Warning! We are currently in recovery mode. The complete archive is not available.

Sample details: 8394265da6646e78b0cf7180be9a36fc --

Hashes
MD5: 8394265da6646e78b0cf7180be9a36fc
SHA1: 98ec9eab95f6cff9af14e91bd9a1ac6f5fa9de46
SHA256: 8ec6473d11621fa8afb8bef21d96ef2d77d3eb9629d2daaaafb6fb3210b3f848
SSDEEP: 3072:XnePbg0j2wc5S4x7vlN+mRfifMT6dhcRgEbU889M1gOcJU3nNjgt1BTXrox:uxj2wc5rNvnsMTXd8SCOj3nNj0BTXrox
Details
File Type: PE32
Yara Hits
YRP/IsPE32 | YRP/IsDLL | YRP/IsConsole | YRP/HasOverlay | YRP/HasDigitalSignature | YRP/HasDebugData | YRP/HasRichSignature | YRP/domain | YRP/IP | YRP/url | YRP/contentis_base64 | YRP/System_Tools | YRP/Antivirus | YRP/Dropper_Strings | YRP/Misc_Suspicious_Strings | YRP/anti_dbg | YRP/create_service | YRP/escalate_priv | YRP/win_mutex | YRP/win_registry | YRP/win_token | YRP/win_files_operation |
Parent Files
05b64d4f53257b911986480dff341e5e
Strings
		!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
D$BSPf
L$DjdQ
D$djdP
\$$9\$
t!9l$0v
u	_^]3
t$Dh0"
s,;s0v
s,;s0v
SVWu	3
)9t$Tr
,9|$8r
D$$SUVW
u79\$4r
59\$4r
D$hPh\(
L$4QSSh
D$(SUVW
u4PPPPPUPj
UUUUUUSUj
UUUUUSUj
w0t<-: 
u)PPPPh
D$&UPf
UUUUUVUj
u_Wh$.
t$0hH1
VVVhx2
D$@SUVW
L$ 9t$P
RPPPPPP
D$|UPU
u59t$t
tn9\$,
D$,SUVW
SSSh@M
SSSh8N
SSShTN
SSSh|N
SSSh O
SSShxO
SSShHP
SSSh R
SSShtR
SSSh(9
SSSh\S
SSSh@T
T$t9\$
T$t9\$
|$th|+
SSSh(W
|$th|+
D$$Ph(9
SSSh(W
D$0QRPh
SSSh(9
	9\$lr
WWWh(9
T$<RVWP
L$,QSh?
L$DVWj
\$(t	W
L$ QSSj
SSSh(9
D$ SUVW
D$PSUVW
D$0SVW
ug9t$<
|$(hX^
PQSUVW
D$$PVh?
L$ QWWP
D$0;D$
T$VURf
D$8Ph|!
D$(h<!
)f;*u%
L$$j\Q
D$*WPf
T$$RhXd
9l$,r(
9l$,r(
~t9nlr
~X9nPr
~<9n4r
D$ZSPf
T$8RQP
D$4;D$(
9D$ t>
D$<SUVW
D$XSUVW
9l$dvn
L$4jcQ
D$0QRPSh`h
D$RVPf
T$8QRPh`h
L$0QRV
vF9nlr
t.9nlr
T$ h8i
D$ hXi
u@9|$,r
u@9|$,r
9~$~!S
8VVVVV
AAGGf;
0WWWWW
BBFFf;
0WWWWW
0WWWWW
 CCGGf
 GGBBf;
_VVVVV
@@f90u
_VVVVV
u^SSSP
@PVho;
8VVVVV
@@BBf;
@@BBf;
QQSVWd
0SSSSS
YYuTVWh?4
YYu-9D$
0A@@Ju
t^9(uZ
tD9(u@
t0WWWWW
t	@AA;D$
HHt@HHt
2If90t
j@j ^V
URPQQh
>=Yt/j
< tK<	tG
t#SSUP
t$$VSS
_^][YY
HHtAHHt
s[S;7|G;w
tR99u2
v	N+D$
0SSSSS
PPPPPPPP
0SSSSS
PPPPPPPP
t+WWVPV
^SSSSS
j"^SSSSS
^SSSSS
tGHt.Ht&
^SSSSS
8VVVVV
;t$,v-
UQPXY]Y[
tb9} u
_VVVVV
^WWWWW
0SSSSS
v	N+D$
_VVVVV
<+t(<-t$:
+t HHt
u&f!;f;
string too long
invalid string position
Unknown exception
.mixcrt
EncodePointer
KERNEL32.DLL
DecodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
CorExitProcess
mscoree.dll
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
runtime error 
TLOSS error
SING error
DOMAIN error
An application has made an attempt to load the C runtime library incorrectly.
Please contact the application's support team for more information.
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program: 
(null)
`h````
xpxxxx
`h`hhh
xppwpp
bad exception
 Complete Object Locator'
 Class Hierarchy Descriptor'
 Base Class Array'
 Base Class Descriptor at (
 Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
 delete[]
 new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
 delete
__unaligned
__restrict
__ptr64
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
InitializeCriticalSectionAndSpinCount
kernel32.dll
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
GetProcessWindowStation
GetUserObjectInformationA
GetLastActivePopup
GetActiveWindow
MessageBoxA
USER32.DLL
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
CONOUT$
GAIsProcessorFeaturePresent
KERNEL32
1#QNAN
1#SNAN
StartDrivers ApiInstallFileMonDriver
QueryServiceStatusEx
AddQQPCMgrAllExeFireWall
File Regsvr32
Wait C Build
WaitCRunDllSetup 
wait for TXSSOSetup
TXSSOSetup
WaitTXSSOSetup 
Install Tencentdl
Write Regedit
InstallService
WriteInstallTimer
....end
CConfigWork : 
vector<T> too long
bad allocation
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
IsWow64Process
QQPCRTP.exe %ws, return:%d
Install RTP Server
rtp have DeleteFlag
Install RTP Server end
Install TsFltMgr Server
Install TsFltMgr Server end
Install TSKsp Server
Install TSKsp Server end
Install TSSysKit Server
TSSysKit.sys
Install TSSysKit Server end
Install TFsFlt Server
Install TFsFlt Server end
WriteReg InstallDir, Result : %d
WriteReg Version, Result : %d
Set TSKSP autostart
Set TSKSP autostart end
Set QQSoftMgr reg
Set TsFltMgr reg
Not Found %ws
WriteRegStr TSKSP ..begin
WriteRegStr TSKSP ..end
PluginInstaller 
open process error
can't find privilege error
adjust error
InstallDir reg is error, Start QQRepair
Set Relation File Type
IsConvertInstall TRUE
m_bFileOpenWasSet TRUE
m_bFileOpenWasSet FALSE
IsConvertInstall FALSE
Reload WebClinic
GetNativeSystemInfo
GetModuleFileNameExW
GetProcessImageFileNameW
Wow64EnableWow64FsRedirection
QMTProcess::CloseProcessByID ;%d 
Terminate Process return:%d, error:%d, pid:%d, path:%ws
list<T> too long
GetLocaleInfoEx
D:\jenkins_Trunk\workspace\10.8Patch_SourceJob\qqpcmgr_proj\Basic\Output\BinFinal\PackageConf.pdb
GetSystemDirectoryW
CopyFileW
GetProcAddress
GetModuleHandleW
GetTickCount
FindResourceW
SizeofResource
LockResource
LoadResource
FindResourceExW
GetVersionExW
GetModuleFileNameW
CreateEventW
CloseHandle
WaitForSingleObject
GetVersion
CreateFileW
SetEvent
WaitForMultipleObjects
GetEnvironmentVariableW
GetCurrentProcess
GetLastError
SetLastError
OutputDebugStringW
MoveFileExW
SetErrorMode
CreateProcessW
OpenProcess
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcessId
LoadLibraryW
FreeLibrary
GetFileAttributesW
lstrlenW
WideCharToMultiByte
TerminateProcess
GetLocalTime
MoveFileW
GetSystemInfo
KERNEL32.dll
IsWindow
SendMessageTimeoutW
FindWindowW
SendMessageW
USER32.dll
OpenSCManagerW
OpenServiceW
StartServiceW
CloseServiceHandle
RegCreateKeyW
RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyW
CreateServiceW
ControlService
QueryServiceStatus
RegQueryValueExW
RegDeleteValueW
ChangeServiceConfigW
OpenProcessToken
RegSetValueW
LookupPrivilegeValueW
AdjustTokenPrivileges
RegLoadKeyW
ADVAPI32.dll
SHGetSpecialFolderPathW
SHCreateDirectoryExW
SHChangeNotify
ShellExecuteExW
SHELL32.dll
OleInitialize
OleUninitialize
CoTaskMemFree
StgIsStorageFile
StgOpenStorage
ole32.dll
SHDeleteKeyW
PathFileExistsW
SHLWAPI.dll
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
QueryDosDeviceW
GetExitCodeProcess
DeleteFileW
GetTempFileNameW
CreateDirectoryW
SetFilePointer
GetFileSize
ReadFile
SetFileAttributesW
MultiByteToWideChar
CreateMutexW
ReleaseMutex
WriteFile
GetCPInfo
HeapDestroy
HeapReAlloc
HeapSize
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetVersionExA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
GetCurrentThreadId
CreateThread
GetSystemTimeAsFileTime
GetCommandLineA
GetFullPathNameW
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
ExitProcess
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
VirtualAlloc
LoadLibraryA
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetCurrentDirectoryA
GetDriveTypeA
CreateFileA
SetEndOfFile
UnregisterClassA
RegOpenKeyExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
CoInitializeEx
CoUninitialize
CoCreateInstance
PackageConf.dll
PC_CancelInstall
PC_EndInstall
PC_KillProcess
PC_StartInstall
PC_WORK
.?AVtype_info@@
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVbad_exception@std@@
.?AV_com_error@@
.?AVCAtlException@ATL@@
.?AVexception@std@@
.?AVbad_alloc@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVCInstallBass@@
.?AVIInstallInterface@@
.?AVCInstallBlueray@@
.?AVCInstallCube@@
.?AVCInstallDolphin@@
.?AVCInstallHive@@
.?AVCInstallIntelligent@@
.?AVout_of_range@std@@
.?AVCInstallShortCut@@
.?AVCQMTInitializeCOMThread@@
.?AVQMTShortCut@@
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
</assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDING
1N2W2]2f2m2r2y2
3V3g3|3
7?8J8l8[9h9
9%:!;);C;Q;
;#<5<v<~<
2k2,333X3\3`3d3S4c4
7(707:7I7O7U7[7a7g7l7q7w7}7
9 9)919E9K9l9r9}9
:,:4:<:X:k:
;4;:;E;L;\;d;l;
< <3<d<j<u<|<
1#1(1/1D1c1q1
2a2h2y2
3(3.3C3
41464;4R4k4q4
5E5J5W5f5~5
6C7V7n7
8&828A8F8S8h8q8}8
9B9H9X9^9e9q9x9
:#:5:G:
; ;(;2;
2`3f3h4y4
9<:M:x:}:
=+>@>~>
101[2p2
9/:C:R:
1!1&101;1H1S1b1q1
6:6Z6_6e6l6
8B9G9O9\9d9q9y9
9R:Y:d:i:
;$;1;9;G;K<
<&=7=h=
4C4V4o4
5"5(575C5\5r5
5S6e6v6
;C;S;};
=D=W=_=l=
0"121F1
2,2=2B2L2V2y2
2 383A3Q3
60676N6U6[6c6q6+808;8@8J8O8b8t8
9/979I9Q9c9k9x9
;&<9<M<b<
=(=0===~=
=2>7>N>y>
2*2/2[2
2%3*373<3k3p3
8'8W8h8p8
;>;D;Y;h;w;0<?<I<h<p<x<
?;?H?R?Y?j?~?
2;3I5X5e5
636:6A6P6W6f6m6r6
:7;\;f<
2W2d2m2u2}2
3)31393A3I3T3_3j3u3
4!4,474B4M4X4c4n4
7"848Y8
869H9m9
>$?6?[?
80J0o0
1!1[1u1
1&252V2
4,4^4c4v4
6,6@6a6
7 747R7Z7l7
8(8F8N8`8t8
9C9T9h9
;,;@;a;
=J=Q=v=
>->@>R>[>m>v>
>$?6?J?h?p?
@0G0]0b0
1=1D1p1
2D2K2Z2n2
4/464;4R4f4
4:5A5g5o5}5
52676E6M6R6X6_6j6p6}6
6;7B7G7e7
8.8P8X8]8
;<;A;X;l;{;
<*<5<@<Q<
<!=E=d=
>#>*>]>o>
?1?S?[?`?n?s?
1E1Y1f1z1
3D4g4u4
4)5H5V5
7J7f7p7u7
7#858P8
9 9.9]9
9I:[:l:
;$;,;i;
#050G0
111>1F1\1s1|1
2E2J2l2
7-7-848=8]8f8y8
<6=;=M=k=
?,?1?D?
0#020A0
3,343<3D3L3T3\3d3l3t3|3
3I4X4f4
5!555B5V5e5|5
6*666X6w6
7'7.737B7G7Z7_7s7
7%8S8d8
071>1k1
2F3_3n3
515C5]5n5
616I6^617A7K7h7
<"=+=4=:=G=L=T=Z=b=h=
!0.0a0
0!1*10191@1E1L1s1
2#353F3k3
4S5e5s5
666K6Y6a6
9?:d:l:z:
010J0x0
0#161>1
2K2T2\2b2g2
4.454?4J4O4
5#5/545:5A5L5R5c5
6B6N6V6
7=8B8b8
<+<;<P<W<o<
=1>F>X>
?&?_?l?w?
1"101F1
=S>b>y>
?!?,?2?7?V?^?d?o?z?
0!0.0G0V0
1 1&181Q1X1m1v1
4F5L5T5j5
7^7(8A8
8S9c9u9
>G>U>e>p>x>
>3?;?E?j?
11191C1'2
8?8f8u8
<!<F<N<d<m<z<
=#=f=o=u=
4C5U5g5
5:6Z6=7K7
7	8@8S8
;.;I;v;
=9=U=j=q=w=}=
2:2@2H2U2i2t2
3W4_4o4
5-555E5
5>6F6[6f6
253-4>4
7*7<7A7G7M7y7~7
7,828M8~8
9P:b:C;M;
1|2&484
6 797l7
;(;`;n;
=(=/=7=<=@=D=m=
>$>(>,>0>
?M?T?X?\?`?d?h?l?p?
1!1(1,1014181<1@1D1
2,23282<2@2a2
2*3034383<3
4"4.474<4B4L4U4`4l4q4
5,525=5I5^5d5x5
6#6-656;6G6V6\6n6~6
7)737N7}7
8+9>9D9P9V9e9k9
:":(:-:3:;:G:]:h:m:x:}:
<-=e=m=y=
>'>/>7>B>P>
>D?Q?q?
0/181D1z1
4P4]4g4u4~4
8"8(81868E8l8
:-;D;U;
0?0J0^0l0
0,161G1[1o1
2D2I2q2
=!=%=)=-=2=8=R=c=n=|=
>>>m>w>
7b9f9j9n9r9v9z9~9
334:4D4n4z4
5%6/6G6o6
708T8v8
9)9;9@9
0\0g0o0
082K2S2Y2^2f2
3$3+3b3
4#4B4G4
5'50595K5T5`5i5p5z5
8b8h8t8
;~;4<L<
5N5[5{5
9+909?9H9U9`9r9
:+:2:7:@:M:S:m:~:
G1R1Z1T2_2h2v263\4N5
7)82888
8"9(91989C9O9
:5;7=I=[=x=
70F0#151
272=2L2R2_2
273U3s3
6)6.6<6x7
8%8/888C8X8_8e8{8
8,9<9W9w9
8Z:q:&;d;
;M<g<p<
3!4;4A4T4a4i4v4}4
W0d0?1I1
0X1!3*3V3\3e3l3
3Q6h6}9
9%9T9r9
9!9&909F9f9k9q9
:F:U:b:j:{:
3 3$3(3,3034383<3@3D3h3l3p3t3x3|3
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
3 3$3L=P=
3 3$3(3,3034383<3@388<8@8D8H8L8P8T8X8\8`8d8
d<h<l<p<t<x<|<
024282<2@2D2H2L2P2T2X2\2
: :t;x;
< <0<4<<<T<d<h<x<|<
=4=D=H=P=h=x=|=
>(>,>0>8>P>`>d>t>x>
?0?@?D?T?X?\?d?|?
0$0(080<0@0D0L0d0t0x0
34383X3x3
4 4<4@4`4
5 5@5`5
6(6H6d6h6
7(7H7h7
8$80888h8p8t8
9(9D9H9h9
:0:8:@:H:P:d:|:
;$;,;@;H;L;P;X;`;h;|;
;,<<<P<d<p<x<
=(=0=H=T=t=
>,>8>X>d>
?4?@?`?h?p?|?
0$000P0\0|0
1,141<1H1h1p1x1
282P2d2p2x2
3<3D3L3T3`3
4 4(40484@4L4l4t4
5(50585@5H5P5X5d5
6 6@6L6l6t6|6
707<7\7h7
8$8,848<8D8L8T8`8
9(9H9P9\9|9
:4:8:D:L:T:\:d:l:t:|:
;$;,;4;<;D;L;T;\;d;l;t;|;
<$<,<4<<<D<L<X<|<
=$=,=4=@=`=l=
>(>0><>\>h>
?<?D?L?T?\?d?l?x?
0$0D0P0t0|0
1$1,141<1D1L1T1\1d1l1t1|1
2$2,242<2D2L2T2\2d2l2t2|2
3$3,343<3D3L3T3\3d3l3x3
4$4,484X4`4l4
5$5,545<5D5L5T5`5
6$6,646<6D6L6T6\6d6l6t6|6
7(7H7P7X7`7h7p7|7
8 8D8P8T8X8\8`8h8l8|8
9$9,90989
= =@=D=H=L=P=T=X=\=`=d=p=t=x=|=
> >0>8><>@>D>H>L>P>T>X>\>h>0?4?
4 4$4(4,4044484<4@4D4
6 6$6(6,60686X6t6
7,7H7h7
8oT;M[
Western Cape1
Durbanville1
Thawte1
Thawte Certification1
Thawte Timestamping CA0
121221000000Z
201230235959Z0^1
Symantec Corporation100.
'Symantec Time Stamping Services CA - G20
http://ocsp.thawte.com0
.http://crl.thawte.com/ThawteTimestampingCA.crl0
TimeStamp-2048-10
Symantec Corporation100.
'Symantec Time Stamping Services CA - G20
121018000000Z
201229235959Z0b1
Symantec Corporation1402
+Symantec Time Stamping Services Signer - G40
http://ts-ocsp.ws.symantec.com07
+http://ts-aia.ws.symantec.com/tss-ca-g2.cer0<
+http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
TimeStamp-2048-20
E+QLI4
VeriSign, Inc.1
VeriSign Trust Network1;09
2Terms of use at https://www.verisign.com/rpa (c)101.0,
%VeriSign Class 3 Code Signing 2010 CA0
130117000000Z
160216235959Z0
	guangdong1
shenzhen1503
,Tencent Technology(Shenzhen) Company Limited1>0<
5Digital ID Class 3 - Microsoft Software Validation v21503
,Tencent Technology(Shenzhen) Company Limited0
/http://csc3-2010-crl.verisign.com/CSC3-2010.crl0D
https://www.verisign.com/rpa0
http://ocsp.verisign.com0;
/http://csc3-2010-aia.verisign.com/CSC3-2010.cer0
VeriSign, Inc.1
VeriSign Trust Network1:08
1(c) 2006 VeriSign, Inc. - For authorized use only1E0C
<VeriSign Class 3 Public Primary Certification Authority - G50
100208000000Z
200207235959Z0
VeriSign, Inc.1
VeriSign Trust Network1;09
2Terms of use at https://www.verisign.com/rpa (c)101.0,
%VeriSign Class 3 Code Signing 2010 CA0
https://www.verisign.com/cps0*
https://www.verisign.com/rpa0
[0Y0W0U
	image/gif0!0
#http://logo.verisign.com/vslogo.gif04
#http://crl.verisign.com/pca3-g5.crl04
http://ocsp.verisign.com0
VeriSignMPKI-2-80
VeriSign, Inc.1
VeriSign Trust Network1;09
2Terms of use at https://www.verisign.com/rpa (c)101.0,
%VeriSign Class 3 Code Signing 2010 CA
E+QLI4
Symantec Corporation100.
'Symantec Time Stamping Services CA - G2
150402034344Z0#