@XZ ??0Reader@Json_c@@QAE@$$QAV01@@Z ??0Reader@Json_c@@QAE@ABV01@@Z ??0Reader@Json_c@@QAE@ABVFeatures@1@@Z ??0Reader@Json_c@@QAE@XZ ??0RuntimeError@Json_c@@QAE@$$QAV01@@Z ??0RuntimeError@Json_c@@QAE@ABV01@@Z ??0RuntimeError@Json_c@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0StaticString@Json_c@@QAE@PBD@Z ??0StreamWriter@Json_c@@QAE@ABV01@@Z ??0StreamWriter@Json_c@@QAE@XZ ??0StreamWriterBuilder@Json_c@@QAE@ABV01@@Z ??0StreamWriterBuilder@Json_c@@QAE@XZ ??0StyledStreamWriter@Json_c@@QAE@ABV01@@Z ??0StyledStreamWriter@Json_c@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0StyledWriter@Json_c@@QAE@ABV01@@Z ??0StyledWriter@Json_c@@QAE@XZ ??0Value@Json_c@@QAE@$$QAV01@@Z ??0Value@Json_c@@QAE@ABV01@@Z ??0Value@Json_c@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0Value@Json_c@@QAE@ABVStaticString@1@@Z ??0Value@Json_c@@QAE@H@Z ??0Value@Json_c@@QAE@I@Z ??0Value@Json_c@@QAE@N@Z ??0Value@Json_c@@QAE@PBD0@Z ??0Value@Json_c@@QAE@PBD@Z ??0Value@Json_c@@QAE@W4ValueType@1@@Z ??0Value@Json_c@@QAE@_J@Z ??0Value@Json_c@@QAE@_K@Z ??0Value@Json_c@@QAE@_N@Z ??0ValueConstIterator@Json_c@@AAE@ABV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBVCZString@Value@Json_c@@V23@@std@@@std@@@std@@@std@@@Z ??0ValueConstIterator@Json_c@@QAE@ABVValueIterator@1@@Z ??0ValueConstIterator@Json_c@@QAE@XZ ??0ValueIterator@Json_c@@AAE@ABV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBVCZString@Value@Json_c@@V23@@std@@@std@@@std@@@std@@@Z ??0ValueIterator@Json_c@@QAE@ABV01@@Z ??0ValueIterator@Json_c@@QAE@ABVValueConstIterator@1@@Z ??0ValueIterator@Json_c@@QAE@XZ ??0ValueIteratorBase@Json_c@@QAE@ABV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBVCZString@Value@Json_c@@V23@@std@@@std@@@std@@@std@@@Z ??0ValueIteratorBase@Json_c@@QAE@XZ ??0Writer@Json_c@@QAE@ABV01@@Z ??0Writer@Json_c@@QAE@XZ ??1CharReader@Json_c@@UAE@XZ ??1CharReaderBuilder@Json_c@@UAE@XZ ??1Exception@Json_c@@UAE@XZ ??1Factory@CharReader@Json_c@@UAE@XZ ??1Factory@StreamWriter@Json_c@@UAE@XZ ??1FastWriter@Json_c@@UAE@XZ ??1LogicError@Json_c@@UAE@XZ ??1Path@Json_c@@QAE@XZ ??1PathArgument@Json_c@@QAE@XZ ??1Reader@Json_c@@QAE@XZ ??1RuntimeError@Json_c@@UAE@XZ ??1StreamWriter@Json_c@@UAE@XZ ??1StreamWriterBuilder@Json_c@@UAE@XZ ??1StyledStreamWriter@Json_c@@QAE@XZ ??1StyledWriter@Json_c@@UAE@XZ ??1Value@Json_c@@QAE@XZ ??1Writer@Json_c@@UAE@XZ ??4CharReader@Json_c@@QAEAAV01@ABV01@@Z ??4CharReaderBuilder@Json_c@@QAEAAV01@ABV01@@Z ??4Exception@Json_c@@QAEAAV01@ABV01@@Z ??4Factory@CharReader@Json_c@@QAEAAV012@ABV012@@Z ??4Factory@StreamWriter@Json_c@@QAEAAV012@ABV012@@Z ??4FastWriter@Json_c@@QAEAAV01@ABV01@@Z ??4Features@Json_c@@QAEAAV01@$$QAV01@@Z ??4Features@Json_c@@QAEAAV01@ABV01@@Z ??4LogicError@Json_c@@QAEAAV01@$$QAV01@@Z ??4LogicError@Json_c@@QAEAAV01@ABV01@@Z ??4Path@Json_c@@QAEAAV01@$$QAV01@@Z ??4Path@Json_c@@QAEAAV01@ABV01@@Z ??4PathArgument@Json_c@@QAEAAV01@$$QAV01@@Z ??4PathArgument@Json_c@@QAEAAV01@ABV01@@Z ??4Reader@Json_c@@QAEAAV01@$$QAV01@@Z ??4Reader@Json_c@@QAEAAV01@ABV01@@Z ??4RuntimeError@Json_c@@QAEAAV01@$$QAV01@@Z ??4RuntimeError@Json_c@@QAEAAV01@ABV01@@Z ??4StaticString@Json_c@@QAEAAV01@$$QAV01@@Z ??4StaticString@Json_c@@QAEAAV01@ABV01@@Z ??4StreamWriter@Json_c@@QAEAAV01@ABV01@@Z ??4StreamWriterBuilder@Json_c@@QAEAAV01@ABV01@@Z ??4StyledStreamWriter@Json_c@@QAEAAV01@ABV01@@Z ??4StyledWriter@Json_c@@QAEAAV01@ABV01@@Z ??4Value@Json_c@@QAEAAV01@$$QAV01@@Z ??4Value@Json_c@@QAEAAV01@ABV01@@Z ??4ValueConstIterator@Json_c@@QAEAAV01@$$QAV01@@Z ??4ValueConstIterator@Json_c@@QAEAAV01@ABV01@@Z ??4ValueConstIterator@Json_c@@QAEAAV01@ABVValueIteratorBase@1@@Z ??4ValueIterator@Json_c@@QAEAAV01@ABV01@@Z ??4ValueIteratorBase@Json_c@@QAEAAV01@$$QAV01@@Z ??4ValueIteratorBase@Json_c@@QAEAAV01@ABV01@@Z ??4Writer@Json_c@@QAEAAV01@ABV01@@Z ??5Json_c@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@std@@AAV12@AAVValue@0@@Z ??6Json_c@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AAV12@ABVValue@0@@Z ??8Value@Json_c@@QBE_NABV01@@Z ??8ValueIteratorBase@Json_c@@QBE_NABV01@@Z ??9Value@Json_c@@QBE_NABV01@@Z ??9ValueIteratorBase@Json_c@@QBE_NABV01@@Z ??ACharReaderBuilder@Json_c@@QAEAAVValue@1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??AStreamWriterBuilder@Json_c@@QAEAAVValue@1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??AValue@Json_c@@QAEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??AValue@Json_c@@QAEAAV01@ABVStaticString@1@@Z ??AValue@Json_c@@QAEAAV01@H@Z ??AValue@Json_c@@QAEAAV01@I@Z ??AValue@Json_c@@QAEAAV01@PBD@Z ??AValue@Json_c@@QBEABV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??AValue@Json_c@@QBEABV01@H@Z ??AValue@Json_c@@QBEABV01@I@Z ??AValue@Json_c@@QBEABV01@PBD@Z ??BStaticString@Json_c@@QBEPBDXZ ??BValue@Json_c@@QBE_NXZ ??CValueConstIterator@Json_c@@QBEPBVValue@1@XZ ??CValueIterator@Json_c@@QBEPAVValue@1@XZ ??DValueConstIterator@Json_c@@QBEABVValue@1@XZ ??DValueIterator@Json_c@@QBEAAVValue@1@XZ ??EValueConstIterator@Json_c@@QAE?AV01@H@Z ??EValueConstIterator@Json_c@@QAEAAV01@XZ ??EValueIterator@Json_c@@QAE?AV01@H@Z ??EValueIterator@Json_c@@QAEAAV01@XZ ??FValueConstIterator@Json_c@@QAE?AV01@H@Z ??FValueConstIterator@Json_c@@QAEAAV01@XZ ??FValueIterator@Json_c@@QAE?AV01@H@Z ??FValueIterator@Json_c@@QAEAAV01@XZ ??GValueIteratorBase@Json_c@@QBEHABV01@@Z ??MValue@Json_c@@QBE_NABV01@@Z ??NValue@Json_c@@QBE_NABV01@@Z ??OValue@Json_c@@QBE_NABV01@@Z ??PValue@Json_c@@QBE_NABV01@@Z ??_7CharReader@Json_c@@6B@ ??_7CharReaderBuilder@Json_c@@6B@ ??_7Exception@Json_c@@6B@ ??_7Factory@CharReader@Json_c@@6B@ ??_7Factory@StreamWriter@Json_c@@6B@ ??_7FastWriter@Json_c@@6B@ ??_7LogicError@Json_c@@6B@ ??_7RuntimeError@Json_c@@6B@ ??_7StreamWriter@Json_c@@6B@ ??_7StreamWriterBuilder@Json_c@@6B@ ??_7StyledWriter@Json_c@@6B@ ??_7Writer@Json_c@@6B@ ??_FStyledStreamWriter@Json_c@@QAEXXZ ??_FValue@Json_c@@QAEXXZ ?addComment@Reader@Json_c@@AAEXPBD0W4CommentPlacement@2@@Z ?addError@Reader@Json_c@@AAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVToken@12@PBD@Z ?addErrorAndRecover@Reader@Json_c@@AAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVToken@12@W4TokenType@12@@Z ?addPathInArg@Path@Json_c@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$vector@PBVPathArgument@Json_c@@V?$allocator@PBVPathArgument@Json_c@@@std@@@4@AAV?$_Vector_const_iterator@V?$_Vector_val@U?$_Simple_types@PBVPathArgument@Json_c@@@std@@@std@@@4@W4Kind@PathArgument@2@@Z ?all@Features@Json_c@@SA?AV12@XZ ?append@Value@Json_c@@QAEAAV12@$$QAV12@@Z ?append@Value@Json_c@@QAEAAV12@ABV12@@Z ?asBool@Value@Json_c@@QBE_NXZ ?asCString@Value@Json_c@@QBEPBDXZ ?asDouble@Value@Json_c@@QBENXZ ?asFloat@Value@Json_c@@QBEMXZ ?asInt64@Value@Json_c@@QBE_JXZ ?asInt@Value@Json_c@@QBEHXZ ?asLargestInt@Value@Json_c@@QBE_JXZ ?asLargestUInt@Value@Json_c@@QBE_KXZ ?asString@Value@Json_c@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?asUInt64@Value@Json_c@@QBE_KXZ ?asUInt@Value@Json_c@@QBEIXZ ?begin@Value@Json_c@@QAE?AVValueIterator@2@XZ ?begin@Value@Json_c@@QBE?AVValueConstIterator@2@XZ ?c_str@StaticString@Json_c@@QBEPBDXZ ?clear@Value@Json_c@@QAEXXZ ?compare@Value@Json_c@@QBEHABV12@@Z ?computeDistance@ValueIteratorBase@Json_c@@IBEHABV12@@Z ?containsNewLine@Reader@Json_c@@CA_NPBD0@Z ?copy@Value@Json_c@@QAEXABV12@@Z ?copy@ValueIteratorBase@Json_c@@IAEXABV12@@Z ?copyPayload@Value@Json_c@@QAEXABV12@@Z ?currentValue@Reader@Json_c@@AAEAAVValue@2@XZ ?decodeDouble@Reader@Json_c@@AAE_NAAVToken@12@@Z ?decodeDouble@Reader@Json_c@@AAE_NAAVToken@12@AAVValue@2@@Z ?decodeNumber@Reader@Json_c@@AAE_NAAVToken@12@@Z ?decodeNumber@Reader@Json_c@@AAE_NAAVToken@12@AAVValue@2@@Z ?decodeString@Reader@Json_c@@AAE_NAAVToken@12@@Z ?decodeString@Reader@Json_c@@AAE_NAAVToken@12@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?decodeUnicodeCodePoint@Reader@Json_c@@AAE_NAAVToken@12@AAPBDPBDAAI@Z ?decodeUnicodeEscapeSequence@Reader@Json_c@@AAE_NAAVToken@12@AAPBDPBDAAI@Z ?decrement@ValueIteratorBase@Json_c@@IAEXXZ ?defaultRealPrecision@Value@Json_c@@2IB ?demand@Value@Json_c@@QAEPAV12@PBD0@Z ?deref@ValueIteratorBase@Json_c@@IAEAAVValue@2@XZ ?deref@ValueIteratorBase@Json_c@@IBEABVValue@2@XZ ?dropNullPlaceholders@FastWriter@Json_c@@QAEXXZ ?dupMeta@Value@Json_c@@AAEXABV12@@Z ?dupPayload@Value@Json_c@@AAEXABV12@@Z ?empty@Value@Json_c@@QBE_NXZ ?enableYAMLCompatibility@FastWriter@Json_c@@QAEXXZ ?end@Value@Json_c@@QAE?AVValueIterator@2@XZ ?end@Value@Json_c@@QBE?AVValueConstIterator@2@XZ ?find@Value@Json_c@@QBEPBV12@PBD0@Z ?get@Value@Json_c@@QBE?AV12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV12@@Z ?get@Value@Json_c@@QBE?AV12@IABV12@@Z ?get@Value@Json_c@@QBE?AV12@PBD0ABV12@@Z ?get@Value@Json_c@@QBE?AV12@PBDABV12@@Z ?getComment@Value@Json_c@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4CommentPlacement@2@@Z ?getFormatedErrorMessages@Reader@Json_c@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?getFormattedErrorMessages@Reader@Json_c@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?getLocationLineAndColumn@Reader@Json_c@@ABE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD@Z ?getLocationLineAndColumn@Reader@Json_c@@ABEXPBDAAH1@Z ?getMemberNames@Value@Json_c@@QBE?AV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ ?getNextChar@Reader@Json_c@@AAEDXZ ?getOffsetLimit@Value@Json_c@@QBEHXZ ?getOffsetStart@Value@Json_c@@QBEHXZ ?getString@Value@Json_c@@QBE_NPAPBD0@Z ?getStructuredErrors@Reader@Json_c@@QBE?AV?$vector@UStructuredError@Reader@Json_c@@V?$allocator@UStructuredError@Reader@Json_c@@@std@@@std@@XZ ?good@Reader@Json_c@@QBE_NXZ ?hasComment@Value@Json_c@@QBE_NW4CommentPlacement@2@@Z ?hasCommentForValue@StyledStreamWriter@Json_c@@CA_NABVValue@2@@Z ?hasCommentForValue@StyledWriter@Json_c@@CA_NABVValue@2@@Z ?increment@ValueIteratorBase@Json_c@@IAEXXZ ?indent@StyledStreamWriter@Json_c@@AAEXXZ ?indent@StyledWriter@Json_c@@AAEXXZ ?index@ValueIteratorBase@Json_c@@QBEIXZ ?initBasic@Value@Json_c@@AAEXW4ValueType@2@_N@Z ?insert@Value@Json_c@@QAE_NI$$QAV12@@Z ?insert@Value@Json_c@@QAE_NIABV12@@Z ?invalidPath@Path@Json_c@@CAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z ?isAllocated@Value@Json_c@@ABE_NXZ ?isArray@Value@Json_c@@QBE_NXZ ?isBool@Value@Json_c@@QBE_NXZ ?isConvertibleTo@Value@Json_c@@QBE_NW4ValueType@2@@Z ?isDouble@Value@Json_c@@QBE_NXZ ?isEqual@ValueIteratorBase@Json_c@@IBE_NABV12@@Z ?isInt64@Value@Json_c@@QBE_NXZ ?isInt@Value@Json_c@@QBE_NXZ ?isIntegral@Value@Json_c@@QBE_NXZ ?isMember@Value@Json_c@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?isMember@Value@Json_c@@QBE_NPBD0@Z ?isMember@Value@Json_c@@QBE_NPBD@Z ?isMultilineArray@StyledStreamWriter@Json_c@@AAE_NABVValue@2@@Z ?isMultilineArray@StyledWriter@Json_c@@AAE_NABVValue@2@@Z ?isNull@Value@Json_c@@QBE_NXZ ?isNumeric@Value@Json_c@@QBE_NXZ ?isObject@Value@Json_c@@QBE_NXZ ?isString@Value@Json_c@@QBE_NXZ ?isUInt64@Value@Json_c@@QBE_NXZ ?isUInt@Value@Json_c@@QBE_NXZ ?isValidIndex@Value@Json_c@@QBE_NI@Z ?key@ValueIteratorBase@Json_c@@QBE?AVValue@2@XZ ?make@Path@Json_c@@QBEAAVValue@2@AAV32@@Z ?makePath@Path@Json_c@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$vector@PBVPathArgument@Json_c@@V?$allocator@PBVPathArgument@Json_c@@@std@@@4@@Z ?match@Reader@Json_c@@AAE_NPBDH@Z ?maxInt64@Value@Json_c@@2_JB ?maxInt@Value@Json_c@@2HB ?maxLargestInt@Value@Json_c@@2_JB ?maxLargestUInt@Value@Json_c@@2_KB ?maxUInt64@Value@Json_c@@2_KB ?maxUInt64AsDouble@Value@Json_c@@2NB ?maxUInt@Value@Json_c@@2IB ?memberName@ValueIteratorBase@Json_c@@QBEPBDPAPBD@Z ?memberName@ValueIteratorBase@Json_c@@QBEPBDXZ ?minInt64@Value@Json_c@@2_JB ?minInt@Value@Json_c@@2HB ?minLargestInt@Value@Json_c@@2_JB ?name@ValueIteratorBase@Json_c@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?newCharReader@CharReaderBuilder@Json_c@@UBEPAVCharReader@2@XZ ?newStreamWriter@StreamWriterBuilder@Json_c@@UBEPAVStreamWriter@2@XZ ?normalizeEOL@Reader@Json_c@@CA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD0@Z ?null@Value@Json_c@@2ABV12@B ?nullRef@Value@Json_c@@2ABV12@B ?nullSingleton@Value@Json_c@@SAABV12@XZ ?omitEndingLineFeed@FastWriter@Json_c@@QAEXXZ ?parse@Reader@Json_c@@QAE_NAAV?$basic_istream@DU?$char_traits@D@std@@@std@@AAVValue@2@_N@Z ?parse@Reader@Json_c@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVValue@2@_N@Z ?parse@Reader@Json_c@@QAE_NPBD0AAVValue@2@_N@Z ?parseFromStream@Json_c@@YA_NABVFactory@CharReader@1@AAV?$basic_istream@DU?$char_traits@D@std@@@std@@PAVValue@1@PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@@Z ?pushError@Reader@Json_c@@QAE_NABVValue@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z ?pushError@Reader@Json_c@@QAE_NABVValue@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?pushValue@StyledStreamWriter@Json_c@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?pushValue@StyledWriter@Json_c@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?readArray@Reader@Json_c@@AAE_NAAVToken@12@@Z ?readCStyleComment@Reader@Json_c@@AAE_NXZ ?readComment@Reader@Json_c@@AAE_NXZ ?readCppStyleComment@Reader@Json_c@@AAE_NXZ ?readNumber@Reader@Json_c@@AAEXXZ ?readObject@Reader@Json_c@@AAE_NAAVToken@12@@Z ?readString@Reader@Json_c@@AAE_NXZ ?readToken@Reader@Json_c@@AAE_NAAVToken@12@@Z ?readValue@Reader@Json_c@@AAE_NXZ ?recoverFromError@Reader@Json_c@@AAE_NW4TokenType@12@@Z ?releasePayload@Value@Json_c@@AAEXXZ ?removeIndex@Value@Json_c@@QAE_NIPAV12@@Z ?removeMember@Value@Json_c@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?removeMember@Value@Json_c@@QAEXPBD@Z ?removeMember@Value@Json_c@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAV12@@Z ?removeMember@Value@Json_c@@QAE_NPBD0PAV12@@Z ?removeMember@Value@Json_c@@QAE_NPBDPAV12@@Z ?resize@Value@Json_c@@QAEXI@Z ?resolve@Path@Json_c@@QBE?AVValue@2@ABV32@0@Z ?resolve@Path@Json_c@@QBEABVValue@2@ABV32@@Z ?resolveReference@Value@Json_c@@AAEAAV12@PBD0@Z ?resolveReference@Value@Json_c@@AAEAAV12@PBD@Z ?setComment@Value@Json_c@@QAEXPBDIW4CommentPlacement@2@@Z ?setComment@Value@Json_c@@QAEXPBDW4CommentPlacement@2@@Z ?setComment@Value@Json_c@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4CommentPlacement@2@@Z ?setDefaults@CharReaderBuilder@Json_c@@SAXPAVValue@2@@Z ?setDefaults@StreamWriterBuilder@Json_c@@SAXPAVValue@2@@Z ?setIsAllocated@Value@Json_c@@AAEX_N@Z ?setOffsetLimit@Value@Json_c@@QAEXH@Z ?setOffsetStart@Value@Json_c@@QAEXH@Z ?setType@Value@Json_c@@AAEXW4ValueType@2@@Z ?size@Value@Json_c@@QBEIXZ ?skipCommentTokens@Reader@Json_c@@AAEXAAVToken@12@@Z ?skipSpaces@Reader@Json_c@@AAEXXZ ?strictMode@CharReaderBuilder@Json_c@@SAXPAVValue@2@@Z ?strictMode@Features@Json_c@@SA?AV12@XZ ?swap@Value@Json_c@@QAEXAAV12@@Z ?swapPayload@Value@Json_c@@QAEXAAV12@@Z ?toStyledString@Value@Json_c@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?type@Value@Json_c@@QBE?AW4ValueType@2@XZ ?unindent@StyledStreamWriter@Json_c@@AAEXXZ ?unindent@StyledWriter@Json_c@@AAEXXZ ?validate@CharReaderBuilder@Json_c@@QBE_NPAVValue@2@@Z ?validate@StreamWriterBuilder@Json_c@@QBE_NPAVValue@2@@Z ?valueToQuotedString@Json_c@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD@Z ?valueToString@Json_c@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z ?valueToString@Json_c@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z ?valueToString@Json_c@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NIW4PrecisionType@1@@Z ?valueToString@Json_c@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_J@Z ?valueToString@Json_c@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_K@Z ?valueToString@Json_c@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z ?what@Exception@Json_c@@UBEPBDXZ ?write@FastWriter@Json_c@@UAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVValue@2@@Z ?write@StyledStreamWriter@Json_c@@QAEXAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@ABVValue@2@@Z ?write@StyledWriter@Json_c@@UAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVValue@2@@Z ?writeArrayValue@StyledStreamWriter@Json_c@@AAEXABVValue@2@@Z ?writeArrayValue@StyledWriter@Json_c@@AAEXABVValue@2@@Z ?writeCommentAfterValueOnSameLine@StyledStreamWriter@Json_c@@AAEXABVValue@2@@Z ?writeCommentAfterValueOnSameLine@StyledWriter@Json_c@@AAEXABVValue@2@@Z ?writeCommentBeforeValue@StyledStreamWriter@Json_c@@AAEXABVValue@2@@Z ?writeCommentBeforeValue@StyledWriter@Json_c@@AAEXABVValue@2@@Z ?writeIndent@StyledStreamWriter@Json_c@@AAEXXZ ?writeIndent@StyledWriter@Json_c@@AAEXXZ ?writeString@Json_c@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVFactory@StreamWriter@1@ABVValue@1@@Z ?writeValue@FastWriter@Json_c@@AAEXABVValue@2@@Z ?writeValue@StyledStreamWriter@Json_c@@AAEXABVValue@2@@Z ?writeValue@StyledWriter@Json_c@@AAEXABVValue@2@@Z ?writeWithIndent@StyledStreamWriter@Json_c@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?writeWithIndent@StyledWriter@Json_c@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

wire.dll

IMPHASH ef2950805cfd017c3b005284a639e584
SHA256 0179ad14c9df5141b4479688d0135aa2132e1605dbd7852a2fac7ed543e53138
MD5 d06c8c28654ec6fba03f8ee1f76b8641
SHA1 69a15ed67caf436c8854b40f94a5a89b1d6117ff
SHA512 72bba1303d1c3ff9414d2946dc271e261d89018d01361cac7df11a9d45eb48468b4a2104b45c9e2843283a6649f2429e7bef4068d5f6150b07756e5938dda4f5
SSDEEP 98304:Nnw4WxjRgzZRoozrTL6aOyJLcOB+c5TUHe0qQ3r:hw5vg/OwcVr
TLSH
T111463A40F9DB54B6EA03163044A7A2BF27347D054B25DBC7EA10BF7AE8776D11E32298
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

54:79:88:bb:09:21:49:7f:d2:3f:57:04:7f:60:7a:10:49:b8:c2:b1:b3:f3:d2:49:79:54:a9:c2:79:42:3f:b7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Sep 11, 2025

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

5040

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

AddVectoredExceptionHandler CloseHandle CreateEventA CreateFileA CreateIoCompletionPort CreateThread CreateWaitableTimerExW DeleteCriticalSection DuplicateHandle EnterCriticalSection ExitProcess FreeEnvironmentStringsW GetConsoleMode GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetLastError GetProcAddress GetProcessAffinityMask GetQueuedCompletionStatusEx GetStdHandle GetSystemDirectoryA GetSystemInfo GetSystemTimeAsFileTime GetThreadContext GetTickCount InitializeCriticalSection LeaveCriticalSection LoadLibraryA LoadLibraryW PostQueuedCompletionStatus QueryPerformanceCounter ResumeThread SetConsoleCtrlHandler SetErrorMode SetEvent SetProcessPriorityBoost SetThreadContext SetUnhandledExceptionFilter SetWaitableTimer Sleep SuspendThread SwitchToThread TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WriteConsoleW WriteFile

msvcrt

_amsg_exit _beginthread _errno _initterm _iob _lock _unlock abort calloc fprintf free fwrite malloc realloc strlen strncmp vfprintf

Name

.text

Size

2.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

213KB

Virtual Size

212KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

191KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

250B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

8B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

101KB

Virtual Size

101KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/4

Size

1024B

Virtual Size

752B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

218KB

Virtual Size

218KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/92

Size

1024B

Virtual Size

680B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

wire.exe

IMPHASH b8180d09e11cc2eabba9d2ec5570f101
SHA256 6729c71328ce8498c26e6a46b7ba2fe84c611814d92703bdc2c1ebb7339d43fd
MD5 3d96f407857914c19b2cc48c9d54238e
SHA1 b3df3fc61edf024546954659a68042d7bb2dff33
SHA512 1a92713182a8165ef84c02801fc12ebcedf9917ea712b4a1467d788d6219ff50a811ba6fb0b05ca14bd08ed66401d6e916b1629b4d6e3ea44fabe0627ae37859
SSDEEP 6144:tZMJkE3mH7mubOw4uT795LnMNto67whLgLeEN7ShMks5JgMuFxTOrYqAOY4BuJLZ:tZMy/H7mubf4uTX+N7whAeQPuFxTOrYH
TLSH
T15874B0127AC1E032D9B101705FA9DB25967EAC300F6159EBA3D47A2E9F306D1DA31F27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

5a:dc:0a:d4:a2:80:77:e9:11:3c:0e:55:5b:07:68:15:91:01:d2:85:2f:2c:25:2e:21:ea:ce:df:f3:06:3e:cd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Sep 11, 2025

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

119534

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\job\jumpservice\jumpservice\lib\wire.pdb

kernel32

LeaveCriticalSection InitializeCriticalSection SetFilePointer CreateFileW GetCurrentThreadId WriteFile WaitForSingleObject CreateEventW SetEvent WideCharToMultiByte EnterCriticalSection DeleteCriticalSection GetLastError CloseHandle GetConsoleMode GetConsoleOutputCP FlushFileBuffers MultiByteToWideChar EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress GetStringTypeW CompareStringW LCMapStringW GetLocaleInfoW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId InitializeSListHead RtlUnwind RaiseException FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle GetCommandLineA GetCommandLineW GetTimeZoneInformation HeapFree HeapAlloc GetFileType GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle SetFilePointerEx HeapSize WriteConsoleW

advapi32

SetServiceStatus StartServiceCtrlDispatcherW RegisterServiceCtrlHandlerExW

wire

Start_auto_num Stop_auto

wireEngine.dll

IMPHASH b9236a0965b97bdf31b3bde83ded7338
SHA256 2146ccaca2966cb55ceaed8e3d0fa57fc8b7dccc236d8f09a34b4c12710d4792
MD5 0ebc9db707115712d6ec1b309dc35212
SHA1 b679ca7661e8d2ba16d31d598fd80cdb2afd01db
SHA512 d6248c47e7402090e9d6ebadb667a178412ad5597f7102bbfbd78e0f333ef7b8af9ba25d3ca9c796bd458a2110e40b8f528318305a3d57228eea3af6fdaf6c42
SSDEEP 49152:hPv10Yl0av9vKLrYTo7DrHyzi53hiJLc1gcdsVMy8HunJ5az6Er5h2Sarp3/HCHK:hPv10Yl0vLkTo/8RJLcS+Hsbd6bq
TLSH
T1CCF5C012BB42C172D99E01B1217B6BBE893D9A24873489D3E7D01E7A89311D33737B6D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

e9:19:e5:8e:b5:75:e1:2a:52:36:6c:58:5f:f9:c4:12:69:1b:3b:f7:1d:14:c6:5c:c2:b7:8c:fe:9b:35:8c:9e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 11, 2023

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

1192273

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\youqu_driver\savitar\savitar-proxy\bin\Release\Win32\wireEngine.pdb

ws2_32

htons WSAAddressToStringA recv inet_ntop getsockname closesocket send inet_pton connect ntohs socket WSAStartup WSACleanup inet_addr htonl inet_ntoa sendto select __WSAFDIsSet recvfrom setsockopt WSAStringToAddressA WSASocketW bind WSASetLastError getsockopt WSASocketA freeaddrinfo getaddrinfo getpeername WSAEventSelect ioctlsocket WSAAccept WSAResetEvent WSAWaitForMultipleEvents WSACloseEvent WSACreateEvent WSASetEvent ntohl WSARecvFrom WSASendTo shutdown WSARecv WSASend WSAGetLastError WSAIoctl listen

kernel32

HeapAlloc GetProcessHeap HeapFree SetLastError DuplicateHandle SwitchToThread GetTickCount GetModuleHandleA OpenFileMappingA CreateEventA OpenEventA OpenProcess FindFirstFileExW GetConsoleScreenBufferInfo SetConsoleTextAttribute GetFullPathNameW FindNextFileW GetStdHandle OutputDebugStringA GetTempPathA GetWindowsDirectoryA GetComputerNameA GetCurrentThreadId RtlCaptureStackBackTrace GetSystemTimeAsFileTime DeviceIoControl CreateFileW VerSetConditionMask VerifyVersionInfoW CancelIo WriteFile InitializeCriticalSectionAndSpinCount GetOverlappedResult GetDriveTypeW GetVersionExA CreateMutexW QueryPerformanceFrequency DeleteFileW QueryPerformanceCounter GetTempFileNameW CreateDirectoryW FindFirstFileW GetFileAttributesW LoadLibraryA ExpandEnvironmentStringsW GetShortPathNameW CreateProcessW GetVersion ReadProcessMemory SetErrorMode GetQueuedCompletionStatusEx SetHandleInformation SetFileCompletionNotificationModes GetConsoleMode GetFileType RegisterWaitForSingleObject UnregisterWait SetNamedPipeHandleState CreateNamedPipeW PeekNamedPipe QueueUserWorkItem MultiByteToWideChar CancelSynchronousIo DeleteCriticalSection GetCurrentThread CancelIoEx WideCharToMultiByte ConnectNamedPipe FlushFileBuffers GetFileInformationByHandle SetFilePointerEx MoveFileExW SetConsoleCtrlHandler SetConsoleMode ReadConsoleInputW ReadConsoleW WriteConsoleInputW WriteConsoleW GetNumberOfConsoleInputEvents SetConsoleCursorPosition SleepConditionVariableCS TryEnterCriticalSection TlsSetValue ReleaseSemaphore WakeAllConditionVariable WakeConditionVariable InitializeConditionVariable TlsAlloc Sleep TlsGetValue TlsFree GetLongPathNameW GetCurrentDirectoryW ReadDirectoryChangesW GetModuleFileNameW SetEnvironmentVariableW GetEnvironmentVariableW DebugBreak TerminateProcess UnregisterWaitEx LCMapStringW GetExitCodeProcess GetStartupInfoW AcquireSRWLockShared ReleaseSRWLockShared InitializeCriticalSection LeaveCriticalSection EnterCriticalSection GetLastError GetWindowsDirectoryW OpenThread IsWow64Process GetCurrentProcessId CopyFileA MoveFileExA DeleteFileA ReadFile GetFileSizeEx GetCurrentProcess GetSystemDirectoryA GetModuleFileNameA FindClose FindNextFileA FindFirstFileA GetFileSize MapViewOfFile CreateFileMappingA CreateFileA FreeLibrary LoadLibraryW GetProcAddress GetModuleHandleW GetTickCount64 GetSystemInfo UnmapViewOfFile CloseHandle LocalFree FormatMessageA ExitThread FreeLibraryAndExitThread GetConsoleOutputCP SystemTimeToTzSpecificLocalTime SetEndOfFile SetStdHandle GetFileAttributesExW CompareStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc SleepConditionVariableSRW InitializeCriticalSectionEx CreateThread ExitProcess LoadLibraryExW InterlockedFlushSList RtlUnwind ReadConsoleA ConvertThreadToFiber InitializeSRWLock GetNativeSystemInfo GetExitCodeThread WaitForSingleObjectEx AcquireSRWLockExclusive ReleaseSRWLockExclusive RaiseException EncodePointer CreatePipe GetTimeZoneInformation IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW HeapSize ResumeThread AssignProcessToJobObject CreateProcessA SetInformationJobObject QueryInformationJobObject CreateJobObjectA FileTimeToSystemTime GetQueuedCompletionStatus PostQueuedCompletionStatus CreateIoCompletionPort GetLongPathNameA WaitForMultipleObjects WaitForSingleObject SetEvent ResetEvent CreateSemaphoreW CreateEventW ConvertFiberToThread CreateFiber DeleteFiber SwitchToFiber GetModuleHandleExW SystemTimeToFileTime GetSystemTime GetNamedPipeHandleStateW VirtualQuery DecodePointer LCMapStringEx GetStringTypeW GetCPInfo InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter

user32

GetProcessWindowStation TranslateMessage DispatchMessageW GetMessageW MessageBoxW GetUserObjectInformationW MapVirtualKeyW

advapi32

SetSecurityDescriptorDacl CryptAcquireContextA CryptCreateHash CryptHashData CryptGetHashParam CryptDestroyHash CryptReleaseContext CryptEnumProvidersW CryptSignHashW CryptDecrypt CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam CryptDestroyKey ReportEventW RegisterEventSourceW DeregisterEventSource RegOpenKeyExW RegCloseKey RegSetValueExW RegQueryValueExW RegOpenKeyExA RegEnumKeyExW RegQueryValueExA OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW CryptAcquireContextW InitializeSecurityDescriptor RevertToSelf ImpersonateLoggedOnUser DuplicateTokenEx OpenSCManagerA StartServiceA CreateServiceW QueryServiceStatus CloseServiceHandle OpenSCManagerW DeleteService RegSetValueExA StartServiceW OpenServiceA

shell32

SHCreateDirectoryExA ord51

ole32

CoUninitialize CoCreateGuid StringFromGUID2 CoCreateInstance CoInitializeEx CoInitialize

oleaut32

VariantClear SysAllocString SysFreeString SysAllocStringByteLen SysStringLen

shlwapi

PathRemoveFileSpecA PathStripPathA PathFileExistsA

crypt32

CryptQueryObject CryptMsgGetParam CertFindCertificateInStore CertFreeCertificateContext CertCloseStore CryptMsgClose CertGetNameStringW CertAddEncodedCertificateToStore CertGetCertificateChain CertEnumCertificatesInStore CertSetCertificateContextProperty CertFreeCertificateChain CertOpenStore CertVerifyCertificateChainPolicy CertAddCertificateContextToStore PFXExportCertStoreEx CertGetCertificateContextProperty CertDuplicateCertificateContext

iphlpapi

CancelIPChangeNotify NotifyAddrChange ResolveIpNetEntry2 GetAdaptersAddresses GetIfTable2 GetUnicastIpAddressTable FreeMibTable DeleteUnicastIpAddressEntry CreateUnicastIpAddressEntry InitializeUnicastIpAddressEntry GetOwnerModuleFromTcpEntry GetExtendedTcpTable GetOwnerModuleFromUdpEntry GetExtendedUdpTable GetAdaptersInfo GetUdpTable GetTcpTable

ntdll

RtlIpv4AddressToStringA RtlIpv6AddressToStringA RtlIpv4StringToAddressA

dnsapi

DnsQueryConfig

setupapi

SetupCopyOEMInfW

bcrypt

BCryptGenRandom

dbghelp

SymSetOptions SymInitialize SymCleanup SymFromAddr UnDecorateSymbolName ImageNtHeader

psapi

GetModuleFileNameExA

generic

count=19, id=259, version=27412,

count=221, id=261, version=27412,

count=22, productName=Unmarked objects (old),

count=555, id=260, productName=VS2019 v16.11.6 build 30137, version=30137,

count=2, id=261, productName=VS2019 v16.1.2 build 27702, version=27702,

count=7, id=253, version=28518,

count=19, id=260, version=30034,

count=27, id=259, version=30034,

count=104, id=261, version=30034,

count=2, id=253, version=23601,

count=26, id=260, version=27412,

count=1, id=262, version=27412,

count=39, id=257, version=27412,

count=499, id=1, productName=Unmarked objects,

count=6, id=261, version=30148,

count=9, id=260, productName=VS2019 v16.7.1 build 29111, version=29111,

count=18, id=261, productName=VS2019 v16.10.4 build 30040, version=30040,

count=129, id=265, version=30148,

count=1, id=256, version=30148,

count=1, id=255, version=30148,

count=1, id=151,

count=1, id=258, version=30148,

wrvPlay.exe

IMPHASH d7906183639feda40341be28e9fa4953
SHA256 921af32905c67b48d5aa9195e177963970b27bef2a91c69050a89e1f3e96b035
MD5 fd9085fdafbcf32f92c4e7fe33c8db06
SHA1 a96eb97fc2f8f36c7bca776bb51ab82342b62a53
SHA512 01a89f7858f091ecc4911e0ccf6bef014595421d3dc7f3e0c6fe5c5708aa25df057f20dd83982a45713456c52130c70b8e9e911a96d19d12756bf66e1771f540
SSDEEP 49152:iWBfxS0UatPAd1vQ/qpyr0kSO8+yViPHJe5pt7fDIPhi:iWBfxS0UaWHvQ/qpyr0kSO8+yKJeb
TLSH
T15B95BF12FB82C5B3D993017452A797BE8E39BE104734C9E3CB911DAA8C212D1663F799
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

17:20:b6:80:c2:3d:c8:52:02:48:9e:35:2b:68:d0:0b:4e:8a:70:60:b7:5b:bc:f8:47:11:14:c1:a7:1c:e8:6a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 11, 2023

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

1295152

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\youqu_driver\savitar\savitar-proxy\bin\Release\Win32\Replay.pdb

crypt32

CertEnumCertificatesInStore CertFindCertificateInStore CertDuplicateCertificateContext CertOpenStore CertCloseStore CryptStringToBinaryA CertFreeCertificateContext CertGetCertificateContextProperty

ws2_32

recv htonl inet_ntop WSARecv htons freeaddrinfo ioctlsocket connect WSASetLastError WSARecvFrom shutdown getsockopt WSACleanup __WSAFDIsSet accept bind WSAIoctl closesocket WSASend select listen WSASocketW getaddrinfo WSAStartup send socket ntohs setsockopt WSAGetLastError

kernel32

HeapSize HeapReAlloc GetCommandLineW GetCommandLineA ExitProcess GetFileAttributesExW SetStdHandle CancelIo SetLastError GetQueuedCompletionStatus PostQueuedCompletionStatus GetExitCodeThread Sleep FormatMessageW GetLastError CloseHandle CreateThread SwitchToThread GetSystemTime InitializeSListHead CreateIoCompletionPort GetTickCount LoadLibraryA GetProcAddress GetCurrentProcessId GetModuleFileNameA FindFirstFileExW GetConsoleScreenBufferInfo SetConsoleTextAttribute EnterCriticalSection GetFullPathNameW FindNextFileW GetStdHandle OutputDebugStringA LeaveCriticalSection InitializeCriticalSection FindClose GetTempPathA GetWindowsDirectoryA DeleteCriticalSection GetComputerNameA GetCurrentThreadId RtlCaptureStackBackTrace GetSystemTimeAsFileTime GetCurrentProcess OpenProcess GetModuleHandleW MultiByteToWideChar SetEvent WaitForSingleObject CreateEventA WaitForMultipleObjects MapViewOfFile UnmapViewOfFile CreateFileMappingA OpenFileMappingA GetConsoleMode GetFileType SetErrorMode GetQueuedCompletionStatusEx SetHandleInformation RegisterWaitForSingleObject UnregisterWait CreateEventW SetFileCompletionNotificationModes GetLongPathNameW CreateFileW GetCurrentDirectoryW ReadDirectoryChangesW ReadFile SetNamedPipeHandleState WriteFile CreateNamedPipeW PeekNamedPipe DuplicateHandle QueueUserWorkItem CancelSynchronousIo GetNamedPipeHandleStateW GetCurrentThread CancelIoEx LocalFree WideCharToMultiByte ConnectNamedPipe FlushFileBuffers TerminateProcess GetEnvironmentVariableW UnregisterWaitEx CreateProcessW GetExitCodeProcess SetConsoleMode GetConsoleCursorInfo SetConsoleCursorInfo FillConsoleOutputCharacterW ReadConsoleInputW CreateFileA ReadConsoleW WriteConsoleInputW FillConsoleOutputAttribute WriteConsoleW GetNumberOfConsoleInputEvents SetConsoleCursorPosition SetConsoleCtrlHandler GetFileInformationByHandle SetFilePointerEx TryEnterCriticalSection TlsSetValue ReleaseSemaphore TlsAlloc CreateSemaphoreW TlsGetValue TlsFree GetModuleFileNameW SetEnvironmentVariableW FileTimeToSystemTime QueryPerformanceFrequency QueryPerformanceCounter FormatMessageA DebugBreak GetModuleHandleA GetStartupInfoW SystemTimeToTzSpecificLocalTime GetDriveTypeW GetConsoleOutputCP FreeLibraryAndExitThread ExitThread LoadLibraryExW CompareStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW SetEndOfFile CreatePipe GetFileSizeEx GetTimeZoneInformation IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap RaiseException RtlUnwind IsDebuggerPresent IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter ResetEvent GetCPInfo GetStringTypeW LCMapStringEx HeapAlloc LCMapStringW DecodePointer EncodePointer WaitForSingleObjectEx DeleteFileW HeapFree InitializeCriticalSectionEx AcquireSRWLockExclusive SystemTimeToFileTime InitializeCriticalSectionAndSpinCount SwitchToFiber DeleteFiber CreateFiber GetModuleHandleExW FindFirstFileW ConvertFiberToThread ConvertThreadToFiber GlobalMemoryStatus FreeLibrary LoadLibraryW ReadConsoleA InitializeSRWLock ReleaseSRWLockExclusive

user32

MessageBoxW GetUserObjectInformationW GetProcessWindowStation GetMessageW TranslateMessage DispatchMessageW MapVirtualKeyW

advapi32

RegisterEventSourceW CryptAcquireContextW CryptDestroyKey CryptGenRandom CryptEnumProvidersW CryptSignHashW CryptDestroyHash CryptCreateHash CryptDecrypt CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam ReportEventW CryptReleaseContext DeregisterEventSource

shell32

SHCreateDirectoryExA

ole32

CoInitialize CoCreateInstance CoUninitialize

oleaut32

SysAllocString SysFreeString VariantClear

shlwapi

PathRemoveFileSpecA PathStripPathA

dbghelp

SymInitialize UnDecorateSymbolName SymFromAddr SymSetOptions SymCleanup

wrvSavi.exe

IMPHASH 48008ee787a8cdef59ce543729c20079
SHA256 f31ccafef91c97d94726e79571c06def0cc5e5db7c96fec86f3708fe5dc7a6d3
MD5 ee353436e505f4502955adb34ec388a5
SHA1 9c816aa8d8115150209f5149c1a07d628ec44c58
SHA512 2c792d8b6b2505753ebe07a1ccd2931e4b69be9f0d04b65358708e60700649c58fd8ba4649b34c68204397cf4163ceb3fa69cf28ca8fc07a503d0b8629ff3559
SSDEEP 12288:UAyax9h+VfpFaKIksGPg3qDwckbZsgs1iv+jutGODcZSEJjqHIk:UApm7QGTcv1vmgAZHwIk
TLSH
T1CAD47C607551C037CE7180B00F789BEA466EBD320B6609E767D52FBD99312E26B32E35
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

ad:1c:78:4a:8f:0a:87:ec:f7:61:5a:73:4a:b8:74:97:06:4e:2b:58:8d:31:47:8f:bd:b1:05:9d:8f:62:8f:c9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 11, 2023

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=13720448,CN=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,O=WEILAI NETWORK TECHNOLOGY CO.\, LIMITED,L=London,ST=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

03:a9:18:8a:a5:10:c0:f8:34:34:26:bf

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 26, 2023 - Apr 26, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

232346

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\youqu_driver\savitar\savitar-proxy\bin\Release\Win32\Savitar.pdb

ws2_32

htonl WSARecv socket htons WSAGetLastError setsockopt getsockopt WSASocketW closesocket shutdown WSASend WSASetLastError WSAStartup select WSAIoctl WSARecvFrom bind ioctlsocket

kernel32

IsValidCodePage GetTimeZoneInformation CreatePipe SetEndOfFile HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW CompareStringW GetFileSizeEx GetCommandLineW GetCommandLineA ExitProcess SystemTimeToTzSpecificLocalTime GetDriveTypeW GetModuleHandleExW GetModuleFileNameA GetConsoleMode GetFileType SetErrorMode GetQueuedCompletionStatus PostQueuedCompletionStatus GetLastError CloseHandle GetQueuedCompletionStatusEx CreateIoCompletionPort CancelIo SetHandleInformation RegisterWaitForSingleObject UnregisterWait CreateEventW SetFileCompletionNotificationModes GetLongPathNameW CreateFileW MultiByteToWideChar GetCurrentDirectoryW ReadDirectoryChangesW ReadFile SetNamedPipeHandleState SetLastError EnterCriticalSection GetCurrentProcess WriteFile CreateNamedPipeW LeaveCriticalSection InitializeCriticalSection PeekNamedPipe WaitForSingleObject DuplicateHandle QueueUserWorkItem CancelSynchronousIo GetNamedPipeHandleStateW GetCurrentThread CancelIoEx SwitchToThread LocalFree DeleteCriticalSection GetCurrentProcessId WideCharToMultiByte WaitNamedPipeW ConnectNamedPipe FlushFileBuffers TerminateProcess OpenProcess UnregisterWaitEx LCMapStringW CreateProcessW GetExitCodeProcess GetEnvironmentStringsW SetConsoleTextAttribute GetConsoleCursorInfo GetACP FillConsoleOutputCharacterW ReadConsoleInputW CreateFileA ReadConsoleW WriteConsoleInputW FillConsoleOutputAttribute WriteConsoleW GetNumberOfConsoleInputEvents SetConsoleCursorPosition SetConsoleCtrlHandler Sleep CreateDirectoryW GetFileInformationByHandle SetFilePointerEx TryEnterCriticalSection TlsSetValue ReleaseSemaphore SetEvent TlsAlloc CreateSemaphoreW TlsGetValue TlsFree GetModuleFileNameW SetEnvironmentVariableW GetTempPathW FileTimeToSystemTime QueryPerformanceFrequency QueryPerformanceCounter FormatMessageA DebugBreak GetModuleHandleA LoadLibraryA GetProcAddress GetStdHandle FindFirstFileExW GetFullPathNameW FindNextFileW OutputDebugStringA FindClose GetTempPathA GetWindowsDirectoryA GetComputerNameA GetCurrentThreadId RtlCaptureStackBackTrace GetSystemTimeAsFileTime GetModuleHandleW GetFileAttributesExW GetConsoleOutputCP SetStdHandle LoadLibraryExW FreeEnvironmentStringsW GetProcessHeap DeleteFileW HeapSize GetStringTypeW SetConsoleCursorInfo GetOEMCP GetCPInfo HeapCreate HeapAlloc GetConsoleScreenBufferInfo GetStartupInfoW RaiseException RtlUnwind InitializeSListHead IsProcessorFeaturePresent UnhandledExceptionFilter InitializeCriticalSectionAndSpinCount ResetEvent TransactNamedPipe GetThreadSelectorEntry LoadLibraryW FreeLibrary VirtualQueryEx GetProcessId OpenThread CreateThread SetUnhandledExceptionFilter RtlCaptureContext GetSystemTime WaitForMultipleObjects HeapFree IsDebuggerPresent InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive InitializeCriticalSectionEx WaitForSingleObjectEx EncodePointer DecodePointer LCMapStringEx GetTickCount

user32

TranslateMessage DispatchMessageW MapVirtualKeyW GetMessageW

shell32

SHCreateDirectoryExA

ole32

CoCreateInstance CoUninitialize CoInitialize

oleaut32

SysAllocString VariantClear SysFreeString

shlwapi

PathRemoveFileSpecA PathStripPathA

wireengine

?getEngineInterface@@YA?AV?$shared_ptr@VEngineInterface@@@std@@W4type@EngineChannelInterface@@@Z

dbghelp

SymSetOptions UnDecorateSymbolName SymFromAddr SymInitialize SymCleanup

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

Sharing

General

Malware Config

Signatures

File Explorer

WireVpn_v3.6.0.3-6872e76.exe

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/setupdll.dll

ws2_32

wldap32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

iphlpapi

gdiplus

imm32

msimg32

crypt32

generic

Channel.dll

ws2_32

kernel32

user32

shell32

ole32

oleaut32

shlwapi

dbghelp

generic

Wirevpn.exe

ws2_32

wldap32

channel

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

version

shlwapi

iphlpapi

imm32

msimg32

wininet

gdiplus

crypt32

usp10

opengl32

generic

crashreport.exe

wininet

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

ws2_32