6c35a2adf0d25bb58b7afca9417e333c659f6e8715b8c8309bc4ff9e56e4d855
- SHA256 6c35a2adf0d25bb58b7afca9417e333c659f6e8715b8c8309bc4ff9e56e4d855
Overview
overview
10Static
static
3usb driver...LL.dll
windows10-2004-x64
3usb driver...LL.dll
windows11-ltsc_2024-x64
3usb driver...64.sys
windows10-2004-x64
3usb driver...64.sys
windows11-ltsc_2024-x64
3usb driver...DM.sys
windows10-2004-x64
3usb driver...DM.sys
windows11-ltsc_2024-x64
3usb driver...PT.dll
windows10-2004-x64
3usb driver...PT.dll
windows11-ltsc_2024-x64
3usb driver...64.sys
windows10-2004-x64
3usb driver...64.sys
windows11-ltsc_2024-x64
3usb driver...98.dll
windows10-2004-x64
3usb driver...98.dll
windows11-ltsc_2024-x64
3usb driver...ER.sys
windows10-2004-x64
3usb driver...ER.sys
windows11-ltsc_2024-x64
3usb driver...UP.exe
windows10-2004-x64
10usb driver...UP.exe
windows11-ltsc_2024-x64
10usb driver...��.exe
windows10-2004-x64
10usb driver...��.exe
windows11-ltsc_2024-x64
10usb driver...AR.exe
windows10-2004-x64
10usb driver...AR.exe
windows11-ltsc_2024-x64
10DRIVER/WIN...UP.exe
windows10-2004-x64
4DRIVER/WIN...UP.exe
windows11-ltsc_2024-x64
4DRIVER/WIN...ON.dll
windows10-2004-x64
3DRIVER/WIN...ON.dll
windows11-ltsc_2024-x64
3DRIVER/WIN...NT.dll
windows10-2004-x64
3DRIVER/WIN...NT.dll
windows11-ltsc_2024-x64
3DRIVER/WIN...98.dll
windows10-2004-x64
3DRIVER/WIN...98.dll
windows11-ltsc_2024-x64
3DRIVER/WIN...PT.dll
windows10-2004-x64
3DRIVER/WIN...PT.dll
windows11-ltsc_2024-x64
3DRIVER/WIN...UP.exe
windows10-2004-x64
4DRIVER/WIN...UP.exe
windows11-ltsc_2024-x64
4Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
usb driver CH341/usb driver CH341/USB DRIVER1/CH341PAR/DRIVER/CH341DLL.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
usb driver CH341/usb driver CH341/USB DRIVER1/CH341PAR/DRIVER/CH341DLL.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
usb driver CH341/usb driver CH341/USB DRIVER1/CH341PAR/DRIVER/CH341W64.sys
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
usb driver CH341/usb driver CH341/USB DRIVER1/CH341PAR/DRIVER/CH341W64.sys
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
usb driver CH341/usb driver CH341/USB DRIVER1/CH341PAR/DRIVER/CH341WDM.sys
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
usb driver CH341/usb driver CH341/USB DRIVER1/CH341PAR/DRIVER/CH341WDM.sys
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/CH341PT.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/CH341PT.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/CH341S64.sys
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/CH341S64.sys
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/CH341S98.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/CH341S98.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral13
Sample
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/CH341SER.sys
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/CH341SER.sys
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral15
Sample
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/SETUP.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
18 signatures
150 seconds
Behavioral task
behavioral16
Sample
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/SETUP.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
16 signatures
150 seconds
Behavioral task
behavioral17
Sample
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/INSTALL/模块调试.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
17 signatures
150 seconds
Behavioral task
behavioral18
Sample
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/INSTALL/模块调试.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
17 signatures
150 seconds
Behavioral task
behavioral19
Sample
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/Windows签名驱动，支持win7（首选）/CH341PAR.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
20 signatures
150 seconds
Behavioral task
behavioral20
Sample
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/Windows签名驱动，支持win7（首选）/CH341PAR.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
16 signatures
150 seconds
Behavioral task
behavioral21
Sample
DRIVER/WIN98/SETUP.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral22
Sample
DRIVER/WIN98/SETUP.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral23
Sample
DRIVER/WIN98/USBMON.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral24
Sample
DRIVER/WIN98/USBMON.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral25
Sample
DRIVER/WIN98/USBPRINT.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral26
Sample
DRIVER/WIN98/USBPRINT.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral27
Sample
DRIVER/WIN98LPT/CH341P98.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral28
Sample
DRIVER/WIN98LPT/CH341P98.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral29
Sample
DRIVER/WIN98LPT/CH341PT.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral30
Sample
DRIVER/WIN98LPT/CH341PT.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral31
Sample
DRIVER/WINME/SETUP.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral32
Sample
DRIVER/WINME/SETUP.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
General
- Target 6c35a2adf0d25bb58b7afca9417e333c659f6e8715b8c8309bc4ff9e56e4d855
- Size 1.4MB
- Sample260804-wbtafaweqe
- SHA256 6c35a2adf0d25bb58b7afca9417e333c659f6e8715b8c8309bc4ff9e56e4d855
- MD5 7d7913c547a044700641413248157afb
- SHA1 c03618a0df93b715c824f81ead72178318bc71cd
- SHA512 dd04e9c9f8783b90eee7f59d63e026513c8eff0cbefb4d0e2d1632194f88ee546f02b77d4fd21abfd48388404879d2a1ec3c6f2e1beab90d14965672d25f31c2
- SSDEEP 24576:2ykAtqkEzLikVrmtseOolpS1RyNpwBIw+Ix0yTRatkTXWfVT3Y+SHV6xDvCoSj1b:7xqkM+cAsdolpQyAIN6RTRJKVcpHVCLi
- TLSH T1176523E0FC861D81FE2BA3794806D5F3C9E634042FEB036D99E52509B694ED96732CD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 27 IoCs
Checks for missing Authenticode signature.
resource unpack001/usb driver CH341/usb driver CH341/USB DRIVER1/CH341PAR/DRIVER/CH341DLL.DLL unpack001/usb driver CH341/usb driver CH341/USB DRIVER1/CH341PAR/DRIVER/CH341W64.SYS unpack001/usb driver CH341/usb driver CH341/USB DRIVER1/CH341PAR/DRIVER/CH341WDM.SYS unpack001/usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/CH341PT.DLL unpack001/usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/CH341S64.SYS unpack001/usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/CH341S98.SYS unpack001/usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/CH341SER.SYS unpack001/usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/SETUP.EXE unpack001/usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/INSTALL/模块调试.EXE unpack001/usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/Windows签名驱动，支持win7（首选）/CH341PAR.EXE unpack002/DRIVER/WIN98/SETUP.EXE unpack002/DRIVER/WIN98/USBMON.DLL unpack002/DRIVER/WIN98/USBPRINT.SYS unpack002/DRIVER/WIN98LPT/CH341P98.SYS unpack002/DRIVER/WIN98LPT/CH341PT.DLL unpack002/DRIVER/WINME/SETUP.EXE unpack002/DRIVER/WINME/USBMON.DLL unpack002/DRIVER/WINME/USBPRINT.SYS unpack001/usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/Windows签名驱动，支持win7（首选）/CH341SER.EXE unpack003/PRINT/WIN98/SETUP.EXE unpack003/PRINT/WIN98/USBMON.DLL unpack003/PRINT/WIN98/USBPRINT.SYS unpack003/PRINT/WIN98LPT/SETUP.EXE unpack003/PRINT/WIN98LPT/USBPAR98.SYS unpack003/PRINT/WINME/SETUP.EXE unpack003/PRINT/WINME/USBMON.DLL unpack003/PRINT/WINME/USBPRINT.SYS
File Explorer
-
6c35a2adf0d25bb58b7afca9417e333c659f6e8715b8c8309bc4ff9e56e4d855.zip 1.4MB
-
usb driver CH341/usb driver CH341/USB DRIVER1/CH341PAR/DRIVER/CH341DLL.DLL.dll 30KB
-
usb driver CH341/usb driver CH341/USB DRIVER1/CH341PAR/DRIVER/CH341W64.SYS.sys 30KB
-
usb driver CH341/usb driver CH341/USB DRIVER1/CH341PAR/DRIVER/CH341WDM.CAT8KB
-
usb driver CH341/usb driver CH341/USB DRIVER1/CH341PAR/DRIVER/CH341WDM.INF5KB
-
usb driver CH341/usb driver CH341/USB DRIVER1/CH341PAR/DRIVER/CH341WDM.SYS.sys 19KB
-
usb driver CH341/usb driver CH341/USB DRIVER1/CH341PAR/LIB/C/CH341DLL.H29KB
-
usb driver CH341/usb driver CH341/USB DRIVER1/CH341PAR/LIB/C/CH341DLL.LIB61KB
-
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/CH341PT.DLL.dll 6KB
-
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/CH341S64.SYS.sys 57KB
-
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/CH341S98.SYS.dll 19KB
-
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/CH341SER.INF6KB
-
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/CH341SER.SYS.sys 38KB
-
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/CH341SER.VXD19KB
-
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/SETUP.EXE.exe 240KB
-
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/ch341SER.CAT9KB
-
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/INSTALL/DLL_LIB/CH341PT.BAS3KB
-
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/INSTALL/DLL_LIB/CH341PT.H2KB
-
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/INSTALL/DLL_LIB/CH341PT.LIB5KB
-
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/INSTALL/DLL_LIB/CH341PT.PAS2KB
-
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/INSTALL/README.TXT10KB
-
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/INSTALL/模块调试.EXE.exe 316KB
-
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/Windows签名驱动，支持win7（首选）/CH341PAR.EXE.exe 354KB
-
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/Windows签名驱动，支持win7（首选）/CH341PRT.ZIP.zip 110KB
-
DRIVER/WIN98/SETUP.EXE.exe 56KB
-
DRIVER/WIN98/USBMON.DLL.dll 12KB
-
DRIVER/WIN98/USBPRINT.INF1KB
-
DRIVER/WIN98/USBPRINT.SYS.dll 22KB
-
DRIVER/WIN98LPT/CH341P98.SYS.dll 20KB
-
DRIVER/WIN98LPT/CH341PAR.INF3KB
-
DRIVER/WIN98LPT/CH341PAR.VXD17KB
-
DRIVER/WIN98LPT/CH341PT.DLL.dll 6KB
-
DRIVER/WINME/SETUP.EXE.exe 56KB
-
DRIVER/WINME/USBMON.DLL.dll 28KB
-
DRIVER/WINME/USBPRINT.INF1KB
-
DRIVER/WINME/USBPRINT.SYS.dll 22KB
-
INSTALL/README.TXT973B
-
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/Windows签名驱动，支持win7（首选）/CH341SER.EXE.exe 400KB
-
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/Windows签名驱动，支持win7（首选）/Readme.txt1KB
-
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/Windows签名驱动，支持win7（首选）/USBPRINT.ZIP.zip 131KB
-
PRINT/WIN98/SETUP.EXE.exe 56KB
-
PRINT/WIN98/USBMON.DLL.dll 12KB
-
PRINT/WIN98/USBPRINT.INF1KB
-
PRINT/WIN98/USBPRINT.SYS.dll 22KB
-
PRINT/WIN98LPT/SETUP.EXE.exe 56KB
-
PRINT/WIN98LPT/USBPAR34.INF2KB
-
PRINT/WIN98LPT/USBPAR34.VXD17KB
-
PRINT/WIN98LPT/USBPAR98.SYS.dll 20KB
-
PRINT/WINME/SETUP.EXE.exe 56KB
-
PRINT/WINME/USBMON.DLL.dll 28KB
-
PRINT/WINME/USBPRINT.INF1KB
-
PRINT/WINME/USBPRINT.SYS.dll 22KB
usb driver CH341/usb driver CH341/USB DRIVER1/CH341PAR/DRIVER/CH341DLL.DLL
- IMPHASH 8c17c46120b9339216e4036e6840553f
- SHA256 48e025e8d4d3320b273b3a2f029fb33a877ea94ee0a2a7943ee181209fc412a2
- MD5 d84b4c0f270ea6ea91a0ddad53b88c2b
- SHA1 79e54001f70c2833bc14985d1db659a58801d247
- SHA512 92e6701400c230cc3e33e4e810fae9568a05aaf4e12989f516028d03601d5fb0950a662eca061d3f41a734883aa090b78c489e0e5fd7f60e2e1722341da912cc
- SSDEEP 384:dX3mJPDhYdCNMZQHXg8XMpcuMt80acI0m+VkSezswqqNCgd59UNcAFvw6:p3qYdCN3Xg8c10actm+yS/oLAJw6
- TLSH T1CFD2F57467CE8D1BE465133488E23BA6F47CECA05A738F861C413C652D77A8B963B712
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4584
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
ExitThread
CloseHandle
Sleep
GetOverlappedResult
GetLastError
DeviceIoControl
ResetEvent
CreateEventA
CreateFileA
lstrcpyA
SetThreadPriority
CreateThread
LocalFree
LocalAlloc
GetModuleHandleA
lstrcmpiA
user32
RegisterClassA
UnregisterClassA
CreateWindowExA
UnregisterDeviceNotification
ShowWindow
RegisterDeviceNotificationA
DefWindowProcA
DestroyWindow
CharUpperBuffA
setupapi
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
CH341AbortInter
CH341AbortRead
CH341AbortWrite
CH341BitStreamSPI
CH341CloseDevice
CH341CloseDeviceEx
CH341DriverCommand
CH341EppReadAddr
CH341EppReadData
CH341EppSetAddr
CH341EppWriteAddr
CH341EppWriteData
CH341FlushBuffer
CH341GetConfigDescr
CH341GetDeviceDescr
CH341GetDeviceName
CH341GetDeviceNameEx
CH341GetDrvVersion
CH341GetInput
CH341GetStatus
CH341GetVerIC
CH341GetVersion
CH341InitParallel
CH341MemReadAddr0
CH341MemReadAddr1
CH341MemWriteAddr0
CH341MemWriteAddr1
CH341OpenDevice
CH341OpenDeviceEx
CH341QueryBufDownload
CH341QueryBufUpload
CH341ReadData
CH341ReadData0
CH341ReadData1
CH341ReadEEPROM
CH341ReadI2C
CH341ReadInter
CH341ResetDevice
CH341ResetInter
CH341ResetRead
CH341ResetWrite
CH341SetBufDownload
CH341SetBufUpload
CH341SetDelaymS
CH341SetDeviceNotify
CH341SetDeviceNotifyEx
CH341SetExclusive
CH341SetIntRoutine
CH341SetOutput
CH341SetParaMode
CH341SetStream
CH341SetTimeout
CH341Set_D5_D0
CH341SetupSerial
CH341StreamI2C
CH341StreamSPI3
CH341StreamSPI4
CH341StreamSPI5
CH341WriteData
CH341WriteData0
CH341WriteData1
CH341WriteEEPROM
CH341WriteI2C
CH341WriteRead
Name
.text
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
ShareArr
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
728B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=19, version=8181,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=37, productName=Unmarked objects (old),
usb driver CH341/usb driver CH341/USB DRIVER1/CH341PAR/DRIVER/CH341W64.SYS
- IMPHASH 9b1def2964cd838f7829b5731e30fffa
- SHA256 aed7640e2195f5a52e788844d38b08f906264d2e740bd362db76c241cbb27f7e
- MD5 2e8e48ad2ca64024c20c67c747f217f6
- SHA1 b72e7c6618a85f214b7d6ee3fc7aeae1541897e9
- SHA512 01c824497946cc25fbda3df7e5c38d010b4aa8ced4867d643fc5a9abb2e6ba4a6f47af6fde04ee17cb16f81d04b96e030df52704c9ca4cf833db25b259d26c57
- SSDEEP 384:AdmJz2AbXLmX4wOvRH5GmVaY3cJbr/ZmxOUXEAwfo25rO2KdQxDyTa0mo4OfTyBF:emJyGU4wOvRHUjinEAwfd5083o3fTo
- TLSH T158E22993E6E98AB5D16AD232DF544E92EFB07018231427DF918086262576FE0FF3C265
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
41120
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
e:\project\ch341\winwdm22\amd64\amd64\CH341W64.pdb
ntoskrnl.exe
IofCallDriver
KeWaitForSingleObject
IoBuildDeviceIoControlRequest
KeInitializeEvent
ExFreePool
ExAllocatePool
KeReleaseSpinLock
KeAcquireSpinLockRaiseToDpc
KeDelayExecutionThread
IoDeleteDevice
IoDetachDevice
RtlFreeUnicodeString
IoSetDeviceInterfaceState
PoStartNextPowerIrp
KeClearEvent
PsTerminateSystemThread
KeSetPriorityThread
ZwClose
PsCreateSystemThread
PoCallDriver
PoSetPowerState
__C_specific_handler
IoRegisterDeviceInterface
IoAttachDeviceToDeviceStack
IoCreateDevice
KeBugCheckEx
IofCompleteRequest
PoRequestPowerIrp
KeSetEvent
usbd.sys
USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx
Name
.text
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
408B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
900B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
888B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=31, id=1, productName=Unmarked objects,
count=5, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=3, id=125, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=3, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=120, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
usb driver CH341/usb driver CH341/USB DRIVER1/CH341PAR/DRIVER/CH341WDM.CAT
- SHA256 1d25c1a1b550e94789cd9a7e3fa01c11b3c7b75737d1c0be1ac08626c76111fb
- MD5 71bdca7f420ea6c2aac393040624349d
- SHA1 faad15e136206f979990c2171cc6795df67e0b32
- SHA512 1f7ad4321b46eb7cf793e594c3b47d7f0572ef43ee88d6e1b5428f6c1e7a1e4b2e28effc6e2ccd980316edbd8f58ae62d2a156df12b4517c645a5b308d77181b
- SSDEEP 192:zbkBgg2R8NyHaw2rDhjeyveCkj3EpLHQQD8wi:zbFaw8jpv+4yQPi
- TLSH T10902E7AA897C8182E95E9CF157E8F99BFC34E7D75801953E219BF75008433D1B74882E
- MD5 SHA1 SHA512 SSDEEP TLSH
usb driver CH341/usb driver CH341/USB DRIVER1/CH341PAR/DRIVER/CH341WDM.INF
- SHA256 466d05703a3cd24c9a4c7e7329a46205543d342474d80384894fe7748d53556d
- MD5 92aa65b747dc242e8cc3b50264147d21
- SHA1 485b66b635eef9c6fdf6bef0a189c79d1fd98ec2
- SHA512 dec91889f283bdb7f79ef15ee41dd311d8fc83098925e918c7b01e69740f464946b89aa088735431ad791ea5bfab92c31eb2bcb329c99a089c5957649a2243ba
- SSDEEP 96:uoRNbJEHzuWQxzImhzexkBzYexzbEZErmQ5hWuQOQjtQO/tLQ9LBS8:uK1EuWAIuexYY2bGKDEuQOQjtQOVK
- TLSH T1C4B1DE38994E14793A23A339BE939CE0DECF1125D08551AD35DF650AFFCA405132B8DB
- MD5 SHA1 SHA512 SSDEEP TLSH
usb driver CH341/usb driver CH341/USB DRIVER1/CH341PAR/DRIVER/CH341WDM.SYS
- IMPHASH 6d37ff886398dc1f20c0e2acfe260460
- SHA256 a3045a4f29a8c86e6fe5af9e5c9225294d266c6218d65bbfcaa5a7d1c683abd7
- MD5 e6e76d443e2925f7ae9d9fbf4255b50c
- SHA1 7b015676e8c4e95bf82455b6e14ad3ee4748fdcc
- SHA512 0d1640b77031749d9b520aa801d9734a7bd9c41176177754de23841a5e948899458fafff6cabefbb8c357e1435248b3afa1f08a35dc1f7c11e5bb832c832e2c4
- SSDEEP 384:ssQeTJ1C/0kXll74neTi90iXE5JIfreHM3FJR3V7z:VQh0WLfuPXw6frL97z
- TLSH T1D8925E81E1878CF3DB4989B0155A77B7613F17222216A6BF83BCCDAC0B1F261BF25125
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16896
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
ntoskrnl.exe
IoAttachDeviceToDeviceStack
KeInitializeSpinLock
KeInitializeEvent
ExAllocatePool
IoCreateDevice
IoDeleteDevice
ExFreePool
IoDetachDevice
KeSetEvent
RtlFreeUnicodeString
IoSetDeviceInterfaceState
IofCompleteRequest
IoRegisterDeviceInterface
InterlockedIncrement
KeWaitForSingleObject
IofCallDriver
IoBuildDeviceIoControlRequest
InterlockedExchange
PoStartNextPowerIrp
PoCallDriver
PoSetPowerState
PoRequestPowerIrp
PsTerminateSystemThread
KeClearEvent
KeSetPriorityThread
KeGetCurrentThread
PsCreateSystemThread
InterlockedDecrement
KeDelayExecutionThread
RtlUnwind
ZwClose
hal
KfReleaseSpinLock
KfAcquireSpinLock
usbd.sys
_USBD_ParseConfigurationDescriptorEx@28
_USBD_CreateConfigurationRequestEx@8
Name
.text
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
160B
Virtual Size
132B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
INIT
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
864B
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
736B
Virtual Size
726B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=38, id=19, version=8034,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=9, productName=Unmarked objects (old),
usb driver CH341/usb driver CH341/USB DRIVER1/CH341PAR/LIB/C/CH341DLL.H
- SHA256 1774684fcb61ce18e1e724c119b4a6c4cf31ed3343b58dcc5d0c63f57457ee29
- MD5 2144fa7c1476a1d86fa4eea0c8ee3f71
- SHA1 7195bcc7a0fff6fe5edf6119d33ba65dca84dd8e
- SHA512 88607bf88c511bd844d52664e79a1fea39deb8f0ccf351b7d65639bcab8beda48ac0600782caf6875f23cd382ebd6dc95a9c94aaf3158a8f00b8d0f96cdb4561
- SSDEEP 384:2LnUJcFjARX5pApF3lzonGr0ntys6GOrorBgvTs0/aPRpPbRyXCUQ8eI7BE1cflB:PeFJpTmvrxuS8YEBS2yW5
- TLSH T17BD2977A1C1E482FF8EDB9516EF8B4A8D51235370AD352CA370A1DAC5EB91C508CB48F
- MD5 SHA1 SHA512 SSDEEP TLSH
usb driver CH341/usb driver CH341/USB DRIVER1/CH341PAR/LIB/C/CH341DLL.LIB
- SHA256 832e17fd869a35c44907fb7ec6bcfb4ce3904e0ba374af30051007980a750517
- MD5 17ea415fc2c4d0f33d4a48f932a9759e
- SHA1 ae53a29c71b0f6ebae4f03c2cbba00656f5ab9f6
- SHA512 9926bbca9a3fac0c4956bbb7394f35df334e6dac16e79bd9b7aac3c39044d72cb234b7956399b81327e63e17dc51e0c00bff31d26112258bc28c8e610931d9db
- SSDEEP 384:eqCuvPFd081eROZUZyBR9XtXtSSwaimqEd5zt4WnJpE29e4rr+zMvzt+YE5ujRBF:Ymqqw3wX
- TLSH T1175311B1EA6E994BE234933EC8475390BB3CF2A642574F5B32DC25312FC3A996D43146
- MD5 SHA1 SHA512 SSDEEP TLSH
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/CH341PT.DLL
- IMPHASH f94cd55198e70e43ac10995641c12ba4
- SHA256 45494ce819c1b5c21abb72dc47a0ca36807e0ed74ce55b631da174c77a9b24db
- MD5 69b6fec924c30042d329ae56ca8925cc
- SHA1 54e8d7d9004c8c819fe2e8bf7a1306bcbdd5ecbf
- SHA512 a6bc866712c2b6d2ec115341de6ec5b352505fff159af967b03d27ad767164271f147780639e836a4da54f4b2b688591edf1374802cb5f7340062aee9b341abc
- SSDEEP 96:UeIX+tip7uemP4I3bYFE6H6IyYrL9Cu6d0CGeSG4qb6Yiigx9BGWsy:Uegda4Irx6HhGLbqig7Lsy
- TLSH T17AD1436377A85D6FF0FB0378D4D32B17F2BCF45047334A8F4AA002526E246536932A92
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4244
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
CloseHandle
CreateFileA
GetModuleHandleA
GetCommProperties
user32
DefWindowProcA
CharUpperBuffA
ShowWindow
CreateWindowExA
RegisterClassA
DestroyWindow
UnregisterClassA
CH341PtGetVersion
CH341PtHandleIsCH341
CH341PtNameIsCH341
CH341PtSetDevNotify
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
824B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
112B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=19, version=8181,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=17, productName=Unmarked objects (old),
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/CH341S64.SYS
- IMPHASH c0e0366fb5cf7bcb45c9c635aee08727
- SHA256 a4fcde254d367e9c469bf0bd0dbf9770916cf5cf14770722e62989727e526b65
- MD5 37c29f723a1174b21e7cc6e66d7c2c37
- SHA1 9d233c3d58213dcb52d1e06a99f95ab424ef8991
- SHA512 8ce91e574d8dbbf1864d743a907e00a24f72244f40eb7bdf8fc84745c67a27c05e273289e26a4e856cfe7220653eef331107ae0955fd9a25a874277ed06aabb2
- SSDEEP 1536:ckXPh73gmu5qacLjgZqeV3q9TiIVve2Cv:cm73a5qNeV3qP22G
- TLSH T1C5435CC29AA9407AD2A3C131C6360BA3E779B4482715C3CF50E186285D97FE4BE7D771
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
66128
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
e:\project\ch341\winser31\amd64\amd64\CH341S64.pdb
ntoskrnl.exe
IoBuildDeviceIoControlRequest
KeInitializeEvent
ExFreePoolWithTag
ExAllocatePool
KeReleaseSpinLock
KeAcquireSpinLockRaiseToDpc
IoReleaseCancelSpinLock
IoAcquireCancelSpinLock
KeClearEvent
KeInsertQueueDpc
KeRemoveQueueDpc
KeCancelTimer
ZwQueryValueKey
RtlInitUnicodeString
RtlQueryRegistryValues
PsTerminateSystemThread
KeSetPriorityThread
KeDelayExecutionThread
PoRequestPowerIrp
KeSetTimer
ZwClose
PsCreateSystemThread
IoDeleteDevice
IoGetConfigurationInformation
KeWaitForSingleObject
IoDeleteSymbolicLink
RtlDeleteRegistryValue
RtlFreeUnicodeString
IoSetDeviceInterfaceState
KeWaitForMultipleObjects
IoRegisterDeviceInterface
RtlWriteRegistryValue
IoCreateSymbolicLink
IoOpenDeviceRegistryKey
KeInitializeDpc
KeInitializeTimer
IoAttachDeviceToDeviceStack
IoCreateDevice
RtlAppendUnicodeStringToString
RtlIntegerToUnicodeString
RtlAppendUnicodeToString
ExReleaseFastMutex
ExAcquireFastMutex
IoFreeWorkItem
PoSetPowerState
PoCallDriver
IoWMIRegistrationControl
IoAllocateWorkItem
KeBugCheckEx
KeSetEvent
IoQueueWorkItem
IofCallDriver
PoStartNextPowerIrp
IoDetachDevice
IofCompleteRequest
wmilib.sys
WmiSystemControl
WmiCompleteRequest
usbd.sys
USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx
Name
.text
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
888B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
60B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=59, id=1, productName=Unmarked objects,
count=7, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=3, id=125, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=3, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=120, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/CH341S98.SYS
- IMPHASH 5bd26fa42f206fa9e2851e44a902d4c4
- SHA256 0ecd1222627271ea31d3b64796992b6daf5133d64cc26d43b3873cbe32fd59cb
- MD5 b6f4a83911336e84bead8f8905285fab
- SHA1 983786502f45afb946f023d73e32a31bc1bbb91d
- SHA512 93e949ea7cf067e1cec52f6dde8678fc7bceb2e947164040a087fdd63e799cc244eb6974323fc836f70ae777a67e9660f4e9e2dbb42dc0c4b099b1c2be168964
- SSDEEP 384:3P2ie5TwxdKe9Vk5DT6Im2ULzQFAQOCsznlUt+3x:OiesSVTZm2ULz4A27wx
- TLSH T157924C52B76904F3DEC37F7488BA3379633B963422215BA36378C4E50D5F241B906E6A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15704
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
ntoskrnl.exe
KeDelayExecutionThread
ZwClose
PsCreateSystemThread
IoRegisterDeviceInterface
KeInitializeEvent
IoDeleteDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
RtlAppendUnicodeStringToString
RtlIntegerToUnicodeString
RtlAppendUnicodeToString
KeSetEvent
IoDetachDevice
IofCompleteRequest
InterlockedDecrement
InterlockedIncrement
InterlockedExchange
ExFreePool
PoRequestPowerIrp
PoCallDriver
PoStartNextPowerIrp
PoSetPowerState
IofCallDriver
RtlFreeUnicodeString
IoSetDeviceInterfaceState
ObfReferenceObject
RtlInitUnicodeString
IoBuildDeviceIoControlRequest
KeClearEvent
PsTerminateSystemThread
RtlCompareMemory
KeSetPriorityThread
KeGetCurrentThread
KeWaitForMultipleObjects
RtlQueryRegistryValues
ExAllocatePool
KeWaitForSingleObject
memmove
usbd.sys
_USBD_CreateConfigurationRequestEx@8
_USBD_ParseConfigurationDescriptorEx@28
CH341S98_StartRequest
Name
.text
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
256B
Virtual Size
240B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
96B
Virtual Size
85B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
864B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
736B
Virtual Size
728B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=38, id=1, productName=Unmarked objects,
count=3, id=19, version=8152,
count=1, id=19, version=8181,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=5, productName=Unmarked objects (old),
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/CH341SER.INF
- SHA256 05ac6dbca1b6181e7b0e2b2fd1915fc6679b0ed249e3a70173c6778816e64c5f
- MD5 d131966e0452fe2920626c2b80061d92
- SHA1 820e36b0f0f7ae7c5215d06a14d189c6d9029677
- SHA512 650976c309808b8c79b7fa640deb5401dab5b45c337737f806fc3f9d1e3b74a273aeacf1c70ef296c65a02bbe2bdc811ecc32b8a81b82e08079d4a1d19ac76da
- SSDEEP 192:cyIC/xM4geO5ZafiWPty4HhGlFpD4JSXQYQLhQ66Auy:sC/xM4geO5bY1HhuFpDISXQYQLhQ66fy
- TLSH T17BD1BD3C8ECF34757A32632C9A57A9C2EFCA2B55A04466553BD425148ECC509C3BBCDB
- MD5 SHA1 SHA512 SSDEEP TLSH
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/CH341SER.SYS
- IMPHASH 009db8c0ddd9770e87245a5e25a0ac32
- SHA256 0f74725ef943f940114762558d2ab9bd16e35d38228dcc59f68debadc1eab3b1
- MD5 a3e467ef4a30ccf8ae674ac879cc56fe
- SHA1 c56a621abebb4ca05cf6538cfb199f830cfebb76
- SHA512 808e877dbda0ad5c4fe8a17fb1df32deb5a92108c7bc0724446e024e148803cea917f624953a343a346a07a446be5fd3b559ec59d18792f96c62e31f8e8e728d
- SSDEEP 768:Hx3sx1MsLLMupyr8ALYyR2UUA+YNgpY07IKDY:H1sxisFSLr2Y+YNAYjuY
- TLSH T11A035BC6779408F3D987DB78A12A3376933B9E7A06C15B935379EA642C25311BD032E2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
33336
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
ntoskrnl.exe
KeInitializeDpc
KeInitializeTimer
KeInitializeEvent
KeInitializeSpinLock
IoDeleteDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
RtlAppendUnicodeStringToString
RtlIntegerToUnicodeString
RtlAppendUnicodeToString
IoGetConfigurationInformation
KeSetEvent
KeRemoveQueueDpc
KeCancelTimer
RtlFreeUnicodeString
IoSetDeviceInterfaceState
InterlockedIncrement
KeDelayExecutionThread
KeWaitForSingleObject
IofCallDriver
IoBuildDeviceIoControlRequest
InterlockedDecrement
IoReleaseCancelSpinLock
IoCreateSymbolicLink
InterlockedExchange
KeInsertQueueDpc
PoStartNextPowerIrp
IoOpenDeviceRegistryKey
IoQueueWorkItem
IoAllocateWorkItem
PoSetPowerState
PoRequestPowerIrp
IofCompleteRequest
IoFreeWorkItem
IoWMIRegistrationControl
InterlockedExchangeAdd
InterlockedCompareExchange
KeClearEvent
PsTerminateSystemThread
KeSetPriorityThread
KeGetCurrentThread
KeQuerySystemTime
KeSetTimer
_allmul
KeWaitForMultipleObjects
ZwQueryValueKey
RtlQueryRegistryValues
RtlDeleteRegistryValue
IoDeleteSymbolicLink
RtlWriteRegistryValue
IoRegisterDeviceInterface
PsCreateSystemThread
IoDetachDevice
ExFreePool
ZwClose
PoCallDriver
RtlInitUnicodeString
ExAllocatePool
IoAcquireCancelSpinLock
memmove
hal
KfReleaseSpinLock
ExAcquireFastMutex
KfAcquireSpinLock
ExReleaseFastMutex
KfRaiseIrql
KfLowerIrql
wmilib.sys
WmiSystemControl
WmiCompleteRequest
usbd.sys
_USBD_CreateConfigurationRequestEx@8
_USBD_ParseConfigurationDescriptorEx@28
Name
.text
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
544B
Virtual Size
536B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
832B
Virtual Size
824B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
INIT
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
864B
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=70, id=1, productName=Unmarked objects,
count=9, id=19, version=9049,
count=1, id=6, version=2134,
count=1, productName=Unmarked objects (old),
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/CH341SER.VXD
- SHA256 2a946f316edd7e1185deeafdc2de52b2d2843198be098a724233c12f9ccd0dae
- MD5 be7438420f1da854917f58cad557476d
- SHA1 caf1095963459ab66326cdc7ecab29514938748f
- SHA512 e35442704374a3b5e79bad491f819ac82ce3054ed50ae1eef0fc3acbb6d3016bdbcdd63902236e247cb4b8279ff8fec377afa2753ebdbca911d6d388d23a63db
- SSDEEP 384:GzXpHVPakjq16uZuDxqLOvCxXEAjT90DVBAMBTaU:05Hr+EGlXbT9uAQGU
- TLSH T1A0924C05EE2684F9CC8BA739D1AF2B7FD7B0610E676712D7C320C93114B15D0A72E2A9
- MD5 SHA1 SHA512 SSDEEP TLSH
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/SETUP.EXE
- IMPHASH 6c57b67513616f5bc2408fae93c3d566
- SHA256 a0bf4dca68f7cf2e115844b0b1a4669c04b46f63b721b8b9645382b1b1b24db0
- MD5 d529ee231db01f2adb637412584a6e03
- SHA1 b0c150ebd6350327b1a9aec3f923f29932fe50ef
- SHA512 caee337fb4c52887eef8b53339d31e433a4ca501a70754818cb2f1403e7a316c355bf7b50ff2b44e286a4f8b9ce6ef1a60af95925ab702861c2de71b522d3c79
- SSDEEP 6144:z15SdMO2UDbMSfk8qEHG2myLYmakTPB54O1:znSLxDbfRq2PLjakzBV
- TLSH T1D5340207BBC988B2FD9612B91167DBB3CF7A210807162B87AF54C9775433070DB2BA56
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17104
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
lstrlenA
GetWindowsDirectoryA
GetCurrentDirectoryA
GetUserDefaultLangID
CreateThread
CloseHandle
Sleep
GetLastError
GetProcAddress
LoadLibraryA
GetPrivateProfileSectionA
GetPrivateProfileStringA
DeleteFileA
CopyFileA
SetLastError
LocalAlloc
LocalFree
GetVersion
GetSystemDirectoryA
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
VirtualAlloc
HeapAlloc
HeapFree
SetFilePointer
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
WideCharToMultiByte
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
MultiByteToWideChar
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetOEMCP
HeapReAlloc
GetACP
GetCPInfo
ExitProcess
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindFirstFileA
FindNextFileA
user32
UpdateWindow
CharUpperA
IsDlgButtonChecked
EnableWindow
FindWindowExA
EnumChildWindows
GetWindowTextA
SendDlgItemMessageA
SetDlgItemTextA
MessageBoxA
DefWindowProcA
GetDlgItem
ShowWindow
LoadIconA
SendMessageA
EndDialog
DialogBoxParamA
setupapi
SetupDiBuildDriverInfoList
SetupDiEnumDriverInfoA
SetupDiGetDriverInfoDetailA
SetupDiDestroyDriverInfoList
SetupDiSetDeviceRegistryPropertyA
SetupDefaultQueueCallbackA
SetupOpenInfFileA
SetupOpenFileQueue
SetupInitDefaultQueueCallbackEx
SetupInstallFilesFromInfSectionA
SetupCommitFileQueueA
SetupCloseFileQueue
SetupCloseInfFile
SetupTermDefaultQueueCallback
SetupCopyOEMInfA
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
CM_Locate_DevNodeA
CM_Reenumerate_DevNode
SetupDiGetActualSectionToInstallA
Name
.text
Size
36KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
16KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
180KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=12, version=7291,
count=74, productName=Unmarked objects (old),
count=7, id=19, version=9049,
count=104, id=1, productName=Unmarked objects,
count=2, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/DRIVER/ch341SER.CAT
- SHA256 42bcb09f99b0a3d72a148627add3e495587f114ef9bc4a4e54e71c789743697d
- MD5 f1623f5a2697cd4f027ba5f1a8a5ee38
- SHA1 a8118e46a76b5fda841708c7846300a86e291ddc
- SHA512 e4411200fe1984b5d67b5aea0b6162e61a6cb887a01c4dccdea5300ae683d83395cc2befd55efca36ba9d3c829aad7b05a43cfcabbce4be4addce7c5a769ad94
- SSDEEP 192:wEnpN7spnMeGGhmFPzymtmwscbhjXHUz1TrJj3EpLHQQHJSIW:wTQxpjXHUX4yQpnW
- TLSH T14312E8BA49AD8293E91EDCF213E5E95BFC30E7D78801953C109BF7A404423C2B75981E
- MD5 SHA1 SHA512 SSDEEP TLSH
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/INSTALL/DLL_LIB/CH341PT.BAS
- SHA256 e126e6178092b0aed919b3d21d3f97a6e39d36bac748d8f0c41949f55b399eba
- MD5 ecea97e271f1846fd0aad301cc01482c
- SHA1 2c3ddb008ec75a59f525308b7b7b91ae1c068fd3
- SHA512 c7552377a1f06ca86a90d682cfc627537b70b5e833496a0af37d5b671b90fd562a535ea89fe98b3b4ef7892665485329a9d3fbe16dd06667954c6f0eae86d1bc
- TLSH T16951B8BA341C2C30B27650AFE94F19F7ECAE4AC31116A2973E6D7511837CA8809D7778
- MD5 SHA1 SHA512 TLSH
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/INSTALL/DLL_LIB/CH341PT.H
- SHA256 3f1bf94e5d6e2f482582865f94c84446ee9bf29b49fff4ed19f44005524d04f6
- MD5 023a74c0f04201f290055c60a0990557
- SHA1 546af671d9dd51f2d9cced48a71ea15076bcdbd8
- SHA512 f11d8335c0901b83ed38a5a0c5a3f288c4a08ad5b5f6fc0ccf28bcb36a33f76e651b07622815dad05c71550457d5e78205f36fb066e91092c054e5a964515e1f
- TLSH T1AB51A7B93A5D2C38B67211B7DA0D15E7F45B18D30265919A326FBD10432C50405DB7B9
- MD5 SHA1 SHA512 TLSH
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/INSTALL/DLL_LIB/CH341PT.LIB
- SHA256 434a719ebb69084166e88da462532cb64bd0881ae7ab41b4ab13daebbd5cf3c7
- MD5 dc0a3a05e6906fe3c6ce0d198bc959d7
- SHA1 81635ab1fb70fce169c978fc335416da1c4f52ef
- SHA512 f72acfe4eceef05a171f6e7d3a14d55f08b357266c5b3a351152955d45deb30d1459408d5cc43a644143df8d8aaf971b218cb5f62a31d73fe359080683f64518
- SSDEEP 48:KlViw36XHT+Yw36QiVXXqLLfANMdpyAO5w4ANGW67FANWd61ncrYAN+SknrvMfSS:D3TdYA3AEA5/An9xXAM/AnOA0Ma
- TLSH T14AB157B1FA6D650BF22D833D98475260FB7CF5A6131A4F5F32AC26210F9269CAD47016
- MD5 SHA1 SHA512 SSDEEP TLSH
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/INSTALL/DLL_LIB/CH341PT.PAS
- SHA256 fc97afe01c739b6f9e64b40f86a8ae4dffb43259c0bccfd116a0ad261fc5edbd
- MD5 5878d45cf57bfb0e784d7b55035fc474
- SHA1 04e594cebbf292de8489a6cfc192698685d65a01
- SHA512 974846e555f64f452c65bb21ef1726a4a246ca5cdd90d92bbdef4b3a44af28c12c2c6b18b629b3954954d318ffb85e0264ad925688c74c04fff12ea9f6e8e827
- TLSH T14E51C8BF3A5D2C3876625267D74D15EAECAB1D43112AE14233AFBE14836C4044AC7BA5
- MD5 SHA1 SHA512 TLSH
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/INSTALL/README.TXT
- SHA256 bebdb78ef54d419f157745e14c7ab800bb2f45d45c964659cb8a09ea45b68843
- MD5 44b16ede36f038e0c4cfeebb78aaba94
- SHA1 ec350f86eb879565d206e62b1903074db565f1cd
- SHA512 7fa392992b4aaf93076a3dbbd61e75c008d8c8f522ecd15048781dc78b80ee913acdeb8795d4ae2025e0c03b259446b81d17c6ba429621ee823c4d517a3b0f26
- SSDEEP 192:Dpzssao3XS7RQRYYahkuj4Eyujfcgnq7QTFwUvjS3TV9A:dzCon/uhYFQTFPvkVS
- TLSH T11322A363194E1C20B27B9A0C472065D8E4AA35C7DA930A7677DF75838FFE00ABC9F594
- MD5 SHA1 SHA512 SSDEEP TLSH
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/CH341串口驱动（备用）/INSTALL/模块调试.EXE
- IMPHASH 6592f664210a7f055758b44d63eb6d71
- SHA256 fcf921cd7145ccf5c00549815769aad0f310805c4871180ed689ef4400c0d04c
- MD5 7d647432c60c6313f7ac26a4bfadf5ec
- SHA1 9dde77ec695bd0007e802265f79cc5105b89126e
- SHA512 ba731dd89d6d9afa2bddaad5023737653b35dcc51bdd62e69b2b10f3c9716f2c29fd9b54d889453748907be404450daf74a1623695d2f4f639012edad5abca5d
- SSDEEP 6144:0Ds51JPdN4LR/QkeoVcM3N3ukjAKRlpPNwPdqCxrJzETXs4qR9L:0W1JEOkeOp3N3uiAKRlpqqCxrJn/R1
- TLSH T18164C002F75A1647DEB681311DD301B04C63F08E2F4342D6B3DE11EB57BAD9A98ADAD2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4404
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
MethCallEngine
ord516
ord519
ord660
ord593
ord595
ord596
ord598
ord520
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord537
ord572
ord573
ord685
ord100
ord613
ord617
ord619
ord650
ord651
ord546
ord581
Name
.text
Size
140KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
172KB
Virtual Size
172KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=13, version=8169,
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/Windows签名驱动，支持win7（首选）/CH341PAR.EXE
- IMPHASH bc5ce990cf54f8d435a68eb97512f73e
- SHA256 189e73cd52a34bf959c5d6de6dfda268f1bde4ec2473ff5d77cfe128d2dc2c09
- MD5 0f9a9cae59f79b2b02c3badf413656e9
- SHA1 903ffa9b06ef6fb169f505e8f704dd47dc07f564
- SHA512 261dae44e8ebe4a83dc598c2661aad2ee59f3f5844e6dcea6d7bc640138a283f3a30158c3566820c841661937efbae4f3a74473f397ca6195234e81287e3333e
- SSDEEP 6144:P8U2qy6rRZb7jxGY4VJT6fNtwycAYnQIIPdlrm6GybKiicAX6shdGPIVG1cYqiiX:7zy6rRxEZ2wH3nKwyGiNAXl0IV/YCl
- TLSH T1E1740118B68681F3C4004B70489D73B7DA39FF256B60A35ED7AA9E587C38B42741DEB1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
SetFileSecurityA
SetFileSecurityW
kernel32
CloseHandle
CompareStringA
CreateDirectoryA
CreateDirectoryW
CreateFileA
CreateFileW
DeleteFileA
DeleteFileW
DosDateTimeToFileTime
ExitProcess
ExpandEnvironmentStringsA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FindResourceA
FreeLibrary
GetCPInfo
GetCommandLineA
GetCurrentDirectoryA
GetCurrentProcess
GetDateFormatA
GetFileAttributesA
GetFileAttributesW
GetFileType
GetFullPathNameA
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetNumberFormatA
GetProcAddress
GetProcessHeap
GetStdHandle
GetTempPathA
GetTickCount
GetTimeFormatA
GetVersionExA
GlobalAlloc
HeapAlloc
HeapFree
HeapReAlloc
IsDBCSLeadByte
LoadLibraryA
LocalFileTimeToFileTime
MoveFileA
MoveFileExA
MultiByteToWideChar
ReadFile
SetCurrentDirectoryA
SetEndOfFile
SetEnvironmentVariableA
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFileTime
SetLastError
Sleep
SystemTimeToFileTime
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpiA
lstrlenA
comctl32
ord17
comdlg32
CommDlgExtendedError
GetOpenFileNameA
GetSaveFileNameA
gdi32
DeleteObject
shell32
SHBrowseForFolderA
SHChangeNotify
SHFileOperationA
SHGetFileInfoA
SHGetMalloc
SHGetSpecialFolderLocation
ShellExecuteExA
SHGetPathFromIDListA
user32
CharToOemA
CharToOemBuffA
CharUpperA
CopyRect
CreateWindowExA
DefWindowProcA
DestroyIcon
DestroyWindow
DialogBoxParamA
DispatchMessageA
EnableWindow
EndDialog
FindWindowExA
GetClassNameA
GetClientRect
GetDlgItem
GetDlgItemTextA
GetMessageA
GetParent
GetSysColor
GetSystemMetrics
GetWindow
GetWindowLongA
GetWindowRect
GetWindowTextA
IsWindow
IsWindowVisible
LoadBitmapA
LoadCursorA
LoadIconA
LoadStringA
MapWindowPoints
MessageBoxA
OemToCharA
OemToCharBuffA
PeekMessageA
PostMessageA
RegisterClassExA
SendDlgItemMessageA
SendMessageA
SetDlgItemTextA
SetFocus
SetMenu
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
TranslateMessage
UpdateWindow
WaitForInputIdle
wsprintfA
wvsprintfA
ole32
CLSIDFromString
CoCreateInstance
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
Name
.text
Size
77KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
2KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
184KB
Virtual Size
184KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/Windows签名驱动，支持win7（首选）/CH341PRT.ZIP
- SHA256 76cf9840ec15aca005dcc951c0d796109dd690fc5aeaafa80fc37180e82f91a6
- MD5 42f51f09d3b2f72cf43ffa36b15e7615
- SHA1 38504901cc553a1c1f9e0a215d6d5b1cfd9c5be0
- SHA512 dba66b7103b11f86cd33915cad4673af39313a53d17d1979fc94e4ca51b3d36138d270158559f6b5bc5b7eca14597439d5f149a8a485151043077463868a5ecc
- SSDEEP 3072:ltigyA2F/e7B5AZ5o6zNIxDCb/6ou2F/e7Ba:jivA2ScvKlg/6X2Sa
- TLSH T1D1B312507B964FB8EC064BBF1C7AC054D11E522E21A32621CEB6C407924369BF6C3EE7
- MD5 SHA1 SHA512 SSDEEP TLSH
DRIVER/WIN98/SETUP.EXE
- IMPHASH ae7dbb3a9cd4ec910f8832698ce34e89
- SHA256 1fb0d435a6e6a60e2f66c29d6562ff4bb974f5e4df78545b655f11b49bb04b23
- MD5 34bc90fa25e826c36df9481efaec5589
- SHA1 cc86433948aecd8c0a74a390d22c601fbee66b3e
- SHA512 7f506884e77f22453368f158d02bea3440cbd4fe154623b3b48ec67d023a3169586124123290384b7ee8dfadbf3777dab076c4b71e1f02dfe948a2af048cdb22
- SSDEEP 768:O9KpAiVsiL6NOhl0DDCh2XsHv/i8t80H1kHNKLlh6oKjE:BAzC6NOhVwsHi8t8M1KcLaoaE
- TLSH T1C7437D837CC488B3F861417106AB4BB3577B7518072B9BC79B64E95D68336A09E3B383
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16592
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetUserDefaultLangID
CreateThread
CloseHandle
Sleep
GetLastError
GetProcAddress
LoadLibraryA
GetPrivateProfileSectionA
GetPrivateProfileStringA
DeleteFileA
CopyFileA
SetLastError
LocalAlloc
LocalFree
GetVersion
GetSystemDirectoryA
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
HeapReAlloc
VirtualAlloc
HeapAlloc
SetFilePointer
GetTimeZoneInformation
GetStringTypeW
GetCurrentDirectoryA
LCMapStringW
LCMapStringA
MultiByteToWideChar
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetOEMCP
SetEnvironmentVariableA
GetACP
GetCPInfo
ExitProcess
GetCommandLineA
GetStartupInfoA
GetWindowsDirectoryA
GetStringTypeA
lstrlenA
FindFirstFileA
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetModuleHandleA
user32
UpdateWindow
CharUpperA
IsDlgButtonChecked
EnableWindow
FindWindowExA
EnumChildWindows
GetWindowTextA
SendDlgItemMessageA
SetDlgItemTextA
MessageBoxA
DefWindowProcA
GetDlgItem
ShowWindow
LoadIconA
SendMessageA
EndDialog
DialogBoxParamA
setupapi
SetupDiBuildDriverInfoList
SetupDiEnumDriverInfoA
SetupDiGetDriverInfoDetailA
SetupDiDestroyDriverInfoList
SetupDefaultQueueCallbackA
SetupOpenInfFileA
SetupDiGetActualSectionToInstallA
SetupOpenFileQueue
SetupInitDefaultQueueCallbackEx
SetupInstallFilesFromInfSectionA
SetupCommitFileQueueA
SetupCloseFileQueue
SetupCloseInfFile
SetupTermDefaultQueueCallback
SetupCopyOEMInfA
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
SetupDiSetDeviceRegistryPropertyA
cfgmgr32
CM_Reenumerate_DevNode
CM_Locate_DevNodeA
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=17, id=14, version=7299,
count=60, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=2, id=19, version=8152,
count=7, id=19, version=8034,
count=105, id=1, productName=Unmarked objects,
count=3, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
DRIVER/WIN98/USBMON.DLL
- IMPHASH e20351bd8ff51d6fbe1dafccb1a86044
- SHA256 7975dc89732ec8792a08a0a70a4938bdab611c834dca94be40aa021c2ebcafcd
- MD5 c0f6e64036e609d2326d045c497d695c
- SHA1 32a3a75c1826f043bbc4f226011702f8109a9eec
- SHA512 b1c907cc66ef5ec0331125b2416d27b891a5787c529e51bf265fd6696e1c2a63b393afdcf29773cb4ef763888bbfcc00444f2822d67071b5be6190344648c0be
- SSDEEP 192:Fwgl3KWhp6UjjxCganrjPhnhXzTbsbF26D0eCocErq202rw5QWalWnX2:Frz6UPxCgEhXzcbEe0exrqJ21WalWX
- TLSH T19A423B51F2F95CFFF8E71B743BA736196128DB881A46D65294B85CA92C261408E3C732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4213
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
CloseHandle
CreateEventA
SetLastError
CreateFileA
EnterCriticalSection
WriteFile
ResetEvent
GetOverlappedResult
WaitForSingleObject
CancelIo
LocalFree
GetLastError
ReadFile
GetTickCount
lstrlenA
lstrcmpA
lstrcpyA
lstrcmpiA
SetEvent
CreateThread
FreeLibrary
GetProcAddress
DisableThreadLibraryCalls
SetErrorMode
GetVersionExA
LocalAlloc
Sleep
DeviceIoControl
LoadLibraryA
user32
PostQuitMessage
RegisterClassA
GetClassInfoA
wsprintfA
DefWindowProcA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
advapi32
RegCloseKey
RegSetValueExA
RegQueryValueExA
spoolss
GetJobA
OpenPrinterA
SetJobA
ClosePrinter
SetPrinterA
EnumPortsA
EnumPrintersA
msvcrt40
strchr
_strnicmp
DllMain
InitializeMonitorEx
LibMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
485B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
1012B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
660B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
DRIVER/WIN98/USBPRINT.INF
- SHA256 c8120f04b86f9b78e1819ea74ff9fa90a06613cfdb014f2e83c1a47be2315629
- MD5 0c95e15766c5994a08f76ac762d55359
- SHA1 3b0b7eb5117a97659a7dff51b7b14a0c9cbda7a5
- SHA512 866212c18fba437b1dc0ea83d4769954b0b5782445dd8f0cbd296b605c392c233e1a1de28a6762db6c996077058b83f840a3dc88039e661d7afd54c4923b15f6
- TLSH T13921FD4D556A012F3C11DE9D7A03CDC7224F232FB21E334139BCC00A5ADA7582129CB6
- MD5 SHA1 SHA512 TLSH
DRIVER/WIN98/USBPRINT.SYS
- IMPHASH cd85e82487da10283b75cbc07b6be3a1
- SHA256 baa5c4701fd612f961741b9685543e133b6d4f091b51b335abb63a566744a2cd
- MD5 bdcf7f43abd107e8f7d31d78c1b096a8
- SHA1 bcfcb1bf660a745d36617ffe87fc0606afb576d0
- SHA512 93a707e1867781e53a644a9f80739301d8292936c249bd26ec006d4f8b7f3d4061f58ca3582b4612740392f98b2443e0bb1e2acade58fa8a06991780a6ef85e0
- SSDEEP 384:pdL3g0t0K4cfu5+DG1VPDTTI1duegVXT1JStv6WSBlWXdZuQY:ng0t0OPqVPDTTIXueeXRlmdAp
- TLSH T166A20910F204A41DD5EB56FED83A65A99527DF8D03055ACF0AD81CCA5F2E8DA3E3047B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
808
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
ntoskrnl.exe
RtlInitUnicodeString
PoCallDriver
memcpy
ZwOpenKey
PoStartNextPowerIrp
KeSetEvent
IoFreeIrp
KeWaitForSingleObject
IofCallDriver
KeInitializeEvent
IoAllocateIrp
IofCompleteRequest
PoRequestPowerIrp
RtlAnsiStringToUnicodeString
RtlInitAnsiString
IoDetachDevice
IoDeleteDevice
ObfReferenceObject
ZwSetValueKey
ZwQueryValueKey
ExAllocatePoolWithTag
IoSetDeviceInterfaceState
IoOpenDeviceInterfaceRegistryKey
IoRegisterDeviceInterface
IoAttachDeviceToDeviceStack
IoCancelIrp
InterlockedDecrement
KeClearEvent
InterlockedIncrement
wcscmp
wcslen
IoGetDeviceInterfaces
strcat
swprintf
IoOpenDeviceRegistryKey
strlen
sprintf
IoBuildDeviceIoControlRequest
memset
RtlCompareMemory
ZwClose
IoCreateDevice
ExFreePool
RtlFreeUnicodeString
usbd.sys
_USBD_ParseConfigurationDescriptorEx@28
_USBD_CreateConfigurationRequestEx@8
USBD_GetUSBDIVersion
Name
.text
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
384B
Virtual Size
384B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
32B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
PAGE
Size
160B
Virtual Size
130B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.edata
Size
64B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
960B
Virtual Size
952B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
864B
Virtual Size
846B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=47, id=1, productName=Unmarked objects,
count=6, id=19, version=9049,
count=1, id=6, version=2090,
count=4, productName=Unmarked objects (old),
DRIVER/WIN98LPT/CH341P98.SYS
- IMPHASH b192add1c7b2ddd3fa0722bc95d20a50
- SHA256 f9f177a6fef4dfdb230de29f5d589f2437d58c768f52fd8a66a5932a5ad0528f
- MD5 c584fc10f5240e46e99afdecb30c0fbb
- SHA1 af2be25670d67ad41241d15d770af95ac34cc782
- SHA512 25e61dd6bd1486045eb992af13f36cd83341837fa59eac709be245ab4d7c25c9eed01677fc8b619530a836bd45a35446dfb841a6829885dd49a1931fac8afab2
- SSDEEP 384:6DykrB4MpVcUyAlFlKGw1Uh/hTAQQV8NMHeRPU62KawUaM9e3Vd1/WK:yykV4AZzFnNMg4KEeEK
- TLSH T100A25D02F7AE05F3EAC3A67408A7337956376A2D132756A7533CC8F4592E200BA15E37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17088
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
ntoskrnl.exe
KeDelayExecutionThread
ZwClose
PsCreateSystemThread
IoRegisterDeviceInterface
KeInitializeEvent
IoDeleteDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
RtlAppendUnicodeStringToString
RtlIntegerToUnicodeString
RtlAppendUnicodeToString
KeSetEvent
IoDetachDevice
IofCompleteRequest
InterlockedDecrement
InterlockedIncrement
InterlockedExchange
KeWaitForSingleObject
PoRequestPowerIrp
PoCallDriver
ExFreePool
PoSetPowerState
IofCallDriver
RtlFreeUnicodeString
IoSetDeviceInterfaceState
RtlCompareMemory
ZwSetValueKey
IoOpenDeviceRegistryKey
ObfReferenceObject
RtlInitUnicodeString
READ_REGISTER_USHORT
WRITE_REGISTER_USHORT
IoBuildDeviceIoControlRequest
KeClearEvent
PsTerminateSystemThread
KeSetPriorityThread
KeGetCurrentThread
KeWaitForMultipleObjects
KeResetEvent
IoInvalidateDeviceRelations
ExAllocatePool
PoStartNextPowerIrp
memmove
usbd.sys
_USBD_CreateConfigurationRequestEx@8
_USBD_ParseConfigurationDescriptorEx@28
CH341P98_StartRequest
Name
.text
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
288B
Virtual Size
280B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
96B
Virtual Size
85B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
864B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
960B
Virtual Size
932B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=43, id=1, productName=Unmarked objects,
count=3, id=19, version=8152,
count=1, id=19, version=8181,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=5, productName=Unmarked objects (old),
DRIVER/WIN98LPT/CH341PAR.INF
- SHA256 245e9094e7bed7b2665b6982117215367a9208a660029f6b8633401e3f55b5c6
- MD5 4992ff5b3e1af3fa196d95edf29b1420
- SHA1 44bd42375bb6d3582a8563384cbe9c76be0fa969
- SHA512 ff93bbad1c16c6c1b3556efdd524a6b5229c406b794290543522cd508b202f1cd1957b09e4b0f3d5c0cc261bbc1d6110d94f26512a4074f44e15f2e8a402b1db
- TLSH T1E371DB39EA0E04B17D3E673DE8969DC2DFCD2357C44590062ED96838C689548396BCBB
- MD5 SHA1 SHA512 TLSH
DRIVER/WIN98LPT/CH341PAR.VXD
- SHA256 aa3c73e0e2d460767e477d5120cb627546b8b43adae2b6ab53c07ad5b997f1df
- MD5 8e267c0a81fc7ce45579b51f4dafc81f
- SHA1 215f4789cb7de448cbb6044364e366108f48d77d
- SHA512 e0c24b12ee69faf87a67b60ec6eaf4dc8028bd464fa41448a817727aae04ad64cce1d563bcd9fb518e0d033e5a1d04a4cea98b5b6798f76f8a70bdf27c33df19
- SSDEEP 192:/GAUo0W8/7btT3gno5uF7+q5Li3i9qZ5D483ijkLCPgL472Y4tfmkLdLKwDsu5GG:uZlmniOsss5M8SyCnCYsT1zDVBAMBTKS
- TLSH T147723A06EE6254B9DC8BAB3DC09F2B7BD674A11BB36312D3D320D93454704E4A32B1A9
- MD5 SHA1 SHA512 SSDEEP TLSH
DRIVER/WIN98LPT/CH341PT.DLL
- IMPHASH f94cd55198e70e43ac10995641c12ba4
- SHA256 45494ce819c1b5c21abb72dc47a0ca36807e0ed74ce55b631da174c77a9b24db
- MD5 69b6fec924c30042d329ae56ca8925cc
- SHA1 54e8d7d9004c8c819fe2e8bf7a1306bcbdd5ecbf
- SHA512 a6bc866712c2b6d2ec115341de6ec5b352505fff159af967b03d27ad767164271f147780639e836a4da54f4b2b688591edf1374802cb5f7340062aee9b341abc
- SSDEEP 96:UeIX+tip7uemP4I3bYFE6H6IyYrL9Cu6d0CGeSG4qb6Yiigx9BGWsy:Uegda4Irx6HhGLbqig7Lsy
- TLSH T17AD1436377A85D6FF0FB0378D4D32B17F2BCF45047334A8F4AA002526E246536932A92
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4244
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
CloseHandle
CreateFileA
GetModuleHandleA
GetCommProperties
user32
DefWindowProcA
CharUpperBuffA
ShowWindow
CreateWindowExA
RegisterClassA
DestroyWindow
UnregisterClassA
CH341PtGetVersion
CH341PtHandleIsCH341
CH341PtNameIsCH341
CH341PtSetDevNotify
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
824B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
112B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=19, version=8181,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=17, productName=Unmarked objects (old),
DRIVER/WINME/SETUP.EXE
- IMPHASH ae7dbb3a9cd4ec910f8832698ce34e89
- SHA256 1fb0d435a6e6a60e2f66c29d6562ff4bb974f5e4df78545b655f11b49bb04b23
- MD5 34bc90fa25e826c36df9481efaec5589
- SHA1 cc86433948aecd8c0a74a390d22c601fbee66b3e
- SHA512 7f506884e77f22453368f158d02bea3440cbd4fe154623b3b48ec67d023a3169586124123290384b7ee8dfadbf3777dab076c4b71e1f02dfe948a2af048cdb22
- SSDEEP 768:O9KpAiVsiL6NOhl0DDCh2XsHv/i8t80H1kHNKLlh6oKjE:BAzC6NOhVwsHi8t8M1KcLaoaE
- TLSH T1C7437D837CC488B3F861417106AB4BB3577B7518072B9BC79B64E95D68336A09E3B383
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16592
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetUserDefaultLangID
CreateThread
CloseHandle
Sleep
GetLastError
GetProcAddress
LoadLibraryA
GetPrivateProfileSectionA
GetPrivateProfileStringA
DeleteFileA
CopyFileA
SetLastError
LocalAlloc
LocalFree
GetVersion
GetSystemDirectoryA
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
HeapReAlloc
VirtualAlloc
HeapAlloc
SetFilePointer
GetTimeZoneInformation
GetStringTypeW
GetCurrentDirectoryA
LCMapStringW
LCMapStringA
MultiByteToWideChar
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetOEMCP
SetEnvironmentVariableA
GetACP
GetCPInfo
ExitProcess
GetCommandLineA
GetStartupInfoA
GetWindowsDirectoryA
GetStringTypeA
lstrlenA
FindFirstFileA
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetModuleHandleA
user32
UpdateWindow
CharUpperA
IsDlgButtonChecked
EnableWindow
FindWindowExA
EnumChildWindows
GetWindowTextA
SendDlgItemMessageA
SetDlgItemTextA
MessageBoxA
DefWindowProcA
GetDlgItem
ShowWindow
LoadIconA
SendMessageA
EndDialog
DialogBoxParamA
setupapi
SetupDiBuildDriverInfoList
SetupDiEnumDriverInfoA
SetupDiGetDriverInfoDetailA
SetupDiDestroyDriverInfoList
SetupDefaultQueueCallbackA
SetupOpenInfFileA
SetupDiGetActualSectionToInstallA
SetupOpenFileQueue
SetupInitDefaultQueueCallbackEx
SetupInstallFilesFromInfSectionA
SetupCommitFileQueueA
SetupCloseFileQueue
SetupCloseInfFile
SetupTermDefaultQueueCallback
SetupCopyOEMInfA
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
SetupDiSetDeviceRegistryPropertyA
cfgmgr32
CM_Reenumerate_DevNode
CM_Locate_DevNodeA
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=17, id=14, version=7299,
count=60, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=2, id=19, version=8152,
count=7, id=19, version=8034,
count=105, id=1, productName=Unmarked objects,
count=3, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
DRIVER/WINME/USBMON.DLL
- IMPHASH c415f19fc2fc76ffa5538c7eae9cd45c
- SHA256 f66d5e68fb8a1d7da9b99c53091106e0f4a9ebffa1704931478d66613ac339a2
- MD5 0890461101b4773cdc08e0b0f0b35643
- SHA1 e185a43712dbce23651845fbf742f67f32ab6be4
- SHA512 b484c54f08da400171c48e685e4cc8ce4080c10e8ae16221688561bb0dc223f5594660af0b825ba795e4ba04e1932de97a1f4daf6b54efa7475163243445a155
- SSDEEP 384:snhqFs3ZPhkS/68meCTcgk21WiaWlIN6:sTpPni8V2/5IN6
- TLSH T11AD21741A7DA09BBE1E3063C4EF63E1E5278EF189668C32285B469762C37190CF38771
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4153
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
LocalAlloc
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
CloseHandle
CreateEventA
CreateFileA
EnterCriticalSection
WriteFile
ResetEvent
GetOverlappedResult
WaitForSingleObject
CancelIo
GetLastError
SetLastError
ReadFile
GetTickCount
lstrlenA
lstrcmpA
lstrcpyA
DisableThreadLibraryCalls
SetEvent
CreateThread
FreeLibrary
GetProcAddress
LoadLibraryA
SetErrorMode
LocalFree
DeviceIoControl
Sleep
lstrcmpiA
user32
wsprintfA
advapi32
RegCloseKey
RegQueryValueExA
RegSetValueExA
spoolss
ClosePrinter
SetJobA
GetJobA
OpenPrinterA
EnumPrintersA
SetPrinterA
msvcrt40
_strnicmp
strchr
DllMain
InitializeMonitorEx
LibMain
Name
.text
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
477B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
992B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
582B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
DRIVER/WINME/USBPRINT.INF
- SHA256 ac58c4c2f09cebac6a67d9afac10e0f17405e6c53a44d6eb63c9f5db149f9dc6
- MD5 51b34bd7eda173af1b2b31358637fb60
- SHA1 fea215869128ff2a207c81121676ed84199379d8
- SHA512 cd17d967b30040fd70381aab3354ec1e12a54850bbbb243432d4c8cc766e28043dcf850822eea5ac5b39bfd1be88b70e0bf7aa9803b997d8cfcf28cd108f5511
- TLSH T10611E28D5056065E3C109B4EA902D9C7378E236FF25D330575BCC50A4ADE79C212CCFA
- MD5 SHA1 SHA512 TLSH
DRIVER/WINME/USBPRINT.SYS
- IMPHASH cd85e82487da10283b75cbc07b6be3a1
- SHA256 107a0b580608ef4045a40ffe544ea7f620b4d16f2a9a6c905e4eab00422cf48e
- MD5 8a7fd341868ea7f5ce7fc5649b76f878
- SHA1 723d7e4aa907fde192b87bfa98f50e2e56e6d519
- SHA512 e361197764eb894bd1b6e340e1f9e15216478e01f1665baac23ef22a30f8a7dd2b85dd486ae77bda80360eea5c751b39da02f03aab6d816656fcc2efe1f75ff6
- SSDEEP 384:eV73g0t0K4cfu5+DG1VPDTTI1duegVXT1VStvGWSbaWlndZuQY:ug0t0OPqVPDTTIXueeXRn5ndAp
- TLSH T1EAA20910F204A41DD5EB16FED87A65A99527EF8D03055ACF0AD81CCA5F2E8DA3E3047B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
808
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
ntoskrnl.exe
RtlInitUnicodeString
PoCallDriver
memcpy
ZwOpenKey
PoStartNextPowerIrp
KeSetEvent
IoFreeIrp
KeWaitForSingleObject
IofCallDriver
KeInitializeEvent
IoAllocateIrp
IofCompleteRequest
PoRequestPowerIrp
RtlAnsiStringToUnicodeString
RtlInitAnsiString
IoDetachDevice
IoDeleteDevice
ObfReferenceObject
ZwSetValueKey
ZwQueryValueKey
ExAllocatePoolWithTag
IoSetDeviceInterfaceState
IoOpenDeviceInterfaceRegistryKey
IoRegisterDeviceInterface
IoAttachDeviceToDeviceStack
IoCancelIrp
InterlockedDecrement
KeClearEvent
InterlockedIncrement
wcscmp
wcslen
IoGetDeviceInterfaces
strcat
swprintf
IoOpenDeviceRegistryKey
strlen
sprintf
IoBuildDeviceIoControlRequest
memset
RtlCompareMemory
ZwClose
IoCreateDevice
ExFreePool
RtlFreeUnicodeString
usbd.sys
_USBD_ParseConfigurationDescriptorEx@28
_USBD_CreateConfigurationRequestEx@8
USBD_GetUSBDIVersion
Name
.text
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
384B
Virtual Size
384B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
32B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
PAGE
Size
160B
Virtual Size
130B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.edata
Size
64B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
992B
Virtual Size
968B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
864B
Virtual Size
846B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=47, id=1, productName=Unmarked objects,
count=6, id=19, version=9049,
count=1, id=6, version=2090,
count=4, productName=Unmarked objects (old),
INSTALL/README.TXT
- SHA256 79f0f3424d5a27a49e6348f1f0414feb5bceeb2333a9fd2e0256af20763087df
- MD5 02876d9a66d4b95ea956b0d876ad6057
- SHA1 0d174da7cbe571b03a57c99fcebc4e0c6804cc52
- SHA512 b72c6ae69c8760ff951adcaea12d060e260cc5e79fc8e6886f2a2bfbc07ccd033f848b7510db69f1ce8fdf9782965f1ec9483ece31fcd016cc1f2473e395f6af
- TLSH T1E7119B989D4D8FE9A0B0B51BC05B08607916EAEECAB977E1F1F984524AC005DF04E987
- MD5 SHA1 SHA512 TLSH
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/Windows签名驱动，支持win7（首选）/CH341SER.EXE
- IMPHASH bc5ce990cf54f8d435a68eb97512f73e
- SHA256 adb0ad172b9f3f984147101adedc9b1c80363d4e87122e71a93fc8dbcd878442
- MD5 6852a5c26cf1936bc789507bbfd7e5a3
- SHA1 082e50f71cd0f197aef66ccf0ff8ac2e3f9f4daa
- SHA512 7c8d4bd300a2d7b0d2a54478071d885d4bbd4bd07027a800d2a27c3c89381cef5187fc21f411b16c11baeea88b342c26d9024fc5be6aff08edd39d8c8bd49e62
- SSDEEP 6144:X8U2qy6rRZb7jxGYXgJcrhXUIp2VYARKoZ9Bnczn2AHZ9vcF/6jHLrZpEr9TI:Tzy6rRxEBJGUIp2VXjncDfRrrjCJI
- TLSH T1C9940104B7D549F2D081573098AD737BCA39FF246A74B25ACBC61D192C30A42B929FF6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
SetFileSecurityA
SetFileSecurityW
kernel32
CloseHandle
CompareStringA
CreateDirectoryA
CreateDirectoryW
CreateFileA
CreateFileW
DeleteFileA
DeleteFileW
DosDateTimeToFileTime
ExitProcess
ExpandEnvironmentStringsA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FindResourceA
FreeLibrary
GetCPInfo
GetCommandLineA
GetCurrentDirectoryA
GetCurrentProcess
GetDateFormatA
GetFileAttributesA
GetFileAttributesW
GetFileType
GetFullPathNameA
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetNumberFormatA
GetProcAddress
GetProcessHeap
GetStdHandle
GetTempPathA
GetTickCount
GetTimeFormatA
GetVersionExA
GlobalAlloc
HeapAlloc
HeapFree
HeapReAlloc
IsDBCSLeadByte
LoadLibraryA
LocalFileTimeToFileTime
MoveFileA
MoveFileExA
MultiByteToWideChar
ReadFile
SetCurrentDirectoryA
SetEndOfFile
SetEnvironmentVariableA
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFileTime
SetLastError
Sleep
SystemTimeToFileTime
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpiA
lstrlenA
comctl32
ord17
comdlg32
CommDlgExtendedError
GetOpenFileNameA
GetSaveFileNameA
gdi32
DeleteObject
shell32
SHBrowseForFolderA
SHChangeNotify
SHFileOperationA
SHGetFileInfoA
SHGetMalloc
SHGetSpecialFolderLocation
ShellExecuteExA
SHGetPathFromIDListA
user32
CharToOemA
CharToOemBuffA
CharUpperA
CopyRect
CreateWindowExA
DefWindowProcA
DestroyIcon
DestroyWindow
DialogBoxParamA
DispatchMessageA
EnableWindow
EndDialog
FindWindowExA
GetClassNameA
GetClientRect
GetDlgItem
GetDlgItemTextA
GetMessageA
GetParent
GetSysColor
GetSystemMetrics
GetWindow
GetWindowLongA
GetWindowRect
GetWindowTextA
IsWindow
IsWindowVisible
LoadBitmapA
LoadCursorA
LoadIconA
LoadStringA
MapWindowPoints
MessageBoxA
OemToCharA
OemToCharBuffA
PeekMessageA
PostMessageA
RegisterClassExA
SendDlgItemMessageA
SendMessageA
SetDlgItemTextA
SetFocus
SetMenu
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
TranslateMessage
UpdateWindow
WaitForInputIdle
wsprintfA
wvsprintfA
ole32
CLSIDFromString
CoCreateInstance
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
Name
.text
Size
77KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
2KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
188KB
Virtual Size
188KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/Windows签名驱动，支持win7（首选）/Readme.txt
- SHA256 c9bc697e0358c79bf34124d14955853d59f94c32b9ed4d1036a1f2510dada8e6
- MD5 e3e1757bad60d6e5b74b9c421dd60db6
- SHA1 275e84eb2ab96448552155c0052cc160bce786a2
- SHA512 95f2eb4df2187175f1ec0f4183df32e0accff94b90e9081316914ddd93d12a49ba11b19159a7306ccfde89801f4ba87081e315d622a28ce3229f9a9abd51d258
- TLSH T17731645B6F068DE4F067FC8AD97E1844F66A61EFF9351251D3D04C681A64106909FD0E
- MD5 SHA1 SHA512 TLSH
usb driver CH341/usb driver CH341/USB DRIVER2/DRIVER/Windows签名驱动，支持win7（首选）/USBPRINT.ZIP
- SHA256 fa36d9cf04a2c64b843cb643a899c53c5ad9a4c408b12b6c329b4bdaed712bef
- MD5 459cae0b03a9b297519a6cdfe9368ac0
- SHA1 5544f06834d1a1012b0907dc72ae2041c79c2242
- SHA512 1264019f64b0ee426411ad45d56d6422b3e0b6184dca278a5f71196e88ff5693957ed757d5d977c964a2c0c4f8a60215139a0262f6523343998915d0fc85d381
- SSDEEP 3072:U1j0+0o42F/e7B/higyE2F/e7B7bH6ow2F/e7B8:+XO2SpivE2S/H632S8
- TLSH T1C7D3129076464BF8DE1DB3B72C7AD010902E663E61A376248D6EE44BA303147F6A3DD7
- MD5 SHA1 SHA512 SSDEEP TLSH
PRINT/WIN98/SETUP.EXE
- IMPHASH ae7dbb3a9cd4ec910f8832698ce34e89
- SHA256 1fb0d435a6e6a60e2f66c29d6562ff4bb974f5e4df78545b655f11b49bb04b23
- MD5 34bc90fa25e826c36df9481efaec5589
- SHA1 cc86433948aecd8c0a74a390d22c601fbee66b3e
- SHA512 7f506884e77f22453368f158d02bea3440cbd4fe154623b3b48ec67d023a3169586124123290384b7ee8dfadbf3777dab076c4b71e1f02dfe948a2af048cdb22
- SSDEEP 768:O9KpAiVsiL6NOhl0DDCh2XsHv/i8t80H1kHNKLlh6oKjE:BAzC6NOhVwsHi8t8M1KcLaoaE
- TLSH T1C7437D837CC488B3F861417106AB4BB3577B7518072B9BC79B64E95D68336A09E3B383
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16592
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetUserDefaultLangID
CreateThread
CloseHandle
Sleep
GetLastError
GetProcAddress
LoadLibraryA
GetPrivateProfileSectionA
GetPrivateProfileStringA
DeleteFileA
CopyFileA
SetLastError
LocalAlloc
LocalFree
GetVersion
GetSystemDirectoryA
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
HeapReAlloc
VirtualAlloc
HeapAlloc
SetFilePointer
GetTimeZoneInformation
GetStringTypeW
GetCurrentDirectoryA
LCMapStringW
LCMapStringA
MultiByteToWideChar
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetOEMCP
SetEnvironmentVariableA
GetACP
GetCPInfo
ExitProcess
GetCommandLineA
GetStartupInfoA
GetWindowsDirectoryA
GetStringTypeA
lstrlenA
FindFirstFileA
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetModuleHandleA
user32
UpdateWindow
CharUpperA
IsDlgButtonChecked
EnableWindow
FindWindowExA
EnumChildWindows
GetWindowTextA
SendDlgItemMessageA
SetDlgItemTextA
MessageBoxA
DefWindowProcA
GetDlgItem
ShowWindow
LoadIconA
SendMessageA
EndDialog
DialogBoxParamA
setupapi
SetupDiBuildDriverInfoList
SetupDiEnumDriverInfoA
SetupDiGetDriverInfoDetailA
SetupDiDestroyDriverInfoList
SetupDefaultQueueCallbackA
SetupOpenInfFileA
SetupDiGetActualSectionToInstallA
SetupOpenFileQueue
SetupInitDefaultQueueCallbackEx
SetupInstallFilesFromInfSectionA
SetupCommitFileQueueA
SetupCloseFileQueue
SetupCloseInfFile
SetupTermDefaultQueueCallback
SetupCopyOEMInfA
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
SetupDiSetDeviceRegistryPropertyA
cfgmgr32
CM_Reenumerate_DevNode
CM_Locate_DevNodeA
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=17, id=14, version=7299,
count=60, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=2, id=19, version=8152,
count=7, id=19, version=8034,
count=105, id=1, productName=Unmarked objects,
count=3, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
PRINT/WIN98/USBMON.DLL
- IMPHASH e20351bd8ff51d6fbe1dafccb1a86044
- SHA256 7975dc89732ec8792a08a0a70a4938bdab611c834dca94be40aa021c2ebcafcd
- MD5 c0f6e64036e609d2326d045c497d695c
- SHA1 32a3a75c1826f043bbc4f226011702f8109a9eec
- SHA512 b1c907cc66ef5ec0331125b2416d27b891a5787c529e51bf265fd6696e1c2a63b393afdcf29773cb4ef763888bbfcc00444f2822d67071b5be6190344648c0be
- SSDEEP 192:Fwgl3KWhp6UjjxCganrjPhnhXzTbsbF26D0eCocErq202rw5QWalWnX2:Frz6UPxCgEhXzcbEe0exrqJ21WalWX
- TLSH T19A423B51F2F95CFFF8E71B743BA736196128DB881A46D65294B85CA92C261408E3C732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4213
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
CloseHandle
CreateEventA
SetLastError
CreateFileA
EnterCriticalSection
WriteFile
ResetEvent
GetOverlappedResult
WaitForSingleObject
CancelIo
LocalFree
GetLastError
ReadFile
GetTickCount
lstrlenA
lstrcmpA
lstrcpyA
lstrcmpiA
SetEvent
CreateThread
FreeLibrary
GetProcAddress
DisableThreadLibraryCalls
SetErrorMode
GetVersionExA
LocalAlloc
Sleep
DeviceIoControl
LoadLibraryA
user32
PostQuitMessage
RegisterClassA
GetClassInfoA
wsprintfA
DefWindowProcA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
advapi32
RegCloseKey
RegSetValueExA
RegQueryValueExA
spoolss
GetJobA
OpenPrinterA
SetJobA
ClosePrinter
SetPrinterA
EnumPortsA
EnumPrintersA
msvcrt40
strchr
_strnicmp
DllMain
InitializeMonitorEx
LibMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
485B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
1012B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
660B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
PRINT/WIN98/USBPRINT.INF
- SHA256 c8120f04b86f9b78e1819ea74ff9fa90a06613cfdb014f2e83c1a47be2315629
- MD5 0c95e15766c5994a08f76ac762d55359
- SHA1 3b0b7eb5117a97659a7dff51b7b14a0c9cbda7a5
- SHA512 866212c18fba437b1dc0ea83d4769954b0b5782445dd8f0cbd296b605c392c233e1a1de28a6762db6c996077058b83f840a3dc88039e661d7afd54c4923b15f6
- TLSH T13921FD4D556A012F3C11DE9D7A03CDC7224F232FB21E334139BCC00A5ADA7582129CB6
- MD5 SHA1 SHA512 TLSH
PRINT/WIN98/USBPRINT.SYS
- IMPHASH cd85e82487da10283b75cbc07b6be3a1
- SHA256 baa5c4701fd612f961741b9685543e133b6d4f091b51b335abb63a566744a2cd
- MD5 bdcf7f43abd107e8f7d31d78c1b096a8
- SHA1 bcfcb1bf660a745d36617ffe87fc0606afb576d0
- SHA512 93a707e1867781e53a644a9f80739301d8292936c249bd26ec006d4f8b7f3d4061f58ca3582b4612740392f98b2443e0bb1e2acade58fa8a06991780a6ef85e0
- SSDEEP 384:pdL3g0t0K4cfu5+DG1VPDTTI1duegVXT1JStv6WSBlWXdZuQY:ng0t0OPqVPDTTIXueeXRlmdAp
- TLSH T166A20910F204A41DD5EB56FED83A65A99527DF8D03055ACF0AD81CCA5F2E8DA3E3047B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
808
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
ntoskrnl.exe
RtlInitUnicodeString
PoCallDriver
memcpy
ZwOpenKey
PoStartNextPowerIrp
KeSetEvent
IoFreeIrp
KeWaitForSingleObject
IofCallDriver
KeInitializeEvent
IoAllocateIrp
IofCompleteRequest
PoRequestPowerIrp
RtlAnsiStringToUnicodeString
RtlInitAnsiString
IoDetachDevice
IoDeleteDevice
ObfReferenceObject
ZwSetValueKey
ZwQueryValueKey
ExAllocatePoolWithTag
IoSetDeviceInterfaceState
IoOpenDeviceInterfaceRegistryKey
IoRegisterDeviceInterface
IoAttachDeviceToDeviceStack
IoCancelIrp
InterlockedDecrement
KeClearEvent
InterlockedIncrement
wcscmp
wcslen
IoGetDeviceInterfaces
strcat
swprintf
IoOpenDeviceRegistryKey
strlen
sprintf
IoBuildDeviceIoControlRequest
memset
RtlCompareMemory
ZwClose
IoCreateDevice
ExFreePool
RtlFreeUnicodeString
usbd.sys
_USBD_ParseConfigurationDescriptorEx@28
_USBD_CreateConfigurationRequestEx@8
USBD_GetUSBDIVersion
Name
.text
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
384B
Virtual Size
384B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
32B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
PAGE
Size
160B
Virtual Size
130B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.edata
Size
64B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
960B
Virtual Size
952B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
864B
Virtual Size
846B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=47, id=1, productName=Unmarked objects,
count=6, id=19, version=9049,
count=1, id=6, version=2090,
count=4, productName=Unmarked objects (old),
PRINT/WIN98LPT/SETUP.EXE
- IMPHASH ae7dbb3a9cd4ec910f8832698ce34e89
- SHA256 1fb0d435a6e6a60e2f66c29d6562ff4bb974f5e4df78545b655f11b49bb04b23
- MD5 34bc90fa25e826c36df9481efaec5589
- SHA1 cc86433948aecd8c0a74a390d22c601fbee66b3e
- SHA512 7f506884e77f22453368f158d02bea3440cbd4fe154623b3b48ec67d023a3169586124123290384b7ee8dfadbf3777dab076c4b71e1f02dfe948a2af048cdb22
- SSDEEP 768:O9KpAiVsiL6NOhl0DDCh2XsHv/i8t80H1kHNKLlh6oKjE:BAzC6NOhVwsHi8t8M1KcLaoaE
- TLSH T1C7437D837CC488B3F861417106AB4BB3577B7518072B9BC79B64E95D68336A09E3B383
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16592
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetUserDefaultLangID
CreateThread
CloseHandle
Sleep
GetLastError
GetProcAddress
LoadLibraryA
GetPrivateProfileSectionA
GetPrivateProfileStringA
DeleteFileA
CopyFileA
SetLastError
LocalAlloc
LocalFree
GetVersion
GetSystemDirectoryA
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
HeapReAlloc
VirtualAlloc
HeapAlloc
SetFilePointer
GetTimeZoneInformation
GetStringTypeW
GetCurrentDirectoryA
LCMapStringW
LCMapStringA
MultiByteToWideChar
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetOEMCP
SetEnvironmentVariableA
GetACP
GetCPInfo
ExitProcess
GetCommandLineA
GetStartupInfoA
GetWindowsDirectoryA
GetStringTypeA
lstrlenA
FindFirstFileA
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetModuleHandleA
user32
UpdateWindow
CharUpperA
IsDlgButtonChecked
EnableWindow
FindWindowExA
EnumChildWindows
GetWindowTextA
SendDlgItemMessageA
SetDlgItemTextA
MessageBoxA
DefWindowProcA
GetDlgItem
ShowWindow
LoadIconA
SendMessageA
EndDialog
DialogBoxParamA
setupapi
SetupDiBuildDriverInfoList
SetupDiEnumDriverInfoA
SetupDiGetDriverInfoDetailA
SetupDiDestroyDriverInfoList
SetupDefaultQueueCallbackA
SetupOpenInfFileA
SetupDiGetActualSectionToInstallA
SetupOpenFileQueue
SetupInitDefaultQueueCallbackEx
SetupInstallFilesFromInfSectionA
SetupCommitFileQueueA
SetupCloseFileQueue
SetupCloseInfFile
SetupTermDefaultQueueCallback
SetupCopyOEMInfA
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
SetupDiSetDeviceRegistryPropertyA
cfgmgr32
CM_Reenumerate_DevNode
CM_Locate_DevNodeA
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=17, id=14, version=7299,
count=60, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=2, id=19, version=8152,
count=7, id=19, version=8034,
count=105, id=1, productName=Unmarked objects,
count=3, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
PRINT/WIN98LPT/USBPAR34.INF
- SHA256 02152d4d1c3dfbe6717d7612aa70396f4e1ecc779ac7646aae802503b07f0739
- MD5 e7e6076db6c82111018f3e16242aea6b
- SHA1 f5efb62daf291050a6192b6b7de8b3c9e9d0ed2e
- SHA512 ccbd3f44bfa8091dd1df130c428f20bb1ca70b96803a7ab2130fb7739e9a5c05d329c930528505ba89d0280e2dcbdc3db6c0354321df150250fff9fcf4c2846f
- TLSH T1E351CE0651D710F53C22FB367986CDC1568D2132934F02AD7CCB861C9ABC80C55BBDBA
- MD5 SHA1 SHA512 TLSH
PRINT/WIN98LPT/USBPAR34.VXD
- SHA256 e5073e26dd573fe33d6fccd00b524da6fc8a0936203f7a6eae0592ad76b7c2fa
- MD5 3da38a41803fd532d169efff928cf3dd
- SHA1 0bce9ddfb6a4758b0411023b207fa220ea5acd02
- SHA512 4c1ce22be4351e0a6e9dee8d54b35db65465be5708d6a99a1ac3a37067953ec2b1ab1536eec58d7d391d4cc5a9098929335ad6e68161221f58add713f9ffd381
- SSDEEP 192:7GAUo0W8/7bt33gno5uF7+q5Li3i9qZ5D483ijkLCPgL472Y4tfmkLdLKwDsu5GC:CZl6niOsss5M8SyCnCYsT1zDVBAMBT5P
- TLSH T129723A46EE6254F9CC4BAB3DC09F2B7BD674A11BB36312E3D321D93454704E0A32B1A9
- MD5 SHA1 SHA512 SSDEEP TLSH
PRINT/WIN98LPT/USBPAR98.SYS
- IMPHASH b192add1c7b2ddd3fa0722bc95d20a50
- SHA256 3f78433a1339b918e229f2f093a02fb629d793da8f0daccd854b73eb26cacda9
- MD5 73ce07160151a29ee14022d667738fe5
- SHA1 669386c3524c0900a49fbbba11d13da064c8d470
- SHA512 832cda98b7319233f3dfc5e4494a19a8a0e63a169869083002127fbe7bf40adc06c835d01e3c3149e49cd732611ce2078e4fc1d80cc037b86a7746b436be4900
- SSDEEP 384:v1ykrB4MpVcUyAlFlKGw1Uh/hTAQQV8NMHeRPU62KRwUaM0O3VdX/WK:tykV4AZzFnNMg4KCOCK
- TLSH T1C2A26D42F7AE05F3EAC3A67408A7337956376A2D132756A7533CC8F8592D200BA15E36
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17088
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
ntoskrnl.exe
KeDelayExecutionThread
ZwClose
PsCreateSystemThread
IoRegisterDeviceInterface
KeInitializeEvent
IoDeleteDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
RtlAppendUnicodeStringToString
RtlIntegerToUnicodeString
RtlAppendUnicodeToString
KeSetEvent
IoDetachDevice
IofCompleteRequest
InterlockedDecrement
InterlockedIncrement
InterlockedExchange
KeWaitForSingleObject
PoRequestPowerIrp
PoCallDriver
ExFreePool
PoSetPowerState
IofCallDriver
RtlFreeUnicodeString
IoSetDeviceInterfaceState
RtlCompareMemory
ZwSetValueKey
IoOpenDeviceRegistryKey
ObfReferenceObject
RtlInitUnicodeString
READ_REGISTER_USHORT
WRITE_REGISTER_USHORT
IoBuildDeviceIoControlRequest
KeClearEvent
PsTerminateSystemThread
KeSetPriorityThread
KeGetCurrentThread
KeWaitForMultipleObjects
KeResetEvent
IoInvalidateDeviceRelations
ExAllocatePool
PoStartNextPowerIrp
memmove
usbd.sys
_USBD_CreateConfigurationRequestEx@8
_USBD_ParseConfigurationDescriptorEx@28
CH341P98_StartRequest
Name
.text
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
288B
Virtual Size
280B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
96B
Virtual Size
85B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
832B
Virtual Size
832B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
960B
Virtual Size
932B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=43, id=1, productName=Unmarked objects,
count=3, id=19, version=8152,
count=1, id=19, version=8181,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=5, productName=Unmarked objects (old),
PRINT/WINME/SETUP.EXE
- IMPHASH ae7dbb3a9cd4ec910f8832698ce34e89
- SHA256 1fb0d435a6e6a60e2f66c29d6562ff4bb974f5e4df78545b655f11b49bb04b23
- MD5 34bc90fa25e826c36df9481efaec5589
- SHA1 cc86433948aecd8c0a74a390d22c601fbee66b3e
- SHA512 7f506884e77f22453368f158d02bea3440cbd4fe154623b3b48ec67d023a3169586124123290384b7ee8dfadbf3777dab076c4b71e1f02dfe948a2af048cdb22
- SSDEEP 768:O9KpAiVsiL6NOhl0DDCh2XsHv/i8t80H1kHNKLlh6oKjE:BAzC6NOhVwsHi8t8M1KcLaoaE
- TLSH T1C7437D837CC488B3F861417106AB4BB3577B7518072B9BC79B64E95D68336A09E3B383
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16592
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetUserDefaultLangID
CreateThread
CloseHandle
Sleep
GetLastError
GetProcAddress
LoadLibraryA
GetPrivateProfileSectionA
GetPrivateProfileStringA
DeleteFileA
CopyFileA
SetLastError
LocalAlloc
LocalFree
GetVersion
GetSystemDirectoryA
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
HeapReAlloc
VirtualAlloc
HeapAlloc
SetFilePointer
GetTimeZoneInformation
GetStringTypeW
GetCurrentDirectoryA
LCMapStringW
LCMapStringA
MultiByteToWideChar
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetOEMCP
SetEnvironmentVariableA
GetACP
GetCPInfo
ExitProcess
GetCommandLineA
GetStartupInfoA
GetWindowsDirectoryA
GetStringTypeA
lstrlenA
FindFirstFileA
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetModuleHandleA
user32
UpdateWindow
CharUpperA
IsDlgButtonChecked
EnableWindow
FindWindowExA
EnumChildWindows
GetWindowTextA
SendDlgItemMessageA
SetDlgItemTextA
MessageBoxA
DefWindowProcA
GetDlgItem
ShowWindow
LoadIconA
SendMessageA
EndDialog
DialogBoxParamA
setupapi
SetupDiBuildDriverInfoList
SetupDiEnumDriverInfoA
SetupDiGetDriverInfoDetailA
SetupDiDestroyDriverInfoList
SetupDefaultQueueCallbackA
SetupOpenInfFileA
SetupDiGetActualSectionToInstallA
SetupOpenFileQueue
SetupInitDefaultQueueCallbackEx
SetupInstallFilesFromInfSectionA
SetupCommitFileQueueA
SetupCloseFileQueue
SetupCloseInfFile
SetupTermDefaultQueueCallback
SetupCopyOEMInfA
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
SetupDiSetDeviceRegistryPropertyA
cfgmgr32
CM_Reenumerate_DevNode
CM_Locate_DevNodeA
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=17, id=14, version=7299,
count=60, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=2, id=19, version=8152,
count=7, id=19, version=8034,
count=105, id=1, productName=Unmarked objects,
count=3, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
PRINT/WINME/USBMON.DLL
- IMPHASH c415f19fc2fc76ffa5538c7eae9cd45c
- SHA256 f66d5e68fb8a1d7da9b99c53091106e0f4a9ebffa1704931478d66613ac339a2
- MD5 0890461101b4773cdc08e0b0f0b35643
- SHA1 e185a43712dbce23651845fbf742f67f32ab6be4
- SHA512 b484c54f08da400171c48e685e4cc8ce4080c10e8ae16221688561bb0dc223f5594660af0b825ba795e4ba04e1932de97a1f4daf6b54efa7475163243445a155
- SSDEEP 384:snhqFs3ZPhkS/68meCTcgk21WiaWlIN6:sTpPni8V2/5IN6
- TLSH T11AD21741A7DA09BBE1E3063C4EF63E1E5278EF189668C32285B469762C37190CF38771
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4153
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
LocalAlloc
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
CloseHandle
CreateEventA
CreateFileA
EnterCriticalSection
WriteFile
ResetEvent
GetOverlappedResult
WaitForSingleObject
CancelIo
GetLastError
SetLastError
ReadFile
GetTickCount
lstrlenA
lstrcmpA
lstrcpyA
DisableThreadLibraryCalls
SetEvent
CreateThread
FreeLibrary
GetProcAddress
LoadLibraryA
SetErrorMode
LocalFree
DeviceIoControl
Sleep
lstrcmpiA
user32
wsprintfA
advapi32
RegCloseKey
RegQueryValueExA
RegSetValueExA
spoolss
ClosePrinter
SetJobA
GetJobA
OpenPrinterA
EnumPrintersA
SetPrinterA
msvcrt40
_strnicmp
strchr
DllMain
InitializeMonitorEx
LibMain
Name
.text
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
477B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
992B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
582B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
PRINT/WINME/USBPRINT.INF
- SHA256 ac58c4c2f09cebac6a67d9afac10e0f17405e6c53a44d6eb63c9f5db149f9dc6
- MD5 51b34bd7eda173af1b2b31358637fb60
- SHA1 fea215869128ff2a207c81121676ed84199379d8
- SHA512 cd17d967b30040fd70381aab3354ec1e12a54850bbbb243432d4c8cc766e28043dcf850822eea5ac5b39bfd1be88b70e0bf7aa9803b997d8cfcf28cd108f5511
- TLSH T10611E28D5056065E3C109B4EA902D9C7378E236FF25D330575BCC50A4ADE79C212CCFA
- MD5 SHA1 SHA512 TLSH
PRINT/WINME/USBPRINT.SYS
- IMPHASH cd85e82487da10283b75cbc07b6be3a1
- SHA256 107a0b580608ef4045a40ffe544ea7f620b4d16f2a9a6c905e4eab00422cf48e
- MD5 8a7fd341868ea7f5ce7fc5649b76f878
- SHA1 723d7e4aa907fde192b87bfa98f50e2e56e6d519
- SHA512 e361197764eb894bd1b6e340e1f9e15216478e01f1665baac23ef22a30f8a7dd2b85dd486ae77bda80360eea5c751b39da02f03aab6d816656fcc2efe1f75ff6
- SSDEEP 384:eV73g0t0K4cfu5+DG1VPDTTI1duegVXT1VStvGWSbaWlndZuQY:ug0t0OPqVPDTTIXueeXRn5ndAp
- TLSH T1EAA20910F204A41DD5EB16FED87A65A99527EF8D03055ACF0AD81CCA5F2E8DA3E3047B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
808
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
ntoskrnl.exe
RtlInitUnicodeString
PoCallDriver
memcpy
ZwOpenKey
PoStartNextPowerIrp
KeSetEvent
IoFreeIrp
KeWaitForSingleObject
IofCallDriver
KeInitializeEvent
IoAllocateIrp
IofCompleteRequest
PoRequestPowerIrp
RtlAnsiStringToUnicodeString
RtlInitAnsiString
IoDetachDevice
IoDeleteDevice
ObfReferenceObject
ZwSetValueKey
ZwQueryValueKey
ExAllocatePoolWithTag
IoSetDeviceInterfaceState
IoOpenDeviceInterfaceRegistryKey
IoRegisterDeviceInterface
IoAttachDeviceToDeviceStack
IoCancelIrp
InterlockedDecrement
KeClearEvent
InterlockedIncrement
wcscmp
wcslen
IoGetDeviceInterfaces
strcat
swprintf
IoOpenDeviceRegistryKey
strlen
sprintf
IoBuildDeviceIoControlRequest
memset
RtlCompareMemory
ZwClose
IoCreateDevice
ExFreePool
RtlFreeUnicodeString
usbd.sys
_USBD_ParseConfigurationDescriptorEx@28
_USBD_CreateConfigurationRequestEx@8
USBD_GetUSBDIVersion
Name
.text
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
384B
Virtual Size
384B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
32B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
PAGE
Size
160B
Virtual Size
130B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.edata
Size
64B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
992B
Virtual Size
968B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
864B
Virtual Size
846B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=47, id=1, productName=Unmarked objects,
count=6, id=19, version=9049,
count=1, id=6, version=2090,
count=4, productName=Unmarked objects (old),